This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uF4FXEsmnpCuOXjSx9BjSV-nVHM.roa File: uF4FXEsmnpCuOXjSx9BjSV-nVHM.roa (raw, json) Hash identifier: YPtnGmmBDBxKVv1yw2ZDsReqKoDk7azRLWTi2EV4uZc= Subject key identifier: B8:5E:05:5C:4B:26:9E:90:AE:39:78:D2:C7:D0:63:49:5F:A7:54:73 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C4FDD86E612CBF125C89996BA5A7 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uF4FXEsmnpCuOXjSx9BjSV-nVHM.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208635 IP address blocks: 195.53.68.0/24 maxlen: 24 195.53.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c4:fd:d8:6e:61:2c:bf:12:5c:89:99:6b:a5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b85e055c4b269e90ae3978d2c7d063495fa75473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:c8:a6:28:58:c1:04:d8:c3:08:dd:c1:f4: 39:5f:f0:1f:f9:bb:b2:c9:65:33:9b:1f:cd:72:93: 3d:85:7d:fc:2b:37:57:dc:0d:57:0d:22:c4:21:d2: ed:49:f0:fd:34:63:9a:b2:60:f5:29:f0:6d:b9:ee: b6:f1:44:ae:4d:ce:aa:88:e2:58:79:7e:aa:b1:3e: 43:f0:2e:d8:23:f6:b1:5b:a1:62:e2:f3:58:1e:47: 01:f4:2f:8f:e6:7f:82:2c:e0:0c:32:6f:25:dd:a2: c9:89:02:ba:f5:e5:80:1b:53:1d:6f:22:75:19:a8: 80:23:29:10:ed:ee:cc:67:41:93:0a:85:02:4f:1c: e9:20:be:d1:05:3e:a6:15:25:13:db:53:bf:f9:50: 2d:e8:88:8c:89:f2:a2:c1:ad:79:58:59:81:62:6e: 2f:bf:0f:63:3d:cc:8f:c2:46:73:93:84:14:5d:57: 41:59:49:91:1e:fe:07:4c:32:17:26:34:0b:05:2e: 3c:d8:5e:d8:fe:6e:19:4f:c8:49:22:58:85:eb:e2: c8:62:a6:61:ab:50:86:57:c4:1a:47:f1:7a:6b:5a: f8:67:f9:0b:6b:1d:27:fd:72:7c:bf:6a:78:8c:49: b2:c4:c1:e7:f7:46:d9:d9:89:cf:b9:08:c8:20:e5: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5E:05:5C:4B:26:9E:90:AE:39:78:D2:C7:D0:63:49:5F:A7:54:73 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/uF4FXEsmnpCuOXjSx9BjSV-nVHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.53.68.0/23 Signature Algorithm: sha256WithRSAEncryption 94:1f:f4:0c:cc:07:71:20:e0:ce:71:83:c9:d2:50:ba:39:21: 51:77:73:d4:f3:de:79:e9:88:8f:79:55:02:1e:eb:87:22:f9: ca:60:39:13:74:12:16:37:1e:f6:31:33:92:ef:d7:b0:13:2b: 87:a0:14:ee:73:5f:97:b5:88:b2:9f:51:64:ab:14:06:d2:da: b2:86:f6:80:d7:72:37:f4:cf:29:f3:81:d0:30:04:5c:6e:9e: 29:34:27:d9:cc:be:c8:de:c5:e9:c1:d9:f6:fd:ce:8a:eb:54: b9:88:ca:d7:d9:6e:92:4d:47:fe:ee:54:79:84:ee:b7:b1:2c: fa:7a:5d:ae:9a:eb:de:e8:be:e5:56:da:dc:e5:e3:e5:8f:c7: cc:fd:59:7b:d1:3f:31:1d:dc:6c:d5:68:88:58:ec:96:bc:4e: c9:14:3e:2e:83:90:0f:31:e3:c9:27:d7:d6:e1:a7:85:65:07: 1d:d0:ad:2e:78:24:b7:fa:0f:f8:a7:f3:46:3b:b5:d1:cc:67: 84:aa:e0:83:61:d2:20:e4:40:1e:db:75:40:eb:e6:8e:78:0c: ef:15:af:0d:40:b0:71:19:54:54:8f:c9:1a:87:41:e5:ba:ee: 35:a8:2f:e0:0e:3c:da:26:e5:8d:94:6a:62:13:b6:bd:0b:b7: 37:0a:99:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcT92G5hLL8SXImZa6WnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODVlMDU1YzRiMjY5ZTkwYWUzOTc4ZDJjN2QwNjM0OTVmYTc1NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvnIpihYwQTYwwjdwfQ5X/Af+buy yWUzmx/NcpM9hX38KzdX3A1XDSLEIdLtSfD9NGOasmD1KfBtue628USuTc6qiOJY eX6qsT5D8C7YI/axW6Fi4vNYHkcB9C+P5n+CLOAMMm8l3aLJiQK69eWAG1MdbyJ1 GaiAIykQ7e7MZ0GTCoUCTxzpIL7RBT6mFSUT21O/+VAt6IiMifKiwa15WFmBYm4v vw9jPcyPwkZzk4QUXVdBWUmRHv4HTDIXJjQLBS482F7Y/m4ZT8hJIliF6+LIYqZh q1CGV8QaR/F6a1r4Z/kLax0n/XJ8v2p4jEmyxMHn90bZ2YnPuQjIIOUzrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLheBVxLJp6Qrjl40sfQY0lfp1RzMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvdUY0RlhFc21ucEN1T1hqU3g5QmpTVi1uVkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzVEMA0G CSqGSIb3DQEBCwUAA4IBAQCUH/QMzAdxIODOcYPJ0lC6OSFRd3PU89556YiPeVUC HuuHIvnKYDkTdBIWNx72MTOS79ewEyuHoBTuc1+XtYiyn1FkqxQG0tqyhvaA13I3 9M8p84HQMARcbp4pNCfZzL7I3sXpwdn2/c6K61S5iMrX2W6STUf+7lR5hO63sSz6 el2umuve6L7lVtrc5ePlj8fM/Vl70T8xHdxs1WiIWOyWvE7JFD4ug5APMePJJ9fW 4aeFZQcd0K0ueCS3+g/4p/NGO7XRzGeEquCDYdIg5EAe23VA6+aOeAzvFa8NQLBx GVRUj8kah0Hluu41qC/gDjzaJuWNlGpiE7a9C7c3Cpki -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:35 2026 by rpki-client