This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/4E35N4YoprisFyljnxoxMkR64es.roa File: 4E35N4YoprisFyljnxoxMkR64es.roa (raw, json) Hash identifier: etv1L/gZm5KpspXvAsTMAxMqprgBv0WBCdkcjzS9EzM= Subject key identifier: E0:4D:F9:37:86:28:A6:B8:AC:17:29:63:9F:1A:31:32:44:7A:E1:EB Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F97660500A4BFF1FF5E4B38FEF27 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/4E35N4YoprisFyljnxoxMkR64es.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395374 IP address blocks: 95.170.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f9:76:60:50:0a:4b:ff:1f:f5:e4:b3:8f:ef:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e04df9378628a6b8ac1729639f1a3132447ae1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:17:89:40:b5:f3:66:33:9c:db:14:13:fd: 72:bb:d1:d7:9a:35:31:73:d6:cf:c8:61:38:39:b3: 10:51:24:90:f2:c2:f2:d2:12:93:0d:fd:0c:c1:2c: f1:8d:fd:73:32:31:b4:bd:7c:94:1c:53:aa:73:fc: dc:d9:ed:29:a0:b0:1e:9e:1a:11:9c:23:3c:f9:09: f4:da:a1:ad:9a:ae:b1:6c:1c:95:55:d4:5c:db:fb: 60:d5:b4:67:89:bd:4f:26:ff:81:32:da:11:0c:15: 83:3f:6b:49:65:45:ef:77:80:40:0b:4c:80:0a:e4: 70:c3:ec:ef:ad:61:4c:06:79:d9:c8:f8:39:00:d0: 13:73:68:f5:a6:45:d7:11:aa:c0:62:ee:30:b8:a7: 6a:12:75:0d:85:1f:aa:fd:c7:a5:30:6c:86:46:d1: cc:e4:64:eb:42:df:cf:e7:df:a7:21:7f:c0:c0:f6: c2:87:4e:f8:06:6f:c3:1d:b1:76:af:9d:f4:d0:8e: d3:09:d9:10:4d:a3:3e:fb:fe:fa:54:24:cf:51:1b: db:e1:cf:0c:b8:5b:47:1e:1c:5b:f2:90:87:61:52: 56:ed:b9:2f:71:b4:d8:5b:d8:33:bc:88:e2:0b:0e: 6e:0a:12:79:d7:20:31:8c:67:a8:e3:ab:0e:20:73: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:F9:37:86:28:A6:B8:AC:17:29:63:9F:1A:31:32:44:7A:E1:EB X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/4E35N4YoprisFyljnxoxMkR64es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.27.0/24 Signature Algorithm: sha256WithRSAEncryption 57:f6:b0:db:90:6f:fc:20:3b:38:dc:2c:88:e3:61:31:90:e0: 8f:78:bc:92:02:ba:94:c2:e7:3c:4c:d5:64:bf:b1:5b:8e:a7: 86:3a:81:90:d0:2f:84:0f:e8:d1:19:a3:1b:49:91:2c:f3:5a: dc:be:c3:24:d2:44:c4:e5:f7:da:70:94:b3:d6:06:32:aa:c6: 6a:29:e5:f6:8d:53:33:5a:ec:2f:6f:7a:ea:d8:2a:ea:aa:6d: 5b:b4:e1:23:68:2b:1c:50:fe:1e:36:df:61:85:fe:9a:da:77: 3b:22:60:ba:71:46:aa:65:b2:74:b2:91:f4:79:51:f3:a4:5d: 33:69:0a:05:3f:b6:8e:5b:fa:5a:f1:88:98:56:84:b4:19:f2: 78:ef:51:63:ae:9f:ca:fd:37:a2:d2:60:f1:00:ca:20:c0:c4: ef:0f:92:7b:13:da:c4:7b:6a:08:e3:39:e0:2a:73:2e:30:0b: 7e:76:3a:86:08:13:b6:1c:3c:73:fc:76:5d:6d:bc:18:40:7e: 1f:5b:7c:a3:7f:65:29:5e:0d:d6:85:7b:58:49:86:d2:16:03: f5:8f:ec:a8:0d:8a:f1:cf:c3:6b:1a:48:ad:33:53:8e:aa:91: 3a:92:10:e2:6f:56:f2:5a:eb:c6:2f:b4:41:6c:33:ae:e8:da: b3:bb:78:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nfl2YFAKS/8f9eSzj+8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDRkZjkzNzg2MjhhNmI4YWMxNzI5NjM5ZjFhMzEzMjQ0N2FlMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmgXiUC182YznNsUE/1yu9HXmjUx c9bPyGE4ObMQUSSQ8sLy0hKTDf0MwSzxjf1zMjG0vXyUHFOqc/zc2e0poLAenhoR nCM8+Qn02qGtmq6xbByVVdRc2/tg1bRnib1PJv+BMtoRDBWDP2tJZUXvd4BAC0yA CuRww+zvrWFMBnnZyPg5ANATc2j1pkXXEarAYu4wuKdqEnUNhR+q/celMGyGRtHM 5GTrQt/P59+nIX/AwPbCh074Bm/DHbF2r5300I7TCdkQTaM++/76VCTPURvb4c8M uFtHHhxb8pCHYVJW7bkvcbTYW9gzvIjiCw5uChJ51yAxjGeo46sOIHPeTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBN+TeGKKa4rBcpY58aMTJEeuHrMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvNEUzNU40WW9wcmlzRnlsam54b3hNa1I2NGVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6obMA0G CSqGSIb3DQEBCwUAA4IBAQBX9rDbkG/8IDs43CyI42ExkOCPeLySArqUwuc8TNVk v7FbjqeGOoGQ0C+ED+jRGaMbSZEs81rcvsMk0kTE5ffacJSz1gYyqsZqKeX2jVMz Wuwvb3rq2Crqqm1btOEjaCscUP4eNt9hhf6a2nc7ImC6cUaqZbJ0spH0eVHzpF0z aQoFP7aOW/pa8YiYVoS0GfJ471Fjrp/K/Tei0mDxAMogwMTvD5J7E9rEe2oI4zng KnMuMAt+djqGCBO2HDxz/HZdbbwYQH4fW3yjf2UpXg3WhXtYSYbSFgP1j+yoDYrx z8NrGkitM1OOqpE6khDib1byWuvGL7RBbDOu6Nqzu3ig -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:57 2026 by rpki-client