This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/c4YRVrrYx--dsVjGMZzmOagHjlw.roa File: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (raw, json) Hash identifier: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA= Subject key identifier: 73:86:11:56:BA:D8:C7:EF:9D:B1:58:C6:31:9C:E6:39:A8:07:8E:5C Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BEC7166B546DA3DD1D4BBC69A92F7 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/c4YRVrrYx--dsVjGMZzmOagHjlw.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64419 IP address blocks: 95.181.148.0/24 maxlen: 24 95.181.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ec:71:66:b5:46:da:3d:d1:d4:bb:c6:9a:92:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73861156bad8c7ef9db158c6319ce639a8078e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:eb:e6:dc:a8:c7:08:d8:6b:ab:fd:f0:1d: d1:f2:7f:9f:0e:d3:e7:00:ef:2a:e9:ee:62:dc:b9: 6f:07:a2:7f:dc:be:e6:4d:5b:46:ef:05:ed:93:d1: c9:6a:88:d0:8c:1f:ff:69:c1:6f:69:98:d9:ca:b1: 99:87:06:4b:25:93:58:75:da:ec:ec:ea:c7:1b:02: a9:65:cf:5a:09:5f:09:f6:10:53:28:17:00:0d:6a: 2f:6a:be:d3:f4:ed:87:82:c0:f8:da:56:7d:c3:41: 6b:a0:35:d9:2d:f4:07:18:f5:02:2b:2f:f1:88:ef: 7f:a3:e3:d2:9f:80:2d:ea:70:be:51:fc:a2:f4:f8: 47:de:6e:35:02:12:b1:c6:8c:aa:71:91:58:f4:b6: df:fe:b9:39:d5:0b:24:2f:8b:37:1d:86:bd:9b:60: 48:b6:52:2b:91:21:a7:23:4e:7f:37:4e:e5:dc:33: 19:a6:ba:4b:09:ed:ea:e9:fc:40:73:1b:b7:dd:a3: a1:dc:a4:99:eb:f5:0e:a8:aa:24:f7:8a:a3:0a:9b: f5:dd:7c:68:e1:66:c4:4b:7f:40:da:d4:f1:c8:9e: 5f:3e:7e:7c:49:b8:b5:72:e2:b6:d7:dc:11:a8:71: 07:ac:d7:52:38:7d:bc:a2:c9:ba:df:d4:10:43:9d: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:86:11:56:BA:D8:C7:EF:9D:B1:58:C6:31:9C:E6:39:A8:07:8E:5C X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/c4YRVrrYx--dsVjGMZzmOagHjlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.148.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:77:87:dd:e4:6c:d5:1c:ea:6a:7f:7c:82:28:07:6d:7c:d9: 8e:5e:fd:36:e5:0c:e0:fa:34:9e:a4:17:a7:fe:4e:81:9c:70: 75:b1:61:fe:6c:94:01:00:9c:bf:ff:a5:a6:c3:16:5a:6c:ee: 47:8c:70:af:d3:43:a5:f0:ab:02:e2:2b:0e:90:c8:d3:b3:51: 3e:c4:91:94:d2:cb:c7:63:53:75:e3:ac:8e:02:73:43:b1:6a: c4:75:5e:15:81:9d:36:bc:99:9e:5b:97:23:84:d9:7d:16:b1: ce:d3:9f:43:17:db:ba:04:f4:4c:93:a3:4e:e8:3c:0b:b0:13: 85:0f:0f:c4:01:96:52:f6:60:05:e9:a6:1e:0e:be:e5:0d:09: 4a:c6:06:5e:7d:9b:84:36:71:3e:f0:73:e9:ad:42:58:73:dd: a7:5d:b2:1a:a9:a8:b7:fa:36:59:b8:4a:85:55:98:95:31:2c: d8:a3:3b:98:cc:05:03:91:03:df:65:06:1a:31:bc:7f:bc:33: 4a:91:ef:fa:2e:8e:a7:45:48:c3:ad:00:ba:e4:a9:43:c7:fc: 27:56:32:ba:dc:cd:27:97:08:5a:f0:e0:6a:61:ba:18:d5:c3: fc:f7:eb:fc:8a:c5:b6:49:0b:c4:2f:a8:f5:d6:e9:8d:96:12: 5e:51:38:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+xxZrVG2j3R1LvGmpL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzg2MTE1NmJhZDhjN2VmOWRiMTU4YzYzMTljZTYzOWE4MDc4ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE/r5tyoxwjYa6v98B3R8n+fDtPn AO8q6e5i3LlvB6J/3L7mTVtG7wXtk9HJaojQjB//acFvaZjZyrGZhwZLJZNYddrs 7OrHGwKpZc9aCV8J9hBTKBcADWovar7T9O2HgsD42lZ9w0FroDXZLfQHGPUCKy/x iO9/o+PSn4At6nC+Ufyi9PhH3m41AhKxxoyqcZFY9Lbf/rk51QskL4s3HYa9m2BI tlIrkSGnI05/N07l3DMZprpLCe3q6fxAcxu33aOh3KSZ6/UOqKok94qjCpv13Xxo 4WbES39A2tTxyJ5fPn58Sbi1cuK219wRqHEHrNdSOH28osm639QQQ52WkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOGEVa62MfvnbFYxjGc5jmoB45cMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvYzRZUlZycll4LS1kc1ZqR01aem1PYWdIamx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX7WUMA0G CSqGSIb3DQEBCwUAA4IBAQA+d4fd5GzVHOpqf3yCKAdtfNmOXv025Qzg+jSepBen /k6BnHB1sWH+bJQBAJy//6WmwxZabO5HjHCv00Ol8KsC4isOkMjTs1E+xJGU0svH Y1N146yOAnNDsWrEdV4VgZ02vJmeW5cjhNl9FrHO059DF9u6BPRMk6NO6DwLsBOF Dw/EAZZS9mAF6aYeDr7lDQlKxgZefZuENnE+8HPprUJYc92nXbIaqai3+jZZuEqF VZiVMSzYozuYzAUDkQPfZQYaMbx/vDNKke/6Lo6nRUjDrQC65KlDx/wnVjK63M0n lwha8OBqYboY1cP89+v8isW2SQvEL6j11umNlhJeUTgD -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:37 2026 by rpki-client