This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/i900lZucCqA9DZUrSkDMsObY6hA.roa File: i900lZucCqA9DZUrSkDMsObY6hA.roa (raw, json) Hash identifier: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME= Subject key identifier: 8B:DD:34:95:9B:9C:0A:A0:3D:0D:95:2B:4A:40:CC:B0:E6:D8:EA:10 Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Certificate serial: 019B78A3651B55E8D34AD3057C4F4AF03939 Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/i900lZucCqA9DZUrSkDMsObY6hA.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35372 IP address blocks: 109.95.65.0/24 maxlen: 24 109.95.66.0/24 maxlen: 24 109.95.67.0/24 maxlen: 24 109.95.68.0/24 maxlen: 24 109.95.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:1b:55:e8:d3:4a:d3:05:7c:4f:4a:f0:39:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdd34959b9c0aa03d0d952b4a40ccb0e6d8ea10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:63:0e:bf:3e:6d:2a:ae:f1:8b:61:d6:c3: 26:70:79:10:70:0d:2a:69:2b:c4:95:00:8e:12:49: 56:92:42:67:40:2a:63:4c:f3:ba:fc:c1:36:8b:60: 3a:07:ca:85:98:0a:82:31:96:b2:bd:98:fa:5d:55: a8:f2:90:29:ac:4a:57:a0:2c:1b:9d:eb:fc:4d:29: 76:b8:92:e8:f4:b5:a2:e5:9d:d6:91:bb:b8:97:65: e9:b3:57:78:79:b5:45:e8:b3:0c:9e:be:e2:db:d8: 0e:7a:ef:b3:4a:e2:b7:5d:c0:cc:f1:8c:f3:6b:bd: ce:ed:4e:3f:8e:be:12:05:ab:17:b9:44:44:3f:6c: 10:e0:cc:93:9b:34:a7:e9:35:fb:c5:11:ed:a2:1f: c3:ba:c1:bb:ce:62:8d:fd:d8:cd:b3:05:14:f0:b9: 0a:8e:d1:4d:a3:db:99:4a:c1:9f:bd:69:ec:d3:95: db:2a:01:7b:87:be:f2:b7:a1:18:e6:4c:8e:b9:8c: e3:ce:ff:53:34:bf:49:64:3c:e1:7b:88:53:be:8c: a1:6c:47:fb:3c:d4:b3:7c:76:c6:a3:35:6e:0e:13: e4:af:3f:c6:5d:e1:f3:b0:32:89:0b:55:a9:30:29: 26:72:ae:98:68:36:bf:64:62:be:c0:b7:3c:21:1a: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:34:95:9B:9C:0A:A0:3D:0D:95:2B:4A:40:CC:B0:E6:D8:EA:10 X509v3 Authority Key Identifier: keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/i900lZucCqA9DZUrSkDMsObY6hA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.65.0-109.95.68.255 109.95.70.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:6c:8f:4f:9f:2d:77:89:88:f2:de:9c:d1:18:c3:d7:79:90: 69:17:dd:31:44:2f:fd:d8:91:6a:c6:de:cf:d8:02:25:8b:91: 20:cd:df:d5:a1:a6:4d:03:69:1b:00:84:45:5e:39:4f:a1:41: c7:1d:67:ae:e4:a7:b0:91:37:0b:ed:f8:f3:50:74:41:fa:4c: 12:87:0b:95:fa:61:48:a5:10:46:82:7e:b2:1a:32:71:d9:b5: 1c:7d:ef:33:7c:be:39:54:89:a9:e2:29:0b:cf:4f:8f:ea:55: 0c:dd:cf:26:b6:9e:0e:d8:36:e7:50:0d:b6:fd:1f:27:a0:77: 9e:90:f0:7f:fc:12:a7:cd:ea:6d:3d:4b:7c:da:90:92:b7:6c: e5:f4:80:88:12:8c:2f:21:0f:b7:11:2a:52:ea:57:7e:8c:06: c0:6c:8d:a1:b5:e1:04:26:3a:c8:29:2f:cc:b1:25:ba:54:01: d5:3f:1b:78:a9:cc:00:fb:d9:17:5d:fc:b7:03:36:dc:ba:b6: 12:52:33:fa:64:83:f2:2b:c6:5f:ba:ff:d7:0c:91:1e:ff:c4: 8e:6e:02:9c:9d:d4:ff:37:4f:7f:d6:df:d3:fb:52:84:d2:c8: a4:f6:4c:a9:55:8e:04:14:40:64:02:d5:63:f0:41:ec:53:45: 68:bb:16:f8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4o2UbVejTStMFfE9K8Dk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5 YWQwNzgwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRkMzQ5NTliOWMwYWEwM2QwZDk1MmI0YTQwY2NiMGU2ZDhlYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYxjDr8+bSqu8Yth1sMmcHkQcA0q aSvElQCOEklWkkJnQCpjTPO6/ME2i2A6B8qFmAqCMZayvZj6XVWo8pAprEpXoCwb nev8TSl2uJLo9LWi5Z3Wkbu4l2Xps1d4ebVF6LMMnr7i29gOeu+zSuK3XcDM8Yzz a73O7U4/jr4SBasXuUREP2wQ4MyTmzSn6TX7xRHtoh/DusG7zmKN/djNswUU8LkK jtFNo9uZSsGfvWns05XbKgF7h77yt6EY5kyOuYzjzv9TNL9JZDzhe4hTvoyhbEf7 PNSzfHbGozVuDhPkrz/GXeHzsDKJC1WpMCkmcq6YaDa/ZGK+wLc8IRrsfQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIvdNJWbnAqgPQ2VK0pAzLDm2OoQMB8GA1UdIwQY MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt ODdkM2IwMjNkOTE5LzEvaTkwMGxadWNDcUE5RFpVclNrRE1zT2JZNmhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5 LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABtX0ED BABtX0QDBABtX0YwDQYJKoZIhvcNAQELBQADggEBABtsj0+fLXeJiPLenNEYw9d5 kGkX3TFEL/3YkWrG3s/YAiWLkSDN39Whpk0DaRsAhEVeOU+hQccdZ67kp7CRNwvt +PNQdEH6TBKHC5X6YUilEEaCfrIaMnHZtRx97zN8vjlUianiKQvPT4/qVQzdzya2 ng7YNudQDbb9Hyegd56Q8H/8EqfN6m09S3zakJK3bOX0gIgSjC8hD7cRKlLqV36M BsBsjaG14QQmOsgpL8yxJbpUAdU/G3ipzAD72Rdd/LcDNty6thJSM/pkg/Irxl+6 /9cMkR7/xI5uApyd1P83T3/W39P7UoTSyKT2TKlVjgQUQGQC1WPwQexTRWi7Fvg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:02 2026 by rpki-client