This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/RqeC-lEqwwGbXv0c_iSkOjlh-8o.roa File: RqeC-lEqwwGbXv0c_iSkOjlh-8o.roa (raw, json) Hash identifier: vCkYLArZ5ul+aeZortHWIKKfOyz0MPr4+c1YhQ6yU6U= Subject key identifier: 46:A7:82:FA:51:2A:C3:01:9B:5E:FD:1C:FE:24:A4:3A:39:61:FB:CA Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Certificate serial: 019B7FF18686703A98EA866FAD3CA48FC717 Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/RqeC-lEqwwGbXv0c_iSkOjlh-8o.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47542 IP address blocks: 95.142.204.0/23 maxlen: 23 95.142.207.0/24 maxlen: 24 2a00:bdc0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:86:86:70:3a:98:ea:86:6f:ad:3c:a4:8f:c7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46a782fa512ac3019b5efd1cfe24a43a3961fbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:75:47:96:11:b3:8f:b9:5a:9e:55:c2:1c:e0: 96:70:86:36:30:74:6b:34:68:c1:f3:51:22:47:2b: a7:ea:cc:7f:92:1a:fd:a8:22:7c:ea:da:4b:b4:dc: c5:57:08:0f:0f:34:77:5b:12:fa:34:97:13:3f:dc: 79:f2:bc:00:f8:08:5c:af:b2:0f:b6:e5:6e:2a:e5: 9a:ac:a2:19:ca:19:ec:e7:d2:1e:86:41:7b:6d:ad: b5:3b:0c:4f:34:19:b5:5f:e2:be:14:c4:cb:62:44: 18:d6:00:c7:20:88:3b:8d:a4:5a:69:2b:ad:22:1a: b2:fc:73:23:e9:41:fd:04:3d:74:74:93:2f:12:c2: b0:ea:76:12:e3:43:cc:56:05:c4:1d:41:23:c8:9c: 92:1b:3a:97:5c:72:dc:d6:13:e2:29:55:c1:60:b3: 24:6f:eb:35:0d:c1:ed:b9:ed:3b:7e:ca:9f:37:93: bf:12:fe:19:3a:11:33:0a:66:12:9d:5c:25:75:58: 5f:88:38:71:3f:c4:04:5f:b6:a4:a4:26:5f:ed:e7: f4:7b:7a:c7:c6:02:40:d3:be:45:39:45:c1:05:5d: b4:5f:b1:fb:ff:c8:39:d9:95:55:7f:5b:3e:8f:01: 20:7f:fb:b7:14:e0:20:3e:0e:54:27:78:96:c6:f6: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A7:82:FA:51:2A:C3:01:9B:5E:FD:1C:FE:24:A4:3A:39:61:FB:CA X509v3 Authority Key Identifier: keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/RqeC-lEqwwGbXv0c_iSkOjlh-8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.204.0/23 95.142.207.0/24 IPv6: 2a00:bdc0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:53:14:8b:a4:d5:34:3b:27:60:04:30:32:07:93:ec:37:7c: a6:d7:95:5c:3b:ab:d2:05:73:4b:fb:4c:f7:84:da:2a:59:f3: 58:3d:7b:a5:03:8f:36:62:dd:20:6a:10:8b:93:28:1e:25:2f: 33:f1:c0:d0:ba:58:56:23:5c:ac:59:e8:ee:99:60:db:9a:54: d8:fd:13:0e:89:21:3d:68:da:5f:26:2b:b2:b8:c9:31:83:14: 64:2a:f2:2e:cf:cf:af:ce:4a:34:ed:04:ba:b3:ad:9a:19:6d: 97:d4:8e:09:a3:c8:8c:12:56:92:c8:f4:16:42:b6:57:11:85: 34:6b:ff:38:d8:dc:3b:3b:fa:9d:68:a3:2d:c4:4d:ee:7c:2a: f7:27:ba:d2:58:ce:12:11:a8:0e:cc:7c:02:6c:2d:11:c2:4c: ec:7a:f3:da:8c:44:0e:bb:5f:3b:2f:27:30:32:f3:dc:d8:32: 0a:39:a8:13:aa:ab:b8:bf:c6:11:36:d8:e8:50:39:51:14:0f: 21:97:a1:41:ae:0f:e2:80:46:ca:4e:7b:18:b6:c2:8d:8b:e4: 92:f1:cd:f9:8f:fe:13:6a:25:ea:cf:4d:73:29:a4:d8:48:54: 5b:1f:12:71:fe:cb:e6:f3:c0:3a:cc:cb:77:63:6c:37:1d:53: 6e:12:06:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/8YaGcDqY6oZvrTykj8cXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy ZDQ1YjcwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmE3ODJmYTUxMmFjMzAxOWI1ZWZkMWNmZTI0YTQzYTM5NjFmYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nVHlhGzj7lanlXCHOCWcIY2MHRr NGjB81EiRyun6sx/khr9qCJ86tpLtNzFVwgPDzR3WxL6NJcTP9x58rwA+Ahcr7IP tuVuKuWarKIZyhns59IehkF7ba21OwxPNBm1X+K+FMTLYkQY1gDHIIg7jaRaaSut Ihqy/HMj6UH9BD10dJMvEsKw6nYS40PMVgXEHUEjyJySGzqXXHLc1hPiKVXBYLMk b+s1DcHtue07fsqfN5O/Ev4ZOhEzCmYSnVwldVhfiDhxP8QEX7akpCZf7ef0e3rH xgJA075FOUXBBV20X7H7/8g52ZVVf1s+jwEgf/u3FOAgPg5UJ3iWxvY1+wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEangvpRKsMBm179HP4kpDo5YfvKMB8GA1UdIwQY MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt ZjA5M2UxN2IyN2VmLzEvUnFlQy1sRXF3d0diWHYwY19pU2tPamxoLThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBX47MAwQA X47PMA4EAgACMAgDBgQqAL3A8DANBgkqhkiG9w0BAQsFAAOCAQEAXVMUi6TVNDsn YAQwMgeT7Dd8pteVXDur0gVzS/tM94TaKlnzWD17pQOPNmLdIGoQi5MoHiUvM/HA 0LpYViNcrFno7plg25pU2P0TDokhPWjaXyYrsrjJMYMUZCryLs/Pr85KNO0EurOt mhltl9SOCaPIjBJWksj0FkK2VxGFNGv/ONjcOzv6nWijLcRN7nwq9ye60ljOEhGo Dsx8AmwtEcJM7Hrz2oxEDrtfOy8nMDLz3NgyCjmoE6qruL/GETbY6FA5URQPIZeh Qa4P4oBGyk57GLbCjYvkkvHN+Y/+E2ol6s9Ncymk2EhUWx8Scf7L5vPAOszLd2Ns Nx1TbhIG1w== -----END CERTIFICATE-----Generated at Mon Jan 26 15:19:30 2026 by rpki-client