This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa File: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (raw, json) Hash identifier: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc= Subject key identifier: 7B:D5:B7:6E:A3:3E:F4:27:FD:27:C3:4A:E4:D2:58:74:FC:6D:36:A4 Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B7C129944A68A5258671F310244EB279F Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.95.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:99:44:a6:8a:52:58:67:1f:31:02:44:eb:27:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd5b76ea33ef427fd27c34ae4d25874fc6d36a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:86:47:db:43:2b:d4:67:17:69:af:eb:2f: 93:5a:72:1c:04:07:af:90:b9:ae:ef:b8:4e:df:8f: 1e:1c:61:b1:a6:41:d9:67:8b:72:13:c9:e4:f9:7b: 07:73:b4:26:88:a6:43:61:2a:e2:12:51:7a:a7:a1: 4a:80:6f:d8:b4:bd:a9:0f:79:d6:5d:37:ad:fc:29: 6d:57:da:a3:80:2e:93:82:02:98:8b:4f:c6:85:fc: 15:47:d3:de:ac:a0:11:b8:25:dd:22:90:4e:e5:2d: 32:93:3d:62:7f:55:95:09:63:81:fc:fe:8e:66:c2: 9a:60:31:63:ef:9f:6f:54:dc:a8:41:04:03:78:9d: 17:cd:05:73:e9:35:b9:3a:4c:16:22:6a:7f:f3:b9: 0f:e4:56:b8:7c:0b:d5:8f:b0:c2:09:c3:25:98:8a: af:0d:ea:95:24:9f:a7:de:8c:b9:d2:9a:67:0a:7b: da:b3:1d:5b:57:4c:c7:b7:f3:4d:db:72:cf:f5:38: c3:61:18:62:03:07:74:65:42:17:67:5c:96:f6:59: 7a:67:38:e4:25:1f:09:df:a4:4d:ce:fe:56:de:61: 83:03:45:e4:23:2c:2d:68:43:4c:e9:77:f4:68:b0: 03:8d:f5:86:5b:74:16:23:01:69:65:e7:0d:c3:93: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D5:B7:6E:A3:3E:F4:27:FD:27:C3:4A:E4:D2:58:74:FC:6D:36:A4 X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.114.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:27:60:ee:6d:12:b7:71:e6:5f:d4:5f:60:7b:59:a1:b2:1f: 82:ed:78:3a:3d:6e:7a:94:ce:4c:1f:df:b1:ff:0a:de:24:67: b1:ef:df:90:b1:c7:76:36:8b:fb:0c:a4:51:37:1f:90:56:ab: 0b:23:ea:fc:44:df:1e:d7:62:01:51:2a:8c:47:2e:ac:df:67: 1a:39:77:05:7d:cf:31:81:d6:d2:8e:2e:7c:3b:85:a4:f5:16: 51:43:e5:7d:39:b3:9b:6f:dc:5e:e9:41:63:42:8e:0c:9b:63: 45:4d:c2:e9:d7:33:90:c8:ce:19:e0:d2:69:75:b6:fe:e0:88: c7:59:f4:d8:39:c2:11:35:06:62:54:39:8e:59:28:19:a6:ea: 9d:4d:7d:24:3a:2b:e3:33:4e:a2:83:38:60:48:14:8b:24:13: f1:6d:18:fe:33:63:cf:c3:80:e4:51:d3:a4:d9:30:b2:b1:87: 1a:5e:e7:d8:5e:26:5f:2d:70:09:54:6e:07:ec:63:fb:cf:ab: e6:2a:34:f7:98:e7:5a:f7:18:ef:0c:d8:ff:10:44:03:d1:12: 3a:18:39:c9:13:ae:03:5e:b9:5c:df:05:a8:c9:1f:ef:71:75: 5c:0b:50:7e:ab:96:cb:f3:e6:33:bf:1f:48:1c:70:31:03:f1: 6f:85:88:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EplEpopSWGcfMQJE6yefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ1Yjc2ZWEzM2VmNDI3ZmQyN2MzNGFlNGQyNTg3NGZjNmQzNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMSGR9tDK9RnF2mv6y+TWnIcBAev kLmu77hO348eHGGxpkHZZ4tyE8nk+XsHc7QmiKZDYSriElF6p6FKgG/YtL2pD3nW XTet/CltV9qjgC6TggKYi0/GhfwVR9PerKARuCXdIpBO5S0ykz1if1WVCWOB/P6O ZsKaYDFj759vVNyoQQQDeJ0XzQVz6TW5OkwWImp/87kP5Fa4fAvVj7DCCcMlmIqv DeqVJJ+n3oy50ppnCnvasx1bV0zHt/NN23LP9TjDYRhiAwd0ZUIXZ1yW9ll6Zzjk JR8J36RNzv5W3mGDA0XkIywtaENM6Xf0aLADjfWGW3QWIwFpZecNw5OMJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvVt26jPvQn/SfDSuTSWHT8bTakMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvZTlXM2JxTS05Q2Y5SjhOSzVOSllkUHh0TnFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9yMA0G CSqGSIb3DQEBCwUAA4IBAQCNJ2DubRK3ceZf1F9ge1mhsh+C7Xg6PW56lM5MH9+x /wreJGex79+Qscd2Nov7DKRRNx+QVqsLI+r8RN8e12IBUSqMRy6s32caOXcFfc8x gdbSji58O4Wk9RZRQ+V9ObObb9xe6UFjQo4Mm2NFTcLp1zOQyM4Z4NJpdbb+4IjH WfTYOcIRNQZiVDmOWSgZpuqdTX0kOivjM06igzhgSBSLJBPxbRj+M2PPw4DkUdOk 2TCysYcaXufYXiZfLXAJVG4H7GP7z6vmKjT3mOda9xjvDNj/EEQD0RI6GDnJE64D Xrlc3wWoyR/vcXVcC1B+q5bL8+Yzvx9IHHAxA/FvhYhm -----END CERTIFICATE-----Generated at Sun Jan 25 23:42:53 2026 by rpki-client