This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa File: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (raw, json) Hash identifier: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U= Subject key identifier: 4E:63:B6:AA:CD:C2:27:B9:C3:DD:BA:CD:F9:77:B3:8B:54:7B:FC:4A Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B7C129A0A8F555D549986B783733F7EF4 Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50124 IP address blocks: 45.95.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9a:0a:8f:55:5d:54:99:86:b7:83:73:3f:7e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e63b6aacdc227b9c3ddbacdf977b38b547bfc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:9b:5a:e1:f2:f0:9a:99:69:39:58:e4:ce: 8d:2f:e4:c9:3d:6b:1c:44:8b:61:13:98:ef:cf:5b: a1:de:38:b5:a1:25:e4:a2:ae:8f:17:24:82:f6:22: 64:31:0d:d5:80:e7:74:e4:53:05:47:2f:a9:27:fc: 27:ad:7f:2a:b0:7e:45:b3:8e:3f:63:bb:19:ad:38: f6:ea:9c:18:5d:f3:da:d1:65:7e:5d:3c:76:d4:8d: 22:c5:e5:91:42:06:be:8c:f5:96:a0:ca:55:8a:d5: 59:64:67:b4:5c:a7:70:85:23:55:d5:09:cd:a3:e4: f0:eb:76:df:a7:12:25:73:c0:db:e4:d1:fb:79:27: 05:0d:a8:09:52:4d:8d:80:c9:ed:e2:ff:f5:f6:2c: c4:51:72:62:ce:8e:8e:3e:a7:77:35:11:e8:56:fb: f6:77:ae:1d:2d:27:6b:e9:82:2e:81:37:6b:4f:15: bf:e0:45:d6:b3:69:63:4b:9f:60:23:69:f4:b3:e5: 02:69:8a:c0:0c:76:cd:4f:05:f1:78:9b:28:50:a0: 17:de:8c:4a:3f:a1:b7:69:8c:19:b1:0e:22:2a:4d: 0e:a9:29:68:d2:e8:ea:9f:c9:8f:fb:df:ad:fe:83: 17:da:63:e7:e0:68:bd:5e:bb:0f:14:ee:b8:20:f6: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:63:B6:AA:CD:C2:27:B9:C3:DD:BA:CD:F9:77:B3:8B:54:7B:FC:4A X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:31:fb:fd:ec:dd:d9:13:e7:3c:31:b2:49:b6:79:06:87:04: 21:49:1b:72:cf:5b:24:4d:cd:23:42:b7:c8:de:7d:2f:d8:af: e7:ee:ec:b2:66:ce:0d:04:6c:fc:c5:b2:48:19:9a:b6:f2:82: c4:e3:6c:02:1b:8d:b3:f0:84:87:b2:ff:a2:bd:e1:47:54:39: 69:84:3f:76:5a:c7:14:d0:67:7b:87:00:b2:85:1a:ec:3d:60: 3b:f5:6f:27:e0:9c:7b:9f:fa:87:cb:81:91:0d:dc:06:d0:8d: 48:12:09:e3:c8:6a:b1:e5:f7:70:57:05:f2:4e:66:23:e0:de: 0d:e9:af:e7:0f:95:1d:66:77:f1:64:46:8c:02:9c:08:c3:f6: e7:78:74:43:96:59:50:a4:ce:b3:ec:57:c1:80:2a:3c:88:5f: 45:12:b9:70:60:b8:c9:a7:56:9a:1c:58:c5:2a:58:1b:b9:2c: b1:cb:3d:b6:b8:7f:ef:a9:26:99:de:73:61:d7:00:d9:e2:ad: 2a:fd:3a:49:50:17:7f:a4:20:9f:16:f3:f5:d8:87:a8:12:d3: e7:1b:f9:44:fc:d9:98:d4:7f:b3:2c:8b:88:5a:72:f5:ac:c0: 00:fa:01:bc:db:cf:1a:35:ec:cd:7e:e7:6a:92:44:1b:f6:f8: cb:fe:28:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpoKj1VdVJmGt4NzP370MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTYzYjZhYWNkYzIyN2I5YzNkZGJhY2RmOTc3YjM4YjU0N2JmYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF+bWuHy8JqZaTlY5M6NL+TJPWsc RIthE5jvz1uh3ji1oSXkoq6PFySC9iJkMQ3VgOd05FMFRy+pJ/wnrX8qsH5Fs44/ Y7sZrTj26pwYXfPa0WV+XTx21I0ixeWRQga+jPWWoMpVitVZZGe0XKdwhSNV1QnN o+Tw63bfpxIlc8Db5NH7eScFDagJUk2NgMnt4v/19izEUXJizo6OPqd3NRHoVvv2 d64dLSdr6YIugTdrTxW/4EXWs2ljS59gI2n0s+UCaYrADHbNTwXxeJsoUKAX3oxK P6G3aYwZsQ4iKk0OqSlo0ujqn8mP+9+t/oMX2mPn4Gi9XrsPFO64IPbWGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE5jtqrNwie5w926zfl3s4tUe/xKMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvVG1PMnFzM0NKN25EM2JyTi1YZXppMVI3X0VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9xMA0G CSqGSIb3DQEBCwUAA4IBAQAPMfv97N3ZE+c8MbJJtnkGhwQhSRtyz1skTc0jQrfI 3n0v2K/n7uyyZs4NBGz8xbJIGZq28oLE42wCG42z8ISHsv+iveFHVDlphD92WscU 0Gd7hwCyhRrsPWA79W8n4Jx7n/qHy4GRDdwG0I1IEgnjyGqx5fdwVwXyTmYj4N4N 6a/nD5UdZnfxZEaMApwIw/bneHRDlllQpM6z7FfBgCo8iF9FErlwYLjJp1aaHFjF KlgbuSyxyz22uH/vqSaZ3nNh1wDZ4q0q/TpJUBd/pCCfFvP12IeoEtPnG/lE/NmY 1H+zLIuIWnL1rMAA+gG8288aNezNfudqkkQb9vjL/iiB -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:43 2026 by rpki-client