This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa File: rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa (raw, json) Hash identifier: 5Bfk1P6XoOfoIACEr9dJa6ZH0ZEA6wxnqttPtb85Opc= Subject key identifier: AE:A0:48:D5:88:1E:E5:DF:29:91:81:07:CC:C7:05:1C:B0:40:CB:FB Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e Certificate serial: 019B797E5689DC0EBA1D0F4D42D4F0EE984C Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265515 IP address blocks: 95.210.33.0/24 maxlen: 24 95.210.95.0/24 maxlen: 24 176.227.129.0/24 maxlen: 24 176.227.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:56:89:dc:0e:ba:1d:0f:4d:42:d4:f0:ee:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aea048d5881ee5df29918107ccc7051cb040cbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:0c:fa:c0:10:37:ec:70:87:3d:22:23:a7: 9f:a0:c2:90:eb:b1:e8:92:a7:8e:90:49:5f:ad:18: b0:bc:bd:f1:19:e8:1c:af:22:3d:e4:67:da:29:74: 69:d7:01:2a:4f:40:a0:9e:06:3a:39:96:6c:88:db: f5:a1:a1:96:48:6f:31:2a:43:29:af:59:a5:6a:c4: 1c:2f:32:66:a6:87:8f:fc:ab:15:30:5e:19:b9:e9: 01:a4:68:3e:1e:cf:bc:a8:d3:bf:a8:90:02:bc:a2: 60:13:6e:0a:f7:e9:ab:80:7a:81:51:7e:dc:71:34: 8d:d3:e4:81:95:22:ee:60:44:1c:6e:e6:63:7f:75: f1:41:cb:aa:e3:97:27:94:7d:ce:16:4d:a0:82:f8: e0:48:87:16:57:b4:f6:43:51:bd:e3:73:86:cf:ba: df:f7:28:5a:59:6c:70:24:e6:71:f5:06:cc:0c:53: 70:32:19:6a:47:06:aa:7e:2f:fb:be:8a:ff:4d:cc: c6:29:f8:a4:d7:70:9f:55:e0:bd:96:2f:76:e3:67: 90:ae:45:52:f6:80:d3:ee:36:2e:cc:4e:7c:84:db: ee:e2:67:87:db:c7:67:b0:2a:6f:1f:01:79:76:13: 1e:b3:29:4a:1d:f5:cb:65:86:41:c4:8f:ae:9a:86: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:48:D5:88:1E:E5:DF:29:91:81:07:CC:C7:05:1C:B0:40:CB:FB X509v3 Authority Key Identifier: keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.210.33.0/24 95.210.95.0/24 176.227.129.0/24 176.227.133.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e4:48:13:9c:b3:a2:67:c7:1b:42:1b:b7:70:f8:79:6e:66: 10:f1:7b:28:d3:f1:33:c0:70:6f:1b:8b:95:bd:19:51:e2:21: b2:e4:b0:24:7c:57:49:70:5f:7f:43:2b:b8:f6:d1:e3:02:e1: 3a:b1:fd:d2:a2:27:95:ef:1b:83:c8:e9:1d:f1:b6:c1:a4:b0: a7:41:bb:2e:46:f2:0f:44:34:0a:cf:68:1f:44:72:21:9a:5b: 56:73:64:f4:dc:7c:6b:a9:9f:8c:08:90:50:48:50:c7:ca:55: be:58:60:11:69:0d:0f:ba:28:3e:f3:13:a0:21:9c:23:5e:ea: 1a:8c:20:ee:e3:e7:87:82:23:e6:7d:f4:ee:26:65:9b:e2:dc: 5d:92:bd:91:04:ea:81:0c:9e:0f:fe:8c:c3:1b:71:15:c9:c8: 2e:a5:39:7a:d7:87:16:40:dc:b5:9d:cf:ab:4a:db:30:38:9e: f9:11:4a:64:72:21:3d:e6:ef:94:41:07:1f:6e:b5:1c:3d:ba: 2a:97:ca:ab:84:fc:9e:d1:d9:b5:42:03:40:89:c7:66:c6:28: 27:93:a4:b1:47:b0:5e:da:fd:83:50:ca:6c:3e:c7:a0:b3:0a: 73:86:d9:3d:e8:42:23:7b:9e:8f:a3:57:b9:97:6f:c3:cf:31: 06:a6:66:86 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5flaJ3A66HQ9NQtTw7phMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi NDE1M2UwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWEwNDhkNTg4MWVlNWRmMjk5MTgxMDdjY2M3MDUxY2IwNDBjYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq4M+sAQN+xwhz0iI6efoMKQ67Ho kqeOkElfrRiwvL3xGegcryI95GfaKXRp1wEqT0CgngY6OZZsiNv1oaGWSG8xKkMp r1mlasQcLzJmpoeP/KsVMF4ZuekBpGg+Hs+8qNO/qJACvKJgE24K9+mrgHqBUX7c cTSN0+SBlSLuYEQcbuZjf3XxQcuq45cnlH3OFk2ggvjgSIcWV7T2Q1G943OGz7rf 9yhaWWxwJOZx9QbMDFNwMhlqRwaqfi/7vor/TczGKfik13CfVeC9li9242eQrkVS 9oDT7jYuzE58hNvu4meH28dnsCpvHwF5dhMesylKHfXLZYZBxI+umoY/8wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFK6gSNWIHuXfKZGBB8zHBRywQMv7MB8GA1UdIwQY MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt MWQzNzM0OTk5MjRlLzEvcnFCSTFZZ2U1ZDhwa1lFSHpNY0ZITEJBeV9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX9IhAwQA X9JfAwQAsOOBAwQAsOOFMA0GCSqGSIb3DQEBCwUAA4IBAQCZ5EgTnLOiZ8cbQhu3 cPh5bmYQ8Xso0/EzwHBvG4uVvRlR4iGy5LAkfFdJcF9/Qyu49tHjAuE6sf3SoieV 7xuDyOkd8bbBpLCnQbsuRvIPRDQKz2gfRHIhmltWc2T03HxrqZ+MCJBQSFDHylW+ WGARaQ0Puig+8xOgIZwjXuoajCDu4+eHgiPmffTuJmWb4txdkr2RBOqBDJ4P/ozD G3EVycgupTl614cWQNy1nc+rStswOJ75EUpkciE95u+UQQcfbrUcPboql8qrhPye 0dm1QgNAicdmxignk6SxR7Be2v2DUMpsPsegswpzhtk96EIje56Po1e5l2/DzzEG pmaG -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:21 2026 by rpki-client