This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/43snRorJdsOxQZxAT559GL7R4Bg.roa File: 43snRorJdsOxQZxAT559GL7R4Bg.roa (raw, json) Hash identifier: d1wgQR/1pcRm8Hl+29iR3ggncJV7LD2jWCeva4iy3uQ= Subject key identifier: E3:7B:27:46:8A:C9:76:C3:B1:41:9C:40:4F:9E:7D:18:BE:D1:E0:18 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15BEF6C071D26A6946A8180BB0B249 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/43snRorJdsOxQZxAT559GL7R4Bg.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200165 IP address blocks: 195.235.164.0/24 maxlen: 24 213.99.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:be:f6:c0:71:d2:6a:69:46:a8:18:0b:b0:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e37b27468ac976c3b1419c404f9e7d18bed1e018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:f5:67:99:d5:64:f2:cc:5e:8c:f9:b9:f0: 85:f9:cc:af:f7:e2:39:7e:3d:e5:ff:3d:09:7b:3b: 1b:19:af:df:a7:df:64:5d:47:f2:bc:16:1d:df:5f: 7c:22:46:82:ac:91:7f:c1:f5:60:6b:31:1b:a0:16: f0:53:b9:22:5b:3e:0e:d9:c3:9c:23:3c:d4:1a:a4: c2:ca:cd:e4:ce:9a:60:ba:92:0b:b3:20:8b:27:23: cf:98:2d:c4:c3:52:a5:19:ae:d5:a1:4a:14:2b:32: c7:85:fe:96:29:78:40:1e:a0:f3:a2:82:9d:ed:2a: 25:9d:32:c7:f0:d8:d7:5d:26:5f:6a:da:f0:3c:15: 76:54:62:4c:dd:3e:7c:84:da:f9:fd:cb:92:47:63: 20:57:91:b2:fa:4c:4c:53:fd:ba:b4:45:7f:90:cd: 6d:53:e3:05:9f:ff:12:85:64:c4:cf:db:ae:09:7d: 69:93:c8:16:a0:b4:ed:0a:bb:26:66:c4:24:fe:f0: a7:1f:c6:e8:72:83:b2:68:17:de:08:4c:5b:c6:68: 84:ec:6f:7d:67:a8:0a:e9:a7:2d:e8:47:28:5d:0b: b0:1e:2b:bf:fa:90:12:3c:3c:75:5e:09:bb:3f:24: c8:72:10:15:67:87:97:dd:8b:98:52:8a:6d:69:59: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:27:46:8A:C9:76:C3:B1:41:9C:40:4F:9E:7D:18:BE:D1:E0:18 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/43snRorJdsOxQZxAT559GL7R4Bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.235.164.0/24 213.99.28.0/24 Signature Algorithm: sha256WithRSAEncryption 15:68:71:55:6c:df:ac:6e:3c:a7:b7:39:e6:c2:0d:11:d0:d8: 48:bb:54:a2:fa:85:7d:da:e7:d6:e1:48:1d:83:e8:2c:b6:34: 79:3e:81:19:59:9d:34:c8:1d:5b:99:f1:65:89:83:83:5d:15: fb:0f:40:1f:e2:49:da:1a:0b:89:29:e5:11:46:e9:31:7c:c6: 23:14:53:16:fe:34:96:ea:4f:53:9c:4a:04:a0:a3:88:f2:36: eb:78:52:3d:3b:e4:54:1c:d6:5c:cd:b9:95:86:bf:89:07:6c: 7b:ed:e9:c2:de:5c:57:ee:a6:62:f6:15:45:18:85:bf:3c:b5: 54:af:17:72:dd:55:bd:8e:26:cd:bb:e1:b0:26:58:33:9e:b4: 7c:6b:2f:40:25:87:87:fb:62:68:2d:50:b2:c5:93:e7:01:79: 0c:be:2e:33:8c:bc:65:b9:66:c1:3e:81:62:95:26:3c:02:63: dc:da:61:ed:e0:1c:73:ac:4b:2d:7e:a4:b4:1a:ee:ef:65:85: 59:05:ee:4d:8b:21:59:be:0e:87:d7:bb:bf:28:64:69:67:84: 0c:48:8f:91:06:a2:74:18:72:01:68:a2:bc:13:42:1a:4d:47: 15:77:05:5a:2a:cf:1c:26:94:8d:36:a9:dc:7e:30:a1:c3:bc: 42:b5:0f:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fb72wHHSamlGqBgLsLJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdiMjc0NjhhYzk3NmMzYjE0MTljNDA0ZjllN2QxOGJlZDFlMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VP1Z5nVZPLMXoz5ufCF+cyv9+I5 fj3l/z0JezsbGa/fp99kXUfyvBYd3198IkaCrJF/wfVgazEboBbwU7kiWz4O2cOc IzzUGqTCys3kzppgupILsyCLJyPPmC3Ew1KlGa7VoUoUKzLHhf6WKXhAHqDzooKd 7SolnTLH8NjXXSZfatrwPBV2VGJM3T58hNr5/cuSR2MgV5Gy+kxMU/26tEV/kM1t U+MFn/8ShWTEz9uuCX1pk8gWoLTtCrsmZsQk/vCnH8bocoOyaBfeCExbxmiE7G99 Z6gK6act6EcoXQuwHiu/+pASPDx1Xgm7PyTIchAVZ4eX3YuYUoptaVnfTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFON7J0aKyXbDsUGcQE+efRi+0eAYMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvNDNzblJvckpkc094UVp4QVQ1NTlHTDdSNEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw+ukAwQA 1WMcMA0GCSqGSIb3DQEBCwUAA4IBAQAVaHFVbN+sbjyntznmwg0R0NhIu1Si+oV9 2ufW4Ugdg+gstjR5PoEZWZ00yB1bmfFliYODXRX7D0Af4knaGguJKeURRukxfMYj FFMW/jSW6k9TnEoEoKOI8jbreFI9O+RUHNZczbmVhr+JB2x77enC3lxX7qZi9hVF GIW/PLVUrxdy3VW9jibNu+GwJlgznrR8ay9AJYeH+2JoLVCyxZPnAXkMvi4zjLxl uWbBPoFilSY8AmPc2mHt4BxzrEstfqS0Gu7vZYVZBe5NiyFZvg6H17u/KGRpZ4QM SI+RBqJ0GHIBaKK8E0IaTUcVdwVaKs8cJpSNNqncfjChw7xCtQ+E -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:59 2026 by rpki-client