This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa File: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (raw, json) Hash identifier: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA= Subject key identifier: 22:E8:98:F5:7C:20:B4:10:66:D2:63:1C:97:E5:EA:F1:B3:87:35:15 Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Certificate serial: 019B7B35CB8BCD36C3D4032782BD12F6B0F3 Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51740 IP address blocks: 95.170.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:8b:cd:36:c3:d4:03:27:82:bd:12:f6:b0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22e898f57c20b41066d2631c97e5eaf1b3873515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:e1:28:88:9c:f9:fa:84:86:c9:98:4a:44: bb:81:57:f3:44:53:84:b8:0a:37:4e:7f:37:9d:49: 0d:e7:02:43:69:fa:97:af:13:9b:53:7e:da:02:2e: 94:f8:02:ad:f9:7f:76:d2:b4:9c:28:ba:6c:dc:79: 3c:cd:2b:a5:99:48:ab:87:1b:d6:72:8e:c4:dd:fe: 26:d4:51:cc:6c:86:30:c3:95:de:87:cf:ec:c1:16: 7c:75:36:8d:d0:3f:13:09:4c:a8:d0:b4:35:41:3b: 4f:83:34:19:b2:40:8a:4d:bd:83:2e:bc:96:20:97: e7:34:b2:24:98:56:51:9d:37:f3:56:6d:93:39:e1: 2b:ba:64:9a:e9:d1:66:21:2f:0f:e2:5a:79:7f:a7: 22:c1:c0:76:cf:1e:33:79:be:87:a8:e4:ee:6e:73: 5b:ad:85:5f:ee:ab:83:f6:7e:16:d7:b8:ac:55:1f: 7f:06:37:84:8d:55:21:cb:fb:44:f1:6e:f8:19:88: 50:d7:2f:08:05:6f:4b:87:23:02:8b:3a:f2:bb:69: a6:2c:9d:7e:e0:45:95:dc:34:58:c7:6f:89:da:7d: 3e:0f:74:84:6c:e4:65:05:d0:e9:1c:d2:52:53:04: 70:ad:46:91:16:e0:cf:f9:f9:c3:dd:e2:cf:d7:59: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E8:98:F5:7C:20:B4:10:66:D2:63:1C:97:E5:EA:F1:B3:87:35:15 X509v3 Authority Key Identifier: keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.104.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:17:1f:74:4e:23:78:a0:c9:b2:db:63:2d:b5:cc:5d:fe:8b: 77:cf:db:30:98:5a:80:7a:85:45:ff:fb:ae:9b:bf:41:0b:16: 5d:6c:31:57:c0:42:c2:a8:fe:9a:45:4b:12:d6:ad:19:a5:60: d9:d5:22:a4:0e:86:42:5a:88:19:12:cf:53:ee:64:51:ad:35: 23:f8:f5:9c:39:a3:8d:4d:9b:f5:0c:07:f7:91:f4:dd:31:2d: 1b:7b:18:98:d0:6d:aa:dc:14:0d:97:79:17:a9:aa:de:f7:5f: e4:12:63:00:39:65:c3:56:d7:8f:5e:8f:8f:e1:45:4d:78:d5: 4b:6d:7b:6f:b2:fb:f1:60:67:84:1b:d8:bd:98:f9:48:fa:1f: 46:b8:38:0e:a2:80:62:39:85:cf:46:86:0f:c6:00:c8:0c:5b: 11:5f:59:ac:f8:7d:2d:c4:e5:d9:11:e7:86:32:c3:77:32:6a: e2:2a:61:06:02:95:c8:e0:5a:53:78:c7:ca:6e:0c:1f:7f:22: 8b:14:77:2f:e1:0c:80:52:35:18:72:64:64:48:8f:d2:42:5d: b5:06:d3:7a:ea:14:53:7b:3f:a3:d2:88:d3:a8:a2:98:21:ef: eb:a0:f9:e9:9e:ad:35:52:9a:cd:52:e3:c9:4c:4c:94:f7:e9: de:b5:a1:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcuLzTbD1AMngr0S9rDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx MDZkOTcwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmU4OThmNTdjMjBiNDEwNjZkMjYzMWM5N2U1ZWFmMWIzODczNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj7hKIic+fqEhsmYSkS7gVfzRFOE uAo3Tn83nUkN5wJDafqXrxObU37aAi6U+AKt+X920rScKLps3Hk8zSulmUirhxvW co7E3f4m1FHMbIYww5Xeh8/swRZ8dTaN0D8TCUyo0LQ1QTtPgzQZskCKTb2DLryW IJfnNLIkmFZRnTfzVm2TOeErumSa6dFmIS8P4lp5f6ciwcB2zx4zeb6HqOTubnNb rYVf7quD9n4W17isVR9/BjeEjVUhy/tE8W74GYhQ1y8IBW9LhyMCizryu2mmLJ1+ 4EWV3DRYx2+J2n0+D3SEbORlBdDpHNJSUwRwrUaRFuDP+fnD3eLP11njkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLomPV8ILQQZtJjHJfl6vGzhzUVMB8GA1UdIwQY MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt ZTE4NjAyNzM5Y2Q1LzEvSXVpWTlYd2d0QkJtMG1NY2wtWHE4Yk9ITlJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1 LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6poMA0G CSqGSIb3DQEBCwUAA4IBAQBcFx90TiN4oMmy22Mttcxd/ot3z9swmFqAeoVF//uu m79BCxZdbDFXwELCqP6aRUsS1q0ZpWDZ1SKkDoZCWogZEs9T7mRRrTUj+PWcOaON TZv1DAf3kfTdMS0bexiY0G2q3BQNl3kXqare91/kEmMAOWXDVtePXo+P4UVNeNVL bXtvsvvxYGeEG9i9mPlI+h9GuDgOooBiOYXPRoYPxgDIDFsRX1ms+H0txOXZEeeG MsN3MmriKmEGApXI4FpTeMfKbgwffyKLFHcv4QyAUjUYcmRkSI/SQl21BtN66hRT ez+j0ojTqKKYIe/roPnpnq01UprNUuPJTEyU9+netaFt -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:50 2026 by rpki-client