This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/fs8d2893qiZikthsq_-JlA6ljMA.roa File: fs8d2893qiZikthsq_-JlA6ljMA.roa (raw, json) Hash identifier: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4= Subject key identifier: 7E:CF:1D:DB:CF:77:AA:26:62:92:D8:6C:AB:FF:89:94:0E:A5:8C:C0 Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Certificate serial: 019B7B35A28BB19C4B6F8B22865B36A326E1 Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/fs8d2893qiZikthsq_-JlA6ljMA.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5610 IP address blocks: 195.5.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a2:8b:b1:9c:4b:6f:8b:22:86:5b:36:a3:26:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ecf1ddbcf77aa266292d86cabff89940ea58cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:da:f7:9d:be:6c:0e:fb:8c:c8:d5:3e:33: ee:f6:53:ff:ee:18:49:32:e7:a0:33:1e:69:99:51: 6e:85:7c:fa:6e:b3:63:4e:5f:82:12:58:9e:e0:d1: 0e:4b:19:ae:4c:14:0e:17:b1:14:1b:4b:a4:72:89: 3d:b3:55:9c:1f:d7:0d:5f:51:ae:ec:1e:df:6c:a4: f2:b9:6a:e3:1d:4b:4b:d4:e4:6d:04:53:0d:ff:8d: 32:a6:28:f0:68:32:59:59:05:1a:9f:81:22:e1:ec: ec:c5:68:fb:aa:1d:f2:0f:a7:b5:ad:41:84:f9:cb: 3f:22:d0:67:62:1f:8c:85:22:28:1a:f3:ec:a2:24: f4:21:a3:19:79:0e:bd:8d:6d:43:4b:67:87:78:27: c3:06:66:40:7f:b1:88:25:62:b1:af:3a:d5:d1:21: 22:e7:c4:56:c6:c5:f6:7d:9b:f7:a5:f3:2e:e9:5f: 50:82:05:6c:ab:c3:db:0f:cb:d6:1b:61:35:c1:f8: e3:74:cc:83:04:2a:20:ec:8d:30:ce:d4:8b:19:8e: 50:0b:a0:2d:ee:ca:4b:22:d4:39:a2:da:cf:9f:15: 19:61:55:54:6c:3e:4a:5b:96:bc:b5:0a:21:cf:b0: b8:10:95:26:3f:b2:49:2a:5d:ea:94:e1:97:c5:59: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:1D:DB:CF:77:AA:26:62:92:D8:6C:AB:FF:89:94:0E:A5:8C:C0 X509v3 Authority Key Identifier: keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/fs8d2893qiZikthsq_-JlA6ljMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.186.0/24 Signature Algorithm: sha256WithRSAEncryption e7:d3:b5:f9:43:29:41:cb:19:f6:a3:d0:3e:49:47:85:50:a2: fd:bf:27:92:1c:10:e2:b3:2e:3f:38:7a:d6:ac:9e:5d:42:89: 07:0c:45:94:9f:5f:66:7a:2d:04:47:26:84:e2:25:97:df:40: f9:0c:c5:40:d2:15:0a:9d:e0:da:9e:0b:5a:74:20:37:16:99: e1:39:2f:da:5d:e2:cd:88:81:f7:87:71:d2:48:1d:29:1c:c7: 71:02:b0:24:98:76:b0:b0:03:72:be:53:a5:a3:62:d4:69:79: c4:d2:27:7e:a9:17:65:89:ce:27:0c:f6:fe:4e:62:14:d5:69: e5:c9:05:fd:10:69:3e:a3:bb:56:43:fa:7c:0c:e5:bb:c8:97: 55:8a:7d:2a:7d:bf:48:a5:e2:96:02:8d:00:90:e0:15:34:61: 44:01:b2:9f:01:ba:66:a8:27:05:86:67:07:98:76:17:c2:90: d1:a2:28:8a:24:3d:59:05:14:c8:1f:37:b5:46:4d:3b:dd:0a: db:b7:08:b4:51:9c:31:d5:a3:af:35:68:13:73:1d:fb:60:e2: 26:d9:aa:84:17:bc:20:64:f7:c3:9d:f6:ab:99:b2:a8:ea:f4: 0b:15:66:86:66:20:5a:70:98:10:70:99:5b:cc:3f:ae:79:ff: 91:44:57:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaKLsZxLb4sihls2oybhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh MGZmNDMwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWNmMWRkYmNmNzdhYTI2NjI5MmQ4NmNhYmZmODk5NDBlYTU4Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPHa952+bA77jMjVPjPu9lP/7hhJ MuegMx5pmVFuhXz6brNjTl+CElie4NEOSxmuTBQOF7EUG0ukcok9s1WcH9cNX1Gu 7B7fbKTyuWrjHUtL1ORtBFMN/40ypijwaDJZWQUan4Ei4ezsxWj7qh3yD6e1rUGE +cs/ItBnYh+MhSIoGvPsoiT0IaMZeQ69jW1DS2eHeCfDBmZAf7GIJWKxrzrV0SEi 58RWxsX2fZv3pfMu6V9QggVsq8PbD8vWG2E1wfjjdMyDBCog7I0wztSLGY5QC6At 7spLItQ5otrPnxUZYVVUbD5KW5a8tQohz7C4EJUmP7JJKl3qlOGXxVm2dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH7PHdvPd6omYpLYbKv/iZQOpYzAMB8GA1UdIwQY MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt NmUzZmE2MmNkMmRmLzEvZnM4ZDI4OTNxaVppa3Roc3FfLUpsQTZsak1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwW6MA0G CSqGSIb3DQEBCwUAA4IBAQDn07X5QylByxn2o9A+SUeFUKL9vyeSHBDisy4/OHrW rJ5dQokHDEWUn19mei0ERyaE4iWX30D5DMVA0hUKneDangtadCA3FpnhOS/aXeLN iIH3h3HSSB0pHMdxArAkmHawsANyvlOlo2LUaXnE0id+qRdlic4nDPb+TmIU1Wnl yQX9EGk+o7tWQ/p8DOW7yJdVin0qfb9IpeKWAo0AkOAVNGFEAbKfAbpmqCcFhmcH mHYXwpDRoiiKJD1ZBRTIHze1Rk073Qrbtwi0UZwx1aOvNWgTcx37YOIm2aqEF7wg ZPfDnfarmbKo6vQLFWaGZiBacJgQcJlbzD+uef+RRFc2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:15 2026 by rpki-client