This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/2v9j4cmRBKthQd69OeXDYpcV_J4.roa File: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (raw, json) Hash identifier: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k= Subject key identifier: DA:FF:63:E1:C9:91:04:AB:61:41:DE:BD:39:E5:C3:62:97:15:FC:9E Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Certificate serial: 019B7CEE44CB0644EDD58949D81DEF9C434A Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/2v9j4cmRBKthQd69OeXDYpcV_J4.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210707 IP address blocks: 95.128.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:44:cb:06:44:ed:d5:89:49:d8:1d:ef:9c:43:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daff63e1c99104ab6141debd39e5c3629715fc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:b9:82:9a:52:d0:0f:b4:e5:2f:95:3e:8b: e9:34:6b:ee:4f:bf:01:e1:0b:db:23:73:a6:95:a3: 3e:9d:10:4c:ef:9e:2d:65:d2:67:8b:65:82:45:1a: 50:51:74:57:05:0c:18:3b:72:de:fa:d6:db:10:9c: b5:45:46:ed:52:cc:94:dd:5a:35:6d:bf:14:26:a6: 4e:2b:48:e9:56:c7:93:66:9b:18:5e:03:e1:2b:ac: 58:85:a7:d9:24:4d:83:5d:8f:1e:4f:7c:81:07:35: af:9e:8f:6c:94:a3:99:7f:a0:45:15:f8:2b:4a:53: 68:5f:65:eb:d7:6b:27:6c:d9:32:7d:a4:19:96:ba: c5:42:19:cb:a6:aa:87:64:80:3c:e4:8a:b3:d9:3f: dc:30:0e:bc:cc:44:6d:46:68:21:3f:fc:2d:0b:01: 3d:9d:26:cb:b2:bf:d5:88:bf:75:2b:37:d3:cf:96: ae:f5:ed:29:28:19:96:14:ad:5b:7b:13:81:ce:cd: 96:cb:c6:5a:d8:cb:c6:34:1d:75:c0:38:bb:58:8c: 7e:d6:95:de:77:1e:72:0f:8a:3c:83:13:32:87:b7: 8d:17:ad:ca:24:77:fc:77:67:a0:58:e6:93:43:ba: bb:37:d0:eb:36:23:00:f3:be:dc:b5:56:c3:35:76: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:63:E1:C9:91:04:AB:61:41:DE:BD:39:E5:C3:62:97:15:FC:9E X509v3 Authority Key Identifier: keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/2v9j4cmRBKthQd69OeXDYpcV_J4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.198.0/24 Signature Algorithm: sha256WithRSAEncryption 95:bc:03:ac:a3:b5:5e:2b:ae:a3:07:ef:6b:32:27:7d:55:ce: f9:7a:9e:43:03:bb:9e:a4:e3:97:16:38:82:67:52:90:8b:02: 81:03:fb:1f:69:33:aa:55:b4:be:5e:54:e1:6c:15:07:ba:bf: 1b:ba:2e:a9:5a:54:0e:b6:05:a4:cc:98:90:7f:43:f5:35:fd: 15:e0:42:59:c4:e4:bc:52:f8:79:f4:f8:dc:77:92:32:af:64: 83:88:32:87:90:d4:9e:1c:56:5c:2d:67:32:51:cb:5b:b7:f1: 99:8c:c1:8d:41:60:72:89:a3:52:15:63:87:3f:66:d0:79:8c: a6:19:d3:c3:8d:8d:ca:b9:09:62:3e:0b:8f:9e:30:3c:f0:f3: 22:e9:dc:b6:d5:5a:f5:76:18:30:81:ad:7a:11:b0:1a:47:41: a0:54:89:0a:5b:19:6f:d6:9f:82:bb:62:f9:48:9d:37:8f:49: 76:62:59:fc:f5:4b:3e:4b:98:56:23:e7:d6:c1:46:ba:58:bd: e5:d2:5f:d0:be:f5:08:97:83:51:d0:4d:b1:29:a7:b6:03:2b: e9:2d:9f:77:bc:7e:89:ef:25:8a:76:8f:ed:4e:35:14:73:46: 19:0b:5e:75:66:f1:58:1d:b4:52:81:4b:e2:b3:b6:c7:e6:7c: 31:fa:fe:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kTLBkTt1YlJ2B3vnENKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh M2ZjNDQwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWZmNjNlMWM5OTEwNGFiNjE0MWRlYmQzOWU1YzM2Mjk3MTVmYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr25gppS0A+05S+VPovpNGvuT78B 4QvbI3OmlaM+nRBM754tZdJni2WCRRpQUXRXBQwYO3Le+tbbEJy1RUbtUsyU3Vo1 bb8UJqZOK0jpVseTZpsYXgPhK6xYhafZJE2DXY8eT3yBBzWvno9slKOZf6BFFfgr SlNoX2Xr12snbNkyfaQZlrrFQhnLpqqHZIA85Iqz2T/cMA68zERtRmghP/wtCwE9 nSbLsr/ViL91KzfTz5au9e0pKBmWFK1bexOBzs2Wy8Za2MvGNB11wDi7WIx+1pXe dx5yD4o8gxMyh7eNF63KJHf8d2egWOaTQ7q7N9DrNiMA877ctVbDNXa0UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNr/Y+HJkQSrYUHevTnlw2KXFfyeMB8GA1UdIwQY MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt NjViY2M4Y2VmZGQyLzEvMnY5ajRjbVJCS3RoUWQ2OU9lWERZcGNWX0o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DGMA0G CSqGSIb3DQEBCwUAA4IBAQCVvAOso7VeK66jB+9rMid9Vc75ep5DA7uepOOXFjiC Z1KQiwKBA/sfaTOqVbS+XlThbBUHur8bui6pWlQOtgWkzJiQf0P1Nf0V4EJZxOS8 Uvh59Pjcd5Iyr2SDiDKHkNSeHFZcLWcyUctbt/GZjMGNQWByiaNSFWOHP2bQeYym GdPDjY3KuQliPguPnjA88PMi6dy21Vr1dhgwga16EbAaR0GgVIkKWxlv1p+Cu2L5 SJ03j0l2Yln89Us+S5hWI+fWwUa6WL3l0l/QvvUIl4NR0E2xKae2AyvpLZ93vH6J 7yWKdo/tTjUUc0YZC151ZvFYHbRSgUvis7bH5nwx+v46 -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:41 2026 by rpki-client