This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/v7WK2lv4NP6ktcqIaiZjU2fPO4s.roa File: v7WK2lv4NP6ktcqIaiZjU2fPO4s.roa (raw, json) Hash identifier: 1Q6kdoH3sJ2zRVbSObh3XBbihkhAx7y4jrDBOt34DYo= Subject key identifier: BF:B5:8A:DA:5B:F8:34:FE:A4:B5:CA:88:6A:26:63:53:67:CF:3B:8B Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8464D3EC0CBE8B155DC5D82F910630 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/v7WK2lv4NP6ktcqIaiZjU2fPO4s.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49027 IP address blocks: 195.33.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:64:d3:ec:0c:be:8b:15:5d:c5:d8:2f:91:06:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfb58ada5bf834fea4b5ca886a26635367cf3b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:fe:76:42:ac:af:ab:10:57:57:02:b2:d3: 9b:35:64:e8:28:54:3e:8b:bb:62:30:2c:75:f4:e5: c3:6e:5c:40:c8:30:94:35:e6:2a:17:6e:bf:f3:f6: 77:f1:9d:7a:20:46:5a:bf:2e:25:26:36:b0:52:b9: 91:bd:9e:e4:ca:54:d8:54:88:43:fa:42:09:48:da: ff:44:32:ef:9a:34:17:4d:b3:05:cc:56:d1:94:08: 28:d4:69:cf:6a:b1:c1:28:54:64:b2:6f:06:0d:07: 09:86:8d:33:3a:6d:5b:dd:c9:76:d5:7e:b2:cb:e1: 08:06:2d:be:cd:f7:79:8b:9d:e0:09:7c:5f:cd:14: fa:b6:b9:61:3b:34:fe:81:77:2f:9d:56:c3:58:14: 3f:f0:8d:0a:ff:42:8f:ca:49:4c:03:c3:b3:9b:55: 5b:7a:1c:48:bc:12:6f:a3:e0:f4:51:c4:d5:bb:b7: 1a:03:a8:4a:74:16:7f:68:57:fc:92:16:ad:b5:25: f2:fa:79:19:6f:66:61:0c:1b:99:29:d1:29:8f:30: 4c:4b:fe:b7:03:3c:75:01:b9:b7:61:4e:28:ed:44: 16:11:08:f2:17:9f:49:9e:b4:16:1d:8c:bd:f1:f1: 50:35:48:fc:fa:1c:89:c0:52:14:f2:3e:78:05:5d: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:8A:DA:5B:F8:34:FE:A4:B5:CA:88:6A:26:63:53:67:CF:3B:8B X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/v7WK2lv4NP6ktcqIaiZjU2fPO4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.33.202.0/24 Signature Algorithm: sha256WithRSAEncryption 35:52:b0:e4:72:21:c5:f9:98:21:0c:64:eb:1d:14:11:09:dc: 0d:ce:9f:d3:31:21:4b:46:7e:1b:d6:62:79:8f:e4:50:af:9c: d3:89:14:b8:53:f1:1a:47:39:15:d6:09:8c:9e:89:b2:fa:73: d4:33:49:d2:22:ff:22:ca:5c:e6:1f:2a:3d:6e:17:b3:59:28: aa:82:14:62:1f:ae:e0:79:21:7c:06:15:5e:60:dc:cb:78:49: 15:c1:8c:c1:13:db:0a:30:06:4b:e7:62:71:dd:8f:ac:81:a0: b9:7d:05:af:3c:29:8e:38:26:0d:20:8f:cb:9f:e2:a2:69:a4: 2d:b0:0a:60:6e:0e:a3:3b:c5:f1:5a:f2:c8:b1:ff:bd:f9:ed: db:e1:5b:74:a3:fd:6a:1c:74:8f:79:d3:a2:43:44:ca:9c:2f: 23:4e:74:9f:70:71:e8:b2:38:d4:71:c2:ac:63:bd:2b:67:f3: 4f:ed:97:8b:c0:e6:27:56:57:25:65:0b:bf:f2:95:9b:e3:82: 18:22:8b:d2:20:06:1d:c9:a5:14:f5:cd:92:a0:f5:57:35:8a: 7b:d5:6d:8c:59:b9:63:eb:ea:df:92:f0:9d:a5:6d:3d:68:a3: e1:a8:5e:8d:c2:cf:80:50:9a:7e:3d:ec:d0:ea:cf:f7:40:31: a0:52:db:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGTT7Ay+ixVdxdgvkQYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmI1OGFkYTViZjgzNGZlYTRiNWNhODg2YTI2NjM1MzY3Y2YzYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ij+dkKsr6sQV1cCstObNWToKFQ+ i7tiMCx19OXDblxAyDCUNeYqF26/8/Z38Z16IEZavy4lJjawUrmRvZ7kylTYVIhD +kIJSNr/RDLvmjQXTbMFzFbRlAgo1GnParHBKFRksm8GDQcJho0zOm1b3cl21X6y y+EIBi2+zfd5i53gCXxfzRT6trlhOzT+gXcvnVbDWBQ/8I0K/0KPyklMA8Ozm1Vb ehxIvBJvo+D0UcTVu7caA6hKdBZ/aFf8khattSXy+nkZb2ZhDBuZKdEpjzBMS/63 Azx1Abm3YU4o7UQWEQjyF59JnrQWHYy98fFQNUj8+hyJwFIU8j54BV1iXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+1itpb+DT+pLXKiGomY1NnzzuLMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvdjdXSzJsdjROUDZrdGNxSWFpWmpVMmZQTzRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyHKMA0G CSqGSIb3DQEBCwUAA4IBAQA1UrDkciHF+ZghDGTrHRQRCdwNzp/TMSFLRn4b1mJ5 j+RQr5zTiRS4U/EaRzkV1gmMnomy+nPUM0nSIv8iylzmHyo9bhezWSiqghRiH67g eSF8BhVeYNzLeEkVwYzBE9sKMAZL52Jx3Y+sgaC5fQWvPCmOOCYNII/Ln+KiaaQt sApgbg6jO8XxWvLIsf+9+e3b4Vt0o/1qHHSPedOiQ0TKnC8jTnSfcHHosjjUccKs Y70rZ/NP7ZeLwOYnVlclZQu/8pWb44IYIovSIAYdyaUU9c2SoPVXNYp71W2MWblj 6+rfkvCdpW09aKPhqF6Nws+AUJp+PezQ6s/3QDGgUtsQ -----END CERTIFICATE-----Generated at Thu Jan 8 13:45:28 2026 by rpki-client