This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa File: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (raw, json) Hash identifier: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78= Subject key identifier: DA:23:B1:BE:D2:C9:46:6A:9E:08:2B:3A:8E:C0:42:9E:1B:26:B8:C9 Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c Certificate serial: 019B7EA585C738A1302DC9D2ECA9FC2B9F12 Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41075 IP address blocks: 95.140.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:85:c7:38:a1:30:2d:c9:d2:ec:a9:fc:2b:9f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da23b1bed2c9466a9e082b3a8ec0429e1b26b8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:3b:52:9f:38:63:bd:23:82:dc:67:86:84: 9c:03:a5:2e:ce:e7:06:23:5a:75:31:16:c8:b0:e7: 5b:54:1c:34:d0:87:17:93:0b:75:ca:b7:3b:f1:f5: fb:91:e8:1d:27:b1:e4:ca:34:70:7a:c4:d5:6d:68: b3:00:45:76:96:65:32:31:06:08:b8:f3:60:41:75: 37:63:f5:40:17:d7:c5:0c:f7:bd:7d:06:41:04:1b: 03:17:9e:fb:d2:6d:3f:63:63:e3:c3:3f:e0:ab:e3: 6b:d0:70:4d:ff:07:94:a7:3e:9e:3c:cf:03:a2:e2: d5:8c:33:bf:6f:1c:f3:f4:d5:e7:4b:c4:83:e2:58: a7:2e:fc:cf:a3:04:26:95:fb:2a:3f:c2:6c:79:87: 27:86:09:fb:2d:cc:65:e4:fc:53:05:5c:78:f5:42: 63:ea:d5:de:30:c2:e7:6c:dd:47:54:89:2d:9c:e0: 49:42:4f:5f:ba:e6:9a:96:a8:04:83:ad:e7:db:71: 31:e1:2d:bd:13:31:a9:0f:f7:a1:51:4a:6e:6a:fe: 71:f6:65:46:b3:9a:6d:15:fe:12:dc:05:37:26:17: ec:ca:00:9e:ae:e1:c2:1e:69:83:73:87:58:3a:85: d6:62:32:c1:63:f1:29:32:f4:85:91:f9:19:dd:4c: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:B1:BE:D2:C9:46:6A:9E:08:2B:3A:8E:C0:42:9E:1B:26:B8:C9 X509v3 Authority Key Identifier: keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.33.0/24 Signature Algorithm: sha256WithRSAEncryption b2:7e:4b:dc:88:59:db:12:3c:5f:17:ef:2b:e2:51:5a:36:59: 11:cd:ca:bd:5a:6d:9f:88:4b:28:24:65:8c:ae:d3:2e:c3:87: 91:64:47:b0:60:16:ad:b1:77:94:df:74:14:07:19:ac:94:16: 62:e7:bb:84:94:3d:e5:8a:93:7a:96:9b:be:88:f1:99:42:f0: ca:f2:01:58:cf:f2:8a:ab:ae:73:c5:28:dd:2d:6f:74:62:e3: ed:3c:35:60:30:80:5a:8d:2d:29:7a:9c:7c:e5:fe:3d:c0:37: 6b:e6:35:26:13:d1:42:5c:f2:dd:d9:82:b3:dc:ca:09:05:fd: 69:b1:d7:64:8d:5c:77:57:dc:62:40:38:0c:6a:79:ab:2e:58: 6b:36:65:62:bc:e6:d6:05:35:3b:7e:67:36:77:2c:6f:bd:1b: 94:33:62:94:d8:41:a5:69:51:12:42:bf:40:c5:97:24:b3:c0: 6c:dc:fb:09:85:de:db:19:1f:42:8a:80:17:3e:23:40:d4:3e: cd:68:3a:68:5c:55:f8:46:ff:53:5e:be:1a:28:af:b9:0a:c9: 99:46:77:42:da:22:da:d3:5c:41:ee:af:6a:48:f7:8c:7a:40: 78:34:44:bb:d0:a3:15:68:2b:d2:e0:50:42:bb:7a:75:d7:51: 18:cb:40:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pYXHOKEwLcnS7Kn8K58SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5 ZjAzOGMwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTIzYjFiZWQyYzk0NjZhOWUwODJiM2E4ZWMwNDI5ZTFiMjZiOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglA7Up84Y70jgtxnhoScA6UuzucG I1p1MRbIsOdbVBw00IcXkwt1yrc78fX7kegdJ7HkyjRwesTVbWizAEV2lmUyMQYI uPNgQXU3Y/VAF9fFDPe9fQZBBBsDF5770m0/Y2Pjwz/gq+Nr0HBN/weUpz6ePM8D ouLVjDO/bxzz9NXnS8SD4linLvzPowQmlfsqP8JseYcnhgn7Lcxl5PxTBVx49UJj 6tXeMMLnbN1HVIktnOBJQk9fuuaalqgEg63n23Ex4S29EzGpD/ehUUpuav5x9mVG s5ptFf4S3AU3JhfsygCeruHCHmmDc4dYOoXWYjLBY/EpMvSFkfkZ3UzFgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNojsb7SyUZqnggrOo7AQp4bJrjJMB8GA1UdIwQY MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt NmUzMDc0YzZjNjYzLzEvMmlPeHZ0TEpSbXFlQ0NzNmpzQkNuaHNtdU1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4whMA0G CSqGSIb3DQEBCwUAA4IBAQCyfkvciFnbEjxfF+8r4lFaNlkRzcq9Wm2fiEsoJGWM rtMuw4eRZEewYBatsXeU33QUBxmslBZi57uElD3lipN6lpu+iPGZQvDK8gFYz/KK q65zxSjdLW90YuPtPDVgMIBajS0pepx85f49wDdr5jUmE9FCXPLd2YKz3MoJBf1p sddkjVx3V9xiQDgManmrLlhrNmVivObWBTU7fmc2dyxvvRuUM2KU2EGlaVESQr9A xZcks8Bs3PsJhd7bGR9CioAXPiNA1D7NaDpoXFX4Rv9TXr4aKK+5CsmZRndC2iLa 01xB7q9qSPeMekB4NES70KMVaCvS4FBCu3p111EYy0AR -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:05 2026 by rpki-client