This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/J_yn6Pm9vKNMDRcVwbyp133TknU.roa File: J_yn6Pm9vKNMDRcVwbyp133TknU.roa (raw, json) Hash identifier: mliXlxJfksLfLE++jqaaumKeI12AEMNdDLjQ9GlOQ2M= Subject key identifier: 27:FC:A7:E8:F9:BD:BC:A3:4C:0D:17:15:C1:BC:A9:D7:7D:D3:92:75 Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Certificate serial: 019B775947CE0DE553EA87A7906685BD9D76 Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/J_yn6Pm9vKNMDRcVwbyp133TknU.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 195.95.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:47:ce:0d:e5:53:ea:87:a7:90:66:85:bd:9d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27fca7e8f9bdbca34c0d1715c1bca9d77dd39275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:42:9a:3b:56:8a:bf:46:25:60:59:5c:b9: 30:8c:fc:19:28:ea:34:04:99:42:de:87:fd:46:a1: 52:9a:6f:9d:76:7e:e9:dc:16:b8:8d:73:15:46:f3: e6:4f:17:73:98:41:da:27:d9:46:52:f8:95:af:39: 78:04:46:79:64:96:18:2d:6a:73:34:ae:30:f5:a1: 8c:bd:9b:d3:6d:19:45:50:46:d0:4e:91:cd:58:2d: ce:ab:4c:e3:05:72:0f:d8:b8:f0:17:12:55:0d:dc: d3:af:4c:60:00:31:c6:b4:16:51:ce:e9:54:7f:a9: 79:1f:aa:a9:f3:58:c4:b8:ab:62:fa:67:b3:74:fd: 38:3f:b8:2a:25:e0:e7:75:ec:10:84:20:b7:39:b2: f2:08:96:49:0d:45:9e:fc:69:2e:77:35:f2:60:e8: 45:b1:5e:d1:c8:93:23:5d:68:1e:94:1c:64:aa:03: c3:21:8a:58:a4:45:84:b2:1d:6f:4f:2d:5d:39:eb: 83:c5:cf:b9:5c:65:33:f8:f9:82:af:0f:8e:95:2d: c8:6f:76:d2:46:93:c0:08:8d:4c:0f:1d:9d:79:83: 00:9c:8f:09:1a:db:19:38:29:5c:aa:f4:aa:ad:5a: f7:4e:24:c9:79:2e:7c:9c:63:4e:02:0b:53:a3:d8: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:A7:E8:F9:BD:BC:A3:4C:0D:17:15:C1:BC:A9:D7:7D:D3:92:75 X509v3 Authority Key Identifier: keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/J_yn6Pm9vKNMDRcVwbyp133TknU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.249.0/24 Signature Algorithm: sha256WithRSAEncryption 59:79:29:85:82:00:f5:e0:23:9b:3d:af:03:d3:e3:0e:99:6c: 85:fb:ae:87:e3:9a:a3:30:db:0e:6e:45:f2:36:01:03:3d:4d: 9e:69:38:81:c8:eb:a2:80:34:ba:16:83:c3:2d:2b:e7:2d:97: a8:64:5a:d3:f5:fd:a8:a6:16:3c:69:9d:e0:c2:aa:89:86:35: 01:0d:e8:2f:6f:ef:aa:c7:eb:56:90:40:b4:d2:03:2c:71:35: 59:76:2a:2d:d3:f5:f3:b4:0f:ff:08:ca:f1:00:43:dc:da:b0: 83:4c:91:e4:5a:a7:b0:44:bf:4d:e5:e4:b9:84:7e:c8:cc:be: 64:4c:ff:a8:25:45:9d:49:b0:89:e0:f2:6a:f9:d8:82:53:da: 18:d2:6b:4b:e9:63:ac:b0:4c:29:bf:51:5a:7f:c2:79:be:ab: 36:5f:c1:c9:a4:58:41:d2:f2:07:42:2e:8f:27:50:6d:76:4a: d8:99:de:5b:78:62:23:45:f1:5b:fc:39:d6:6e:08:d8:b0:74: 3f:a9:45:a0:1a:0e:d5:bd:7c:08:46:47:4b:8a:10:80:3f:ae: 59:e7:4e:99:37:cc:97:e8:32:5d:b6:35:42:9b:8e:a8:a2:59: c0:bb:4e:4c:00:a5:5d:7c:60:14:d2:7d:3b:09:b6:5f:86:e4: c4:fd:84:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUfODeVT6oenkGaFvZ12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ1NWViY2IwM2JmZjJhMmQ5NzVhZDQwODFmOTQxOWJh Y2FmMzUwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2ZjYTdlOGY5YmRiY2EzNGMwZDE3MTVjMWJjYTlkNzdkZDM5Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkVCmjtWir9GJWBZXLkwjPwZKOo0 BJlC3of9RqFSmm+ddn7p3Ba4jXMVRvPmTxdzmEHaJ9lGUviVrzl4BEZ5ZJYYLWpz NK4w9aGMvZvTbRlFUEbQTpHNWC3Oq0zjBXIP2LjwFxJVDdzTr0xgADHGtBZRzulU f6l5H6qp81jEuKti+mezdP04P7gqJeDndewQhCC3ObLyCJZJDUWe/GkudzXyYOhF sV7RyJMjXWgelBxkqgPDIYpYpEWEsh1vTy1dOeuDxc+5XGUz+PmCrw+OlS3Ib3bS RpPACI1MDx2deYMAnI8JGtsZOClcqvSqrVr3TiTJeS58nGNOAgtTo9g/VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCf8p+j5vbyjTA0XFcG8qdd905J1MB8GA1UdIwQY MBaAFFl0VevLA7/yotl1rUCB+UGbrK81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYt ZWYzNGRkNGRlNTcyLzEvSl95bjZQbTl2S05NRFJjVndieXAxMzNUa25VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYtZWYzNGRkNGRlNTcy LzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/5MA0G CSqGSIb3DQEBCwUAA4IBAQBZeSmFggD14CObPa8D0+MOmWyF+66H45qjMNsObkXy NgEDPU2eaTiByOuigDS6FoPDLSvnLZeoZFrT9f2ophY8aZ3gwqqJhjUBDegvb++q x+tWkEC00gMscTVZdiot0/XztA//CMrxAEPc2rCDTJHkWqewRL9N5eS5hH7IzL5k TP+oJUWdSbCJ4PJq+diCU9oY0mtL6WOssEwpv1Faf8J5vqs2X8HJpFhB0vIHQi6P J1BtdkrYmd5beGIjRfFb/DnWbgjYsHQ/qUWgGg7VvXwIRkdLihCAP65Z506ZN8yX 6DJdtjVCm46oolnAu05MAKVdfGAU0n07CbZfhuTE/YS7 -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:38 2026 by rpki-client