This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/327Pemqk9sFkUW1UuW8ziGGSZZw.roa File: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (raw, json) Hash identifier: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q= Subject key identifier: DF:6E:CF:7A:6A:A4:F6:C1:64:51:6D:54:B9:6F:33:88:61:92:65:9C Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EB76408F96FFFAF10520BF2E49EE Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/327Pemqk9sFkUW1UuW8ziGGSZZw.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199982 IP address blocks: 195.5.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:eb:76:40:8f:96:ff:fa:f1:05:20:bf:2e:49:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df6ecf7a6aa4f6c164516d54b96f33886192659c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:cd:3b:52:9d:e8:0c:f8:db:95:b5:f5:ca: 3e:b2:bf:1a:33:22:73:96:9d:20:4d:4a:25:78:fa: 72:25:73:1c:db:f4:1c:11:51:31:15:85:42:69:f9: 70:25:17:52:90:dc:88:51:e8:f0:dc:64:70:dd:31: ac:84:f6:3a:d4:c6:7a:e5:1d:07:f4:52:1d:16:cc: af:91:62:e1:d1:6a:f6:04:d1:56:e0:f8:4a:af:13: 84:37:64:02:34:a6:11:03:72:37:35:17:8a:ea:2e: fe:4e:cc:73:ce:23:fc:f4:5a:5b:75:a7:e6:45:27: df:f2:99:88:1d:f2:19:97:cd:9d:07:e3:10:7a:ae: 1d:52:a0:80:a3:4b:af:89:06:d9:16:a6:29:3d:91: ab:a7:8e:9a:39:9b:33:1f:02:51:11:f2:17:25:51: aa:59:44:6e:d5:4c:ee:2a:36:6e:04:8d:0a:09:c5: 8a:3a:9e:ba:97:a8:9b:9a:23:09:d4:c4:ec:12:d6: da:2d:61:52:38:63:86:b3:bf:0b:0a:81:b9:3d:9f: eb:96:41:6b:9b:48:c6:bd:4e:0f:c8:dc:63:b0:02: 63:49:b3:72:bc:08:6f:53:bb:88:d9:e7:08:f9:87: 78:e0:b5:95:79:44:3d:4e:ed:0f:ef:47:33:10:02: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:CF:7A:6A:A4:F6:C1:64:51:6D:54:B9:6F:33:88:61:92:65:9C X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/327Pemqk9sFkUW1UuW8ziGGSZZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.114.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:45:e2:b7:f6:06:77:b9:3c:86:9b:eb:83:2e:05:d2:60:ff: 72:08:ce:85:9b:5c:d3:34:a2:4f:be:50:22:45:9a:8c:3a:b7: 45:16:17:d7:86:50:99:b6:72:ce:75:6d:9a:08:97:6c:cf:48: 7f:26:15:96:cd:9a:e6:89:6d:79:a5:dd:b0:ff:f5:56:df:96: 3d:f2:6e:e4:9a:82:7f:ad:e6:49:ec:a9:16:bf:c4:e6:34:8c: 74:07:dd:a4:e9:9d:90:64:70:ff:12:f6:a2:2d:eb:1d:d7:ed: 6e:ed:e9:f7:31:5d:40:17:53:11:88:c0:a1:c3:19:c5:db:9c: 6e:94:64:60:83:b2:10:84:d7:be:30:76:ac:13:59:eb:b0:11: 8f:ef:ee:db:75:48:5e:89:59:14:c7:b9:6f:d9:3d:f2:9b:dd: 6a:9e:36:7e:ec:00:01:c5:a5:2e:93:7c:73:28:1e:07:34:71: 01:92:2e:60:ab:01:c7:33:03:b7:c1:af:61:f5:7e:02:0c:d5: f0:1b:77:c5:36:3a:7a:3a:04:36:f2:c2:c8:0b:6c:5a:68:de: 47:86:55:be:5a:86:15:07:69:8d:e8:e2:51:2d:91:14:b8:a3: 69:3d:6e:38:c1:b0:c6:4a:63:7e:d2:58:4c:c3:18:35:02:d5: 80:86:d5:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOt2QI+W//rxBSC/LknuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjZlY2Y3YTZhYTRmNmMxNjQ1MTZkNTRiOTZmMzM4ODYxOTI2NTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCXNO1Kd6Az425W19co+sr8aMyJz lp0gTUolePpyJXMc2/QcEVExFYVCaflwJRdSkNyIUejw3GRw3TGshPY61MZ65R0H 9FIdFsyvkWLh0Wr2BNFW4PhKrxOEN2QCNKYRA3I3NReK6i7+TsxzziP89Fpbdafm RSff8pmIHfIZl82dB+MQeq4dUqCAo0uviQbZFqYpPZGrp46aOZszHwJREfIXJVGq WURu1UzuKjZuBI0KCcWKOp66l6ibmiMJ1MTsEtbaLWFSOGOGs78LCoG5PZ/rlkFr m0jGvU4PyNxjsAJjSbNyvAhvU7uI2ecI+Yd44LWVeUQ9Tu0P70czEAKVhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9uz3pqpPbBZFFtVLlvM4hhkmWcMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvMzI3UGVtcWs5c0ZrVVcxVXVXOHppR0dTWlp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwVyMA0G CSqGSIb3DQEBCwUAA4IBAQA8ReK39gZ3uTyGm+uDLgXSYP9yCM6Fm1zTNKJPvlAi RZqMOrdFFhfXhlCZtnLOdW2aCJdsz0h/JhWWzZrmiW15pd2w//VW35Y98m7kmoJ/ reZJ7KkWv8TmNIx0B92k6Z2QZHD/EvaiLesd1+1u7en3MV1AF1MRiMChwxnF25xu lGRgg7IQhNe+MHasE1nrsBGP7+7bdUheiVkUx7lv2T3ym91qnjZ+7AABxaUuk3xz KB4HNHEBki5gqwHHMwO3wa9h9X4CDNXwG3fFNjp6OgQ28sLIC2xaaN5HhlW+WoYV B2mN6OJRLZEUuKNpPW44wbDGSmN+0lhMwxg1AtWAhtUD -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:54 2026 by rpki-client