This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/5z8L94SxohW89feZF-x7UUHOUGw.roa File: 5z8L94SxohW89feZF-x7UUHOUGw.roa (raw, json) Hash identifier: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo= Subject key identifier: E7:3F:0B:F7:84:B1:A2:15:BC:F5:F7:99:17:EC:7B:51:41:CE:50:6C Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B7C1299AD5C9D2EE58028F47418A2A72D Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/5z8L94SxohW89feZF-x7UUHOUGw.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47969 IP address blocks: 45.95.112.0/24 maxlen: 24 45.158.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:99:ad:5c:9d:2e:e5:80:28:f4:74:18:a2:a7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73f0bf784b1a215bcf5f79917ec7b5141ce506c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:ce:ac:76:59:9e:c5:04:84:4c:86:31:bb: 02:9d:fb:fa:d0:cb:88:a6:73:8f:e1:7a:86:16:a9: 96:3a:8e:39:0b:08:45:53:de:22:2a:7c:98:a5:e4: 97:46:ed:48:45:9a:09:73:fa:5b:a6:31:ed:18:9d: da:c8:f4:b6:6c:01:bd:f2:e1:2f:52:56:79:30:80: 67:88:84:92:a9:70:f1:7b:d7:42:f3:2a:fb:8a:17: 65:db:f0:5e:50:95:d2:98:3a:60:60:94:0a:e3:3b: 11:13:95:c3:5d:4d:c3:ee:9e:49:0f:b7:6d:ec:ea: 39:9a:8b:81:94:64:7b:ea:bb:02:38:67:16:55:8a: c1:02:60:5f:02:f4:3d:d1:04:45:01:19:56:e3:03: 79:e6:a3:fd:24:f6:bf:22:e9:f5:fa:ed:66:ca:a4: 96:7e:6e:00:91:cd:79:f2:17:cf:ee:e1:50:49:4f: ec:d7:94:23:6e:3b:25:d7:24:72:ae:58:8d:2e:5d: be:d2:86:92:68:4d:5c:22:52:ac:d8:15:97:8d:25: 9c:c0:66:a8:2d:ee:17:eb:b7:45:62:4d:b3:71:80: 5b:a7:73:61:d0:3c:21:68:bb:ea:c8:39:a3:de:c3: a1:a8:61:89:f3:2f:34:99:c5:bc:b9:07:bc:ce:3c: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:0B:F7:84:B1:A2:15:BC:F5:F7:99:17:EC:7B:51:41:CE:50:6C X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/5z8L94SxohW89feZF-x7UUHOUGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.112.0/24 45.158.78.0/23 Signature Algorithm: sha256WithRSAEncryption 24:30:de:7a:71:ae:3d:2b:0e:6e:3a:c8:2b:8e:ee:87:a8:97: 58:ce:8c:28:26:32:ee:59:93:36:bb:dd:73:f6:f7:ce:4a:6a: 45:82:47:80:bc:80:c0:99:01:c6:9d:2b:29:7f:a7:d8:ae:cb: 16:2c:48:d7:c0:67:b0:13:c4:3b:f1:02:1c:98:0c:c3:4e:65: de:cb:85:4b:e6:7c:82:86:fc:a9:43:11:9f:99:40:c9:2c:d3: 1a:21:c7:c9:ce:47:1a:a2:a7:cd:64:df:46:e7:2a:de:bc:dc: 6a:00:d2:df:fa:2e:f8:0c:98:e7:c4:0a:ff:52:ed:70:8d:32: d5:67:d8:65:c9:9d:54:22:23:a3:30:f1:4d:aa:5f:57:46:4f: 31:70:3c:eb:f6:15:2f:ac:a2:ed:52:8b:af:52:4b:33:2b:55: 48:05:b8:1e:bc:7b:d2:63:83:43:63:cd:f4:34:6b:fd:c9:35: 21:4b:fb:41:a1:60:a6:61:0d:73:49:fb:4f:9a:6f:4c:11:b5: c5:0c:2c:60:b6:bc:17:1b:61:dd:12:51:db:81:bc:94:9a:c9: b0:f6:e5:72:dd:cd:34:d5:49:05:f8:3c:f2:ce:26:22:06:f0: 51:bf:83:ea:71:9c:69:a3:b7:07:75:96:71:33:af:d9:12:dc: 0c:24:a4:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EpmtXJ0u5YAo9HQYoqctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNmMGJmNzg0YjFhMjE1YmNmNWY3OTkxN2VjN2I1MTQxY2U1MDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9bOrHZZnsUEhEyGMbsCnfv60MuI pnOP4XqGFqmWOo45CwhFU94iKnyYpeSXRu1IRZoJc/pbpjHtGJ3ayPS2bAG98uEv UlZ5MIBniISSqXDxe9dC8yr7ihdl2/BeUJXSmDpgYJQK4zsRE5XDXU3D7p5JD7dt 7Oo5mouBlGR76rsCOGcWVYrBAmBfAvQ90QRFARlW4wN55qP9JPa/Iun1+u1myqSW fm4Akc158hfP7uFQSU/s15Qjbjsl1yRyrliNLl2+0oaSaE1cIlKs2BWXjSWcwGao Le4X67dFYk2zcYBbp3Nh0DwhaLvqyDmj3sOhqGGJ8y80mcW8uQe8zjxIeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOc/C/eEsaIVvPX3mRfse1FBzlBsMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvNXo4TDk0U3hvaFc4OWZlWkYteDdVVUhPVUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV9wAwQB LZ5OMA0GCSqGSIb3DQEBCwUAA4IBAQAkMN56ca49Kw5uOsgrju6HqJdYzowoJjLu WZM2u91z9vfOSmpFgkeAvIDAmQHGnSspf6fYrssWLEjXwGewE8Q78QIcmAzDTmXe y4VL5nyChvypQxGfmUDJLNMaIcfJzkcaoqfNZN9G5yrevNxqANLf+i74DJjnxAr/ Uu1wjTLVZ9hlyZ1UIiOjMPFNql9XRk8xcDzr9hUvrKLtUouvUkszK1VIBbgevHvS Y4NDY830NGv9yTUhS/tBoWCmYQ1zSftPmm9MEbXFDCxgtrwXG2HdElHbgbyUmsmw 9uVy3c001UkF+DzyziYiBvBRv4PqcZxpo7cHdZZxM6/ZEtwMJKTy -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:07 2026 by rpki-client