This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa File: X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa (raw, json) Hash identifier: EbAAegZ58TUcJoLUZHe9898JJhVcLeqOPEqNmF0c7DQ= Subject key identifier: 5F:89:76:68:9D:19:D5:FD:45:02:39:59:98:89:15:65:EB:68:D8:12 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E3718FBF69EC2DF68A68279F558BE61 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa Signing time: Fri 02 Jan 2026 10:18:18 +0000 ROA not before: Fri 02 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33842 IP address blocks: 95.181.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:18:fb:f6:9e:c2:df:68:a6:82:79:f5:58:be:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f8976689d19d5fd4502395998891565eb68d812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:b2:ef:37:c8:b6:24:a2:a4:51:3a:8b:d3: 08:ab:fc:54:86:bc:55:5d:72:00:56:ee:22:8e:b0: 07:a2:81:79:ba:89:f6:f7:a0:e2:6f:b1:63:27:ad: 9e:5d:d1:21:34:9b:1b:aa:f8:0d:8e:fb:77:47:3c: 40:5a:67:92:89:b5:95:79:89:a0:f0:f0:43:b7:fe: b6:9a:51:8e:3c:5e:10:bf:db:7a:3f:37:a3:28:a1: 25:e8:72:81:2b:85:3a:19:64:bf:c1:dd:f3:c3:86: 0e:91:08:1e:c0:7b:62:74:c4:6a:a3:d0:9f:0a:1c: d1:bf:84:a3:a1:77:d7:81:20:0b:1f:a5:9e:ee:aa: 9e:09:8f:35:9b:d6:d8:db:c6:81:fd:49:7b:da:e3: dd:70:a6:2d:3e:6e:2a:3e:43:e2:42:06:0a:7e:fd: 70:81:2e:7a:34:c1:de:4b:1f:ae:29:65:9c:0b:7f: 54:ed:54:e4:03:a8:0f:18:ab:95:23:77:40:db:ce: a3:bd:46:54:91:52:c5:fc:61:fd:b3:c4:08:b6:15: 91:e0:fe:9e:e5:4e:64:de:b4:d8:39:91:b6:30:49: a2:6f:e7:e5:35:c7:2f:34:64:d7:ce:e8:03:3b:cc: cd:74:e3:c1:52:cf:b9:43:bb:64:a5:f8:9d:3f:e0: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:76:68:9D:19:D5:FD:45:02:39:59:98:89:15:65:EB:68:D8:12 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/X4l2aJ0Z1f1FAjlZmIkVZeto2BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.212.0/23 Signature Algorithm: sha256WithRSAEncryption be:f2:36:61:9a:92:b2:0f:67:ef:47:d8:d1:d6:8d:69:a8:d3: 21:02:59:7c:86:0e:49:df:7f:40:c4:b2:02:fb:ad:a1:62:b5: 6e:0b:43:d5:d5:bc:4e:64:16:87:a6:4a:fc:9c:d5:a5:a7:a1: 1d:de:90:51:3b:5a:24:ff:f5:40:69:a3:00:cf:8e:af:bc:ee: 81:85:3c:e1:50:0f:f5:fe:8b:b4:f2:43:ae:b4:9b:f1:f3:22: 62:93:69:07:be:c4:9e:a0:c3:02:66:78:76:e3:7c:37:16:3d: 8a:78:9a:aa:7f:fe:98:fc:f2:ec:b6:c3:e1:89:bd:32:73:38: f0:fe:c5:04:d2:7d:6d:1a:57:9d:10:dd:a9:e6:49:f4:57:8c: 88:db:fb:2e:28:38:11:e2:c9:79:33:30:6f:6d:78:74:d1:46: 38:43:4e:d9:22:07:81:10:4d:68:05:08:09:8e:0a:7f:e8:a4: d5:7a:12:4b:04:07:06:f5:4f:aa:2c:85:63:2c:7b:0e:79:ef: ac:ee:88:da:0d:0f:eb:f2:a4:a4:cd:25:81:ae:41:dc:c7:de: eb:92:e9:fa:c5:a1:b5:5f:38:75:07:4e:5a:b8:7f:19:8c:9e: 77:2d:af:a4:59:23:6e:2b:c5:49:a7:dc:5c:e5:b1:a7:b4:5f: b9:91:e0:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+Nxj79p7C32imgnn1WL5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjg5NzY2ODlkMTlkNWZkNDUwMjM5NTk5ODg5MTU2NWViNjhkODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWey7zfItiSipFE6i9MIq/xUhrxV XXIAVu4ijrAHooF5uon296Dib7FjJ62eXdEhNJsbqvgNjvt3RzxAWmeSibWVeYmg 8PBDt/62mlGOPF4Qv9t6PzejKKEl6HKBK4U6GWS/wd3zw4YOkQgewHtidMRqo9Cf ChzRv4SjoXfXgSALH6We7qqeCY81m9bY28aB/Ul72uPdcKYtPm4qPkPiQgYKfv1w gS56NMHeSx+uKWWcC39U7VTkA6gPGKuVI3dA286jvUZUkVLF/GH9s8QIthWR4P6e 5U5k3rTYOZG2MEmib+flNccvNGTXzugDO8zNdOPBUs+5Q7tkpfidP+DFiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+JdmidGdX9RQI5WZiJFWXraNgSMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvWDRsMmFKMFoxZjFGQWpsWm1Ja1ZaZXRvMkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX7XUMA0G CSqGSIb3DQEBCwUAA4IBAQC+8jZhmpKyD2fvR9jR1o1pqNMhAll8hg5J339AxLIC +62hYrVuC0PV1bxOZBaHpkr8nNWlp6Ed3pBRO1ok//VAaaMAz46vvO6BhTzhUA/1 /ou08kOutJvx8yJik2kHvsSeoMMCZnh243w3Fj2KeJqqf/6Y/PLstsPhib0yczjw /sUE0n1tGledEN2p5kn0V4yI2/suKDgR4sl5MzBvbXh00UY4Q07ZIgeBEE1oBQgJ jgp/6KTVehJLBAcG9U+qLIVjLHsOee+s7ojaDQ/r8qSkzSWBrkHcx97rkun6xaG1 Xzh1B05auH8ZjJ53La+kWSNuK8VJp9xc5bGntF+5keCW -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:59 2026 by rpki-client