This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/igwMdaPVeZq3u3a2W5jJS_b0L5M.roa File: igwMdaPVeZq3u3a2W5jJS_b0L5M.roa (raw, json) Hash identifier: C9ttpwY5RPzDqWX4XDQVwla5pbbO0G/VsUYqR1jcOSI= Subject key identifier: 8A:0C:0C:75:A3:D5:79:9A:B7:BB:76:B6:5B:98:C9:4B:F6:F4:2F:93 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BEBE454EE9757384D12119BC19E11 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/igwMdaPVeZq3u3a2W5jJS_b0L5M.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50214 IP address blocks: 95.181.152.0/24 maxlen: 24 95.181.153.0/24 maxlen: 24 95.181.171.0/24 maxlen: 24 185.12.124.0/24 maxlen: 24 185.12.125.0/24 maxlen: 24 185.12.126.0/24 maxlen: 24 185.12.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:eb:e4:54:ee:97:57:38:4d:12:11:9b:c1:9e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a0c0c75a3d5799ab7bb76b65b98c94bf6f42f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:9a:05:6a:c4:e8:31:eb:05:3b:7f:40:76: a5:f5:6e:a6:26:3b:78:04:7a:32:bd:f2:33:d6:3e: cf:9b:0e:6c:b8:d4:39:f4:57:6f:68:53:65:4f:ce: 6e:da:7f:68:f8:82:48:93:05:41:97:5a:51:fb:37: c6:bd:17:d8:28:0b:58:09:0a:c3:7f:b4:78:33:95: f3:49:21:d7:77:c7:10:b7:22:27:d5:e7:d0:a7:e4: 43:99:90:14:2e:bf:9b:16:7d:72:d1:6e:5a:54:9e: 55:c8:79:98:99:ca:56:99:cb:c4:b0:61:ba:29:0b: 24:3d:d3:df:f0:d0:ae:9a:b0:02:72:4b:07:f6:12: ac:fc:f0:24:9e:10:6b:c1:44:a1:e5:4e:f9:73:f0: a8:49:19:8c:04:0d:3a:fb:3e:4f:45:60:ad:62:dc: 8b:27:1e:55:9f:0e:93:40:57:c1:de:c5:b8:74:fc: 55:ad:21:b1:9a:39:90:69:69:50:87:14:2d:5f:b5: bf:a0:c0:08:d9:29:8a:1e:46:24:0f:b8:de:36:fe: cc:b8:dc:57:1b:b5:b8:03:91:b9:f6:67:9e:b1:99: f5:6e:d5:e8:70:50:15:fa:0a:03:98:95:8b:4e:66: de:d7:7c:b5:89:74:4d:ee:c8:b2:f3:f2:99:4a:72: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0C:0C:75:A3:D5:79:9A:B7:BB:76:B6:5B:98:C9:4B:F6:F4:2F:93 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/igwMdaPVeZq3u3a2W5jJS_b0L5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.152.0/23 95.181.171.0/24 185.12.124.0/22 Signature Algorithm: sha256WithRSAEncryption 35:c2:70:3d:4d:85:58:e3:a7:95:db:01:42:df:65:ad:4c:9f: 4e:7b:67:9e:ef:cf:96:26:12:84:b3:d0:13:17:89:a1:80:28: 0b:47:aa:2e:46:d1:17:29:e3:6f:3c:5d:e2:1c:90:10:f3:e9: 9c:1b:8a:6e:f4:e5:0b:48:c4:2e:8d:5d:67:d1:74:1f:5a:f0: 29:e1:a5:a0:c5:b4:d8:23:25:86:76:c8:21:b4:09:00:9a:0f: 84:71:be:c1:b0:5f:78:b6:2a:bf:fa:37:f2:98:fa:0e:6f:7c: 78:6e:cf:38:0b:fd:41:c2:c8:7b:78:7e:ce:c7:f1:cb:9f:bb: 47:5d:08:3d:ed:34:f1:ae:87:e1:4f:1a:cb:76:c2:6f:e5:8e: d3:70:67:27:3e:bb:c3:7c:e0:5f:e3:20:42:99:ad:18:9e:84: 25:51:b6:1c:25:0d:1e:fc:27:e9:c1:ce:3d:31:ac:20:21:e4: 79:80:84:c6:74:d0:ef:3b:3e:f5:9d:9b:18:db:ee:9b:7c:22: 21:34:82:c7:74:6c:6f:a4:1e:2a:4f:ca:c0:fa:0d:9b:81:56: 13:34:14:6e:6f:0f:c0:ba:60:62:37:7d:39:30:9f:d0:4e:bc: 9e:2e:c8:19:e6:0f:31:ba:95:f3:6b:05:81:85:dc:bf:b8:52: 15:bf:1a:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W+vkVO6XVzhNEhGbwZ4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTBjMGM3NWEzZDU3OTlhYjdiYjc2YjY1Yjk4Yzk0YmY2ZjQyZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlSaBWrE6DHrBTt/QHal9W6mJjt4 BHoyvfIz1j7Pmw5suNQ59FdvaFNlT85u2n9o+IJIkwVBl1pR+zfGvRfYKAtYCQrD f7R4M5XzSSHXd8cQtyIn1efQp+RDmZAULr+bFn1y0W5aVJ5VyHmYmcpWmcvEsGG6 KQskPdPf8NCumrACcksH9hKs/PAknhBrwUSh5U75c/CoSRmMBA06+z5PRWCtYtyL Jx5Vnw6TQFfB3sW4dPxVrSGxmjmQaWlQhxQtX7W/oMAI2SmKHkYkD7jeNv7MuNxX G7W4A5G59meesZn1btXocFAV+goDmJWLTmbe13y1iXRN7siy8/KZSnJnmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIoMDHWj1Xmat7t2tluYyUv29C+TMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvaWd3TWRhUFZlWnEzdTNhMlc1akpTX2IwTDVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBX7WYAwQA X7WrAwQCuQx8MA0GCSqGSIb3DQEBCwUAA4IBAQA1wnA9TYVY46eV2wFC32WtTJ9O e2ee78+WJhKEs9ATF4mhgCgLR6ouRtEXKeNvPF3iHJAQ8+mcG4pu9OULSMQujV1n 0XQfWvAp4aWgxbTYIyWGdsghtAkAmg+Ecb7BsF94tiq/+jfymPoOb3x4bs84C/1B wsh7eH7Ox/HLn7tHXQg97TTxrofhTxrLdsJv5Y7TcGcnPrvDfOBf4yBCma0YnoQl UbYcJQ0e/Cfpwc49MawgIeR5gITGdNDvOz71nZsY2+6bfCIhNILHdGxvpB4qT8rA +g2bgVYTNBRubw/AumBiN305MJ/QTryeLsgZ5g8xupXzawWBhdy/uFIVvxpO -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:16 2026 by rpki-client