This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/rK5QYt727S_N217kOz5a7i6vJ3I.roa File: rK5QYt727S_N217kOz5a7i6vJ3I.roa (raw, json) Hash identifier: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80= Subject key identifier: AC:AE:50:62:DE:F6:ED:2F:CD:DB:5E:E4:3B:3E:5A:EE:2E:AF:27:72 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BE94D935D53ADFA3E3A58C442695D Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/rK5QYt727S_N217kOz5a7i6vJ3I.roa Signing time: Fri 02 Jan 2026 06:18:54 +0000 ROA not before: Fri 02 Jan 2026 06:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8342 IP address blocks: 95.181.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e9:4d:93:5d:53:ad:fa:3e:3a:58:c4:42:69:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acae5062def6ed2fcddb5ee43b3e5aee2eaf2772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:78:99:af:08:1f:4e:7d:a5:a8:c2:da:4f: 2c:6a:e4:31:d0:01:1e:78:ad:84:cb:74:d2:61:30: b8:34:ed:2b:e7:aa:b6:85:91:86:0f:22:78:fd:c8: 14:1c:ad:43:d4:2a:c1:3c:20:db:d9:35:79:3e:bf: 02:eb:c8:4d:18:20:e8:f7:a9:07:7f:7e:17:75:2b: 42:ea:16:7f:40:ff:6f:c3:bb:3b:8c:58:18:2d:65: 02:16:ca:be:c4:ea:50:2a:84:49:83:cc:1f:65:3a: 12:cb:42:5b:20:b2:00:9e:3b:62:85:b1:01:02:d0: ff:2e:f4:39:09:03:eb:e8:43:a0:d9:a2:e7:c3:20: 66:54:94:4e:5f:d4:f8:ed:ab:04:31:4c:39:a5:ce: a3:3a:b1:d8:d3:08:b5:f9:b6:2a:31:50:01:89:21: 39:06:5d:5b:06:4e:d3:10:0a:4c:3b:f1:5e:cd:86: 29:d2:0f:e6:d3:0c:ea:0a:6c:65:62:84:f7:5a:e3: 56:9a:ec:fa:f1:27:24:3c:df:2e:37:c7:dc:43:b1: 69:f1:24:ba:ef:fa:ea:72:d0:2e:9e:ef:ca:1d:4c: 8e:09:70:80:8c:8f:17:b2:23:0b:b8:2f:94:de:37: 9b:5e:a9:72:0c:e2:2a:e8:24:e8:aa:df:14:f4:64: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AE:50:62:DE:F6:ED:2F:CD:DB:5E:E4:3B:3E:5A:EE:2E:AF:27:72 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/rK5QYt727S_N217kOz5a7i6vJ3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.163.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:fc:d6:55:fd:a1:f1:92:47:3c:00:3b:5c:1f:96:ff:e6:8b: e7:99:2c:87:ff:a7:15:47:d9:a5:92:47:8c:7c:9b:91:d2:d0: 51:44:a5:4a:44:18:bb:56:a9:c5:03:9b:50:25:42:b2:0d:d1: 59:53:a3:95:75:71:90:74:a7:d4:b6:85:d6:19:86:a2:a9:ca: 8c:07:89:1e:83:fe:73:38:24:a3:99:b2:2f:f9:46:79:de:3e: a7:93:76:b8:5e:4a:61:d0:33:3c:29:c8:14:c4:b0:93:b8:18: 14:0b:a8:98:03:c2:f4:94:70:45:52:b1:ee:75:57:36:a6:68: c8:cb:15:90:3d:1a:8b:ae:87:69:ec:50:07:ce:cb:ac:65:4c: aa:db:8e:3c:10:0d:20:79:d0:0c:1c:3f:77:8e:09:8d:cc:25: e1:dd:96:8e:b8:d4:a2:25:66:23:c2:a8:a8:7c:4e:5c:d6:88: df:b5:da:c4:46:7a:ad:23:bc:4c:fa:85:6a:2d:3b:d3:f4:53: 00:2d:91:f9:4f:36:29:fb:1d:cb:52:57:95:d5:e2:47:81:cf: d4:c3:3e:35:64:08:12:19:64:07:40:4f:e7:aa:94:74:cf:44: 49:4d:07:8d:86:c7:89:62:38:ee:55:a8:a6:7b:d9:1a:e6:fe: 1c:94:5f:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+lNk11Trfo+OljEQmldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2FlNTA2MmRlZjZlZDJmY2RkYjVlZTQzYjNlNWFlZTJlYWYyNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7p4ma8IH059pajC2k8sauQx0AEe eK2Ey3TSYTC4NO0r56q2hZGGDyJ4/cgUHK1D1CrBPCDb2TV5Pr8C68hNGCDo96kH f34XdStC6hZ/QP9vw7s7jFgYLWUCFsq+xOpQKoRJg8wfZToSy0JbILIAnjtihbEB AtD/LvQ5CQPr6EOg2aLnwyBmVJROX9T47asEMUw5pc6jOrHY0wi1+bYqMVABiSE5 Bl1bBk7TEApMO/FezYYp0g/m0wzqCmxlYoT3WuNWmuz68SckPN8uN8fcQ7Fp8SS6 7/rqctAunu/KHUyOCXCAjI8XsiMLuC+U3jebXqlyDOIq6CToqt8U9GQGWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKyuUGLe9u0vzdte5Ds+Wu4urydyMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvcks1UVl0NzI3U19OMjE3a096NWE3aTZ2SjNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WjMA0G CSqGSIb3DQEBCwUAA4IBAQAe/NZV/aHxkkc8ADtcH5b/5ovnmSyH/6cVR9mlkkeM fJuR0tBRRKVKRBi7VqnFA5tQJUKyDdFZU6OVdXGQdKfUtoXWGYaiqcqMB4keg/5z OCSjmbIv+UZ53j6nk3a4Xkph0DM8KcgUxLCTuBgUC6iYA8L0lHBFUrHudVc2pmjI yxWQPRqLrodp7FAHzsusZUyq2448EA0gedAMHD93jgmNzCXh3ZaOuNSiJWYjwqio fE5c1ojftdrERnqtI7xM+oVqLTvT9FMALZH5TzYp+x3LUleV1eJHgc/Uwz41ZAgS GWQHQE/nqpR0z0RJTQeNhseJYjjuVaime9ka5v4clF8m -----END CERTIFICATE-----Generated at Sun Jan 25 21:07:01 2026 by rpki-client