This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa File: kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa (raw, json) Hash identifier: eM3a4CHDiPxCoPRiTlT4LzKEhGGZUAXh/d8bAjKFKxA= Subject key identifier: 90:E4:72:1F:5C:E4:E2:4A:55:55:97:0D:F9:11:44:39:A3:E9:09:84 Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1 Certificate serial: 019B7C130BFAB51925535F73347C044BF683 Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21051 IP address blocks: 95.163.32.0/23 maxlen: 23 95.163.32.0/24 maxlen: 24 95.163.33.0/24 maxlen: 24 178.22.90.0/23 maxlen: 23 178.22.90.0/24 maxlen: 24 178.22.91.0/24 maxlen: 24 178.22.92.0/23 maxlen: 23 195.211.20.0/24 maxlen: 24 195.211.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0b:fa:b5:19:25:53:5f:73:34:7c:04:4b:f6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1 Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90e4721f5ce4e24a5555970df9114439a3e90984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:ba:ff:c1:36:18:58:82:79:be:d2:8e:10: 54:a9:7b:c5:98:89:ed:6e:c5:ac:ca:f2:62:3e:61: 01:ca:91:ca:6a:b1:cd:f2:ca:9a:e1:4f:a8:ad:e1: 4f:b4:8a:7b:87:a2:61:94:10:0a:15:0a:ca:57:65: f4:ca:37:53:a3:08:78:86:c7:bb:1f:4a:f1:10:7e: c0:63:bc:95:54:d5:dc:85:a3:b5:19:db:05:42:f2: 57:d2:13:6d:24:1e:dc:ce:b7:db:9f:17:d1:4a:b5: 41:4f:a2:fb:0b:06:c6:47:04:9a:76:76:02:7f:a8: e0:bf:d7:4e:e4:31:37:20:c5:01:db:d0:71:d8:37: a1:a6:14:bb:50:2c:fc:22:fe:16:1c:6c:60:48:18: fb:7c:ae:a8:e1:5a:91:65:ed:1d:84:3d:48:56:55: 78:b0:13:da:f1:ce:e9:7a:b8:51:77:30:ac:d6:91: 29:9b:76:ff:b0:55:9b:05:c5:5c:03:f0:ba:b4:03: 5b:04:39:6a:a1:63:a6:c4:5a:5a:f2:3f:ca:b5:d9: 63:db:e2:4d:75:28:f5:8c:d9:a1:34:c5:63:e0:ff: 61:f4:cf:6e:fa:93:8b:d8:fe:6d:15:de:c0:ae:cc: d2:e4:d7:04:88:92:41:60:f5:98:a7:3a:27:5c:a4: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:72:1F:5C:E4:E2:4A:55:55:97:0D:F9:11:44:39:A3:E9:09:84 X509v3 Authority Key Identifier: keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.163.32.0/23 178.22.90.0-178.22.93.255 195.211.20.0/23 Signature Algorithm: sha256WithRSAEncryption 71:f8:13:d2:95:a5:d1:40:9a:58:12:eb:76:8d:7b:ef:e3:47: 70:55:df:0e:53:ad:a0:f9:f1:78:38:4f:d5:8a:31:10:9f:da: a8:04:5c:11:50:7e:08:b9:29:e0:7f:9d:4b:80:dd:b9:3d:ca: 27:bf:85:be:c2:be:b0:23:f2:70:00:cb:e6:50:ee:51:d8:e1: 70:39:a9:84:90:03:9c:0f:e3:08:6e:ac:53:4c:98:f8:7a:13: d1:74:73:1c:a8:f6:ce:c9:61:46:5c:70:c3:94:c2:78:b3:af: 9b:fd:f2:9c:82:a7:e8:0d:cf:44:68:f3:a5:4c:f8:1b:49:37: 3f:8b:f2:74:f7:4d:72:8e:1b:86:88:70:f4:31:f1:7a:16:dc: 9f:8d:ef:7f:83:e1:65:51:75:20:f2:0f:b9:6a:eb:fc:ef:61: 8a:63:7d:d9:6f:51:26:3e:ed:72:26:ba:ec:90:64:3b:c7:e0: 9c:1b:77:fc:5c:53:dd:99:a7:ba:64:b6:86:77:9b:97:c2:89: a4:20:3e:39:e2:75:77:c1:80:e6:4b:e0:98:72:21:25:84:a5: ca:1b:59:cb:bb:4f:75:03:a2:b8:ce:23:64:1d:b7:5e:18:c5: 5a:88:a9:18:30:0a:26:0c:d6:99:d5:ec:89:ac:66:a0:4d:7b: a8:1a:6b:1d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8Ewv6tRklU19zNHwES/aDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3 MWExZjEwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGU0NzIxZjVjZTRlMjRhNTU1NTk3MGRmOTExNDQzOWEzZTkwOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAq6/8E2GFiCeb7SjhBUqXvFmInt bsWsyvJiPmEBypHKarHN8sqa4U+oreFPtIp7h6JhlBAKFQrKV2X0yjdTowh4hse7 H0rxEH7AY7yVVNXchaO1GdsFQvJX0hNtJB7czrfbnxfRSrVBT6L7CwbGRwSadnYC f6jgv9dO5DE3IMUB29Bx2DehphS7UCz8Iv4WHGxgSBj7fK6o4VqRZe0dhD1IVlV4 sBPa8c7perhRdzCs1pEpm3b/sFWbBcVcA/C6tANbBDlqoWOmxFpa8j/Ktdlj2+JN dSj1jNmhNMVj4P9h9M9u+pOL2P5tFd7ArszS5NcEiJJBYPWYpzonXKSURQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJDkch9c5OJKVVWXDfkRRDmj6QmEMB8GA1UdIwQY MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt OTRkMWI4OWY4Y2IyLzEva09SeUgxems0a3BWVlpjTi1SRkVPYVBwQ1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBX6MgMAwD BAGyFloDBAGyFlwDBAHD0xQwDQYJKoZIhvcNAQELBQADggEBAHH4E9KVpdFAmlgS 63aNe+/jR3BV3w5TraD58Xg4T9WKMRCf2qgEXBFQfgi5KeB/nUuA3bk9yie/hb7C vrAj8nAAy+ZQ7lHY4XA5qYSQA5wP4whurFNMmPh6E9F0cxyo9s7JYUZccMOUwniz r5v98pyCp+gNz0Ro86VM+BtJNz+L8nT3TXKOG4aIcPQx8XoW3J+N73+D4WVRdSDy D7lq6/zvYYpjfdlvUSY+7XImuuyQZDvH4Jwbd/xcU92Zp7pktoZ3m5fCiaQgPjni dXfBgOZL4JhyISWEpcobWcu7T3UDorjOI2Qdt14YxVqIqRgwCiYM1pnV7ImsZqBN e6gaax0= -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:05 2026 by rpki-client