This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/d9A4hlEmKbDPdLh-NP6SoKhEXtQ.roa File: d9A4hlEmKbDPdLh-NP6SoKhEXtQ.roa (raw, json) Hash identifier: 2KXDsx5G7CA7gUyYoSSGzL5b/e8kc/9Eqvs4mB1p5uE= Subject key identifier: 77:D0:38:86:51:26:29:B0:CF:74:B8:7E:34:FE:92:A0:A8:44:5E:D4 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019B7DCA6F640DF6B1B6AC2A7ED57E5E0CDE Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/d9A4hlEmKbDPdLh-NP6SoKhEXtQ.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198605 IP address blocks: 95.142.112.0/24 maxlen: 24 95.142.115.0/24 maxlen: 24 95.142.118.0/24 maxlen: 24 95.142.121.0/24 maxlen: 24 95.142.124.0/24 maxlen: 24 95.142.127.0/24 maxlen: 24 159.242.227.0/24 maxlen: 24 159.242.234.0/24 maxlen: 24 159.242.239.0/24 maxlen: 24 185.54.230.0/24 maxlen: 24 194.99.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6f:64:0d:f6:b1:b6:ac:2a:7e:d5:7e:5e:0c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d03886512629b0cf74b87e34fe92a0a8445ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:82:bb:e0:25:22:73:a6:83:41:d8:5a:69: 73:36:b8:31:c0:17:9b:d7:7e:d5:d5:e4:f9:9c:ce: df:5e:e6:9c:db:71:1c:e0:f0:40:7b:70:75:cf:61: 1e:db:27:a1:a2:95:10:bd:f9:44:15:f7:3a:7f:04: 4f:a3:21:ec:4a:f5:e9:90:6f:77:6f:ab:42:91:6c: d8:a1:ef:0c:95:d9:83:2a:a3:b3:c9:09:0b:d8:0e: 3c:81:e5:09:fc:e6:0f:24:88:be:9d:32:4f:98:31: 2b:9a:84:61:b2:cd:ce:48:75:03:9b:3b:d2:be:74: 6f:d5:c1:78:74:d8:ed:f0:8d:4b:91:44:56:1d:5f: a7:b4:c0:a0:ee:5e:73:4e:52:05:ff:d5:45:db:c7: 96:9a:a4:ce:24:68:ff:13:0a:0b:e4:0c:59:02:c9: ac:1d:07:e1:d9:b1:91:a3:86:68:d8:4a:b6:c9:b6: 3f:37:48:f2:ce:44:19:81:1c:e5:e9:91:7d:c7:dd: e5:aa:6d:c7:d5:58:76:92:ee:0a:63:2d:89:e6:84: 40:27:b6:39:e8:39:2c:3a:9a:26:ed:d6:c9:06:b9: 3e:63:dd:27:03:ac:db:d8:87:a8:5c:e5:11:0f:e3: 6e:db:b9:92:83:46:45:19:a9:07:f0:ef:9c:03:73: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D0:38:86:51:26:29:B0:CF:74:B8:7E:34:FE:92:A0:A8:44:5E:D4 X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/d9A4hlEmKbDPdLh-NP6SoKhEXtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.112.0/24 95.142.115.0/24 95.142.118.0/24 95.142.121.0/24 95.142.124.0/24 95.142.127.0/24 159.242.227.0/24 159.242.234.0/24 159.242.239.0/24 185.54.230.0/24 194.99.28.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:8a:d7:42:16:b4:b7:8f:42:f7:a7:62:93:46:05:38:90:50: b1:b8:52:e4:82:a0:79:00:e8:73:1a:ba:5b:de:5d:a7:32:5e: 66:39:fc:38:cd:bd:bc:a1:2f:19:f6:8e:bc:2d:71:a4:76:ac: f2:bb:d7:7e:0f:4e:1f:01:8c:0c:32:42:05:43:f4:f4:27:43: 18:53:82:ed:ba:7b:04:e0:e7:72:c9:35:d8:5c:1f:e5:39:2a: 68:5d:71:8e:1d:6b:ef:5c:a0:6e:98:0e:b9:c2:e1:2b:6e:b9: 7d:27:d4:fb:27:43:44:69:c1:75:88:06:1c:6a:ff:87:df:c3: ab:b3:3a:87:70:a5:7d:de:46:56:8a:9a:d9:56:8f:47:81:ee: 1f:ef:e5:02:39:b0:91:f5:db:cf:76:15:f4:50:bc:11:fb:e1: 9d:c4:26:f2:43:9a:31:8c:3a:c8:89:1f:56:74:f1:a7:29:90: c3:1e:38:cb:a3:0a:19:7f:ae:e3:64:be:a7:a7:6e:b2:fd:81: 97:08:be:bf:4f:db:20:2d:51:a3:d5:fd:0b:63:bf:ea:d7:f0: 2f:b4:5e:18:c1:38:6d:84:71:cb:60:e4:09:fc:17:04:66:09: 02:3c:56:32:29:86:f3:68:f2:c5:a9:f9:18:6c:1e:f4:bd:e9: f5:5e:b6:b5 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt9ym9kDfaxtqwqftV+XgzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2QwMzg4NjUxMjYyOWIwY2Y3NGI4N2UzNGZlOTJhMGE4NDQ1ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGCu+AlInOmg0HYWmlzNrgxwBeb 137V1eT5nM7fXuac23Ec4PBAe3B1z2Ee2yehopUQvflEFfc6fwRPoyHsSvXpkG93 b6tCkWzYoe8MldmDKqOzyQkL2A48geUJ/OYPJIi+nTJPmDErmoRhss3OSHUDmzvS vnRv1cF4dNjt8I1LkURWHV+ntMCg7l5zTlIF/9VF28eWmqTOJGj/EwoL5AxZAsms HQfh2bGRo4Zo2Eq2ybY/N0jyzkQZgRzl6ZF9x93lqm3H1Vh2ku4KYy2J5oRAJ7Y5 6DksOpom7dbJBrk+Y90nA6zb2IeoXOURD+Nu27mSg0ZFGakH8O+cA3O5EwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFHfQOIZRJimwz3S4fjT+kqCoRF7UMB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvZDlBNGhsRW1LYkRQZExoLU5QNlNvS2hFWHRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAX45wAwQA X45zAwQAX452AwQAX455AwQAX458AwQAX45/AwQAn/LjAwQAn/LqAwQAn/LvAwQA uTbmAwQCwmMcMA0GCSqGSIb3DQEBCwUAA4IBAQB8itdCFrS3j0L3p2KTRgU4kFCx uFLkgqB5AOhzGrpb3l2nMl5mOfw4zb28oS8Z9o68LXGkdqzyu9d+D04fAYwMMkIF Q/T0J0MYU4LtunsE4OdyyTXYXB/lOSpoXXGOHWvvXKBumA65wuErbrl9J9T7J0NE acF1iAYcav+H38OrszqHcKV93kZWiprZVo9Hge4f7+UCObCR9dvPdhX0ULwR++Gd xCbyQ5oxjDrIiR9WdPGnKZDDHjjLowoZf67jZL6np26y/YGXCL6/T9sgLVGj1f0L Y7/q1/AvtF4YwThthHHLYOQJ/BcEZgkCPFYyKYbzaPLFqfkYbB70ven1Xra1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:41 2026 by rpki-client