This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/W9TRnPvGSQFXZxTwR6cGDbvkC0s.roa File: W9TRnPvGSQFXZxTwR6cGDbvkC0s.roa (raw, json) Hash identifier: 5I/HEPYZKTntiCYEI7nPEapNYrVs9Kn8rc2HGNnA5T8= Subject key identifier: 5B:D4:D1:9C:FB:C6:49:01:57:67:14:F0:47:A7:06:0D:BB:E4:0B:4B Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019B7B362E47938B5441C76A7FAB69D46F62 Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/W9TRnPvGSQFXZxTwR6cGDbvkC0s.roa Signing time: Thu 01 Jan 2026 20:18:26 +0000 ROA not before: Thu 01 Jan 2026 20:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25125 IP address blocks: 95.111.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2e:47:93:8b:54:41:c7:6a:7f:ab:69:d4:6f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Jan 1 20:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd4d19cfbc64901576714f047a7060dbbe40b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:68:00:aa:d2:f8:a5:9a:fc:6b:0a:0a:78: 97:85:06:aa:f8:20:4c:a2:16:43:09:ee:09:e3:c1: 8c:9e:56:43:a9:98:71:d1:68:11:dc:b8:86:db:71: d9:2d:f5:d2:f9:d9:25:e9:1e:3d:f4:06:bd:11:7d: 9a:bc:f9:3b:bc:91:d3:be:4d:01:df:d1:91:e7:17: 15:e3:94:aa:57:63:e1:b4:87:3c:9d:69:4d:33:d5: 0d:31:4e:2f:a1:c6:d3:51:a7:e0:7a:66:fe:6a:5d: 29:46:e1:9e:c0:30:0e:05:93:31:44:3a:2b:da:39: ff:f0:26:0e:e9:03:5a:15:86:dd:05:52:f7:74:7b: 4f:3f:79:86:bf:51:1d:bf:14:02:97:c9:29:92:78: 86:04:be:de:6f:f5:cf:25:40:78:bb:a0:ac:8a:ce: b4:16:38:c7:7e:34:14:66:4f:84:6a:27:96:5e:d4: f5:5d:de:c9:53:ab:50:3c:90:dd:71:8e:6c:ba:f3: eb:16:a6:52:d7:ff:62:5a:36:1c:ab:59:a4:ce:32: 2f:cc:92:30:fe:ed:79:21:05:78:cb:ef:19:01:9c: d7:e0:17:2d:53:38:b8:df:eb:21:3d:18:be:ef:e1: f0:70:32:b4:56:b7:3b:c1:a8:7a:9b:45:7e:07:e2: 15:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:D1:9C:FB:C6:49:01:57:67:14:F0:47:A7:06:0D:BB:E4:0B:4B X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/W9TRnPvGSQFXZxTwR6cGDbvkC0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.111.128.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:ba:8f:56:e1:f8:60:9a:8f:4d:97:a3:04:fe:1a:53:30:20: 4b:9b:8b:9d:4e:f8:10:8e:ba:0b:09:64:a5:b3:59:22:ea:64: f3:c5:39:6c:49:98:93:0d:9d:6a:74:a3:af:45:94:b7:46:53: d4:98:a0:81:56:94:ad:68:39:76:05:5c:86:99:9b:be:4e:8f: 48:af:d0:7b:c0:ae:2f:a9:96:19:cc:51:96:c1:ee:89:8b:03: 48:1e:ad:da:40:53:b5:16:16:98:d8:24:90:63:1e:92:97:b1: c2:d7:6e:3b:6a:99:90:87:d0:e5:d6:83:25:b3:78:7f:ea:02: 99:bf:68:85:b9:9b:c0:9d:0e:99:a0:be:e6:5c:46:6c:c2:de: 60:d5:b3:ac:bd:09:ce:bc:d9:7c:ee:aa:5a:b6:9d:08:ee:96: 36:d6:ca:1f:af:a6:70:43:5e:bc:bf:2b:bc:3e:35:8e:d7:86: 08:d3:63:60:7c:6d:d0:7c:a9:49:36:c9:7a:f0:be:5a:f9:96: 50:19:45:9a:a8:30:31:86:29:0a:17:48:e8:be:5e:d1:76:32: 1a:49:96:41:9b:c9:e5:ca:6e:33:0d:99:35:99:c6:25:12:97: b9:45:b5:60:83:86:8c:12:15:92:6d:a2:e6:f1:83:b4:0f:a8: 16:e4:ba:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ni5Hk4tUQcdqf6tp1G9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwMTAxMjAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ0ZDE5Y2ZiYzY0OTAxNTc2NzE0ZjA0N2E3MDYwZGJiZTQwYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RdoAKrS+KWa/GsKCniXhQaq+CBM ohZDCe4J48GMnlZDqZhx0WgR3LiG23HZLfXS+dkl6R499Aa9EX2avPk7vJHTvk0B 39GR5xcV45SqV2PhtIc8nWlNM9UNMU4vocbTUafgemb+al0pRuGewDAOBZMxRDor 2jn/8CYO6QNaFYbdBVL3dHtPP3mGv1EdvxQCl8kpkniGBL7eb/XPJUB4u6Csis60 FjjHfjQUZk+EaieWXtT1Xd7JU6tQPJDdcY5suvPrFqZS1/9iWjYcq1mkzjIvzJIw /u15IQV4y+8ZAZzX4BctUzi43+shPRi+7+HwcDK0Vrc7wah6m0V+B+IV1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvU0Zz7xkkBV2cU8EenBg275AtLMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvVzlUUm5QdkdTUUZYWnhUd1I2Y0dEYnZrQzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX2+AMA0G CSqGSIb3DQEBCwUAA4IBAQBMuo9W4fhgmo9Nl6ME/hpTMCBLm4udTvgQjroLCWSl s1ki6mTzxTlsSZiTDZ1qdKOvRZS3RlPUmKCBVpStaDl2BVyGmZu+To9Ir9B7wK4v qZYZzFGWwe6JiwNIHq3aQFO1FhaY2CSQYx6Sl7HC1247apmQh9Dl1oMls3h/6gKZ v2iFuZvAnQ6ZoL7mXEZswt5g1bOsvQnOvNl87qpatp0I7pY21sofr6ZwQ168vyu8 PjWO14YI02NgfG3QfKlJNsl68L5a+ZZQGUWaqDAxhikKF0jovl7RdjIaSZZBm8nl ym4zDZk1mcYlEpe5RbVgg4aMEhWSbaLm8YO0D6gW5Lp7 -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:57 2026 by rpki-client