This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/co-bLev1SnaGT-usk3NbjNZkD94.roa File: co-bLev1SnaGT-usk3NbjNZkD94.roa (raw, json) Hash identifier: ZOkzjyj++1QpPpvtfzZuQWqrOOLowemna0EBSpzkij4= Subject key identifier: 72:8F:9B:2D:EB:F5:4A:76:86:4F:EB:AC:93:73:5B:8C:D6:64:0F:DE Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Certificate serial: 019B7FF186B2D35CAEC3FF96972C4599DA17 Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/co-bLev1SnaGT-usk3NbjNZkD94.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60476 IP address blocks: 95.142.206.0/24 maxlen: 24 2a00:bdc0:e006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:86:b2:d3:5c:ae:c3:ff:96:97:2c:45:99:da:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=728f9b2debf54a76864febac93735b8cd6640fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:c4:72:0e:e0:cd:29:09:22:f1:69:7c:14: 6a:fa:8d:05:88:50:e6:57:34:98:0b:b7:d1:92:a0: 94:93:4e:d5:23:2d:a7:4d:95:64:84:c0:57:1d:36: 62:bf:7f:38:51:81:97:7f:4a:37:eb:a9:12:f8:d5: a7:86:b9:dd:15:ca:e1:52:3a:5e:fb:4c:08:e1:5b: 3b:9f:22:81:d0:2f:b4:3f:5d:9a:42:b0:e2:d8:ec: 36:89:ed:8d:4b:13:a3:00:f1:e6:a5:be:9c:fa:b5: 67:be:9a:61:3c:15:13:0e:dc:3b:58:9a:68:bc:42: 29:39:9a:49:4e:d3:36:6a:ac:b7:dd:50:6d:2e:50: 51:6a:e2:33:40:66:a5:7c:8d:ef:a8:c6:0e:99:42: e0:00:ff:39:3b:9b:48:3a:8f:ba:b0:d0:bb:e6:09: 67:ab:eb:16:58:a1:3c:fb:8e:f4:e0:3b:ff:d2:91: 49:31:36:94:7b:a8:28:4b:76:07:52:70:3a:60:1c: 6a:4b:b1:14:a7:61:64:9b:87:0a:76:df:be:a1:32: 97:f4:5f:77:a3:2c:7d:63:cd:4d:e8:b7:72:b2:d0: 56:71:2d:b5:df:a9:1b:a8:88:cb:7b:ab:1a:b3:34: 6f:ab:bd:bd:64:85:f3:d6:80:5c:db:e3:ce:e4:31: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:9B:2D:EB:F5:4A:76:86:4F:EB:AC:93:73:5B:8C:D6:64:0F:DE X509v3 Authority Key Identifier: keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/co-bLev1SnaGT-usk3NbjNZkD94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.206.0/24 IPv6: 2a00:bdc0:e006::/48 Signature Algorithm: sha256WithRSAEncryption 13:d0:7f:ce:2e:3a:23:a9:94:3b:25:3d:38:8a:43:ea:d6:aa: 6f:81:2f:b6:a5:f0:5a:ef:1e:30:ea:e7:35:7b:1c:d5:64:79: 2d:bd:66:46:6d:e8:03:75:e1:f1:c4:07:8c:25:32:10:1f:74: 3d:9f:88:a2:cd:d3:24:92:65:4d:85:07:6e:96:f3:21:67:7b: a2:7a:c5:81:e1:48:46:da:bc:f1:5a:76:bf:ce:8f:06:90:9d: a9:c1:9d:7a:ae:3e:ff:0f:05:f8:b0:bd:57:59:f8:7c:47:5b: 3c:8b:ef:a3:7d:d1:66:4c:e2:72:4a:be:a9:98:37:14:f1:cb: a9:f9:18:50:28:ae:68:9e:fa:74:09:77:a4:2f:bd:9d:f8:3b: cb:d5:c9:8d:df:40:bd:a3:16:52:1d:87:0b:7c:27:4f:0a:9f: 60:0a:47:6d:ad:24:00:f0:17:fc:e1:48:ad:e9:70:13:85:37: 78:a7:02:91:e2:99:ee:1e:ff:45:84:c7:46:ab:7f:f1:0e:de: 15:34:58:82:d1:83:87:06:e3:45:23:ba:b5:94:8a:df:41:3c: b2:f5:bd:22:d9:25:38:46:d7:bb:88:93:9f:9b:e5:3d:ff:69: ae:e4:c7:bf:8f:a1:c8:5c:b9:a6:ab:2d:8b:a0:2f:26:f8:b9: d1:b6:63:56 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8Yay01yuw/+WlyxFmdoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy ZDQ1YjcwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjhmOWIyZGViZjU0YTc2ODY0ZmViYWM5MzczNWI4Y2Q2NjQwZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEnEcg7gzSkJIvFpfBRq+o0FiFDm VzSYC7fRkqCUk07VIy2nTZVkhMBXHTZiv384UYGXf0o366kS+NWnhrndFcrhUjpe +0wI4Vs7nyKB0C+0P12aQrDi2Ow2ie2NSxOjAPHmpb6c+rVnvpphPBUTDtw7WJpo vEIpOZpJTtM2aqy33VBtLlBRauIzQGalfI3vqMYOmULgAP85O5tIOo+6sNC75gln q+sWWKE8+4704Dv/0pFJMTaUe6goS3YHUnA6YBxqS7EUp2Fkm4cKdt++oTKX9F93 oyx9Y81N6LdystBWcS2136kbqIjLe6saszRvq729ZIXz1oBc2+PO5DFOpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHKPmy3r9Up2hk/rrJNzW4zWZA/eMB8GA1UdIwQY MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt ZjA5M2UxN2IyN2VmLzEvY28tYkxldjFTbmFHVC11c2szTmJqTlprRDk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAX47OMA8E AgACMAkDBwAqAL3A4AYwDQYJKoZIhvcNAQELBQADggEBABPQf84uOiOplDslPTiK Q+rWqm+BL7al8FrvHjDq5zV7HNVkeS29ZkZt6AN14fHEB4wlMhAfdD2fiKLN0ySS ZU2FB26W8yFne6J6xYHhSEbavPFadr/OjwaQnanBnXquPv8PBfiwvVdZ+HxHWzyL 76N90WZM4nJKvqmYNxTxy6n5GFAormie+nQJd6QvvZ34O8vVyY3fQL2jFlIdhwt8 J08Kn2AKR22tJADwF/zhSK3pcBOFN3inApHime4e/0WEx0arf/EO3hU0WILRg4cG 40UjurWUit9BPLL1vSLZJThG17uIk5+b5T3/aa7kx7+PochcuaarLYugLyb4udG2 Y1Y= -----END CERTIFICATE-----Generated at Mon Jan 26 15:35:27 2026 by rpki-client