This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/hDJpoLdkYyoug9gZ3h3k-YcwQ80.roa File: hDJpoLdkYyoug9gZ3h3k-YcwQ80.roa (raw, json) Hash identifier: 7dfmPXPcTxj+YEWd+CMo4fhor1aKXrGn8E651xxYs6A= Subject key identifier: 84:32:69:A0:B7:64:63:2A:2E:83:D8:19:DE:1D:E4:F9:87:30:43:CD Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c Certificate serial: 019B7B35B0A14BFABB6DF2734B8194318546 Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/hDJpoLdkYyoug9gZ3h3k-YcwQ80.roa Signing time: Thu 01 Jan 2026 20:17:54 +0000 ROA not before: Thu 01 Jan 2026 20:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51849 IP address blocks: 95.215.72.0/24 maxlen: 24 95.215.73.0/24 maxlen: 24 95.215.74.0/24 maxlen: 24 95.215.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b0:a1:4b:fa:bb:6d:f2:73:4b:81:94:31:85:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=843269a0b764632a2e83d819de1de4f9873043cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:33:c3:bd:69:6c:a9:17:65:d9:cf:b2:5d: 53:76:2d:8a:a3:37:17:e9:48:cf:d0:d5:00:57:d5: aa:5c:c3:00:25:a6:5f:86:e1:e4:58:aa:8f:dd:c4: 63:85:39:14:b4:79:90:6b:32:a9:5f:e2:8c:2d:64: 76:13:3c:58:0c:1b:6a:0c:98:2b:8e:7f:92:42:b0: 4c:09:97:1b:17:0d:b6:73:3a:45:41:d1:c2:cf:46: 98:de:5f:36:d8:4a:72:87:1d:98:b8:7b:59:dc:e8: 06:1e:6c:e3:5c:26:70:1b:b1:11:62:6e:2c:3c:51: 34:d8:37:87:4b:eb:de:29:28:48:fa:00:d8:d8:bb: 6d:3d:66:d8:56:f3:bf:ad:1d:0c:14:34:44:1a:65: bf:81:d1:7a:da:02:12:f1:6f:03:29:5e:94:b9:3c: dd:c2:ad:a4:e8:d7:74:f4:c9:8b:88:e2:c9:3f:12: 69:cf:35:b9:25:18:55:5c:fb:b4:07:54:b2:c0:e6: 1b:9a:71:b2:7b:b1:4d:5a:b7:0f:d2:d3:e0:99:97: 95:e7:77:61:7e:5d:36:86:92:0e:4e:1d:40:c8:42: 7a:e7:b1:47:b7:a5:d0:ca:60:1e:8a:4d:a3:86:40: 4d:58:33:8c:92:67:b2:f1:e9:e2:17:b2:99:25:c9: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:69:A0:B7:64:63:2A:2E:83:D8:19:DE:1D:E4:F9:87:30:43:CD X509v3 Authority Key Identifier: keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/hDJpoLdkYyoug9gZ3h3k-YcwQ80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.72.0/22 Signature Algorithm: sha256WithRSAEncryption 25:ff:91:2c:b9:c6:35:dd:a7:2d:fc:46:99:9f:57:fe:1d:34: 76:47:08:3d:4f:1d:c9:2d:f0:46:70:4e:78:2e:b9:e6:a9:cc: 37:80:1a:8e:63:1a:b6:9c:b7:61:10:79:12:3b:ef:24:ab:ed: ef:6c:73:49:a6:50:85:69:a1:7f:3e:f9:fe:2d:2f:9a:85:23: 9c:5e:5f:6c:3b:b0:17:c1:3c:26:83:ee:15:ef:b2:23:cb:ec: 0b:00:5e:d2:e5:db:4e:02:e5:8c:3f:34:d6:3d:3a:50:11:d5: ed:85:64:30:84:5b:cb:97:e6:8f:c8:f8:77:38:67:bf:8b:37: 15:95:7b:c8:d1:1f:85:d4:c6:ea:f6:ed:61:f5:e5:42:29:f1: 14:46:b1:61:f5:1b:cd:25:22:f7:dc:6c:20:17:00:aa:0a:e2: 56:c8:7d:39:b1:3e:e3:1e:22:23:74:93:2e:b7:9c:2c:48:21: 18:de:db:d8:b3:56:cf:3d:78:fe:78:a5:fa:c5:54:73:48:c2: bb:ec:b5:b3:51:b9:77:bb:44:87:3d:b4:04:25:12:b1:06:df: 4a:72:17:0f:a0:8f:f8:50:b3:86:d2:05:7a:87:9b:cc:3d:a5: d1:f5:ee:cf:b4:e0:bf:e9:34:10:90:7c:be:c0:98:7b:d5:e6: e3:36:13:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbChS/q7bfJzS4GUMYVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl MDI2N2MwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDMyNjlhMGI3NjQ2MzJhMmU4M2Q4MTlkZTFkZTRmOTg3MzA0M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk0zw71pbKkXZdnPsl1Tdi2KozcX 6UjP0NUAV9WqXMMAJaZfhuHkWKqP3cRjhTkUtHmQazKpX+KMLWR2EzxYDBtqDJgr jn+SQrBMCZcbFw22czpFQdHCz0aY3l822Epyhx2YuHtZ3OgGHmzjXCZwG7ERYm4s PFE02DeHS+veKShI+gDY2LttPWbYVvO/rR0MFDREGmW/gdF62gIS8W8DKV6UuTzd wq2k6Nd09MmLiOLJPxJpzzW5JRhVXPu0B1SywOYbmnGye7FNWrcP0tPgmZeV53dh fl02hpIOTh1AyEJ657FHt6XQymAeik2jhkBNWDOMkmey8eniF7KZJcm3/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQyaaC3ZGMqLoPYGd4d5PmHMEPNMB8GA1UdIwQY MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt MzQwMThkNWM5ZGY1LzEvaERKcG9MZGtZeW91ZzlnWjNoM2stWWN3UTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1 LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9dIMA0G CSqGSIb3DQEBCwUAA4IBAQAl/5EsucY13act/EaZn1f+HTR2Rwg9Tx3JLfBGcE54 Lrnmqcw3gBqOYxq2nLdhEHkSO+8kq+3vbHNJplCFaaF/Pvn+LS+ahSOcXl9sO7AX wTwmg+4V77Ijy+wLAF7S5dtOAuWMPzTWPTpQEdXthWQwhFvLl+aPyPh3OGe/izcV lXvI0R+F1Mbq9u1h9eVCKfEURrFh9RvNJSL33GwgFwCqCuJWyH05sT7jHiIjdJMu t5wsSCEY3tvYs1bPPXj+eKX6xVRzSMK77LWzUbl3u0SHPbQEJRKxBt9KchcPoI/4 ULOG0gV6h5vMPaXR9e7PtOC/6TQQkHy+wJh71ebjNhN8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:16:17 2026 by rpki-client