This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ARSSC9zHIGL8uPCTzOB-i0uK97g.roa File: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (raw, json) Hash identifier: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc= Subject key identifier: 01:14:92:0B:DC:C7:20:62:FC:B8:F0:93:CC:E0:7E:8B:4B:8A:F7:B8 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED50DC8032BCA2410E30B326CC7DEA Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ARSSC9zHIGL8uPCTzOB-i0uK97g.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204797 IP address blocks: 195.22.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:dc:80:32:bc:a2:41:0e:30:b3:26:cc:7d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0114920bdcc72062fcb8f093cce07e8b4b8af7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:8b:39:fa:56:7d:87:5a:b7:2b:be:13:45: 24:96:34:99:43:5c:37:d0:c7:ee:2c:d4:c0:58:68: 52:3f:c0:d8:9c:c0:f0:85:79:48:ed:a7:1b:5a:08: 90:63:39:a8:37:a3:be:e3:23:e3:f5:3d:49:ee:57: 25:fa:52:6e:0f:72:47:b5:fc:c4:bc:cc:c9:6e:d5: e9:08:ad:10:20:14:14:40:4e:12:b2:c5:f4:7f:65: 1e:b3:4e:7c:cd:42:7b:a2:de:ab:50:15:c6:29:28: 3c:1b:cb:5f:cf:ee:48:34:7a:3c:82:82:06:ed:1c: 01:a7:bd:fa:6e:ec:80:66:ab:1f:46:45:5b:55:cd: d1:4a:d2:5d:c7:37:61:21:49:38:ba:76:3e:72:8f: 98:d2:19:77:cd:a0:33:14:5a:70:f2:8f:d3:3b:a5: 73:bf:76:e1:80:89:93:97:6d:33:29:ed:ce:d9:06: 6c:ed:e1:c8:15:45:6b:55:5e:28:25:7d:d7:cd:79: 4f:9d:c7:0e:45:09:ec:b4:29:b3:f3:48:89:60:38: b8:e9:d4:fb:a6:76:33:2c:f5:7f:c4:cd:1c:dd:d7: 39:48:a2:80:1b:b7:a2:2b:f0:a1:51:14:13:2a:a1: 87:9d:06:d0:41:34:02:07:f9:c0:99:44:9f:78:46: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:14:92:0B:DC:C7:20:62:FC:B8:F0:93:CC:E0:7E:8B:4B:8A:F7:B8 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ARSSC9zHIGL8uPCTzOB-i0uK97g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.116.0/24 Signature Algorithm: sha256WithRSAEncryption 23:d8:3a:67:05:7e:e7:a5:e2:41:be:f6:e0:51:f6:e5:95:f6: 05:db:c0:d1:ab:45:30:9b:29:87:3d:96:cc:35:3e:13:1b:c2: 18:c5:40:f6:7f:d5:14:55:76:64:8f:67:a2:6d:4f:7c:b5:cc: 5e:91:42:dc:fb:af:51:ad:58:0c:2e:8e:18:09:48:09:e6:03: e4:c8:83:9b:9b:dc:1e:ed:30:98:75:f0:e4:31:60:d2:7e:1d: 53:1f:70:d3:2b:fb:6d:a0:71:ed:9e:b8:e4:77:37:0b:5f:61: a0:5b:64:8d:3f:0f:49:c6:03:85:97:b1:43:a5:c1:c6:64:5a: 55:96:d8:18:1e:62:1b:d0:e6:c2:fb:85:a0:72:d7:2d:c7:a9: 28:e9:94:19:10:44:95:95:b0:85:fa:16:73:2c:db:38:21:56: 48:b9:c3:a6:20:77:4c:3e:7d:e0:56:6d:84:41:4f:63:cb:27: ab:76:11:b9:d0:65:e2:38:40:2f:41:41:73:51:e1:db:3b:a1: 32:ae:b4:7d:f0:b0:44:3e:36:0d:d8:95:c1:ab:56:df:0d:0e: d5:7f:be:10:c3:5c:43:cd:97:53:8d:ef:82:90:d4:68:de:f8: d5:89:17:bf:1e:bb:ad:8c:c3:0b:17:f4:5a:f4:f3:a4:89:8b: 2c:47:7e:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VDcgDK8okEOMLMmzH3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTE0OTIwYmRjYzcyMDYyZmNiOGYwOTNjY2UwN2U4YjRiOGFmN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHCLOfpWfYdatyu+E0UkljSZQ1w3 0MfuLNTAWGhSP8DYnMDwhXlI7acbWgiQYzmoN6O+4yPj9T1J7lcl+lJuD3JHtfzE vMzJbtXpCK0QIBQUQE4SssX0f2Ues058zUJ7ot6rUBXGKSg8G8tfz+5INHo8goIG 7RwBp736buyAZqsfRkVbVc3RStJdxzdhIUk4unY+co+Y0hl3zaAzFFpw8o/TO6Vz v3bhgImTl20zKe3O2QZs7eHIFUVrVV4oJX3XzXlPnccORQnstCmz80iJYDi46dT7 pnYzLPV/xM0c3dc5SKKAG7eiK/ChURQTKqGHnQbQQTQCB/nAmUSfeEabEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEUkgvcxyBi/Ljwk8zgfotLive4MB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvQVJTU0M5ekhJR0w4dVBDVHpPQi1pMHVLOTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxZ0MA0G CSqGSIb3DQEBCwUAA4IBAQAj2DpnBX7npeJBvvbgUfbllfYF28DRq0UwmymHPZbM NT4TG8IYxUD2f9UUVXZkj2eibU98tcxekULc+69RrVgMLo4YCUgJ5gPkyIObm9we 7TCYdfDkMWDSfh1TH3DTK/ttoHHtnrjkdzcLX2GgW2SNPw9JxgOFl7FDpcHGZFpV ltgYHmIb0ObC+4Wgctctx6ko6ZQZEESVlbCF+hZzLNs4IVZIucOmIHdMPn3gVm2E QU9jyyerdhG50GXiOEAvQUFzUeHbO6EyrrR98LBEPjYN2JXBq1bfDQ7Vf74Qw1xD zZdTje+CkNRo3vjViRe/HrutjMMLF/Ra9POkiYssR36S -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:01 2026 by rpki-client