This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4orkIn7h0EPFoilqG9DSkJtqI7Y.roa File: 4orkIn7h0EPFoilqG9DSkJtqI7Y.roa (raw, json) Hash identifier: gAbMmrGonNTOHm8XkcSABP32ELyfm6a5Ii8otDOtLRc= Subject key identifier: E2:8A:E4:22:7E:E1:D0:43:C5:A2:29:6A:1B:D0:D2:90:9B:6A:23:B6 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E37217C2D402E595ADE7F3443C0E496 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4orkIn7h0EPFoilqG9DSkJtqI7Y.roa Signing time: Fri 02 Jan 2026 10:18:20 +0000 ROA not before: Fri 02 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201389 IP address blocks: 95.85.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:21:7c:2d:40:2e:59:5a:de:7f:34:43:c0:e4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e28ae4227ee1d043c5a2296a1bd0d2909b6a23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:b7:71:57:aa:36:b8:a8:2c:30:42:dd:6d: 71:a5:07:3c:84:16:24:e8:47:13:cc:9e:35:9a:19: 11:87:a6:1f:88:51:72:db:c9:16:4e:f0:30:b2:98: 38:c9:c0:7b:b7:fc:4f:8a:47:23:62:ab:c1:33:45: ce:21:14:8b:ef:1e:e3:6f:7d:d4:0e:55:7e:7b:c9: 41:94:04:a4:97:aa:e5:1e:d5:dd:c5:7c:b3:64:f2: 18:aa:7a:1f:df:96:dc:73:de:fb:7a:8c:66:67:90: d7:18:af:4f:7b:63:b8:16:de:b5:2d:82:38:f4:fc: 19:b1:9b:65:7c:a2:5c:52:15:b2:d6:af:ef:95:ac: e5:22:4d:4b:4e:89:f7:c5:77:08:1b:9d:ff:da:f6: 6c:5c:7c:e5:e2:f2:53:e9:3c:9f:b9:79:9e:de:e2: a0:ca:3d:3c:e1:c4:32:44:f9:4c:be:b4:ab:da:1d: 9b:55:9e:e6:40:f4:f1:2e:27:f2:73:0a:2c:f5:0a: 88:57:86:c9:5f:cc:08:d7:d7:74:28:3c:79:5b:4f: 88:3b:50:ae:2d:67:8c:0e:02:84:c9:78:ca:3b:11: 1f:81:5c:c3:7a:f7:47:2c:bc:27:c9:ac:fa:73:78: 16:53:8d:08:08:00:eb:e6:fe:f4:95:20:67:f5:c1: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:E4:22:7E:E1:D0:43:C5:A2:29:6A:1B:D0:D2:90:9B:6A:23:B6 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4orkIn7h0EPFoilqG9DSkJtqI7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.85.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:d9:e8:d6:70:61:e1:64:8f:70:ca:fc:e3:19:2d:32:c9:f5: 74:e2:54:16:8a:d4:db:d2:05:03:97:f5:b3:a6:aa:53:84:ab: f6:8d:11:17:da:b6:ab:e0:cc:d5:e9:1b:80:f6:6b:cf:69:ab: 5b:8c:cc:66:89:43:81:6d:a2:1e:85:50:6f:31:50:d1:8b:26: 66:7d:b0:f5:1a:12:7e:63:76:d3:f2:68:ad:24:ec:73:d3:1e: 4a:2f:4f:f8:68:8e:d8:52:bb:86:95:ee:6f:2d:ec:f3:3d:db: 38:30:4b:f5:7e:ea:69:5e:f8:4a:26:2d:36:a2:8a:32:6a:c0: 44:37:7f:9e:c5:40:46:55:2a:7b:17:b8:5d:7d:73:23:d1:df: 70:89:39:fb:01:68:e8:ab:4a:88:b4:b9:f5:70:ad:f9:28:55: 6f:1f:f5:18:8f:c5:b2:7f:77:3c:15:1d:cc:3e:11:66:d6:fc: 35:c9:4e:b5:07:50:c2:02:7f:d2:bc:ac:1b:e5:d7:2f:36:e0: 6a:2e:03:ff:d5:71:46:de:db:9a:c1:04:f7:e3:21:d2:c5:5b: d4:6b:65:99:04:4b:53:d5:b4:e0:0a:f6:d8:db:39:19:2c:b1: 3f:38:aa:d6:0c:3b:e9:fb:a3:70:99:c9:77:6f:da:54:e8:44: 19:74:25:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NyF8LUAuWVrefzRDwOSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjhhZTQyMjdlZTFkMDQzYzVhMjI5NmExYmQwZDI5MDliNmEyM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3q3cVeqNrioLDBC3W1xpQc8hBYk 6EcTzJ41mhkRh6YfiFFy28kWTvAwspg4ycB7t/xPikcjYqvBM0XOIRSL7x7jb33U DlV+e8lBlASkl6rlHtXdxXyzZPIYqnof35bcc977eoxmZ5DXGK9Pe2O4Ft61LYI4 9PwZsZtlfKJcUhWy1q/vlazlIk1LTon3xXcIG53/2vZsXHzl4vJT6TyfuXme3uKg yj084cQyRPlMvrSr2h2bVZ7mQPTxLifycwos9QqIV4bJX8wI19d0KDx5W0+IO1Cu LWeMDgKEyXjKOxEfgVzDevdHLLwnyaz6c3gWU40ICADr5v70lSBn9cGu1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKK5CJ+4dBDxaIpahvQ0pCbaiO2MB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvNG9ya0luN2gwRVBGb2lscUc5RFNrSnRxSTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1VVMA0G CSqGSIb3DQEBCwUAA4IBAQBM2ejWcGHhZI9wyvzjGS0yyfV04lQWitTb0gUDl/Wz pqpThKv2jREX2rar4MzV6RuA9mvPaatbjMxmiUOBbaIehVBvMVDRiyZmfbD1GhJ+ Y3bT8mitJOxz0x5KL0/4aI7YUruGle5vLezzPds4MEv1fuppXvhKJi02oooyasBE N3+exUBGVSp7F7hdfXMj0d9wiTn7AWjoq0qItLn1cK35KFVvH/UYj8Wyf3c8FR3M PhFm1vw1yU61B1DCAn/SvKwb5dcvNuBqLgP/1XFG3tuawQT34yHSxVvUa2WZBEtT 1bTgCvbY2zkZLLE/OKrWDDvp+6Nwmcl3b9pU6EQZdCWm -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:27 2026 by rpki-client