This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/9ZxAC10NuAqnXMcED-lsCy84WUc.roa File: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (raw, json) Hash identifier: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU= Subject key identifier: F5:9C:40:0B:5D:0D:B8:0A:A7:5C:C7:04:0F:E9:6C:0B:2F:38:59:47 Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc Certificate serial: 019B78A25EC94582EADF26AD01CF1049A434 Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/9ZxAC10NuAqnXMcED-lsCy84WUc.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209 IP address blocks: 95.130.110.0/24 maxlen: 24 195.93.196.0/24 maxlen: 24 195.93.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5e:c9:45:82:ea:df:26:ad:01:cf:10:49:a4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f59c400b5d0db80aa75cc7040fe96c0b2f385947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:00:db:b5:ff:f8:9c:9f:fd:14:ba:be:c3: b6:e2:66:d6:0a:f2:5c:b4:60:9d:75:44:b7:f0:26: 2c:8e:26:df:b4:3d:b6:77:6a:76:ac:70:00:2e:50: 08:49:d9:bf:22:ac:9a:e5:1b:46:9c:51:89:de:38: 53:39:8e:a8:a6:8f:ac:6f:b3:99:fa:8b:eb:a5:4f: 25:84:ff:d0:31:97:8f:d6:fe:b0:41:97:8c:92:a4: 85:ff:f1:53:62:5a:fc:77:a3:29:cf:b4:b5:f1:02: 16:73:96:a3:95:17:35:df:f3:1f:86:c4:dc:e4:63: ab:f4:83:9a:61:91:37:93:55:c8:42:d9:0c:64:2b: a4:45:e4:1b:0d:66:d7:dc:08:46:e6:6c:05:a0:cf: cb:e5:87:b1:15:ad:dc:e6:3f:1e:8d:b1:77:42:3b: 88:33:1a:d8:c8:46:b8:08:13:b7:f0:88:96:47:df: d2:31:f4:48:48:ae:c0:4a:72:00:7d:09:a4:fd:2f: 08:4e:bc:f8:06:ef:d9:51:e8:96:aa:da:61:ed:d5: e8:dc:63:4e:80:79:28:15:a6:f9:be:5d:0a:47:ff: 2e:12:86:ea:95:18:b6:dd:f8:c6:2f:b0:e1:71:3c: 2a:ff:a6:1f:e5:d2:08:09:1b:ab:46:cf:40:9f:d0: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:40:0B:5D:0D:B8:0A:A7:5C:C7:04:0F:E9:6C:0B:2F:38:59:47 X509v3 Authority Key Identifier: keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/9ZxAC10NuAqnXMcED-lsCy84WUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.110.0/24 195.93.196.0/23 Signature Algorithm: sha256WithRSAEncryption 24:94:47:cd:44:17:c3:e5:18:d0:6a:a7:9a:ce:78:87:15:7a: 94:7c:88:3d:66:e1:d6:d7:4d:8c:5c:63:60:5a:a4:de:e9:2a: 7c:38:06:be:ad:4d:67:05:33:6e:20:43:e5:13:e1:87:84:e5: 72:b1:0a:0f:48:7c:f3:b1:c9:73:96:a2:12:43:28:43:cc:c8: 20:e9:fe:b6:88:8e:87:f9:48:0c:f3:0e:00:28:48:f6:ed:34: 7a:6e:51:54:08:61:8d:ca:f6:4e:3b:ea:13:88:1f:ac:a4:cd: 3b:b5:6e:b2:ad:52:99:14:ba:75:31:d2:3b:84:72:60:d3:cc: 19:77:19:23:f8:96:5d:df:29:a0:2a:9a:d7:db:07:1a:58:21: 92:62:13:ae:58:3c:4f:a8:e5:87:ef:94:10:06:0b:a6:e7:28: 13:20:99:f0:be:f2:c8:6d:e3:84:ee:c1:d0:1c:69:e4:32:c2: 96:65:a6:2a:cb:54:1c:52:bb:e0:2a:2a:45:fd:cb:d0:63:64: 95:6a:18:a6:f8:7f:bd:fd:c8:10:ba:47:66:37:fe:97:a1:b5: 59:f9:9d:9d:90:ca:23:9f:01:3f:c6:9c:0e:4e:b2:87:58:09: 07:49:9d:f1:5d:1a:e1:78:26:92:d8:83:e0:56:86:76:d0:31: 88:25:53:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ol7JRYLq3yatAc8QSaQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk MGRjYmMwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTljNDAwYjVkMGRiODBhYTc1Y2M3MDQwZmU5NmMwYjJmMzg1OTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAQA27X/+Jyf/RS6vsO24mbWCvJc tGCddUS38CYsjibftD22d2p2rHAALlAISdm/Iqya5RtGnFGJ3jhTOY6opo+sb7OZ +ovrpU8lhP/QMZeP1v6wQZeMkqSF//FTYlr8d6Mpz7S18QIWc5ajlRc13/MfhsTc 5GOr9IOaYZE3k1XIQtkMZCukReQbDWbX3AhG5mwFoM/L5YexFa3c5j8ejbF3QjuI MxrYyEa4CBO38IiWR9/SMfRISK7ASnIAfQmk/S8ITrz4Bu/ZUeiWqtph7dXo3GNO gHkoFab5vl0KR/8uEobqlRi23fjGL7DhcTwq/6Yf5dIICRurRs9An9AEswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPWcQAtdDbgKp1zHBA/pbAsvOFlHMB8GA1UdIwQY MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt YzUyZGY0YWE1MjFkLzEvOVp4QUMxME51QXFuWE1jRUQtbHNDeTg0V1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4JuAwQB w13EMA0GCSqGSIb3DQEBCwUAA4IBAQAklEfNRBfD5RjQaqeazniHFXqUfIg9ZuHW 102MXGNgWqTe6Sp8OAa+rU1nBTNuIEPlE+GHhOVysQoPSHzzsclzlqISQyhDzMgg 6f62iI6H+UgM8w4AKEj27TR6blFUCGGNyvZOO+oTiB+spM07tW6yrVKZFLp1MdI7 hHJg08wZdxkj+JZd3ymgKprX2wcaWCGSYhOuWDxPqOWH75QQBgum5ygTIJnwvvLI beOE7sHQHGnkMsKWZaYqy1QcUrvgKipF/cvQY2SVahim+H+9/cgQukdmN/6XobVZ +Z2dkMojnwE/xpwOTrKHWAkHSZ3xXRrheCaS2IPgVoZ20DGIJVNF -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:00 2026 by rpki-client