This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa File: UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa (raw, json) Hash identifier: s7GA4eqf5DoRRiNJRrEX+zAJuNz9IR335s9XPM6efIU= Subject key identifier: 52:74:CE:8D:01:19:E0:ED:0B:E5:86:96:6F:E1:A2:BB:C0:94:5C:A0 Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774 Certificate serial: 019B7BA3664382A31757636266C24B454D82 Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa Signing time: Thu 01 Jan 2026 22:17:44 +0000 ROA not before: Thu 01 Jan 2026 22:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198395 IP address blocks: 195.60.168.0/23 maxlen: 23 195.60.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:66:43:82:a3:17:57:63:62:66:c2:4b:45:4d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774 Validity Not Before: Jan 1 22:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5274ce8d0119e0ed0be586966fe1a2bbc0945ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:8f:67:c8:63:4b:08:9d:7e:2e:50:a1:5c: 19:cc:80:4c:1e:9c:5d:27:af:f3:12:54:ee:8a:7f: 28:c7:5d:d1:dc:f6:8f:f6:6a:d1:a6:22:ca:b2:c2: db:d8:08:50:70:82:6f:9f:0e:4a:57:8f:86:a6:39: 8e:c1:a3:4b:2b:10:65:47:94:e8:80:d4:61:35:96: 0e:e9:60:f9:86:3f:f0:2d:49:63:14:d9:0c:10:0d: 40:36:8c:3d:c8:89:7a:9c:77:60:c4:a6:e5:88:e7: 7f:94:8b:5c:bc:19:47:0f:8d:b5:bc:06:70:4e:3f: 70:d4:4b:46:9c:e4:c3:e3:93:2b:51:d2:84:48:b9: 86:da:8b:ab:73:fe:16:b9:57:8a:63:9f:57:c0:ef: 22:c3:95:c6:c6:47:4c:9c:23:6a:4d:27:6d:16:df: 37:b8:04:c6:a9:47:2a:95:71:cd:1e:f8:af:66:c7: b2:4a:3e:0f:61:3f:13:17:85:69:ce:a9:64:26:9f: e6:a4:a7:ad:2c:b2:a5:c7:39:ff:82:9a:15:c7:33: 8c:82:69:e0:f8:db:5e:7b:c0:8e:da:aa:78:41:f5: 23:72:b8:bf:1a:4a:da:04:67:11:be:7d:68:b2:a9: c8:1e:97:a6:f1:5d:a4:5f:15:ed:d7:57:e3:f5:cf: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:CE:8D:01:19:E0:ED:0B:E5:86:96:6F:E1:A2:BB:C0:94:5C:A0 X509v3 Authority Key Identifier: keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.168.0/23 Signature Algorithm: sha256WithRSAEncryption 79:53:f5:1a:8a:80:83:e9:2b:d2:6f:50:79:11:eb:1f:c0:85: 81:f4:e4:da:28:d3:8b:07:e2:d2:2d:a0:75:15:90:af:fc:0d: 6a:1b:99:d7:be:b0:95:aa:6e:7c:c8:14:0c:05:d3:5f:dd:87: 00:fb:9b:a7:87:00:88:d9:d4:76:02:02:d1:ff:cd:3c:49:67: 1d:d0:5f:3f:e0:c7:56:aa:cf:a0:c3:7e:64:b4:59:80:83:c3: 93:52:62:9a:f1:fd:96:bc:2c:83:4a:82:e7:dc:f9:19:21:cc: d5:07:de:6d:8c:23:77:56:ef:f9:31:96:2b:4a:96:a1:ae:89: fb:a6:2a:fa:c2:d9:f7:1d:df:a4:82:e7:4e:95:6f:64:0a:45: af:ba:05:d1:f2:63:e6:3a:63:9a:12:a0:a7:37:e1:1e:a2:24: 95:96:0e:62:30:e4:5c:2d:ee:7f:1b:99:c2:1c:df:2f:f7:33: d7:8e:a1:c2:e5:fc:b0:91:5a:c0:f1:79:bf:8f:77:e7:2d:e2: 47:bd:f8:80:05:4d:4a:ce:e8:23:de:63:2c:63:23:f3:a7:6c: a8:3c:ca:0e:30:8e:96:9c:c0:8b:72:78:9a:89:b8:28:15:fc: 2d:9f:70:a4:2e:17:ea:73:4e:9b:f2:7e:06:5b:c4:10:27:68: 56:72:36:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2ZDgqMXV2NiZsJLRU2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk OTk3NzQwHhcNMjYwMTAxMjIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjc0Y2U4ZDAxMTllMGVkMGJlNTg2OTY2ZmUxYTJiYmMwOTQ1Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla2PZ8hjSwidfi5QoVwZzIBMHpxd J6/zElTuin8ox13R3PaP9mrRpiLKssLb2AhQcIJvnw5KV4+GpjmOwaNLKxBlR5To gNRhNZYO6WD5hj/wLUljFNkMEA1ANow9yIl6nHdgxKbliOd/lItcvBlHD421vAZw Tj9w1EtGnOTD45MrUdKESLmG2ourc/4WuVeKY59XwO8iw5XGxkdMnCNqTSdtFt83 uATGqUcqlXHNHvivZseySj4PYT8TF4VpzqlkJp/mpKetLLKlxzn/gpoVxzOMgmng +Ntee8CO2qp4QfUjcri/GkraBGcRvn1osqnIHpem8V2kXxXt11fj9c8JtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJ0zo0BGeDtC+WGlm/horvAlFygMB8GA1UdIwQY MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt ZTUwZTFlOWJiNGIzLzEvVW5UT2pRRVo0TzBMNVlhV2ItR2l1OENVWEtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzyoMA0G CSqGSIb3DQEBCwUAA4IBAQB5U/UaioCD6SvSb1B5EesfwIWB9OTaKNOLB+LSLaB1 FZCv/A1qG5nXvrCVqm58yBQMBdNf3YcA+5unhwCI2dR2AgLR/808SWcd0F8/4MdW qs+gw35ktFmAg8OTUmKa8f2WvCyDSoLn3PkZIczVB95tjCN3Vu/5MZYrSpahron7 pir6wtn3Hd+kgudOlW9kCkWvugXR8mPmOmOaEqCnN+EeoiSVlg5iMORcLe5/G5nC HN8v9zPXjqHC5fywkVrA8Xm/j3fnLeJHvfiABU1Kzugj3mMsYyPzp2yoPMoOMI6W nMCLcniaibgoFfwtn3CkLhfqc06b8n4GW8QQJ2hWcjY5 -----END CERTIFICATE-----Generated at Sat Jan 10 04:11:45 2026 by rpki-client