This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Dq990uZpkEzxvs2VsVuNtI4l4lY.roa File: Dq990uZpkEzxvs2VsVuNtI4l4lY.roa (raw, json) Hash identifier: /bnOc9UJWCKYby/I6KChONM6JKbFpElLJ50a5fNgyZ8= Subject key identifier: 0E:AF:7D:D2:E6:69:90:4C:F1:BE:CD:95:B1:5B:8D:B4:8E:25:E2:56 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F2A50652C1589B8CCAC21CE54F55 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Dq990uZpkEzxvs2VsVuNtI4l4lY.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200923 IP address blocks: 95.140.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:a5:06:52:c1:58:9b:8c:ca:c2:1c:e5:4f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eaf7dd2e669904cf1becd95b15b8db48e25e256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:05:b0:18:6f:ee:6b:d0:2a:e0:15:4c:d8: db:fb:2a:f4:7c:b6:d6:23:9d:06:95:21:b0:91:5a: d5:b6:a7:5e:5a:a2:aa:cf:cd:e7:03:09:3b:5d:0c: 9e:ef:09:f5:53:5a:1f:09:c6:21:e4:4f:78:68:69: dc:07:51:ec:be:2a:b2:5e:3b:8a:6a:d5:32:74:11: 1f:84:b7:98:24:fe:cc:02:7c:32:f6:93:89:00:33: 63:78:b6:f1:d8:77:2f:99:a8:65:0a:1f:95:eb:fa: a5:b8:9d:e6:6a:21:db:c4:cf:de:a3:fc:58:b8:da: c9:88:b4:aa:73:05:97:b4:cd:69:40:89:c8:dc:cf: fa:10:99:b3:69:24:6d:8f:87:47:b6:28:f8:b0:55: 5a:fa:25:fe:d9:e7:76:a7:62:20:dc:62:ac:3b:a8: 22:d7:55:59:8f:51:9f:db:14:dc:0a:f1:99:b4:95: 21:10:ab:4d:11:d9:78:44:9a:ae:97:f2:1a:48:c2: 8c:63:80:0a:ce:1e:b9:e6:9c:9e:a4:27:77:e8:f6: cc:f1:66:10:a1:57:71:8d:07:aa:52:42:85:87:e4: 42:71:dd:c4:b8:7a:42:e0:33:94:88:ba:3c:10:c8: ce:de:f4:74:e6:b2:8f:0f:d7:1c:9d:41:99:1f:de: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:7D:D2:E6:69:90:4C:F1:BE:CD:95:B1:5B:8D:B4:8E:25:E2:56 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Dq990uZpkEzxvs2VsVuNtI4l4lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.123.0/24 Signature Algorithm: sha256WithRSAEncryption 58:49:1f:a6:b0:41:6c:7b:0f:fa:24:4d:5f:7f:9b:d0:49:0c: 0f:e2:d3:f4:c5:be:82:fc:85:4e:5c:ba:a8:1b:85:5c:8d:bc: 5f:7d:bd:10:2f:6a:a7:19:b0:25:57:3e:81:53:97:fd:9b:c6: 3f:aa:be:b3:c7:c4:58:88:37:0e:d6:9d:46:66:46:a5:b3:ee: c0:54:cc:30:3d:30:91:21:18:47:e5:c8:cd:dc:76:d3:a0:2d: 9b:bd:06:d8:ba:59:26:40:94:66:4d:5b:1e:7d:7c:30:0f:ad: 60:e3:2a:42:52:91:39:45:a4:0b:de:e3:d9:ba:e3:d9:13:87: 85:87:03:ae:e4:bd:47:e7:82:9a:ae:b6:39:a7:de:8d:f2:ed: 8d:50:cf:de:e8:fd:18:e3:f9:d7:0b:5f:37:0c:8c:cf:5e:0d: f3:2a:3c:67:3f:e8:05:cf:b5:f3:bb:bd:4a:28:a7:79:db:76: 48:18:c4:5a:75:55:04:73:9c:e9:25:c0:87:60:cc:fa:5f:9c: 05:44:9d:ee:59:78:34:4d:e9:0a:41:3a:82:bd:8a:0f:74:01: ce:62:eb:2a:f9:fc:61:be:0f:fb:35:cb:c7:69:5d:6e:32:ac: 46:91:15:e1:68:a5:bc:dc:14:ae:2c:33:14:26:33:ca:20:d2: e8:85:3c:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvKlBlLBWJuMysIc5U9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWFmN2RkMmU2Njk5MDRjZjFiZWNkOTViMTViOGRiNDhlMjVlMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcUFsBhv7mvQKuAVTNjb+yr0fLbW I50GlSGwkVrVtqdeWqKqz83nAwk7XQye7wn1U1ofCcYh5E94aGncB1HsviqyXjuK atUydBEfhLeYJP7MAnwy9pOJADNjeLbx2HcvmahlCh+V6/qluJ3maiHbxM/eo/xY uNrJiLSqcwWXtM1pQInI3M/6EJmzaSRtj4dHtij4sFVa+iX+2ed2p2Ig3GKsO6gi 11VZj1Gf2xTcCvGZtJUhEKtNEdl4RJqul/IaSMKMY4AKzh655pyepCd36PbM8WYQ oVdxjQeqUkKFh+RCcd3EuHpC4DOUiLo8EMjO3vR05rKPD9ccnUGZH95q0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6vfdLmaZBM8b7NlbFbjbSOJeJWMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvRHE5OTB1WnBrRXp4dnMyVnNWdU50STRsNGxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4x7MA0G CSqGSIb3DQEBCwUAA4IBAQBYSR+msEFsew/6JE1ff5vQSQwP4tP0xb6C/IVOXLqo G4Vcjbxffb0QL2qnGbAlVz6BU5f9m8Y/qr6zx8RYiDcO1p1GZkals+7AVMwwPTCR IRhH5cjN3HbToC2bvQbYulkmQJRmTVsefXwwD61g4ypCUpE5RaQL3uPZuuPZE4eF hwOu5L1H54KarrY5p96N8u2NUM/e6P0Y4/nXC183DIzPXg3zKjxnP+gFz7Xzu71K KKd523ZIGMRadVUEc5zpJcCHYMz6X5wFRJ3uWXg0TekKQTqCvYoPdAHOYusq+fxh vg/7NcvHaV1uMqxGkRXhaKW83BSuLDMUJjPKINLohTws -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:51 2026 by rpki-client