This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/YqrPgcOdKcUHaUYq6pQlPoK6ux0.roa File: YqrPgcOdKcUHaUYq6pQlPoK6ux0.roa (raw, json) Hash identifier: 7ZhFcJC44FtwDb2JtFmtlCjeaUlzYjugxemZbkXkceE= Subject key identifier: 62:AA:CF:81:C3:9D:29:C5:07:69:46:2A:EA:94:25:3E:82:BA:BB:1D Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952 Certificate serial: 019B7C7FC8CA7D944899B802F7E6FA7E5C5A Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/YqrPgcOdKcUHaUYq6pQlPoK6ux0.roa Signing time: Fri 02 Jan 2026 02:18:27 +0000 ROA not before: Fri 02 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206539 IP address blocks: 95.169.64.0/19 maxlen: 24 95.169.64.0/21 maxlen: 24 95.169.72.0/21 maxlen: 24 95.169.80.0/22 maxlen: 24 95.169.88.0/21 maxlen: 24 2a0b:5580::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c8:ca:7d:94:48:99:b8:02:f7:e6:fa:7e:5c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62aacf81c39d29c50769462aea94253e82babb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:29:0c:b9:c5:57:85:1f:30:f4:92:1c:c3: d2:62:91:a8:0b:28:fc:26:13:c5:cd:24:9f:3d:68: f6:88:f0:dd:db:5d:c6:cb:2d:eb:98:cb:b7:56:7e: b8:9d:b1:70:f0:0e:c6:54:54:b3:9f:1c:d5:65:62: ce:67:68:71:ad:a5:9e:ab:e8:a9:d3:3d:82:98:28: 38:17:38:5e:de:90:97:f2:6c:49:1b:c2:5d:40:9f: 36:0b:c7:1b:09:c9:08:8f:f2:1f:23:25:79:53:d3: 30:0d:72:01:50:af:eb:0d:c5:ce:e6:da:f0:f1:a5: 7e:4a:41:12:6e:c9:71:6f:1a:61:c2:94:f9:16:99: 26:29:b2:1d:ea:da:b6:52:73:d6:20:da:d7:6f:7d: 8b:bc:f6:bf:29:3d:13:3b:89:9d:ae:f2:e9:63:8b: 42:6b:47:ac:5f:0c:5b:bb:cf:0e:e4:2f:e4:d1:81: cb:ff:e7:1f:93:c5:e6:61:4a:42:5e:91:81:ef:9a: 7c:b4:cd:8f:bc:fc:9f:d4:ee:f7:a1:46:ae:70:8d: 7b:38:3c:36:63:50:62:fb:ec:b8:7e:53:4b:49:45: c3:da:1f:1a:02:f4:b6:fd:bf:1e:e7:1c:12:09:87: f9:98:49:39:b2:ec:f6:5f:1e:35:57:10:9b:43:1d: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:CF:81:C3:9D:29:C5:07:69:46:2A:EA:94:25:3E:82:BA:BB:1D X509v3 Authority Key Identifier: keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/YqrPgcOdKcUHaUYq6pQlPoK6ux0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.64.0/19 IPv6: 2a0b:5580::/29 Signature Algorithm: sha256WithRSAEncryption e1:cb:a3:8a:2f:00:bd:b5:33:b6:18:b5:01:45:c7:4f:9f:e3: ee:c1:67:14:cb:d7:74:2e:13:7f:cc:b0:c8:43:0e:b5:81:50: d0:de:4e:0d:22:ae:4c:91:bd:08:3e:9b:3e:fd:0d:b7:eb:73: da:94:bf:64:94:51:e4:70:1d:92:dd:67:91:0f:0c:6a:1a:24: 4e:6a:af:90:63:4f:79:9e:49:ba:c3:d0:50:df:3a:fe:ff:13: e6:bb:94:a2:b7:36:5d:42:4f:23:59:b1:00:23:1e:e8:e7:36: 20:68:56:f4:e5:c6:9b:5e:6b:b0:46:d7:78:c5:3e:1d:5b:b0: 6f:74:67:8d:b1:36:d3:1a:3e:46:f6:a6:6b:48:e1:f8:ca:cb: 77:c1:68:b9:87:05:20:5d:bb:62:5d:68:2e:10:e2:bd:1b:2d: 60:f7:5d:bf:d8:59:36:11:cf:59:61:d7:94:0c:3e:1b:22:d0: fc:fe:31:8b:64:14:6b:4f:56:5a:0d:a7:bf:88:52:22:c0:9c: ef:08:ea:77:ad:49:11:4c:b3:92:ba:14:8f:d7:8c:0e:9c:6a: 06:23:7c:81:3b:be:75:8b:47:50:21:5a:0d:05:7c:2f:9a:76: c6:35:96:ef:cf:1a:5c:ce:29:a5:03:c1:7a:f0:3e:95:ae:ee: e9:a5:f9:6c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f8jKfZRImbgC9+b6flxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzZlOTg1NWY5YmNhMzAxN2ExMDEzN2I0NDNlZThjNTI4 Y2E5NTIwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmFhY2Y4MWMzOWQyOWM1MDc2OTQ2MmFlYTk0MjUzZTgyYmFiYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV4pDLnFV4UfMPSSHMPSYpGoCyj8 JhPFzSSfPWj2iPDd213Gyy3rmMu3Vn64nbFw8A7GVFSznxzVZWLOZ2hxraWeq+ip 0z2CmCg4Fzhe3pCX8mxJG8JdQJ82C8cbCckIj/IfIyV5U9MwDXIBUK/rDcXO5trw 8aV+SkESbslxbxphwpT5FpkmKbId6tq2UnPWINrXb32LvPa/KT0TO4mdrvLpY4tC a0esXwxbu88O5C/k0YHL/+cfk8XmYUpCXpGB75p8tM2PvPyf1O73oUaucI17ODw2 Y1Bi++y4flNLSUXD2h8aAvS2/b8e5xwSCYf5mEk5suz2Xx41VxCbQx3GoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGKqz4HDnSnFB2lGKuqUJT6CursdMB8GA1UdIwQY MBaAFDB26YVfm8owF6EBN7RD7oxSjKlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUt N2Y3ODZiYjM0MzQ0LzEvWXFyUGdjT2RLY1VIYVVZcTZwUWxQb0s2dXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUtN2Y3ODZiYjM0MzQ0 LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFX6lAMA0E AgACMAcDBQMqC1WAMA0GCSqGSIb3DQEBCwUAA4IBAQDhy6OKLwC9tTO2GLUBRcdP n+PuwWcUy9d0LhN/zLDIQw61gVDQ3k4NIq5Mkb0IPps+/Q2363PalL9klFHkcB2S 3WeRDwxqGiROaq+QY095nkm6w9BQ3zr+/xPmu5SitzZdQk8jWbEAIx7o5zYgaFb0 5cabXmuwRtd4xT4dW7BvdGeNsTbTGj5G9qZrSOH4yst3wWi5hwUgXbtiXWguEOK9 Gy1g912/2Fk2Ec9ZYdeUDD4bItD8/jGLZBRrT1ZaDae/iFIiwJzvCOp3rUkRTLOS uhSP14wOnGoGI3yBO751i0dQIVoNBXwvmnbGNZbvzxpczimlA8F68D6Vru7ppfls -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:16 2026 by rpki-client