This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Sfr5MvlCwKNiBhFdB8ODuvkLbg.roa File: 9Sfr5MvlCwKNiBhFdB8ODuvkLbg.roa (raw, json) Hash identifier: dCRXiOTN3Z6LhZ9KsBqH2N4vNVsVS6rcR8ChRizgfvg= Subject key identifier: F5:27:EB:E4:CB:E5:0B:02:8D:88:18:45:74:1F:0E:0E:EB:E4:2D:B8 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CA6F3B22C15914BBA33890A9316C Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Sfr5MvlCwKNiBhFdB8ODuvkLbg.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57764 IP address blocks: 95.46.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ca:6f:3b:22:c1:59:14:bb:a3:38:90:a9:31:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f527ebe4cbe50b028d881845741f0e0eebe42db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:fe:95:a9:89:6c:eb:13:7e:76:83:2f:d1: 78:20:7e:ce:19:9f:b2:16:41:5e:d7:60:3c:34:3c: 64:5c:c2:fd:da:03:c7:b3:f6:05:21:ad:6b:ed:d1: 44:de:30:34:d7:c5:59:3b:2c:61:c3:e7:67:25:7a: eb:75:c2:47:0c:23:02:66:83:de:37:40:1d:15:7e: 62:9c:ed:e8:cd:cb:94:fa:dd:0e:0a:0b:52:ef:41: f6:7a:e6:7e:86:05:e2:b1:45:cf:de:90:ec:db:ef: da:ef:39:37:65:ea:de:0d:4b:dd:e0:93:e9:bc:82: d5:22:47:b4:8b:c2:01:30:43:16:a9:c9:a1:3b:08: 94:c5:11:b1:33:97:c9:1c:aa:2b:d4:49:71:96:f9: be:fa:88:71:23:d6:cf:a6:7e:e0:8a:ca:b9:db:c1: 1e:0d:d7:96:82:8f:f6:ae:e7:95:99:bd:d9:09:18: 0a:39:a0:a8:84:33:50:d9:45:3d:7e:dd:63:14:b9: 90:38:ca:cd:84:31:3a:fc:f7:27:ff:72:45:ef:cf: 9c:75:8e:a9:19:00:b0:1c:df:54:29:ef:c6:bb:09: 36:0c:3c:65:0c:66:3a:ca:37:48:09:2c:c8:f1:5b: 5a:d7:91:74:5c:42:8b:4b:06:d2:9d:61:27:fa:92: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:27:EB:E4:CB:E5:0B:02:8D:88:18:45:74:1F:0E:0E:EB:E4:2D:B8 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Sfr5MvlCwKNiBhFdB8ODuvkLbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.64.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:70:35:4c:3f:63:9b:2f:b6:bc:1d:33:ae:1d:60:3a:53:26: 67:ea:a1:85:0b:c4:84:0d:82:d6:c8:0c:90:1a:87:a9:ad:d8: 65:c6:6a:58:ff:bb:80:ab:89:cd:33:73:94:45:cd:d2:39:24: ea:c6:d8:80:eb:be:ab:aa:f1:1c:4a:0f:b9:d2:9b:e8:f1:32: 8e:c1:87:c1:b1:ce:83:af:88:ea:85:8d:65:d4:8d:db:17:2b: 1d:1c:be:07:70:d9:57:9b:97:31:c1:b2:2b:e2:dc:8a:e9:b9: 16:ac:ee:15:43:d4:0a:ed:23:46:6d:bb:dc:34:00:a6:c0:08: eb:9d:70:5a:45:0d:a8:57:a0:59:97:bf:ec:ed:f5:2a:3d:81: 5d:9a:be:88:b8:95:07:05:5f:d9:af:eb:b8:ec:96:f8:2e:21: 68:23:76:24:af:92:ed:2a:a2:59:28:d1:76:f1:30:17:95:38: 4f:2b:38:a5:83:be:e6:4c:8f:68:f5:0a:81:87:a8:83:8e:db: ee:e0:ed:3a:92:86:08:e5:60:4f:a6:b6:99:f8:4c:30:49:d4: b2:50:40:5e:60:21:61:34:07:fa:86:91:9b:3a:73:dd:3c:63: 3c:ff:7b:31:dd:52:49:80:80:b2:f4:5d:4f:04:1c:76:0a:0a: 4d:e9:7e:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMpvOyLBWRS7oziQqTFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTI3ZWJlNGNiZTUwYjAyOGQ4ODE4NDU3NDFmMGUwZWViZTQyZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp3+lamJbOsTfnaDL9F4IH7OGZ+y FkFe12A8NDxkXML92gPHs/YFIa1r7dFE3jA018VZOyxhw+dnJXrrdcJHDCMCZoPe N0AdFX5inO3ozcuU+t0OCgtS70H2euZ+hgXisUXP3pDs2+/a7zk3ZereDUvd4JPp vILVIke0i8IBMEMWqcmhOwiUxRGxM5fJHKor1Elxlvm++ohxI9bPpn7gisq528Ee DdeWgo/2rueVmb3ZCRgKOaCohDNQ2UU9ft1jFLmQOMrNhDE6/Pcn/3JF78+cdY6p GQCwHN9UKe/Guwk2DDxlDGY6yjdICSzI8Vta15F0XEKLSwbSnWEn+pL3VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUn6+TL5QsCjYgYRXQfDg7r5C24MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOVNmcjVNdmxDd0tOaUJoRmRCOE9EdXZrTGJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXy5AMA0G CSqGSIb3DQEBCwUAA4IBAQBscDVMP2ObL7a8HTOuHWA6UyZn6qGFC8SEDYLWyAyQ GoeprdhlxmpY/7uAq4nNM3OURc3SOSTqxtiA676rqvEcSg+50pvo8TKOwYfBsc6D r4jqhY1l1I3bFysdHL4HcNlXm5cxwbIr4tyK6bkWrO4VQ9QK7SNGbbvcNACmwAjr nXBaRQ2oV6BZl7/s7fUqPYFdmr6IuJUHBV/Zr+u47Jb4LiFoI3Ykr5LtKqJZKNF2 8TAXlThPKzilg77mTI9o9QqBh6iDjtvu4O06koYI5WBPpraZ+EwwSdSyUEBeYCFh NAf6hpGbOnPdPGM8/3sx3VJJgICy9F1PBBx2CgpN6X6L -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:51 2026 by rpki-client