This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa File: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (raw, json) Hash identifier: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0= Subject key identifier: 63:E1:24:C4:85:B3:84:CC:3C:25:60:D2:C5:46:41:C4:D3:A4:B4:07 Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27 Certificate serial: 019B7BA32261F3A7F23490095155AFB3F1F9 Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210579 IP address blocks: 95.141.255.0/24 maxlen: 24 2a13:46c0::/32 maxlen: 48 2a13:46c1::/32 maxlen: 40 2a13:46c1:100::/48 maxlen: 48 2a13:46c1:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:22:61:f3:a7:f2:34:90:09:51:55:af:b3:f1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e124c485b384cc3c2560d2c54641c4d3a4b407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:98:eb:08:39:88:d1:80:ae:a4:7b:58:f7:be: 12:52:42:07:22:82:ee:cd:63:c5:57:91:8c:e8:32: 60:40:dc:98:bb:b1:ab:55:80:8d:71:06:08:94:66: 87:0b:be:a0:9c:c6:e0:5a:a8:67:d8:b6:c3:82:ee: f4:59:f0:62:9f:d6:08:b7:a4:4e:03:ad:04:9a:7f: 30:d1:cf:18:3f:d0:ce:fd:03:77:b4:e4:f6:77:83: 75:d2:28:eb:ad:60:8d:67:70:91:35:19:1b:07:b1: 40:dd:6d:e4:3b:71:33:ad:72:cf:03:24:95:a4:80: 06:24:88:ae:41:32:63:bb:e7:d5:b8:8f:fe:ae:31: 5f:64:e3:85:8b:f7:bd:68:3b:10:9c:fb:89:cd:8b: 34:76:91:17:09:30:8d:69:34:e9:19:3a:47:4e:c7: 1b:83:cd:b0:8f:ee:b6:ff:c5:54:bf:ce:93:eb:28: 18:7c:d5:a4:1e:4b:ca:4e:ee:ba:16:d9:dd:90:12: 0a:a5:54:f9:f3:ae:89:0c:01:96:17:a2:91:15:1d: b8:8b:ad:2d:33:fe:dc:4a:ed:3e:eb:a4:48:01:90: 89:20:7a:95:79:e6:a9:25:48:ea:05:19:38:6f:91: 47:ba:27:0f:f3:b3:b7:e4:b1:27:f0:ed:c3:bd:c0: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E1:24:C4:85:B3:84:CC:3C:25:60:D2:C5:46:41:C4:D3:A4:B4:07 X509v3 Authority Key Identifier: keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.255.0/24 IPv6: 2a13:46c0::/31 Signature Algorithm: sha256WithRSAEncryption 8d:d9:57:7a:ab:44:72:09:93:e0:69:2e:70:99:04:ce:99:a0: 4f:50:1f:aa:be:cc:d2:97:4d:fb:57:9c:73:94:6a:2f:a4:e3: bf:80:87:15:92:05:72:59:b1:06:c0:47:4a:2b:23:eb:e3:7d: cc:6f:59:a3:c8:e1:b5:6e:eb:a7:8a:a6:55:cc:e7:e2:1a:3c: b3:55:d9:60:52:5e:63:e0:13:44:f0:78:60:dd:1c:1c:b7:a7: 51:c0:23:5d:f9:2e:11:97:28:3a:8e:a1:04:43:f9:15:6b:de: e0:20:c5:39:cd:88:7f:fc:02:b8:59:06:34:5b:84:0c:a7:4e: dc:a1:52:1c:08:a0:92:c7:c3:ee:15:c0:f7:b1:81:19:00:92: 8d:a8:bd:63:67:2b:eb:d6:b2:68:7d:6d:7b:af:ab:89:36:40: cf:3f:7a:29:87:cb:fa:20:ef:35:1d:6e:54:1d:41:fc:f5:52: f7:b3:4e:1b:a1:6a:00:37:fe:bd:13:97:e8:61:cc:e0:ef:16: c1:d4:45:48:af:0c:04:d7:1c:ba:b3:f2:79:4a:db:dd:ea:3f: 25:a6:1a:13:9f:d9:9a:20:d8:65:7f:e3:f5:c8:af:b7:d8:ae: ec:75:16:79:c8:69:cd:2c:f1:ec:ae:c0:4a:8f:27:70:fa:c4: 06:99:0a:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7oyJh86fyNJAJUVWvs/H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl NjhiMjcwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2UxMjRjNDg1YjM4NGNjM2MyNTYwZDJjNTQ2NDFjNGQzYTRiNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75jrCDmI0YCupHtY974SUkIHIoLu zWPFV5GM6DJgQNyYu7GrVYCNcQYIlGaHC76gnMbgWqhn2LbDgu70WfBin9YIt6RO A60Emn8w0c8YP9DO/QN3tOT2d4N10ijrrWCNZ3CRNRkbB7FA3W3kO3EzrXLPAySV pIAGJIiuQTJju+fVuI/+rjFfZOOFi/e9aDsQnPuJzYs0dpEXCTCNaTTpGTpHTscb g82wj+62/8VUv86T6ygYfNWkHkvKTu66FtndkBIKpVT5866JDAGWF6KRFR24i60t M/7cSu0+66RIAZCJIHqVeeapJUjqBRk4b5FHuicP87O35LEn8O3DvcCZjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGPhJMSFs4TMPCVg0sVGQcTTpLQHMB8GA1UdIwQY MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt YTc5ZGExYTg1NTEzLzEvWS1Fa3hJV3poTXc4SldEU3hVWkJ4Tk9rdEFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAX43/MA0E AgACMAcDBQEqE0bAMA0GCSqGSIb3DQEBCwUAA4IBAQCN2Vd6q0RyCZPgaS5wmQTO maBPUB+qvszSl037V5xzlGovpOO/gIcVkgVyWbEGwEdKKyPr433Mb1mjyOG1buun iqZVzOfiGjyzVdlgUl5j4BNE8Hhg3Rwct6dRwCNd+S4Rlyg6jqEEQ/kVa97gIMU5 zYh//AK4WQY0W4QMp07coVIcCKCSx8PuFcD3sYEZAJKNqL1jZyvr1rJofW17r6uJ NkDPP3oph8v6IO81HW5UHUH89VL3s04boWoAN/69E5foYczg7xbB1EVIrwwE1xy6 s/J5Stvd6j8lphoTn9maINhlf+P1yK+32K7sdRZ5yGnNLPHsrsBKjydw+sQGmQoh -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:04 2026 by rpki-client