This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa File: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (raw, json) Hash identifier: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA= Subject key identifier: D4:D8:4C:27:B8:80:2A:DD:57:36:47:30:A6:A8:C0:B7:10:EB:D6:D8 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F82476B1FD5254178AD827EBCE123C1 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa Signing time: Fri 02 Jan 2026 16:20:02 +0000 ROA not before: Fri 02 Jan 2026 16:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44617 IP address blocks: 95.172.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:47:6b:1f:d5:25:41:78:ad:82:7e:bc:e1:23:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4d84c27b8802add57364730a6a8c0b710ebd6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:81:bb:db:17:d7:51:aa:af:1c:1e:3b:4c: 4f:03:e4:1f:b9:f2:2f:3d:0d:b1:ff:24:51:76:77: 03:d7:68:be:67:1a:cf:96:f8:e6:95:b5:15:c1:8e: 80:b0:68:62:61:86:3e:15:17:00:90:d4:3c:b8:ab: 41:96:b1:58:fe:87:1f:2b:cb:66:ee:c2:76:5d:92: 7d:04:22:79:71:0a:fa:15:35:19:d2:6c:3d:38:53: f8:f0:fd:fc:ec:42:00:f0:80:2f:78:ec:f9:9c:ad: 50:80:d6:02:20:84:81:2e:86:48:b4:7d:7d:fc:e5: 26:64:4c:4f:88:a5:37:97:1c:11:19:be:8e:09:23: 35:0e:1e:cc:12:7b:74:a0:5e:2d:d5:e7:39:fb:48: 52:65:be:2c:9e:5e:88:80:db:a8:73:d3:8b:7c:a1: f9:19:28:11:3f:56:60:82:d9:a1:49:14:5f:3c:f3: eb:49:47:aa:d1:2d:d3:4e:82:c3:22:a2:60:3f:0e: 42:75:f9:33:73:93:14:da:c1:a8:72:e3:94:48:1f: 19:98:91:88:24:c3:eb:1e:ab:f9:7c:a3:94:d7:cf: e6:12:6d:d6:a6:18:61:23:82:32:93:d5:25:ab:a9: 5f:3c:f5:43:a4:30:85:a6:8d:a7:6e:b2:a1:db:f3: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:4C:27:B8:80:2A:DD:57:36:47:30:A6:A8:C0:B7:10:EB:D6:D8 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.172.74.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:3f:bf:96:22:71:e1:64:14:19:70:28:e3:5b:24:81:a5:e3: 68:53:9d:65:b0:2a:ec:fd:10:65:49:57:68:e8:79:1d:13:22: 30:04:a8:b9:50:85:99:f1:0a:53:58:d4:5e:be:36:1f:9d:6a: b6:60:7d:1c:d8:dc:e6:e6:14:00:01:b2:98:75:34:0a:12:15: 3b:b2:26:71:aa:66:54:29:f0:db:c1:04:fd:f2:d1:c3:e1:9a: 3e:8d:3c:e6:c0:18:20:23:b9:57:b8:f5:db:a2:28:d2:38:cd: 0d:61:84:21:db:c0:e9:c9:b7:9a:d6:a7:78:f7:08:ef:4a:0e: 87:a8:e6:af:1b:d7:26:34:95:66:f1:39:b4:eb:f7:6d:19:8b: 6e:de:30:69:63:77:91:31:ec:b8:a6:48:48:77:7c:f2:ae:0b: 8a:cf:ab:bb:7d:0b:8f:4d:92:b4:59:b9:cf:cc:68:8f:33:45: 6b:12:7f:bd:89:93:5a:57:33:59:b2:13:cb:3b:a5:47:a9:bf: ee:1d:40:eb:97:12:5f:5e:d7:c5:58:8a:75:e6:d0:69:44:e0: 35:7d:30:f5:6c:18:6a:9a:8a:ef:30:a7:a0:6f:05:8b:69:14: d7:bc:1e:e1:9e:d8:26:de:07:d8:a9:4e:5c:07:27:72:c0:a7: fb:fc:fb:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkdrH9UlQXitgn684SPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGQ4NGMyN2I4ODAyYWRkNTczNjQ3MzBhNmE4YzBiNzEwZWJkNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUSBu9sX11GqrxweO0xPA+QfufIv PQ2x/yRRdncD12i+ZxrPlvjmlbUVwY6AsGhiYYY+FRcAkNQ8uKtBlrFY/ocfK8tm 7sJ2XZJ9BCJ5cQr6FTUZ0mw9OFP48P387EIA8IAveOz5nK1QgNYCIISBLoZItH19 /OUmZExPiKU3lxwRGb6OCSM1Dh7MEnt0oF4t1ec5+0hSZb4snl6IgNuoc9OLfKH5 GSgRP1ZggtmhSRRfPPPrSUeq0S3TToLDIqJgPw5Cdfkzc5MU2sGocuOUSB8ZmJGI JMPrHqv5fKOU18/mEm3WphhhI4Iyk9Ulq6lfPPVDpDCFpo2nbrKh2/NVyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTYTCe4gCrdVzZHMKaowLcQ69bYMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvMU5oTUo3aUFLdDFYTmtjd3BxakF0eERyMXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6xKMA0G CSqGSIb3DQEBCwUAA4IBAQAvP7+WInHhZBQZcCjjWySBpeNoU51lsCrs/RBlSVdo 6HkdEyIwBKi5UIWZ8QpTWNRevjYfnWq2YH0c2Nzm5hQAAbKYdTQKEhU7siZxqmZU KfDbwQT98tHD4Zo+jTzmwBggI7lXuPXboijSOM0NYYQh28Dpybea1qd49wjvSg6H qOavG9cmNJVm8Tm06/dtGYtu3jBpY3eRMey4pkhId3zyrguKz6u7fQuPTZK0WbnP zGiPM0VrEn+9iZNaVzNZshPLO6VHqb/uHUDrlxJfXtfFWIp15tBpROA1fTD1bBhq morvMKegbwWLaRTXvB7hntgm3gfYqU5cBydywKf7/PvU -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:10 2026 by rpki-client