This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/95I5kKDngJoeemazNmLfxx-xsMc.roa File: 95I5kKDngJoeemazNmLfxx-xsMc.roa (raw, json) Hash identifier: 065L1fud09uTnT5KcltoPCtY3EeXJM9Wrb5i9Pok3ps= Subject key identifier: F7:92:39:90:A0:E7:80:9A:1E:7A:66:B3:36:62:DF:C7:1F:B1:B0:C7 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C801579DAD1DFCF15A83A7F02D00EB6 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/95I5kKDngJoeemazNmLfxx-xsMc.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216320 IP address blocks: 2a13:2200:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:79:da:d1:df:cf:15:a8:3a:7f:02:d0:0e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7923990a0e7809a1e7a66b33662dfc71fb1b0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:27:d0:48:6f:a2:52:54:05:bf:24:c5:ff: 3c:cf:3b:29:d0:37:94:d2:8f:7e:2a:b7:0e:b1:4a: 95:d5:2c:9a:45:57:73:5e:df:56:16:db:72:29:5a: 03:5d:15:d0:e1:1a:6a:de:25:13:92:07:11:f6:5d: 10:e9:2b:16:a1:64:19:4c:54:0b:c7:f9:b9:fc:da: c0:da:85:e3:5e:b6:62:0b:d7:7c:a8:ff:c9:e7:50: 75:1d:31:d2:34:1a:02:ea:a7:ad:b6:40:e9:16:0e: f3:48:bc:f3:5e:63:c4:7e:13:c1:c6:89:88:8a:b0: 46:cf:8e:7e:cc:4e:32:a6:0c:5b:db:40:de:31:78: 2f:e4:57:81:20:0e:eb:56:c7:0b:05:11:43:72:1d: d9:42:b3:f0:c1:4a:8f:6d:ef:e5:27:89:6e:d0:af: 06:39:5e:47:9b:71:74:4d:2e:f2:ed:a4:9d:6c:aa: 05:90:00:3b:03:5e:eb:52:39:fa:0a:cc:9e:6d:bb: 92:ae:34:29:e0:2f:4b:ef:9c:7f:76:f5:67:22:88: bc:f8:28:ed:49:6b:46:c3:ec:56:4c:39:4c:4b:c4: 31:34:0d:96:9f:55:a9:78:f3:2f:96:52:9f:8d:c8: 00:3a:88:b6:4a:c9:08:64:83:0c:a4:e7:2d:ac:9a: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:39:90:A0:E7:80:9A:1E:7A:66:B3:36:62:DF:C7:1F:B1:B0:C7 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/95I5kKDngJoeemazNmLfxx-xsMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:11::/48 Signature Algorithm: sha256WithRSAEncryption 62:18:f2:0c:cb:b2:95:18:24:12:b3:a3:a3:18:28:bb:1c:73: ef:42:bd:2e:c2:cb:5e:d8:cf:db:66:85:37:48:85:6e:94:af: a8:6f:50:49:26:05:1c:6b:9c:2b:44:9f:f2:2e:95:d4:7f:36: 3d:7f:9c:35:c4:08:f9:5d:0d:2b:74:1f:ea:ed:c5:4d:08:ad: 30:5d:2d:32:02:8b:2e:55:4d:dd:a5:f1:1f:b9:55:e2:82:56: d5:6a:fc:e0:ad:26:ec:87:b8:05:cd:d1:b1:99:d7:e8:79:ed: fd:8d:49:ee:8f:ed:ed:9c:b4:a7:b2:fe:37:c5:9a:5d:a1:db: 81:05:39:19:a4:2b:03:3f:cf:43:47:08:f0:4c:42:7c:1c:54: 3d:28:45:03:90:ec:24:69:3b:ce:97:6b:45:27:33:c6:2c:dc: 4d:0c:ac:84:62:0b:3a:99:56:8c:af:ab:2b:1d:17:ea:3d:12: 25:30:28:76:97:f1:eb:6a:7e:e5:33:7b:cc:82:e9:52:29:b8: 71:fa:d5:f3:9f:ce:b6:7f:2a:a1:53:45:2d:ad:da:52:ce:64: 60:87:41:c0:e8:71:5c:7a:ec:4a:b6:ea:06:10:03:bc:7e:e0: 6e:26:05:29:c7:29:5f:ad:37:e3:2b:b2:01:4f:0a:68:b4:aa: a1:87:16:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBV52tHfzxWoOn8C0A62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzkyMzk5MGEwZTc4MDlhMWU3YTY2YjMzNjYyZGZjNzFmYjFiMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37kn0EhvolJUBb8kxf88zzsp0DeU 0o9+KrcOsUqV1SyaRVdzXt9WFttyKVoDXRXQ4Rpq3iUTkgcR9l0Q6SsWoWQZTFQL x/m5/NrA2oXjXrZiC9d8qP/J51B1HTHSNBoC6qettkDpFg7zSLzzXmPEfhPBxomI irBGz45+zE4ypgxb20DeMXgv5FeBIA7rVscLBRFDch3ZQrPwwUqPbe/lJ4lu0K8G OV5Hm3F0TS7y7aSdbKoFkAA7A17rUjn6CsyebbuSrjQp4C9L75x/dvVnIoi8+Cjt SWtGw+xWTDlMS8QxNA2Wn1WpePMvllKfjcgAOoi2SskIZIMMpOctrJrCkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPeSOZCg54CaHnpmszZi38cfsbDHMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvOTVJNWtLRG5nSm9lZW1hek5tTGZ4eC14c01jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAR MA0GCSqGSIb3DQEBCwUAA4IBAQBiGPIMy7KVGCQSs6OjGCi7HHPvQr0uwste2M/b ZoU3SIVulK+ob1BJJgUca5wrRJ/yLpXUfzY9f5w1xAj5XQ0rdB/q7cVNCK0wXS0y AosuVU3dpfEfuVXiglbVavzgrSbsh7gFzdGxmdfoee39jUnuj+3tnLSnsv43xZpd oduBBTkZpCsDP89DRwjwTEJ8HFQ9KEUDkOwkaTvOl2tFJzPGLNxNDKyEYgs6mVaM r6srHRfqPRIlMCh2l/Hran7lM3vMgulSKbhx+tXzn862fyqhU0UtrdpSzmRgh0HA 6HFceuxKtuoGEAO8fuBuJgUpxylfrTfjK7IBTwpotKqhhxak -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:10 2026 by rpki-client