This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/4fVpw4jDmLgLlVEJ14HcYjkhURc.roa File: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (raw, json) Hash identifier: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ= Subject key identifier: E1:F5:69:C3:88:C3:98:B8:0B:95:51:09:D7:81:DC:62:39:21:51:17 Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Certificate serial: 019B797E4D3DB15FE109096BC74504CF7CE5 Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/4fVpw4jDmLgLlVEJ14HcYjkhURc.roa Signing time: Thu 01 Jan 2026 12:17:58 +0000 ROA not before: Thu 01 Jan 2026 12:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 195.95.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4d:3d:b1:5f:e1:09:09:6b:c7:45:04:cf:7c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1f569c388c398b80b955109d781dc6239215117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:6d:78:43:80:f4:be:f3:b3:16:73:35:e7: 53:b9:cb:48:5e:a0:d1:bf:8a:d3:7b:2a:e7:07:dc: 89:7c:11:4d:9b:35:97:a3:43:10:84:cf:cc:a2:6a: 4f:e3:96:07:e3:78:fe:78:42:f5:b5:50:9f:4a:2d: 5a:8b:f4:a8:a3:32:16:08:ec:0b:fa:a8:c9:85:49: e1:00:ba:df:38:c5:76:cd:4c:b9:eb:2f:37:0f:79: 4f:f0:ba:d6:a7:38:43:e1:80:86:a0:10:3f:3e:fd: bf:f4:22:87:bc:c7:bf:93:df:f0:b2:dd:e9:3c:65: 07:e5:03:2b:b6:24:44:02:45:26:d1:e5:b9:35:43: 2b:56:fe:44:1b:f5:d7:cc:dc:81:0d:b1:a2:ea:81: 25:bd:2b:63:88:1e:c6:b8:09:9f:74:b8:c7:65:f1: 58:eb:44:a0:f1:96:ef:fe:e5:cb:2a:c5:a0:55:0c: c2:fc:02:20:7c:e6:43:40:37:a1:ef:49:b3:d1:91: 13:9a:f0:4b:80:5f:ac:72:5c:f1:39:5a:f3:16:c9: 74:6e:14:00:53:c1:9e:04:ca:dc:f2:f4:92:bf:e5: 8e:98:b6:86:09:d8:a8:f4:e7:c6:09:fd:5f:bb:a6: 94:dc:2d:63:84:bb:d4:90:ca:71:e3:71:07:59:61: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:69:C3:88:C3:98:B8:0B:95:51:09:D7:81:DC:62:39:21:51:17 X509v3 Authority Key Identifier: keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/4fVpw4jDmLgLlVEJ14HcYjkhURc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.162.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6a:18:aa:bf:b9:36:84:4e:cc:7b:b1:b5:fd:17:5e:98:ef: 7d:de:7a:1d:1b:ad:0d:b4:cc:79:d8:81:f2:6b:a1:3e:5d:8e: 0d:d0:55:b2:d3:92:77:bf:7a:d3:0e:92:89:c1:21:d2:02:aa: 6f:65:7c:a3:db:a1:b1:08:6a:98:6a:b1:3c:24:1d:18:0a:78: 76:37:6b:bb:15:72:63:82:86:da:f2:8e:6b:ff:95:c3:fd:e4: 5f:12:70:d8:53:cd:3a:0d:64:2e:ed:39:e6:7e:a6:0c:04:07: 3a:b2:83:fe:bd:d6:b0:e1:2a:8c:36:25:09:19:7a:e0:61:48: 00:d5:cc:4f:ac:d8:f3:26:04:87:1f:9c:de:6e:1c:bb:cf:bc: 54:79:8f:f2:03:4d:82:78:58:ee:cc:17:f7:0e:3f:0f:5a:21: c1:20:0c:56:47:4c:58:5e:55:b8:74:39:09:7f:5a:3e:bf:64: 3e:86:5d:78:8f:6a:ff:20:18:0d:1e:52:9d:15:77:ed:db:58: 18:a6:3e:d9:ec:99:24:c0:97:89:18:c1:1f:45:ff:e6:69:65: 1d:80:82:6f:63:59:40:45:9c:0e:60:b0:72:47:b3:4c:e4:23: 5f:f0:bc:1d:c6:e2:0c:57:c9:fa:7f:db:04:b1:a7:19:8c:05: 49:65:a4:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fk09sV/hCQlrx0UEz3zlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh NTRkZjgwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWY1NjljMzg4YzM5OGI4MGI5NTUxMDlkNzgxZGM2MjM5MjE1MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7NteEOA9L7zsxZzNedTuctIXqDR v4rTeyrnB9yJfBFNmzWXo0MQhM/MompP45YH43j+eEL1tVCfSi1ai/SoozIWCOwL +qjJhUnhALrfOMV2zUy56y83D3lP8LrWpzhD4YCGoBA/Pv2/9CKHvMe/k9/wst3p PGUH5QMrtiREAkUm0eW5NUMrVv5EG/XXzNyBDbGi6oElvStjiB7GuAmfdLjHZfFY 60Sg8Zbv/uXLKsWgVQzC/AIgfOZDQDeh70mz0ZETmvBLgF+sclzxOVrzFsl0bhQA U8GeBMrc8vSSv+WOmLaGCdio9OfGCf1fu6aU3C1jhLvUkMpx43EHWWEo+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOH1acOIw5i4C5VRCdeB3GI5IVEXMB8GA1UdIwQY MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct ZmRiYzdjNGNmNDllLzEvNGZWcHc0akRtTGdMbFZFSjE0SGNZamtoVVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+iMA0G CSqGSIb3DQEBCwUAA4IBAQA9ahiqv7k2hE7Me7G1/RdemO993nodG60NtMx52IHy a6E+XY4N0FWy05J3v3rTDpKJwSHSAqpvZXyj26GxCGqYarE8JB0YCnh2N2u7FXJj goba8o5r/5XD/eRfEnDYU806DWQu7TnmfqYMBAc6soP+vdaw4SqMNiUJGXrgYUgA 1cxPrNjzJgSHH5zebhy7z7xUeY/yA02CeFjuzBf3Dj8PWiHBIAxWR0xYXlW4dDkJ f1o+v2Q+hl14j2r/IBgNHlKdFXft21gYpj7Z7JkkwJeJGMEfRf/maWUdgIJvY1lA RZwOYLByR7NM5CNf8LwdxuIMV8n6f9sEsacZjAVJZaTF -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client