This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/us0cCXgOVilyc_-btAWVQ_9HSm0.roa File: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (raw, json) Hash identifier: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o= Subject key identifier: BA:CD:1C:09:78:0E:56:29:72:73:FF:9B:B4:05:95:43:FF:47:4A:6D Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b Certificate serial: 019B7EA7157421133D3365427C26084E7CE8 Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/us0cCXgOVilyc_-btAWVQ_9HSm0.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8739 IP address blocks: 195.8.222.0/24 maxlen: 24 195.8.223.0/24 maxlen: 24 195.42.142.0/23 maxlen: 23 195.42.142.0/24 maxlen: 24 195.42.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:15:74:21:13:3d:33:65:42:7c:26:08:4e:7c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bacd1c09780e56297273ff9bb4059543ff474a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:28:69:c0:d1:04:ee:98:4d:b2:4e:9a:ff: e5:fd:54:f7:c9:44:18:04:64:16:30:99:60:ca:51: 2d:06:ca:17:07:d1:06:87:f7:a3:ba:c5:6f:89:e5: 62:f3:2c:17:c0:ea:0b:b0:c1:c9:e3:cd:27:1f:15: f5:2c:50:f6:5a:65:f8:b1:d2:27:68:11:2a:f9:3b: 7d:62:48:ac:22:c2:e0:1c:10:6f:7e:ef:3b:12:a1: 86:1e:cd:b4:f0:a3:cd:48:c3:d1:a4:85:60:5a:41: 22:50:32:11:33:96:6e:7a:fd:16:06:2c:dd:3d:e6: 74:f0:01:e7:f3:e4:e7:39:b1:0b:55:65:51:4b:92: 79:d6:9d:5c:80:43:38:9f:fe:d1:42:e8:18:c9:5b: 06:db:c4:a9:61:24:1d:a0:4a:ae:b9:c3:08:38:d8: d0:12:f5:14:d1:a9:93:44:18:4c:da:85:e0:54:9e: b1:e8:c0:f4:2b:f0:73:1f:1a:8a:c6:aa:02:6d:f8: b5:5f:01:9a:ee:57:bd:c6:c6:dc:53:19:ff:96:81: 8e:24:5a:8a:c9:34:cb:ff:53:de:86:c4:35:50:35: 0f:31:63:c9:a8:82:71:76:5e:ce:5d:6a:b7:8c:4e: f7:69:24:f0:17:23:be:a3:60:ab:33:d1:6f:62:2f: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:1C:09:78:0E:56:29:72:73:FF:9B:B4:05:95:43:FF:47:4A:6D X509v3 Authority Key Identifier: keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/us0cCXgOVilyc_-btAWVQ_9HSm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.222.0/23 195.42.142.0/23 Signature Algorithm: sha256WithRSAEncryption 76:22:34:9d:29:e2:d1:e6:d5:61:8a:cd:a3:c9:ca:8b:d0:a6: 5c:da:dd:55:c4:bf:fc:7c:e3:c0:7d:2d:c2:1c:d8:95:31:9d: e6:03:9e:19:d1:b0:13:e6:f3:cf:86:0a:e0:f9:64:a9:b7:7d: c4:29:fd:ba:70:91:fe:2c:77:64:30:98:59:13:3a:03:1d:76: 7e:36:ae:30:6b:b1:06:2b:b1:c0:3e:1c:89:0a:65:d8:8d:38: b8:bf:4b:d8:d6:1c:ae:ee:e7:76:ad:63:0c:b8:47:54:fa:b8: f7:99:ca:bf:3f:fa:72:97:38:55:9c:70:5a:2d:31:07:e4:29: f6:af:52:69:30:e6:de:dc:83:6b:98:06:74:5c:55:ae:21:08: 84:61:63:a8:f1:62:b5:62:fa:3e:5b:6c:95:9f:b0:db:ed:bb: d7:0d:9b:67:d1:ba:ee:47:78:f3:64:35:ce:06:75:20:07:f9: 82:39:4a:82:f9:11:3b:46:f0:58:df:e9:cb:9c:1b:bc:29:12: 2c:ad:42:00:9f:8c:e8:6f:3d:80:70:29:6e:07:3a:1b:af:4c: 87:7f:40:0f:19:fd:95:00:38:57:6c:4c:b2:29:67:ec:1f:54: fd:7e:41:39:e3:4c:24:8b:b1:66:67:0e:2f:7a:8f:d9:85:22: d1:d5:04:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pxV0IRM9M2VCfCYITnzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjIwN2MzMmNlOThhMWFkZTkyMjQ4NjNiNDYzYTgyZjhm ODY4MmIwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNkMWMwOTc4MGU1NjI5NzI3M2ZmOWJiNDA1OTU0M2ZmNDc0YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln8oacDRBO6YTbJOmv/l/VT3yUQY BGQWMJlgylEtBsoXB9EGh/ejusVvieVi8ywXwOoLsMHJ480nHxX1LFD2WmX4sdIn aBEq+Tt9YkisIsLgHBBvfu87EqGGHs208KPNSMPRpIVgWkEiUDIRM5Zuev0WBizd PeZ08AHn8+TnObELVWVRS5J51p1cgEM4n/7RQugYyVsG28SpYSQdoEquucMIONjQ EvUU0amTRBhM2oXgVJ6x6MD0K/BzHxqKxqoCbfi1XwGa7le9xsbcUxn/loGOJFqK yTTL/1PehsQ1UDUPMWPJqIJxdl7OXWq3jE73aSTwFyO+o2CrM9FvYi+x0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLrNHAl4DlYpcnP/m7QFlUP/R0ptMB8GA1UdIwQY MBaAFLJiB8Ms6Yoa3pIkhjtGOoL4+GgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAt Yjc3MzhhMGJlZmFmLzEvdXMwY0NYZ09WaWx5Y18tYnRBV1ZRXzlIU20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAtYjc3MzhhMGJlZmFm LzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwwjeAwQB wyqOMA0GCSqGSIb3DQEBCwUAA4IBAQB2IjSdKeLR5tVhis2jycqL0KZc2t1VxL/8 fOPAfS3CHNiVMZ3mA54Z0bAT5vPPhgrg+WSpt33EKf26cJH+LHdkMJhZEzoDHXZ+ Nq4wa7EGK7HAPhyJCmXYjTi4v0vY1hyu7ud2rWMMuEdU+rj3mcq/P/pylzhVnHBa LTEH5Cn2r1JpMObe3INrmAZ0XFWuIQiEYWOo8WK1Yvo+W2yVn7Db7bvXDZtn0bru R3jzZDXOBnUgB/mCOUqC+RE7RvBY3+nLnBu8KRIsrUIAn4zobz2AcCluBzobr0yH f0APGf2VADhXbEyyKWfsH1T9fkE540wki7FmZw4veo/ZhSLR1QQ5 -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:23 2026 by rpki-client