This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa File: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (raw, json) Hash identifier: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64= Subject key identifier: 62:95:3B:81:A4:0A:B8:82:A4:37:E4:F4:56:D0:46:4D:1A:98:B6:F3 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F551A150ED2D3CCAC8C06666ED22 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35625 IP address blocks: 95.170.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f5:51:a1:50:ed:2d:3c:ca:c8:c0:66:66:ed:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62953b81a40ab882a437e4f456d0464d1a98b6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:e3:70:3a:5e:4c:ed:93:f3:86:71:e8:16: 4e:51:1d:6f:5b:48:93:ef:af:a7:5d:91:91:4e:57: 52:73:db:78:a1:a4:d4:59:40:de:29:ff:14:37:ab: e3:cf:73:1f:3f:d0:92:e6:c8:3b:4e:82:52:99:28: 09:b0:05:d4:fb:13:fa:99:95:9f:dd:82:ea:a3:45: db:61:46:36:71:f8:3b:b2:72:12:96:f5:33:6b:85: c2:09:a3:b4:1d:ea:1b:3e:04:8a:06:ee:9e:9b:4b: 03:90:8d:6e:1b:0e:d6:3b:b9:4d:af:13:b0:5a:58: 01:1d:53:3b:92:e8:7f:27:65:28:14:24:fb:3f:d0: e5:7c:7c:1e:7c:41:44:82:cd:12:d6:69:9e:6e:75: d4:4e:b0:0c:3c:9f:8e:54:bb:67:9c:36:f7:4f:a7: 3a:e3:70:8c:06:4b:21:91:db:25:cd:9e:1d:44:70: e4:34:bd:26:70:35:9d:6c:43:63:a1:8e:b6:e8:69: be:b8:93:23:db:b9:61:aa:fa:1c:d0:22:26:aa:0f: 6d:2a:e1:41:ae:6b:1c:6c:25:65:1f:57:93:4c:c4: 19:b4:32:cd:64:ad:c3:eb:92:ca:7d:f3:b0:da:03: cc:d7:00:ae:d9:30:a0:84:70:b3:31:5e:87:85:83: 53:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:3B:81:A4:0A:B8:82:A4:37:E4:F4:56:D0:46:4D:1A:98:B6:F3 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.4.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:6b:3e:9f:e1:29:48:87:a2:6f:37:62:f2:18:7f:da:03:bd: c0:59:cb:8f:47:9a:23:90:43:de:5f:1a:30:fa:30:9d:e7:ae: c5:ee:74:a3:cf:da:2f:ba:02:a4:55:3b:74:71:2f:9c:ab:42: 18:00:48:ac:60:9b:33:8e:d0:7f:1e:d9:88:7e:2f:43:15:e0: d7:21:00:b8:16:2e:26:c5:40:bf:0c:2f:82:ce:1a:0e:c7:d4: 08:ba:c9:03:29:17:c5:87:88:99:8f:0a:9d:a3:4b:13:58:f1: 09:4b:19:97:78:de:f4:81:2f:b8:e2:8d:45:3f:33:51:e8:5d: 0d:01:1a:b6:a3:21:df:45:23:a2:64:1f:5d:df:55:3f:38:c2: 05:f4:77:90:36:59:07:ff:9e:35:55:39:38:38:34:68:b1:35: d6:4f:6e:b0:14:c8:24:28:77:ac:b5:22:79:20:67:32:08:16: f6:e5:ad:8b:c8:9c:2a:0a:72:d3:9e:69:5f:40:90:57:58:07: 7f:fd:c7:f5:55:a3:03:88:8f:27:89:4b:ac:5f:ec:7c:58:6b: 4d:a2:61:90:9d:58:e5:56:eb:a7:ab:25:29:cd:90:09:5f:3d: d2:fb:00:02:78:8e:0b:46:76:ff:25:87:25:53:3b:e2:b0:90: 56:3c:f5:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfVRoVDtLTzKyMBmZu0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk1M2I4MWE0MGFiODgyYTQzN2U0ZjQ1NmQwNDY0ZDFhOThiNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKfjcDpeTO2T84Zx6BZOUR1vW0iT 76+nXZGRTldSc9t4oaTUWUDeKf8UN6vjz3MfP9CS5sg7ToJSmSgJsAXU+xP6mZWf 3YLqo0XbYUY2cfg7snISlvUza4XCCaO0HeobPgSKBu6em0sDkI1uGw7WO7lNrxOw WlgBHVM7kuh/J2UoFCT7P9DlfHwefEFEgs0S1mmebnXUTrAMPJ+OVLtnnDb3T6c6 43CMBkshkdslzZ4dRHDkNL0mcDWdbENjoY626Gm+uJMj27lhqvoc0CImqg9tKuFB rmscbCVlH1eTTMQZtDLNZK3D65LKffOw2gPM1wCu2TCghHCzMV6HhYNT4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKVO4GkCriCpDfk9FbQRk0amLbzMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvWXBVN2dhUUt1SUtrTi1UMFZ0QkdUUnFZdHZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oEMA0G CSqGSIb3DQEBCwUAA4IBAQBvaz6f4SlIh6JvN2LyGH/aA73AWcuPR5ojkEPeXxow +jCd567F7nSjz9ovugKkVTt0cS+cq0IYAEisYJszjtB/HtmIfi9DFeDXIQC4Fi4m xUC/DC+CzhoOx9QIuskDKRfFh4iZjwqdo0sTWPEJSxmXeN70gS+44o1FPzNR6F0N ARq2oyHfRSOiZB9d31U/OMIF9HeQNlkH/541VTk4ODRosTXWT26wFMgkKHestSJ5 IGcyCBb25a2LyJwqCnLTnmlfQJBXWAd//cf1VaMDiI8niUusX+x8WGtNomGQnVjl VuunqyUpzZAJXz3S+wACeI4LRnb/JYclUzvisJBWPPV6 -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:55 2026 by rpki-client