This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa File: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (raw, json) Hash identifier: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ= Subject key identifier: 9C:46:03:98:E5:30:9B:BB:CF:25:46:7D:DE:AC:C9:6F:0F:BB:1A:57 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFDF4187A41E3B319D862652F7D6F Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213537 IP address blocks: 95.130.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fd:f4:18:7a:41:e3:b3:19:d8:62:65:2f:7d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c460398e5309bbbcf25467ddeacc96f0fbb1a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:eb:3e:35:42:cf:8b:8f:9a:02:d3:ee:e3: 59:d4:32:50:13:41:53:19:ca:25:14:ce:78:53:8f: 6e:f7:4b:ff:2a:1a:6f:7c:a4:45:aa:31:e5:45:88: cd:a8:bc:1d:7b:fc:b8:9a:1b:d5:4a:c1:7f:9b:62: 9f:59:40:42:fe:a8:83:2d:62:60:7d:9a:e3:e4:f6: 93:c5:10:d6:9f:35:33:d7:3b:0d:c2:f8:41:3d:1e: c2:0b:e2:24:da:ce:b5:0b:d1:d2:c7:31:66:d0:dc: 9b:71:68:54:d3:31:61:85:5d:5c:29:9b:6b:7d:43: 12:ba:9e:d2:06:79:c6:0c:53:ec:2e:65:f2:be:cd: f0:ef:73:85:3b:89:ff:24:fd:ad:d6:c7:09:cb:9f: 2d:4d:3f:8e:39:a5:1d:13:69:3f:a4:2a:68:24:40: c8:e8:c3:dd:0e:80:95:09:fb:37:e1:99:b3:37:c1: 8d:80:45:21:1a:bf:f1:77:58:54:5a:7d:c2:f3:4d: cd:fc:29:e9:b1:9f:38:cb:f8:ab:e8:f1:0d:b2:aa: 0e:79:03:5d:ea:60:59:c4:03:f4:84:ff:98:6c:27: 75:5c:8d:90:3d:6a:06:18:c8:fb:2d:cc:93:e8:ae: 61:81:98:84:60:e8:80:f9:20:43:f5:27:06:83:23: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:46:03:98:E5:30:9B:BB:CF:25:46:7D:DE:AC:C9:6F:0F:BB:1A:57 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.172.0/24 Signature Algorithm: sha256WithRSAEncryption 95:67:e5:e2:37:cc:f4:f5:61:28:09:fa:c7:f9:ce:0e:91:ab: a2:5b:b2:c1:d4:be:10:0b:97:38:e0:ae:f1:60:ab:ba:17:33: 3f:4f:ae:55:a0:b1:e6:74:7d:21:8a:4b:ea:10:29:0c:4a:22: d1:f2:31:d6:05:56:ef:73:01:c9:bf:2e:ff:3b:d3:d1:33:c5: 75:20:f2:d5:66:8b:3c:f8:0b:a8:03:33:be:27:be:c0:7d:5a: ce:b9:22:d4:1c:11:53:8c:08:0a:31:e3:ae:89:9c:92:24:e4: c2:de:7c:4e:db:6d:ad:22:dd:f3:ff:48:51:e2:82:fa:34:a0: 28:e9:ae:1f:0d:ee:3c:8a:39:0d:96:a7:30:7f:ef:31:55:e3: 49:9c:72:de:82:44:ec:b4:f2:3b:5a:63:d5:d4:41:03:b8:2f: b3:85:d9:cc:89:c5:76:0f:80:2a:cc:f5:21:83:b0:b3:e7:5e: c8:7c:95:28:99:f3:c3:cc:01:58:18:97:39:2d:59:3f:fb:9f: 89:39:e3:c8:2c:22:c7:58:47:d6:8f:bf:4a:54:57:6e:bb:46: e9:ff:3a:ad:eb:93:27:fd:f3:a1:65:b8:41:70:92:89:20:f8: fa:ea:1b:5b:22:b7:5f:c0:04:c4:20:87:b8:b7:78:cf:39:58: 81:ec:15:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/30GHpB47MZ2GJlL31vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzQ2MDM5OGU1MzA5YmJiY2YyNTQ2N2RkZWFjYzk2ZjBmYmIxYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQDrPjVCz4uPmgLT7uNZ1DJQE0FT GcolFM54U49u90v/KhpvfKRFqjHlRYjNqLwde/y4mhvVSsF/m2KfWUBC/qiDLWJg fZrj5PaTxRDWnzUz1zsNwvhBPR7CC+Ik2s61C9HSxzFm0NybcWhU0zFhhV1cKZtr fUMSup7SBnnGDFPsLmXyvs3w73OFO4n/JP2t1scJy58tTT+OOaUdE2k/pCpoJEDI 6MPdDoCVCfs34ZmzN8GNgEUhGr/xd1hUWn3C803N/CnpsZ84y/ir6PENsqoOeQNd 6mBZxAP0hP+YbCd1XI2QPWoGGMj7LcyT6K5hgZiEYOiA+SBD9ScGgyPP1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxGA5jlMJu7zyVGfd6syW8PuxpXMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvbkVZRG1PVXdtN3ZQSlVaOTNxekpidy03R2xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4KsMA0G CSqGSIb3DQEBCwUAA4IBAQCVZ+XiN8z09WEoCfrH+c4OkauiW7LB1L4QC5c44K7x YKu6FzM/T65VoLHmdH0hikvqECkMSiLR8jHWBVbvcwHJvy7/O9PRM8V1IPLVZos8 +AuoAzO+J77AfVrOuSLUHBFTjAgKMeOuiZySJOTC3nxO222tIt3z/0hR4oL6NKAo 6a4fDe48ijkNlqcwf+8xVeNJnHLegkTstPI7WmPV1EEDuC+zhdnMicV2D4AqzPUh g7Cz517IfJUomfPDzAFYGJc5LVk/+5+JOePILCLHWEfWj79KVFduu0bp/zqt65Mn /fOhZbhBcJKJIPj66htbIrdfwATEIIe4t3jPOViB7BW1 -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:39 2026 by rpki-client