This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/nVYscJl5lSrsIHBCJc12P0YYc1I.roa File: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (raw, json) Hash identifier: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c= Subject key identifier: 9D:56:2C:70:99:79:95:2A:EC:20:70:42:25:CD:76:3F:46:18:73:52 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C67287CAD3AD1C69347DB5CE69E8F7 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/nVYscJl5lSrsIHBCJc12P0YYc1I.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35448 IP address blocks: 95.158.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:87:ca:d3:ad:1c:69:34:7d:b5:ce:69:e8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d562c709979952aec20704225cd763f46187352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:62:cf:3c:86:34:5c:b2:ed:e9:ee:65:7a: 18:ff:6e:77:a6:cd:8b:5e:70:fc:50:ae:62:8e:98: e2:b9:99:e0:0b:04:bd:10:bb:a3:db:4c:67:1f:c9: d6:07:a0:48:ec:ed:17:ff:e3:27:14:6e:3b:67:6e: c8:93:45:9c:0d:a0:e8:79:a4:c3:3e:d0:11:7f:53: e9:2f:9e:b0:a6:81:e3:1c:d4:89:da:04:ff:af:0f: a9:a3:7d:ca:79:da:ef:e1:bc:5b:20:2d:86:ea:eb: 84:8e:39:47:7d:de:d0:b6:9e:af:10:f1:97:22:f1: 31:e0:4a:7f:a2:9b:3d:47:30:0d:ca:a7:b4:f7:0b: 98:f3:e3:ae:00:05:8d:13:e5:2a:98:eb:88:8e:a0: e9:e1:c5:89:f2:48:ce:e8:13:ee:36:ce:ca:5c:d9: 3a:7e:8a:d4:0b:f2:40:1f:99:cb:39:06:c0:f9:aa: 64:2d:af:3a:c7:7c:da:70:6e:99:68:ae:39:55:5e: d6:83:86:5c:fd:43:e4:cb:cf:76:2c:18:11:a8:81: 12:99:d4:79:29:a4:c9:0e:a4:57:4b:90:72:70:a6: b2:fb:da:8e:de:37:13:4f:52:44:66:3c:e3:8e:84: 27:06:40:f2:61:38:1e:01:a4:40:fd:29:60:0a:0d: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:56:2C:70:99:79:95:2A:EC:20:70:42:25:CD:76:3F:46:18:73:52 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/nVYscJl5lSrsIHBCJc12P0YYc1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.158.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:0d:18:f5:7f:12:bb:81:6a:ff:66:14:ff:ce:85:3e:a3:e3: c0:69:30:48:f8:ce:a5:c7:c5:a3:75:00:82:85:03:bc:d6:e3: 1d:bc:60:31:39:5d:84:c7:e1:e7:89:07:15:f8:f1:fe:44:b1: 3d:b4:00:05:82:86:07:fe:53:b6:cf:35:21:4e:72:8b:86:9b: 85:63:44:7d:d7:21:07:ea:de:d4:68:77:6d:25:3d:40:0e:bb: c1:5f:dc:8d:d5:ca:5a:aa:f4:8c:8d:5d:eb:a7:c5:f2:5c:12: 98:75:8a:4c:5e:56:a2:5c:68:b4:6e:53:a0:bf:d5:1d:1f:a3: 46:ef:a4:ed:8d:26:99:93:b0:19:d3:c1:ec:4a:fd:63:a1:7c: 4d:e4:4e:51:f5:6b:54:48:46:f8:96:19:c3:a3:dd:6f:e1:16: 07:7b:1e:2f:bd:44:00:c0:e5:54:f4:f3:ea:a1:23:fd:69:4b: 64:02:9f:2b:b8:21:ef:70:d8:20:09:fe:f9:6d:1b:dd:df:11: 5f:5d:3e:26:e1:5e:0b:41:f9:e8:53:df:ad:e8:87:bb:ae:29: 40:fd:12:ed:6b:26:c4:ee:86:8c:b6:a7:3f:b2:f7:7c:3e:ad: 9b:ad:b9:c1:f6:49:ac:fd:5e:a1:a2:e4:7c:d8:9a:dc:72:0b: c6:94:bf:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnKHytOtHGk0fbXOaej3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDU2MmM3MDk5Nzk5NTJhZWMyMDcwNDIyNWNkNzYzZjQ2MTg3MzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20hizzyGNFyy7enuZXoY/253ps2L XnD8UK5ijpjiuZngCwS9ELuj20xnH8nWB6BI7O0X/+MnFG47Z27Ik0WcDaDoeaTD PtARf1PpL56wpoHjHNSJ2gT/rw+po33Kedrv4bxbIC2G6uuEjjlHfd7Qtp6vEPGX IvEx4Ep/ops9RzANyqe09wuY8+OuAAWNE+UqmOuIjqDp4cWJ8kjO6BPuNs7KXNk6 forUC/JAH5nLOQbA+apkLa86x3zacG6ZaK45VV7Wg4Zc/UPky892LBgRqIESmdR5 KaTJDqRXS5BycKay+9qO3jcTT1JEZjzjjoQnBkDyYTgeAaRA/SlgCg1tCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1WLHCZeZUq7CBwQiXNdj9GGHNSMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvblZZc2NKbDVsU3JzSUhCQ0pjMTJQMFlZYzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX56QMA0G CSqGSIb3DQEBCwUAA4IBAQCdDRj1fxK7gWr/ZhT/zoU+o+PAaTBI+M6lx8WjdQCC hQO81uMdvGAxOV2Ex+HniQcV+PH+RLE9tAAFgoYH/lO2zzUhTnKLhpuFY0R91yEH 6t7UaHdtJT1ADrvBX9yN1cpaqvSMjV3rp8XyXBKYdYpMXlaiXGi0blOgv9UdH6NG 76TtjSaZk7AZ08HsSv1joXxN5E5R9WtUSEb4lhnDo91v4RYHex4vvUQAwOVU9PPq oSP9aUtkAp8ruCHvcNggCf75bRvd3xFfXT4m4V4LQfnoU9+t6Ie7rilA/RLtaybE 7oaMtqc/svd8Pq2brbnB9kms/V6houR82JrccgvGlL/L -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:13 2026 by rpki-client