This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa File: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (raw, json) Hash identifier: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ= Subject key identifier: D5:3A:79:8D:B6:A0:A5:B3:F7:6C:1A:2C:18:9C:E5:FA:F1:CD:C1:34 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BEF9B447B465B023ACA01836C0E5F Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 95.181.151.0/24 maxlen: 24 95.181.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ef:9b:44:7b:46:5b:02:3a:ca:01:83:6c:0e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d53a798db6a0a5b3f76c1a2c189ce5faf1cdc134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:d7:db:90:22:87:02:15:06:ef:13:21:69: de:ca:9c:e5:ab:40:15:59:49:f9:35:9a:bd:fb:8b: 19:8c:ba:30:37:5c:ef:34:5c:27:ce:94:b5:59:e0: d3:8b:c5:4c:f7:48:1e:58:2c:9d:68:01:5d:dc:80: ac:9c:41:37:c8:c8:83:ff:fd:94:03:40:83:11:e0: b4:db:c0:78:f8:58:51:94:6d:64:60:60:90:ae:9a: 31:0e:e2:19:18:ac:d1:26:a5:19:54:8c:4c:f1:4e: cf:3b:22:2a:57:2f:7d:b2:a2:01:6e:54:b7:a8:9d: 5d:e0:03:1b:92:98:d7:12:75:dd:0b:41:d2:23:3f: 30:00:96:79:51:4b:c7:8d:03:44:03:69:eb:7e:b7: c9:c3:37:e9:00:1e:b2:ea:a8:6b:4c:4c:a7:3a:35: 7a:b3:0f:5f:bd:ba:32:a3:4b:3c:76:88:0d:99:07: e0:80:39:29:f2:03:e6:eb:f0:20:17:da:b8:1c:0a: 08:b7:bf:64:5e:70:15:4e:09:88:4a:7d:2e:29:71: 75:c4:00:ae:71:15:df:e0:db:71:32:42:0a:a9:b1: 84:66:32:8b:4b:46:ca:94:40:d1:21:5c:c2:82:e3: 37:09:cc:c6:86:6d:b4:ca:df:b9:54:05:0b:aa:6b: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:79:8D:B6:A0:A5:B3:F7:6C:1A:2C:18:9C:E5:FA:F1:CD:C1:34 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.151.0/24 95.181.161.0/24 Signature Algorithm: sha256WithRSAEncryption 20:c4:63:e6:f3:3f:6a:cd:16:6a:28:dd:e9:a0:ba:a3:58:e4: f2:3c:a7:54:51:62:a6:b7:39:13:79:4f:4a:bb:ce:b6:cf:c4: 16:cd:27:1e:55:3e:82:1b:f8:a8:60:90:b8:05:ee:fe:af:71: 29:e7:ef:ff:c9:d6:99:b4:d3:cc:dc:53:65:35:74:ca:b6:bc: bb:b9:df:79:e5:bf:5a:5a:37:f0:24:8e:68:ad:39:74:7f:5b: dc:04:6e:47:6c:c4:b3:66:c3:54:13:aa:64:b7:68:a0:ec:88: f0:19:cc:53:6b:89:e6:9b:3f:b7:6c:e6:3c:e0:dc:43:3d:b0: 48:3a:57:91:fd:eb:df:36:3b:40:cc:66:58:77:b6:85:e3:c5: 75:d0:e8:f5:ec:92:b0:45:8a:a4:bc:7b:02:d1:21:ba:4a:ad: fb:cc:cb:bd:a1:d8:49:fd:72:33:7f:3a:3b:d6:fd:30:e1:05: f0:f2:c9:97:87:7d:20:0e:c4:b9:05:28:eb:df:3e:a3:3c:48: 09:b3:db:64:76:f5:e2:bc:e4:1d:fa:17:29:df:71:44:95:a5: 48:c5:69:02:2d:b7:c9:a1:b2:e4:7d:fa:4e:bf:97:26:66:4c: 23:c3:8d:2f:ea:0e:4c:99:e3:7e:61:63:3c:aa:c2:e5:2f:fb: a5:03:95:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W++bRHtGWwI6ygGDbA5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTNhNzk4ZGI2YTBhNWIzZjc2YzFhMmMxODljZTVmYWYxY2RjMTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5XX25AihwIVBu8TIWneypzlq0AV WUn5NZq9+4sZjLowN1zvNFwnzpS1WeDTi8VM90geWCydaAFd3ICsnEE3yMiD//2U A0CDEeC028B4+FhRlG1kYGCQrpoxDuIZGKzRJqUZVIxM8U7POyIqVy99sqIBblS3 qJ1d4AMbkpjXEnXdC0HSIz8wAJZ5UUvHjQNEA2nrfrfJwzfpAB6y6qhrTEynOjV6 sw9fvboyo0s8dogNmQfggDkp8gPm6/AgF9q4HAoIt79kXnAVTgmISn0uKXF1xACu cRXf4NtxMkIKqbGEZjKLS0bKlEDRIVzCguM3CczGhm20yt+5VAULqmvIQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNU6eY22oKWz92waLBic5frxzcE0MB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvMVRwNWpiYWdwYlAzYkJvc0dKemwtdkhOd1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX7WXAwQA X7WhMA0GCSqGSIb3DQEBCwUAA4IBAQAgxGPm8z9qzRZqKN3poLqjWOTyPKdUUWKm tzkTeU9Ku862z8QWzSceVT6CG/ioYJC4Be7+r3Ep5+//ydaZtNPM3FNlNXTKtry7 ud955b9aWjfwJI5orTl0f1vcBG5HbMSzZsNUE6pkt2ig7IjwGcxTa4nmmz+3bOY8 4NxDPbBIOleR/evfNjtAzGZYd7aF48V10Oj17JKwRYqkvHsC0SG6Sq37zMu9odhJ /XIzfzo71v0w4QXw8smXh30gDsS5BSjr3z6jPEgJs9tkdvXivOQd+hcp33FElaVI xWkCLbfJobLkffpOv5cmZkwjw40v6g5MmeN+YWM8qsLlL/ulA5XX -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:21 2026 by rpki-client