This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/NfpbtdoH2GzbqDfenHlYbv5zt_c.roa File: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (raw, json) Hash identifier: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw= Subject key identifier: 35:FA:5B:B5:DA:07:D8:6C:DB:A8:37:DE:9C:79:58:6E:FE:73:B7:F7 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F8FC41DF7B7139D43A0F498B0BD8 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/NfpbtdoH2GzbqDfenHlYbv5zt_c.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213607 IP address blocks: 95.170.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f8:fc:41:df:7b:71:39:d4:3a:0f:49:8b:0b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35fa5bb5da07d86cdba837de9c79586efe73b7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:97:38:41:d3:d4:0b:25:1c:37:04:21:1f: 6b:9a:41:c1:e9:29:bf:fb:67:88:c4:88:e0:93:88: ec:17:df:d2:3a:a0:c8:e9:29:e5:8d:0c:cf:fb:e4: d7:15:7d:d7:f3:df:c2:8c:72:bf:7f:ca:cd:bc:11: 6f:27:2c:39:02:87:7e:04:c8:e4:5d:9d:3c:26:03: 4c:59:b8:23:bc:34:9a:e9:7e:88:17:2e:ab:f5:00: 98:f7:11:f6:89:3d:58:a6:b3:ec:76:d2:69:86:a1: df:7b:7c:c8:85:06:1d:54:83:08:21:bd:0c:e4:f8: 33:f8:fb:d9:09:2c:65:64:38:38:da:b0:cf:bf:d6: 29:e4:5f:8e:b3:81:81:83:c1:0c:e5:7e:fb:5b:59: ea:57:af:07:27:e9:30:81:4d:46:6c:a1:ea:a1:f0: 4c:c2:7a:1a:84:d1:ed:ad:a6:ec:3b:55:c8:86:53: 26:08:7b:c5:42:bd:fa:ad:e3:a3:f5:a7:6c:51:10: 18:fc:e7:17:37:ab:2d:11:a0:4a:e4:e7:c3:9c:8f: 43:e6:bf:64:38:78:ba:3a:10:07:aa:d8:85:57:9a: 6a:b6:7c:56:1c:2a:02:ea:a6:8e:82:39:ee:4e:77: 62:8f:75:b1:7e:01:47:7c:1c:82:6e:7e:48:38:40: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FA:5B:B5:DA:07:D8:6C:DB:A8:37:DE:9C:79:58:6E:FE:73:B7:F7 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/NfpbtdoH2GzbqDfenHlYbv5zt_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.17.0/24 Signature Algorithm: sha256WithRSAEncryption 28:d1:c3:70:26:b7:9f:68:b9:5c:e3:5c:e3:66:47:07:a4:21: 82:bb:77:7a:21:a2:e4:de:5e:20:ae:3f:65:a4:30:ed:5b:51: dc:7c:a9:21:43:98:79:2b:61:cc:0e:81:f7:7e:ae:a7:08:17: 72:a9:98:02:e8:e7:2b:bb:89:df:99:1b:f8:3e:a1:45:ac:68: 72:89:ea:ca:bb:fb:ca:62:99:15:a6:f2:e1:d6:e2:10:69:0a: 9c:ff:f7:00:e3:7d:5f:41:26:71:9a:d6:b3:96:5a:d0:8a:43: ab:35:4d:81:6b:0d:b4:e6:44:ad:6a:23:a2:13:19:fb:a1:ca: 61:58:5d:92:ce:9b:b8:f6:4c:67:7d:04:00:cb:9a:51:ea:66: 98:ad:3d:48:ec:7f:6e:4f:a2:43:99:c4:04:58:5b:a5:e4:2d: 07:76:b6:b2:32:42:ba:ff:44:fe:d9:b5:56:12:ac:a0:8f:a3: 30:51:3d:ce:73:9a:a1:b2:0c:77:aa:38:82:2e:28:cc:56:e5: 26:fa:65:22:34:2c:12:b1:de:5f:10:5c:5c:b6:3f:3d:a0:e8: f8:7f:88:ff:78:c2:56:48:f2:b6:48:81:0a:93:70:61:34:e6: c7:f4:f9:e6:19:ff:ad:53:d5:71:f9:51:78:ea:c8:0a:aa:3f: b1:40:d9:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nfj8Qd97cTnUOg9JiwvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWZhNWJiNWRhMDdkODZjZGJhODM3ZGU5Yzc5NTg2ZWZlNzNiN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5mXOEHT1AslHDcEIR9rmkHB6Sm/ +2eIxIjgk4jsF9/SOqDI6SnljQzP++TXFX3X89/CjHK/f8rNvBFvJyw5Aod+BMjk XZ08JgNMWbgjvDSa6X6IFy6r9QCY9xH2iT1YprPsdtJphqHfe3zIhQYdVIMIIb0M 5Pgz+PvZCSxlZDg42rDPv9Yp5F+Os4GBg8EM5X77W1nqV68HJ+kwgU1GbKHqofBM wnoahNHtrabsO1XIhlMmCHvFQr36reOj9adsURAY/OcXN6stEaBK5OfDnI9D5r9k OHi6OhAHqtiFV5pqtnxWHCoC6qaOgjnuTndij3WxfgFHfByCbn5IOEC9GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDX6W7XaB9hs26g33px5WG7+c7f3MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvTmZwYnRkb0gyR3picURmZW5IbFlidjV6dF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oRMA0G CSqGSIb3DQEBCwUAA4IBAQAo0cNwJrefaLlc41zjZkcHpCGCu3d6IaLk3l4grj9l pDDtW1HcfKkhQ5h5K2HMDoH3fq6nCBdyqZgC6Ocru4nfmRv4PqFFrGhyierKu/vK YpkVpvLh1uIQaQqc//cA431fQSZxmtazllrQikOrNU2Baw205kStaiOiExn7ocph WF2Szpu49kxnfQQAy5pR6maYrT1I7H9uT6JDmcQEWFul5C0HdrayMkK6/0T+2bVW Eqygj6MwUT3Oc5qhsgx3qjiCLijMVuUm+mUiNCwSsd5fEFxctj89oOj4f4j/eMJW SPK2SIEKk3BhNObH9PnmGf+tU9Vx+VF46sgKqj+xQNmv -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:04 2026 by rpki-client