This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Rgt1RsvQJPdLOePkuMshYBBOBtg.roa File: Rgt1RsvQJPdLOePkuMshYBBOBtg.roa (raw, json) Hash identifier: n7Gn0sB1wSncZhYmpDfhUUveqEhXUCnQp3QAhSqh+L4= Subject key identifier: 46:0B:75:46:CB:D0:24:F7:4B:39:E3:E4:B8:CB:21:60:10:4E:06:D8 Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Certificate serial: 019B26C6A0419CFDD08EF3D347F24E0628E4 Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Rgt1RsvQJPdLOePkuMshYBBOBtg.roa Signing time: Tue 16 Dec 2025 10:48:29 +0000 ROA not before: Tue 16 Dec 2025 10:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20546 IP address blocks: 195.253.64.0/22 maxlen: 24 195.253.94.0/24 maxlen: 24 195.253.118.0/24 maxlen: 24 2a01:5b0:4::/46 maxlen: 48 2a01:5b0:16::/48 maxlen: 48 2a01:5b0:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:c6:a0:41:9c:fd:d0:8e:f3:d3:47:f2:4e:06:28:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Validity Not Before: Dec 16 10:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=460b7546cbd024f74b39e3e4b8cb2160104e06d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:25:47:09:82:86:df:d3:db:94:67:1f:d1: d5:82:7a:65:a2:a3:72:ba:72:84:71:0f:d7:6e:be: 3b:a2:22:f2:0e:a3:01:5d:8e:1d:4f:62:89:92:3f: fc:26:46:3d:4d:cc:b1:cb:fe:51:f8:5d:27:d9:7f: ae:02:8d:87:ba:b5:20:4a:f9:19:02:d4:71:68:e3: b9:79:e3:b8:9d:5b:ea:8a:40:5c:f0:b0:68:d2:33: 9d:46:fb:36:c9:27:8f:92:41:c5:0d:10:b0:39:65: ff:ed:ce:fc:35:e2:bd:f0:00:a5:ae:5a:b9:7e:59: 32:48:28:74:d7:1d:93:8f:b5:ae:85:f6:a2:26:85: c3:30:8a:e6:83:4f:af:e5:bc:a4:2d:40:3d:3f:96: 11:9c:1c:23:1e:c4:73:c6:b6:c6:49:b5:63:75:b6: 8b:34:44:da:ca:36:55:81:3e:f9:5a:5f:0b:25:04: 3f:86:96:dd:1d:38:f0:f8:51:6f:27:48:bb:2d:1e: 88:a2:0e:2c:b3:65:66:85:c9:3d:14:79:d3:2e:d2: 7f:98:6e:9f:b8:76:c2:78:6f:54:1a:0e:b3:c5:b4: f0:dc:61:0f:0e:30:2e:40:60:3c:7e:7a:16:92:9c: 2b:d7:f7:24:87:4d:5a:d9:9d:d4:18:27:01:02:f0: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:75:46:CB:D0:24:F7:4B:39:E3:E4:B8:CB:21:60:10:4E:06:D8 X509v3 Authority Key Identifier: keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Rgt1RsvQJPdLOePkuMshYBBOBtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.253.64.0/22 195.253.94.0/24 195.253.118.0/24 IPv6: 2a01:5b0:4::/46 2a01:5b0:16::/48 2a01:5b0:36::/48 Signature Algorithm: sha256WithRSAEncryption 49:b8:02:b5:1f:15:80:82:18:bf:0c:a3:22:18:d3:c6:3b:69: e4:e9:30:5c:3b:74:1a:3c:22:19:02:73:e7:08:79:dd:dd:db: 84:37:08:b8:ee:47:9e:26:c6:f4:e2:50:3a:61:46:6f:75:fa: 2a:84:e1:ba:a1:1f:97:63:a5:d7:eb:b3:47:20:46:94:5f:7b: 85:65:4f:42:27:76:d1:c4:13:5b:a2:f5:09:30:81:de:c5:bf: 6f:ea:bd:b4:4c:e6:e7:1a:c0:e8:fa:fc:81:21:76:28:3d:f2: 54:b8:b2:00:e6:43:d3:b7:45:a5:65:eb:76:b0:94:9f:94:91: 82:c8:50:63:06:56:bb:c9:c9:cc:1e:a5:6b:1a:17:8c:7c:19: 9a:a2:32:54:3d:15:ad:b0:41:4b:e0:b2:2b:da:f4:d5:57:84: c8:1b:f4:d7:90:19:d1:22:5d:37:11:35:c0:6c:db:ad:99:06: 34:de:5c:5b:91:cd:8c:68:6b:40:f0:e2:fb:9e:75:c0:bc:e8: be:8e:af:af:80:73:27:c7:00:09:2c:8e:b5:a7:68:67:83:52: d2:42:d5:c6:2a:e2:a8:8f:31:06:60:e2:48:69:75:c7:a4:6c: 12:d0:d1:bd:c5:fb:37:6d:f7:66:c5:2d:0f:15:5a:90:6e:2a: 4e:e7:f0:ff -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZsmxqBBnP3QjvPTR/JOBijkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk ODViMzAwHhcNMjUxMjE2MTA0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBiNzU0NmNiZDAyNGY3NGIzOWUzZTRiOGNiMjE2MDEwNGUwNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNUlRwmCht/T25RnH9HVgnploqNy unKEcQ/Xbr47oiLyDqMBXY4dT2KJkj/8JkY9Tcyxy/5R+F0n2X+uAo2HurUgSvkZ AtRxaOO5eeO4nVvqikBc8LBo0jOdRvs2ySePkkHFDRCwOWX/7c78NeK98AClrlq5 flkySCh01x2Tj7WuhfaiJoXDMIrmg0+v5bykLUA9P5YRnBwjHsRzxrbGSbVjdbaL NETayjZVgT75Wl8LJQQ/hpbdHTjw+FFvJ0i7LR6Iog4ss2Vmhck9FHnTLtJ/mG6f uHbCeG9UGg6zxbTw3GEPDjAuQGA8fnoWkpwr1/ckh01a2Z3UGCcBAvB1GwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFEYLdUbL0CT3Sznj5LjLIWAQTgbYMB8GA1UdIwQY MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt MDYzY2U2Y2Y0NjBkLzEvUmd0MVJzdlFKUGRMT2VQa3VNc2hZQkJPQnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQCw/1AAwQA w/1eAwQAw/12MCEEAgACMBsDBwIqAQWwAAQDBwAqAQWwABYDBwAqAQWwADYwDQYJ KoZIhvcNAQELBQADggEBAEm4ArUfFYCCGL8MoyIY08Y7aeTpMFw7dBo8IhkCc+cI ed3d24Q3CLjuR54mxvTiUDphRm91+iqE4bqhH5djpdfrs0cgRpRfe4VlT0IndtHE E1ui9Qkwgd7Fv2/qvbRM5ucawOj6/IEhdig98lS4sgDmQ9O3RaVl63awlJ+UkYLI UGMGVrvJycwepWsaF4x8GZqiMlQ9Fa2wQUvgsiva9NVXhMgb9NeQGdEiXTcRNcBs 262ZBjTeXFuRzYxoa0Dw4vuedcC86L6Or6+AcyfHAAksjrWnaGeDUtJC1cYq4qiP MQZg4khpdcekbBLQ0b3F+zdt92bFLQ8VWpBuKk7n8P8= -----END CERTIFICATE-----Generated at Sat Dec 20 12:05:25 2025 by rpki-client