This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa File: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (raw, json) Hash identifier: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do= Subject key identifier: F9:68:33:D7:02:7A:26:2D:48:70:A9:3F:3F:67:16:F5:06:6F:F2:E7 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F8B7AE0E2EFE2520CCAAFADB5F70 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 95.170.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f8:b7:ae:0e:2e:fe:25:20:cc:aa:fa:db:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96833d7027a262d4870a93f3f6716f5066ff2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:74:91:ed:a3:b8:54:3b:e5:95:99:8a:0f:88: c9:81:f5:02:a6:40:02:0f:21:7b:8b:ae:aa:1c:e1: ba:fe:38:6c:9a:01:7e:b4:3d:e7:92:80:cd:c6:ac: e5:d1:d4:f8:71:cf:3b:9f:21:bc:7f:95:48:37:2e: 86:73:49:19:f4:03:0a:5e:43:d3:df:90:e2:29:62: 7c:bb:51:2a:d6:39:85:bf:ce:f8:e0:11:54:91:16: c4:a5:c0:e6:f6:13:39:9e:97:44:44:e0:f1:6b:54: ea:e8:55:2d:28:bf:6e:66:d7:8a:21:6e:63:a7:46: 87:ab:cb:b8:02:c4:d9:67:bc:8e:b7:88:d0:63:32: 5a:9e:6e:5c:2c:56:3c:56:de:da:ae:2d:81:c3:2b: 0a:4c:a2:9c:6f:26:53:6b:56:79:f8:f1:e6:a5:24: af:48:8e:8a:e3:1b:e9:ff:90:39:bc:87:43:45:d3: fe:4e:f3:57:d1:cc:d9:06:11:9e:7a:26:18:2c:e5: b9:47:03:33:fe:fc:ea:a0:52:6f:bd:14:96:fd:78: bf:49:39:06:48:39:87:b5:8f:3b:c4:4e:e8:f2:a9: 1d:95:27:d9:ec:34:6b:e4:d4:25:59:f6:6d:32:95: 6d:6a:96:f8:98:94:04:1d:6c:36:bb:44:57:88:ab: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:68:33:D7:02:7A:26:2D:48:70:A9:3F:3F:67:16:F5:06:6F:F2:E7 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a9:99:a1:07:09:f9:03:39:c8:23:32:0c:e7:cf:15:bb:77: 64:0d:77:2a:9a:c2:c0:84:bb:f6:c7:5e:71:f9:74:bd:88:b0: ac:a4:12:75:dc:b7:83:b6:50:8c:b0:3a:db:0e:3d:64:b3:27: 51:db:f8:b8:ff:03:ec:be:a5:3c:14:9c:4c:ac:c9:38:34:9a: d1:25:54:7f:a2:d1:69:64:b8:fb:79:93:56:b9:b0:7e:3c:dd: a6:a3:c4:47:a9:50:db:e9:75:e0:8e:9f:5f:04:04:7d:7f:41: 9e:03:e6:5c:7a:a7:10:56:60:62:89:1a:69:48:12:2c:47:df: 91:fa:85:05:2a:f5:22:05:e6:9d:cd:2d:29:37:86:27:02:c5: d5:72:a4:d2:5c:30:c2:89:53:bc:96:84:2c:a5:bb:99:15:b4: 70:b7:f8:1f:fa:76:59:54:cb:67:78:1b:71:96:4e:42:fe:4d: 05:cf:08:4d:0f:f9:d6:92:7d:58:cd:74:7f:ca:c2:2c:77:27: bf:e7:53:e1:38:14:0c:47:46:c0:4d:7d:68:48:c7:08:6b:d3: 41:f3:01:9a:4d:68:11:c4:b4:7e:94:1b:4c:7e:27:f7:4c:45: 6d:c1:59:e1:c1:1c:9b:51:fa:ac:e0:9a:54:fa:9a:a0:95:4f: 6b:60:c9:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nfi3rg4u/iUgzKr6219wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTY4MzNkNzAyN2EyNjJkNDg3MGE5M2YzZjY3MTZmNTA2NmZmMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HSR7aO4VDvllZmKD4jJgfUCpkAC DyF7i66qHOG6/jhsmgF+tD3nkoDNxqzl0dT4cc87nyG8f5VINy6Gc0kZ9AMKXkPT 35DiKWJ8u1Eq1jmFv8744BFUkRbEpcDm9hM5npdERODxa1Tq6FUtKL9uZteKIW5j p0aHq8u4AsTZZ7yOt4jQYzJanm5cLFY8Vt7ari2BwysKTKKcbyZTa1Z5+PHmpSSv SI6K4xvp/5A5vIdDRdP+TvNX0czZBhGeeiYYLOW5RwMz/vzqoFJvvRSW/Xi/STkG SDmHtY87xE7o8qkdlSfZ7DRr5NQlWfZtMpVtapb4mJQEHWw2u0RXiKvAqQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPloM9cCeiYtSHCpPz9nFvUGb/LnMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvMS1XZ3oxd0o2SmkxSWNLa19QMmNXOVFadjh1Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmUvZmQ4YzAxLTdiNzEtNDQyYy05YWRiLWVjZDI5NjVjYjdl Ny8xL0lPUWxveXRpMDVnWXhNdXdDQkIxYUdfRXlPZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF+qDTAN BgkqhkiG9w0BAQsFAAOCAQEAOqmZoQcJ+QM5yCMyDOfPFbt3ZA13KprCwIS79sde cfl0vYiwrKQSddy3g7ZQjLA62w49ZLMnUdv4uP8D7L6lPBScTKzJODSa0SVUf6LR aWS4+3mTVrmwfjzdpqPER6lQ2+l14I6fXwQEfX9BngPmXHqnEFZgYokaaUgSLEff kfqFBSr1IgXmnc0tKTeGJwLF1XKk0lwwwolTvJaELKW7mRW0cLf4H/p2WVTLZ3gb cZZOQv5NBc8ITQ/51pJ9WM10f8rCLHcnv+dT4TgUDEdGwE19aEjHCGvTQfMBmk1o EcS0fpQbTH4n90xFbcFZ4cEcm1H6rOCaVPqaoJVPa2DJFA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:27 2026 by rpki-client