This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/e0dgq9Xhgse0R4bj80TVupAtpHw.roa File: e0dgq9Xhgse0R4bj80TVupAtpHw.roa (raw, json) Hash identifier: UhSpFrBBiQsPvJGPY2abaeBtDnP7c1J1dWqODlHmS/A= Subject key identifier: 7B:47:60:AB:D5:E1:82:C7:B4:47:86:E3:F3:44:D5:BA:90:2D:A4:7C Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Certificate serial: 019B7F8327EEBC89A23739A2C52D5EAE14EB Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/e0dgq9Xhgse0R4bj80TVupAtpHw.roa Signing time: Fri 02 Jan 2026 16:21:00 +0000 ROA not before: Fri 02 Jan 2026 16:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215487 IP address blocks: 95.85.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:27:ee:bc:89:a2:37:39:a2:c5:2d:5e:ae:14:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Validity Not Before: Jan 2 16:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b4760abd5e182c7b44786e3f344d5ba902da47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:93:76:00:c7:44:2a:96:18:b5:86:e7:aa: 6a:00:fb:6b:14:a1:9e:5d:2c:67:eb:3d:84:40:db: 21:c2:ae:13:28:f8:ae:4a:f8:71:47:b8:6c:83:ac: 1b:c9:c3:03:df:b9:09:3b:f7:15:af:cf:a7:b2:4c: 68:1b:23:65:80:65:15:f2:d9:4c:39:00:f8:13:32: 01:2c:f8:13:06:8c:b8:e3:cc:06:c9:c1:39:3c:44: 9e:9c:64:3b:fb:99:fd:38:44:a6:b5:f3:95:17:27: 11:cd:0f:1d:4e:93:57:7f:c8:d5:ad:99:1d:f6:a1: 5f:1d:44:77:5d:39:57:f8:d1:8c:7a:6b:3c:5d:d5: 44:17:2f:6d:c3:d7:37:80:3d:64:fc:36:ae:18:97: b2:f0:9c:17:ac:65:41:2b:ab:80:f1:2a:11:33:2d: a9:93:fe:c1:35:1a:d3:cf:31:34:44:0d:74:e2:9b: e6:8b:06:65:23:58:00:f0:7a:1e:5f:10:a0:c9:e0: 30:54:35:5e:1d:da:d0:45:cd:5a:84:09:d8:9f:3b: fd:f8:6d:9f:9e:23:a7:c6:5a:0b:40:e9:3b:c8:49: 52:94:b1:7b:03:db:b5:70:62:cb:30:23:0f:f5:51: e4:dd:8f:cf:55:85:4a:cc:7a:3c:03:a2:39:c4:96: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:47:60:AB:D5:E1:82:C7:B4:47:86:E3:F3:44:D5:BA:90:2D:A4:7C X509v3 Authority Key Identifier: keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/e0dgq9Xhgse0R4bj80TVupAtpHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.113.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:b6:43:65:44:4a:1d:0c:0a:b6:65:19:61:f0:10:aa:a1:5c: 64:17:b2:46:60:a9:75:82:a1:ce:b8:20:3a:84:3b:6f:44:a4: 0b:a6:22:a2:66:b5:4d:f3:c4:f5:a7:da:d9:ae:ef:f9:95:b0: b4:be:ce:b2:c4:ab:69:be:19:47:1a:a1:6e:1a:57:f5:04:d8: 0e:90:bd:dd:b2:e0:ee:b1:a2:33:1b:fd:22:29:27:d3:63:c4: e7:54:3a:dc:f6:fe:be:90:97:16:a5:2d:f2:40:b4:c9:cd:5d: 2e:2d:1d:68:ae:eb:01:bf:47:59:e9:0f:6f:c1:59:a1:b3:ec: 5a:0f:b9:6d:71:c9:09:c7:63:b6:ac:bf:34:b7:6b:5a:b4:8e: 3e:90:86:b1:7e:09:72:75:47:f6:91:a0:fc:1d:d2:d3:df:3b: e7:5e:ae:0a:23:f6:04:5d:a2:da:4d:90:11:2b:21:f8:62:ba: 0f:13:30:fe:dd:53:d7:88:5d:52:9d:c8:46:da:7e:cc:57:df: 22:30:2e:6f:b1:5e:61:14:af:72:86:34:be:cb:cc:8c:1a:61: 17:66:ee:df:cd:62:f9:20:b5:f7:bc:1b:84:9b:58:b0:35:93: 16:37:0c:f3:fc:5f:50:28:03:6c:ba:59:84:e1:31:3a:9b:1e: af:11:9b:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gyfuvImiNzmixS1erhTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5 NWE0ZWQwHhcNMjYwMTAyMTYyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjQ3NjBhYmQ1ZTE4MmM3YjQ0Nzg2ZTNmMzQ0ZDViYTkwMmRhNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S2TdgDHRCqWGLWG56pqAPtrFKGe XSxn6z2EQNshwq4TKPiuSvhxR7hsg6wbycMD37kJO/cVr8+nskxoGyNlgGUV8tlM OQD4EzIBLPgTBoy448wGycE5PESenGQ7+5n9OESmtfOVFycRzQ8dTpNXf8jVrZkd 9qFfHUR3XTlX+NGMems8XdVEFy9tw9c3gD1k/DauGJey8JwXrGVBK6uA8SoRMy2p k/7BNRrTzzE0RA104pvmiwZlI1gA8HoeXxCgyeAwVDVeHdrQRc1ahAnYnzv9+G2f niOnxloLQOk7yElSlLF7A9u1cGLLMCMP9VHk3Y/PVYVKzHo8A6I5xJb6hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHtHYKvV4YLHtEeG4/NE1bqQLaR8MB8GA1UdIwQY MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt MDhiZjIyZjY0MDk3LzEvZTBkZ3E5WGhnc2UwUjRiajgwVFZ1cEF0cEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3 LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1VxMA0G CSqGSIb3DQEBCwUAA4IBAQCdtkNlREodDAq2ZRlh8BCqoVxkF7JGYKl1gqHOuCA6 hDtvRKQLpiKiZrVN88T1p9rZru/5lbC0vs6yxKtpvhlHGqFuGlf1BNgOkL3dsuDu saIzG/0iKSfTY8TnVDrc9v6+kJcWpS3yQLTJzV0uLR1orusBv0dZ6Q9vwVmhs+xa D7ltcckJx2O2rL80t2tatI4+kIaxfglydUf2kaD8HdLT3zvnXq4KI/YEXaLaTZAR KyH4YroPEzD+3VPXiF1SnchG2n7MV98iMC5vsV5hFK9yhjS+y8yMGmEXZu7fzWL5 ILX3vBuEm1iwNZMWNwzz/F9QKANsulmE4TE6mx6vEZs7 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:42 2026 by rpki-client