This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zhgzrN7ONz-uEq7CvrDk_OA0fhY.roa File: zhgzrN7ONz-uEq7CvrDk_OA0fhY.roa (raw, json) Hash identifier: BR8H+FH7cC76xmp4k0PsChjJpaCt0+iuHvjXz9F5Vfs= Subject key identifier: CE:18:33:AC:DE:CE:37:3F:AE:12:AE:C2:BE:B0:E4:FC:E0:34:7E:16 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F80ADC5FABD2E0215A32F266230D Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zhgzrN7ONz-uEq7CvrDk_OA0fhY.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 95.170.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f8:0a:dc:5f:ab:d2:e0:21:5a:32:f2:66:23:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce1833acdece373fae12aec2beb0e4fce0347e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:87:fc:f3:82:eb:59:dc:52:a0:61:c6:27: 53:30:2e:51:b1:fc:ed:95:c6:01:ab:d9:ac:e0:32: 3e:8c:8d:ae:f1:14:7e:8c:22:cc:04:99:5c:07:50: 68:ba:29:22:1c:05:33:5d:ab:14:b9:19:08:b8:b7: 84:a1:df:90:d7:db:9b:7a:8f:f3:2d:ab:85:d9:f8: 41:03:50:69:80:89:cb:e3:d1:37:be:3d:da:8b:91: 1c:7d:36:fd:97:7f:d2:8e:f8:b4:b2:5c:bb:30:1c: ba:52:65:f4:f0:88:10:87:fa:c5:41:d0:d8:0f:15: 24:ce:86:2b:d8:46:fb:b6:77:9b:63:5c:14:b9:41: 8f:ff:77:17:8c:1b:60:a1:a5:25:f0:3b:ce:81:8a: 9c:71:dc:8f:b7:32:88:44:3d:dc:69:d4:5c:ea:0d: 39:26:a1:73:cb:e3:de:26:78:ef:1c:40:f0:e9:35: f5:51:8b:14:d1:2c:21:90:4a:01:25:65:d6:ff:16: b0:24:3d:a4:91:c6:3f:68:2c:1e:50:3a:c4:ff:d3: 24:a7:ce:17:73:d2:b0:6d:79:f1:44:26:60:22:3c: 97:f5:be:fb:91:76:04:f0:c7:36:2a:d8:b7:32:65: c8:e7:bf:b5:b1:45:15:dc:f5:e6:6f:c8:76:2d:14: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:33:AC:DE:CE:37:3F:AE:12:AE:C2:BE:B0:E4:FC:E0:34:7E:16 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zhgzrN7ONz-uEq7CvrDk_OA0fhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.18.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ee:72:88:28:01:c6:16:d3:2c:2a:cf:22:3d:57:41:c0:fb: dd:4c:73:4d:71:16:b4:68:67:f6:22:79:c3:0b:8d:ce:f1:19: 99:39:2a:1d:6b:8a:df:30:71:14:18:3b:2d:bb:d1:40:a8:13: 25:0a:80:d7:5a:02:f2:e1:ce:f3:a7:23:7a:cf:2b:2a:04:2e: 25:a9:80:bb:2f:98:e0:7f:80:65:ef:e4:50:20:1b:26:a1:c3: cf:2d:65:30:b9:4a:0c:e7:08:14:7f:b9:2b:22:da:e4:6e:50: 47:e3:e0:08:48:62:de:34:65:20:f3:c7:56:7d:0e:78:c4:c7: a8:bf:47:8e:f9:0d:23:6b:a3:e6:4c:1f:f1:9d:24:64:3b:94: c1:36:be:99:37:e7:46:ee:2e:e8:b2:c5:63:b4:86:c8:0d:a2: 7d:21:a7:8d:b7:30:e6:2f:1c:e7:1b:6d:f4:5d:f1:9e:dd:47: 9b:6a:6c:b6:26:e5:c8:b9:0a:db:9b:12:3e:17:15:0b:55:4d: 38:9c:4b:f9:d5:47:b6:11:a7:65:fd:91:81:6a:c7:af:a3:66: 34:85:1e:93:19:2f:99:a7:21:92:8c:46:56:76:e8:5c:7d:7d: f3:91:ee:d5:7a:e3:7a:5a:15:75:2e:e7:5a:bd:02:17:33:62: e2:c6:b5:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfgK3F+r0uAhWjLyZiMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTE4MzNhY2RlY2UzNzNmYWUxMmFlYzJiZWIwZTRmY2UwMzQ3ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE6H/POC61ncUqBhxidTMC5Rsfzt lcYBq9ms4DI+jI2u8RR+jCLMBJlcB1BouikiHAUzXasUuRkIuLeEod+Q19ubeo/z LauF2fhBA1BpgInL49E3vj3ai5EcfTb9l3/Sjvi0sly7MBy6UmX08IgQh/rFQdDY DxUkzoYr2Eb7tnebY1wUuUGP/3cXjBtgoaUl8DvOgYqccdyPtzKIRD3cadRc6g05 JqFzy+PeJnjvHEDw6TX1UYsU0SwhkEoBJWXW/xawJD2kkcY/aCweUDrE/9Mkp84X c9KwbXnxRCZgIjyX9b77kXYE8Mc2Kti3MmXI57+1sUUV3PXmb8h2LRSvawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM4YM6zezjc/rhKuwr6w5PzgNH4WMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvemhnenJON09Oei11RXE3Q3ZyRGtfT0EwZmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oSMA0G CSqGSIb3DQEBCwUAA4IBAQCB7nKIKAHGFtMsKs8iPVdBwPvdTHNNcRa0aGf2InnD C43O8RmZOSoda4rfMHEUGDstu9FAqBMlCoDXWgLy4c7zpyN6zysqBC4lqYC7L5jg f4Bl7+RQIBsmocPPLWUwuUoM5wgUf7krItrkblBH4+AISGLeNGUg88dWfQ54xMeo v0eO+Q0ja6PmTB/xnSRkO5TBNr6ZN+dG7i7ossVjtIbIDaJ9IaeNtzDmLxznG230 XfGe3Uebamy2JuXIuQrbmxI+FxULVU04nEv51Ue2Eadl/ZGBasevo2Y0hR6TGS+Z pyGSjEZWduhcfX3zke7VeuN6WhV1LudavQIXM2LixrVZ -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:59 2026 by rpki-client