This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/s9PnUrURA1UCKgGCXpOd5G6p8no.roa File: s9PnUrURA1UCKgGCXpOd5G6p8no.roa (raw, json) Hash identifier: e5fYovHhc28JGLHPGhUlbL9alymDaPqLYlneZlPK+cQ= Subject key identifier: B3:D3:E7:52:B5:11:03:55:02:2A:01:82:5E:93:9D:E4:6E:A9:F2:7A Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Certificate serial: 019B7DCB44B56FD819ECC561D793ECBCC6A3 Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/s9PnUrURA1UCKgGCXpOd5G6p8no.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39460 IP address blocks: 195.66.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:44:b5:6f:d8:19:ec:c5:61:d7:93:ec:bc:c6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d3e752b5110355022a01825e939de46ea9f27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:62:d7:60:52:af:86:78:64:cb:36:3c:45: 7c:94:b2:97:77:9b:44:66:47:a0:bf:96:7b:8c:1d: f2:53:5d:17:4f:84:c2:4d:0c:39:20:dc:9e:aa:87: 24:62:30:95:76:b3:95:5d:4c:e6:66:cc:e8:79:57: a8:fb:04:aa:b2:47:cc:12:e6:b8:58:21:f9:5f:bd: 76:d1:6a:37:56:a5:2b:62:82:99:5b:7f:ba:16:0b: 1f:65:ae:5f:b9:e4:06:b0:e1:34:50:8a:44:b4:a6: 36:7c:7e:12:38:d9:e3:c0:26:de:60:aa:0f:0a:19: 43:1e:ab:4f:fd:48:53:82:bc:38:36:2e:e3:76:72: d2:50:da:c7:b4:34:2a:85:74:db:72:f3:77:cf:ca: 9b:ce:a3:b2:ed:2e:c0:7c:cc:40:79:e4:45:f6:ac: 27:09:53:18:12:eb:69:fa:1e:c8:b8:bc:19:e8:fc: 87:1f:88:4c:dd:f1:b7:96:cb:d9:ba:13:fe:ef:90: d7:4e:c3:85:d6:ed:12:a8:6e:3b:97:4f:cc:f8:8f: 08:0f:31:f5:5f:22:31:2b:d6:44:71:32:b9:4c:74: cd:05:82:c2:14:79:ff:31:18:bd:05:82:cf:b5:e4: 2d:cd:d6:89:da:65:ba:4e:bc:b8:a8:34:0d:ca:a5: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D3:E7:52:B5:11:03:55:02:2A:01:82:5E:93:9D:E4:6E:A9:F2:7A X509v3 Authority Key Identifier: keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/s9PnUrURA1UCKgGCXpOd5G6p8no.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.92.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ba:a3:d9:f0:42:b7:05:69:78:e2:df:0c:53:b6:17:5a:ca: c0:59:85:0c:96:03:92:3e:13:4c:d7:cd:20:28:c7:fd:9b:45: 0f:ae:7a:09:16:57:60:85:3f:8c:ec:ff:26:22:39:8e:dc:69: 1d:72:0c:d6:0b:98:f7:27:34:04:2e:2d:df:27:02:50:10:b2: 1d:f5:7d:b4:64:14:c4:a1:93:d0:02:9f:44:25:d8:c7:60:ee: 05:d0:be:0e:95:d8:93:66:3f:1c:28:99:a7:a3:c1:fb:ba:3e: 2b:39:73:b2:70:7f:a9:a4:e5:b3:0b:2b:42:de:ef:83:46:95: e0:a4:e7:86:de:13:2a:19:71:1e:ac:98:ef:c6:44:9b:ce:7e: f7:4c:31:49:02:97:eb:1a:e1:55:65:56:28:59:e2:60:e9:7d: 30:50:68:3b:d4:4b:f2:2e:ec:c9:b3:d0:8b:d6:04:72:6d:a8: 71:e6:df:6e:00:91:a0:be:27:3e:8d:58:2b:6b:63:33:6e:ed: f7:cc:4a:84:63:26:d0:2f:f8:ff:f8:6b:59:c6:8d:21:2c:b4: ad:d2:21:2b:c6:3e:c7:c2:7a:01:a7:63:40:9c:d4:62:eb:4c: 38:27:b6:51:a9:d2:2c:a1:ac:83:6d:13:5f:07:a4:2e:26:2e: d4:6e:33:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0S1b9gZ7MVh15PsvMajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDJmYjU2YjQ1OWM3YTIxYTc5YjY4YjRlMTE4YWI4NzZm Yzk2YTUwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2QzZTc1MmI1MTEwMzU1MDIyYTAxODI1ZTkzOWRlNDZlYTlmMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mdi12BSr4Z4ZMs2PEV8lLKXd5tE Zkegv5Z7jB3yU10XT4TCTQw5INyeqockYjCVdrOVXUzmZszoeVeo+wSqskfMEua4 WCH5X7120Wo3VqUrYoKZW3+6FgsfZa5fueQGsOE0UIpEtKY2fH4SONnjwCbeYKoP ChlDHqtP/UhTgrw4Ni7jdnLSUNrHtDQqhXTbcvN3z8qbzqOy7S7AfMxAeeRF9qwn CVMYEutp+h7IuLwZ6PyHH4hM3fG3lsvZuhP+75DXTsOF1u0SqG47l0/M+I8IDzH1 XyIxK9ZEcTK5THTNBYLCFHn/MRi9BYLPteQtzdaJ2mW6Try4qDQNyqXdlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPT51K1EQNVAioBgl6TneRuqfJ6MB8GA1UdIwQY MBaAFK8C+1a0WceiGnm2i04Rirh2/JalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEt MGMxOGQ4NTk3MzI4LzEvczlQblVyVVJBMVVDS2dHQ1hwT2Q1RzZwOG5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEtMGMxOGQ4NTk3MzI4 LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JcMA0G CSqGSIb3DQEBCwUAA4IBAQAVuqPZ8EK3BWl44t8MU7YXWsrAWYUMlgOSPhNM180g KMf9m0UPrnoJFldghT+M7P8mIjmO3GkdcgzWC5j3JzQELi3fJwJQELId9X20ZBTE oZPQAp9EJdjHYO4F0L4OldiTZj8cKJmno8H7uj4rOXOycH+ppOWzCytC3u+DRpXg pOeG3hMqGXEerJjvxkSbzn73TDFJApfrGuFVZVYoWeJg6X0wUGg71EvyLuzJs9CL 1gRybahx5t9uAJGgvic+jVgra2Mzbu33zEqEYybQL/j/+GtZxo0hLLSt0iErxj7H wnoBp2NAnNRi60w4J7ZRqdIsoayDbRNfB6QuJi7UbjN7 -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:55 2026 by rpki-client