This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/tDspM2jjSgEGhc8BloKM8cbAdEU.roa File: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (raw, json) Hash identifier: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI= Subject key identifier: B4:3B:29:33:68:E3:4A:01:06:85:CF:01:96:82:8C:F1:C6:C0:74:45 Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019B7B35D94468FDF231B431B2ACAC958D48 Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/tDspM2jjSgEGhc8BloKM8cbAdEU.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 195.230.105.0/24 maxlen: 24 195.230.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d9:44:68:fd:f2:31:b4:31:b2:ac:ac:95:8d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b43b293368e34a010685cf0196828cf1c6c07445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:d8:9e:b5:96:ed:a1:10:b1:a7:27:93:a2: aa:57:c8:4c:66:dc:60:8b:3d:0b:8a:93:c5:2b:b1: e4:9d:30:2b:11:40:38:54:61:2d:88:fa:02:29:64: 93:c6:0a:be:22:7f:8a:b8:ad:02:cf:20:b5:e1:96: 7e:fc:b3:3f:6b:46:60:7b:25:ac:68:81:8c:fe:16: d6:70:9b:3b:a0:e7:fa:72:4e:71:c5:04:95:0e:c4: 35:5d:76:45:9e:b7:9c:83:6e:bb:9e:ed:59:b2:84: 94:bb:c1:de:ab:df:5e:0c:20:ff:9e:40:61:4e:48: 8f:cb:c8:a3:af:f2:7d:1e:da:76:8a:d0:a0:fc:7a: 0d:8e:47:e3:ab:02:6d:28:c3:19:30:cd:54:29:e2: 26:cb:48:99:21:0f:dc:bd:61:d3:a5:43:fc:12:35: a0:a9:8d:a8:55:57:b5:53:0e:1e:a5:a1:23:33:a6: 71:a0:fd:6a:a5:99:c3:ef:dc:8e:c3:d3:84:4c:59: 9d:9f:7a:37:a4:9e:ba:d5:a0:f6:d1:60:94:e5:e7: 21:73:47:c5:2c:cc:57:a4:12:9e:aa:17:fe:54:37: d7:ec:c8:f9:c7:c4:04:c2:b6:58:77:b9:95:1b:f2: 3d:81:93:86:31:b6:43:a4:00:19:c7:a6:b6:6b:17: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:29:33:68:E3:4A:01:06:85:CF:01:96:82:8C:F1:C6:C0:74:45 X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/tDspM2jjSgEGhc8BloKM8cbAdEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.105.0/24 195.230.124.0/24 Signature Algorithm: sha256WithRSAEncryption 48:61:4d:75:4a:03:f2:ed:2f:09:55:67:dd:64:18:4b:61:fe: 8d:8d:e9:7a:4f:51:f0:2a:67:b7:f7:80:ef:82:73:12:17:11: cd:62:d4:98:c8:39:c3:13:15:dd:66:bf:e8:62:d3:9f:2a:45: 3a:8a:89:6c:45:2a:50:9a:4c:87:31:7d:50:ab:f2:74:36:38: 25:db:72:b6:00:d4:fe:69:6c:7f:ce:60:ab:cd:8a:cf:5a:30: 05:ea:4d:d9:58:e4:7a:e5:12:27:cf:53:f8:05:4a:9f:ea:99: 7c:d2:7e:95:ac:97:68:d9:d2:5c:ec:0d:c5:c1:13:11:01:f8: b9:ea:d4:88:50:de:4f:5b:62:19:04:3c:6f:60:1e:ca:d9:8b: 63:eb:ac:20:a0:2d:1c:5e:c4:db:82:51:45:77:8c:42:10:a8: 5c:36:0e:b6:b9:6e:fb:80:44:c8:e6:85:09:26:3a:a0:b5:2a: 46:e9:8c:9e:8d:f5:3d:53:3a:d6:0c:97:14:5f:aa:86:88:ef: 54:78:9d:3e:7d:7a:69:26:f5:17:8e:9b:1e:82:d1:e1:e7:73: 00:f0:1a:28:ef:1c:aa:d8:00:34:c5:c0:4d:68:e4:48:68:9f: 04:5b:1a:a0:51:a0:84:b6:b5:be:2c:73:ee:1f:35:10:34:b6: 48:83:de:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NdlEaP3yMbQxsqyslY1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDNiMjkzMzY4ZTM0YTAxMDY4NWNmMDE5NjgyOGNmMWM2YzA3NDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCHYnrWW7aEQsacnk6KqV8hMZtxg iz0LipPFK7HknTArEUA4VGEtiPoCKWSTxgq+In+KuK0CzyC14ZZ+/LM/a0ZgeyWs aIGM/hbWcJs7oOf6ck5xxQSVDsQ1XXZFnrecg267nu1ZsoSUu8Heq99eDCD/nkBh TkiPy8ijr/J9Htp2itCg/HoNjkfjqwJtKMMZMM1UKeImy0iZIQ/cvWHTpUP8EjWg qY2oVVe1Uw4epaEjM6ZxoP1qpZnD79yOw9OETFmdn3o3pJ661aD20WCU5echc0fF LMxXpBKeqhf+VDfX7Mj5x8QEwrZYd7mVG/I9gZOGMbZDpAAZx6a2axdNawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLQ7KTNo40oBBoXPAZaCjPHGwHRFMB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvdERzcE0yampTZ0VHaGM4QmxvS004Y2JBZEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw+ZpAwQA w+Z8MA0GCSqGSIb3DQEBCwUAA4IBAQBIYU11SgPy7S8JVWfdZBhLYf6Njel6T1Hw Kme394DvgnMSFxHNYtSYyDnDExXdZr/oYtOfKkU6iolsRSpQmkyHMX1Qq/J0Njgl 23K2ANT+aWx/zmCrzYrPWjAF6k3ZWOR65RInz1P4BUqf6pl80n6VrJdo2dJc7A3F wRMRAfi56tSIUN5PW2IZBDxvYB7K2Ytj66wgoC0cXsTbglFFd4xCEKhcNg62uW77 gETI5oUJJjqgtSpG6YyejfU9UzrWDJcUX6qGiO9UeJ0+fXppJvUXjpsegtHh53MA 8Boo7xyq2AA0xcBNaORIaJ8EWxqgUaCEtrW+LHPuHzUQNLZIg97k -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:23 2026 by rpki-client