This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/eFg69EJOf-kPIJa-UZ4VA5X44DY.roa File: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (raw, json) Hash identifier: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I= Subject key identifier: 78:58:3A:F4:42:4E:7F:E9:0F:20:96:BE:51:9E:15:03:95:F8:E0:36 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C67F56CE7254DD0D9F5499D70045B1 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/eFg69EJOf-kPIJa-UZ4VA5X44DY.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211432 IP address blocks: 195.95.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:56:ce:72:54:dd:0d:9f:54:99:d7:00:45:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78583af4424e7fe90f2096be519e150395f8e036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c8:9a:c3:62:05:e5:d7:e9:40:35:f2:08:a3: af:6b:ed:4d:38:89:61:4b:f6:f9:3b:d2:90:62:87: 47:c3:6c:97:68:6f:f5:51:27:3c:45:7b:92:f6:52: d1:1b:c9:c4:09:92:ac:b4:1e:1b:ac:4a:1f:66:10: cb:16:a5:25:ba:a8:71:52:a1:95:e2:67:d5:83:42: 04:62:ff:07:d3:d0:2f:62:83:97:7f:70:06:73:37: 69:b3:f0:6a:bb:0a:a8:82:43:ac:fb:0a:73:9a:7b: 6c:89:f1:48:e8:13:e2:86:14:ec:8f:83:b1:59:0a: c3:6a:54:8f:0d:27:fe:ae:d8:03:af:33:57:ad:1c: da:cf:9c:01:a5:27:07:7a:93:2d:b3:d1:85:01:53: 95:24:b9:c3:0b:8a:08:2e:4a:3c:50:cd:73:c0:24: bd:a5:a6:3c:61:52:cf:fc:ac:78:8c:21:a2:d2:85: 0e:02:88:a0:1a:7b:e3:e7:aa:a8:18:58:98:fd:e8: 79:53:9c:62:11:d4:f0:13:01:e6:07:a3:98:30:23: 8b:a4:8f:bc:f7:a4:21:4c:81:15:63:fc:1a:b4:72: 69:86:be:0b:42:30:0d:bb:d8:28:e6:db:6f:80:7c: 8c:e2:c7:7d:d2:c2:4a:0f:48:ce:87:a0:18:93:6d: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:58:3A:F4:42:4E:7F:E9:0F:20:96:BE:51:9E:15:03:95:F8:E0:36 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/eFg69EJOf-kPIJa-UZ4VA5X44DY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.205.0/24 Signature Algorithm: sha256WithRSAEncryption ca:e9:fc:b2:11:c0:4d:92:be:bc:e3:a7:10:e1:0b:98:89:f1: 3b:41:d6:ab:f8:95:bb:bc:b5:33:c3:0c:e3:e6:73:cc:1f:28: 22:f7:5d:8b:ba:b0:83:42:be:e1:f0:f6:88:d3:18:9c:a5:cc: 6e:28:c6:21:1c:2c:fa:93:f1:88:b3:96:d1:32:84:be:bb:9d: 79:ec:64:02:42:5c:25:52:8e:f0:e7:3b:9c:9b:41:c4:e2:da: 08:4b:82:a6:28:36:97:93:df:61:7c:85:ab:2e:69:4d:3d:0c: 36:f5:62:23:56:0f:80:de:bd:e3:29:ad:cd:e9:8a:ef:5e:cd: 06:8c:48:6f:80:8d:81:cf:51:fb:46:66:f6:cf:0f:82:ea:18: 7b:b0:00:8c:54:65:f9:71:1d:db:68:59:d5:26:6e:ab:79:e8: b9:1d:b2:56:df:7f:f1:27:6d:ad:16:1b:37:0c:1c:26:71:0d: 6c:35:7a:1f:20:c1:d5:5a:16:d5:ed:ba:c4:1b:2f:9f:c1:7b: 99:ac:e4:69:60:ad:ad:1a:e9:a7:73:bf:63:0e:63:82:02:1f: 5d:fc:ea:06:43:1e:00:e2:a0:58:ac:1a:41:ae:bf:d8:6b:89: e9:f3:9e:4e:e4:87:6e:57:07:f5:fb:5b:2c:b8:21:37:73:d6: f5:d4:2f:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xn9WznJU3Q2fVJnXAEWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODU4M2FmNDQyNGU3ZmU5MGYyMDk2YmU1MTllMTUwMzk1ZjhlMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Miaw2IF5dfpQDXyCKOva+1NOIlh S/b5O9KQYodHw2yXaG/1USc8RXuS9lLRG8nECZKstB4brEofZhDLFqUluqhxUqGV 4mfVg0IEYv8H09AvYoOXf3AGczdps/BquwqogkOs+wpzmntsifFI6BPihhTsj4Ox WQrDalSPDSf+rtgDrzNXrRzaz5wBpScHepMts9GFAVOVJLnDC4oILko8UM1zwCS9 paY8YVLP/Kx4jCGi0oUOAoigGnvj56qoGFiY/eh5U5xiEdTwEwHmB6OYMCOLpI+8 96QhTIEVY/watHJphr4LQjANu9go5ttvgHyM4sd90sJKD0jOh6AYk23CzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhYOvRCTn/pDyCWvlGeFQOV+OA2MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvZUZnNjlFSk9mLWtQSUphLVVaNFZBNVg0NERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/NMA0G CSqGSIb3DQEBCwUAA4IBAQDK6fyyEcBNkr6846cQ4QuYifE7Qdar+JW7vLUzwwzj 5nPMHygi912LurCDQr7h8PaI0xicpcxuKMYhHCz6k/GIs5bRMoS+u5157GQCQlwl Uo7w5zucm0HE4toIS4KmKDaXk99hfIWrLmlNPQw29WIjVg+A3r3jKa3N6YrvXs0G jEhvgI2Bz1H7Rmb2zw+C6hh7sACMVGX5cR3baFnVJm6reei5HbJW33/xJ22tFhs3 DBwmcQ1sNXofIMHVWhbV7brEGy+fwXuZrORpYK2tGumnc79jDmOCAh9d/OoGQx4A 4qBYrBpBrr/Ya4np855O5IduVwf1+1ssuCE3c9b11C8d -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:19 2026 by rpki-client