This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa File: WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa (raw, json) Hash identifier: Ig8sscra5dIX6tBApNExCSn2CMXG+xOTaFttzoauVgc= Subject key identifier: 59:56:8F:C0:B1:2D:ED:1A:4C:29:89:6C:65:F6:3E:70:0D:C5:25:17 Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Certificate serial: 019B9552A0BD06E937D71E08D3F4F8FEF8E6 Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa Signing time: Tue 06 Jan 2026 21:59:38 +0000 ROA not before: Tue 06 Jan 2026 21:59:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 95.141.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:52:a0:bd:06:e9:37:d7:1e:08:d3:f4:f8:fe:f8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Validity Not Before: Jan 6 21:59:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59568fc0b12ded1a4c29896c65f63e700dc52517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:00:c2:99:81:4d:a7:4a:be:67:4d:a9:35: 1a:56:05:1f:ac:66:fb:fb:52:79:22:73:b1:02:6f: 58:43:4f:51:cd:eb:af:7a:b4:6d:88:d0:61:12:6d: 82:95:3f:85:ae:bb:cd:29:af:ce:c0:5f:e3:b2:a5: 77:cb:cb:85:90:7f:0e:0d:c0:b0:43:a1:42:c7:d3: 52:e9:13:88:79:28:4c:13:6e:37:ec:09:a9:a6:e0: 6f:76:c8:58:4e:fa:a7:c1:3d:82:fc:95:d0:b9:6f: 99:81:ee:3c:07:bf:20:60:97:89:62:b3:81:37:20: 36:43:b3:89:cb:7e:46:7f:c7:ea:d9:03:8f:63:bc: fd:e5:d3:30:83:15:0b:d8:9b:40:2f:be:28:4c:a9: 98:d7:53:19:0c:44:ac:2b:91:5c:a5:52:56:25:01: 08:06:db:ac:83:ec:2e:71:4a:e7:28:14:ac:63:1d: 47:70:89:c1:d3:6f:72:58:0a:1b:84:d7:cf:d0:22: 9c:5b:55:cd:34:ea:58:3e:dd:a7:fd:ab:24:e0:5d: eb:5c:81:66:47:71:0d:0a:d7:7d:7c:5f:01:71:f7: 30:29:6a:5c:c1:a7:da:ec:ab:4d:6e:e6:13:90:1a: 88:41:ce:1f:c5:66:02:e5:95:24:97:ce:9a:57:62: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:56:8F:C0:B1:2D:ED:1A:4C:29:89:6C:65:F6:3E:70:0D:C5:25:17 X509v3 Authority Key Identifier: keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.251.0/24 Signature Algorithm: sha256WithRSAEncryption a2:28:3e:70:4b:ea:7e:9d:ef:ef:18:f5:c4:8b:c6:1e:f8:88: c5:2c:3b:b5:d3:19:4c:71:06:ff:46:99:2c:d0:3c:78:18:66: 25:d9:65:f5:0b:68:6b:d3:62:1c:47:e3:57:b0:51:ad:30:77: 70:26:18:7b:1e:2c:98:c4:b2:6d:50:6c:05:04:70:d3:4e:a7: 5b:b1:ae:03:3f:05:bf:d8:5a:35:a5:44:27:ba:47:4e:0f:a5: 64:db:ac:0f:69:6a:d5:c5:c1:95:0a:15:5e:09:80:08:ce:0f: 5e:8c:4d:2b:84:fe:f1:47:48:81:fd:3e:e9:c5:ab:b4:b8:39: 23:3b:f7:c6:a9:ae:29:70:94:16:a4:fa:ca:a0:b3:0c:13:67: ac:a9:bf:00:23:e7:31:97:0e:5a:55:15:ce:05:10:55:d7:2b: 6c:c8:51:87:84:20:37:1b:17:7b:20:c1:c7:4e:73:57:8f:43: 35:4e:2f:55:24:42:b5:81:f9:bb:4d:b1:cd:ac:03:06:d0:64: 8a:8a:2e:a0:63:8c:c9:3e:d1:93:4c:0e:05:af:c1:4f:2e:c9: a3:12:7e:09:e7:71:f8:e0:c4:d6:11:b2:72:5d:1f:4d:f4:5b: cb:ac:17:b1:b7:9a:03:51:6d:c7:58:05:72:6e:6a:80:ba:26: e5:48:75:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuVUqC9Buk31x4I0/T4/vjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi N2E4ZDAwHhcNMjYwMTA2MjE1OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTU2OGZjMGIxMmRlZDFhNGMyOTg5NmM2NWY2M2U3MDBkYzUyNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW4AwpmBTadKvmdNqTUaVgUfrGb7 +1J5InOxAm9YQ09RzeuverRtiNBhEm2ClT+FrrvNKa/OwF/jsqV3y8uFkH8ODcCw Q6FCx9NS6ROIeShME2437AmppuBvdshYTvqnwT2C/JXQuW+Zge48B78gYJeJYrOB NyA2Q7OJy35Gf8fq2QOPY7z95dMwgxUL2JtAL74oTKmY11MZDESsK5FcpVJWJQEI Btusg+wucUrnKBSsYx1HcInB029yWAobhNfP0CKcW1XNNOpYPt2n/ask4F3rXIFm R3ENCtd9fF8BcfcwKWpcwafa7KtNbuYTkBqIQc4fxWYC5ZUkl86aV2IjnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFlWj8CxLe0aTCmJbGX2PnANxSUXMB8GA1UdIwQY MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt YjkzMWFlNTM5ZTdkLzEvV1ZhUHdMRXQ3UnBNS1lsc1pmWS1jQTNGSlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX437MA0G CSqGSIb3DQEBCwUAA4IBAQCiKD5wS+p+ne/vGPXEi8Ye+IjFLDu10xlMcQb/Rpks 0Dx4GGYl2WX1C2hr02IcR+NXsFGtMHdwJhh7HiyYxLJtUGwFBHDTTqdbsa4DPwW/ 2Fo1pUQnukdOD6Vk26wPaWrVxcGVChVeCYAIzg9ejE0rhP7xR0iB/T7pxau0uDkj O/fGqa4pcJQWpPrKoLMME2esqb8AI+cxlw5aVRXOBRBV1ytsyFGHhCA3Gxd7IMHH TnNXj0M1Ti9VJEK1gfm7TbHNrAMG0GSKii6gY4zJPtGTTA4Fr8FPLsmjEn4J53H4 4MTWEbJyXR9N9FvLrBext5oDUW3HWAVybmqAuiblSHXS -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:34 2026 by rpki-client