This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/SuktG5ygfNWoaIU5AmVI9f2QHqc.roa File: SuktG5ygfNWoaIU5AmVI9f2QHqc.roa (raw, json) Hash identifier: njMvgmOx4SGfZ8RPEr0/GOcVp5Xe/qHE6LYm5ovrTVQ= Subject key identifier: 4A:E9:2D:1B:9C:A0:7C:D5:A8:68:85:39:02:65:48:F5:FD:90:1E:A7 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C8032E117E089B682CBCC635B359F11 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/SuktG5ygfNWoaIU5AmVI9f2QHqc.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33058 IP address blocks: 95.155.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:e1:17:e0:89:b6:82:cb:cc:63:5b:35:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ae92d1b9ca07cd5a8688539026548f5fd901ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:4c:a3:56:c7:8e:7e:74:f4:d8:44:bc:2d: 22:a5:7e:c5:ca:99:05:ba:2f:3d:74:25:fe:8f:d1: 09:eb:f1:56:e8:3c:df:93:6b:25:a1:d2:eb:6e:8c: ff:61:f8:7e:46:c1:20:51:37:9c:b9:99:ef:4f:c1: 8d:66:52:e8:2b:ad:19:3d:ee:3f:e1:9b:a0:dd:47: e1:23:6b:81:84:75:3e:4f:50:75:40:ff:df:0c:53: 72:9b:ff:fc:38:2d:22:33:80:d8:27:c6:4f:98:63: 1d:f0:e6:6e:b3:0f:61:f2:e4:d8:02:09:bd:01:cb: 77:3a:c2:0c:74:bb:bd:75:f4:33:c5:92:d0:c6:3d: 97:41:fa:7a:9c:33:92:0d:6b:33:9d:e8:4c:59:53: b7:dd:a7:2e:0a:bf:04:5b:76:fb:3f:fe:99:15:85: e8:c3:2d:6e:8d:40:fa:60:7e:1c:be:4c:44:d4:fb: 80:2d:75:86:4d:d9:af:92:77:ec:d4:ac:a9:b7:9c: f2:6a:a1:86:45:93:f6:6a:f3:75:09:c4:c0:60:e9: 3c:31:0e:4c:03:a7:f0:7e:0f:b8:ad:d8:c6:6d:cb: 88:eb:1c:7b:72:bc:f2:77:c1:5e:16:f1:bd:9d:76: 56:6e:47:a1:b9:19:27:96:0a:96:bd:22:91:86:54: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:2D:1B:9C:A0:7C:D5:A8:68:85:39:02:65:48:F5:FD:90:1E:A7 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/SuktG5ygfNWoaIU5AmVI9f2QHqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.132.0/24 Signature Algorithm: sha256WithRSAEncryption 46:e3:3f:e2:f0:31:b9:72:f2:a2:46:40:a5:26:19:cd:3e:c8: a3:31:0d:da:3c:0d:f4:80:8a:d3:7b:18:72:dd:45:ed:08:2a: cc:e2:21:55:9b:5c:5d:b6:7d:ee:ba:b8:f2:db:c3:aa:89:f2: 6c:99:2d:19:df:f2:1d:d2:4a:08:62:92:a0:6d:a6:a8:88:12: bf:d1:7e:3f:9b:dd:64:1f:d8:53:c9:52:10:a9:1e:c7:bc:0c: c6:5c:5c:aa:59:2d:b1:2c:79:4a:70:c1:9a:a0:33:77:6e:36: 96:9b:c1:99:a3:cc:11:dc:43:8f:93:6e:6b:28:bb:dc:78:5a: ae:2a:80:e2:4c:e4:16:fc:8b:46:2c:03:6d:28:60:02:5f:3d: 7b:34:ec:34:ec:36:d7:98:0a:24:fb:7a:55:e1:95:a9:90:8f: 24:de:53:e1:94:45:59:f5:5b:5e:b1:40:ea:1d:0d:1e:92:8c: c4:7c:10:91:11:f5:25:b3:50:88:91:47:bd:ec:00:12:60:05: a5:40:97:f8:37:05:f5:fc:22:78:89:dc:07:df:32:7b:e4:87: 37:11:dd:55:95:8d:ba:37:65:71:26:0a:92:78:3b:a9:52:38: 5f:e0:50:95:70:13:de:23:70:56:08:72:41:cb:e4:04:d7:12: 03:86:b1:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDLhF+CJtoLLzGNbNZ8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWU5MmQxYjljYTA3Y2Q1YTg2ODg1MzkwMjY1NDhmNWZkOTAxZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAtMo1bHjn509NhEvC0ipX7FypkF ui89dCX+j9EJ6/FW6Dzfk2slodLrboz/Yfh+RsEgUTecuZnvT8GNZlLoK60ZPe4/ 4Zug3UfhI2uBhHU+T1B1QP/fDFNym//8OC0iM4DYJ8ZPmGMd8OZusw9h8uTYAgm9 Act3OsIMdLu9dfQzxZLQxj2XQfp6nDOSDWsznehMWVO33acuCr8EW3b7P/6ZFYXo wy1ujUD6YH4cvkxE1PuALXWGTdmvknfs1Kypt5zyaqGGRZP2avN1CcTAYOk8MQ5M A6fwfg+4rdjGbcuI6xx7crzyd8FeFvG9nXZWbkehuRknlgqWvSKRhlQjGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFErpLRucoHzVqGiFOQJlSPX9kB6nMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvU3VrdEc1eWdmTldvYUlVNUFtVkk5ZjJRSHFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5uEMA0G CSqGSIb3DQEBCwUAA4IBAQBG4z/i8DG5cvKiRkClJhnNPsijMQ3aPA30gIrTexhy 3UXtCCrM4iFVm1xdtn3uurjy28OqifJsmS0Z3/Id0koIYpKgbaaoiBK/0X4/m91k H9hTyVIQqR7HvAzGXFyqWS2xLHlKcMGaoDN3bjaWm8GZo8wR3EOPk25rKLvceFqu KoDiTOQW/ItGLANtKGACXz17NOw07DbXmAok+3pV4ZWpkI8k3lPhlEVZ9VtesUDq HQ0ekozEfBCREfUls1CIkUe97AASYAWlQJf4NwX1/CJ4idwH3zJ75Ic3Ed1VlY26 N2VxJgqSeDupUjhf4FCVcBPeI3BWCHJBy+QE1xIDhrGM -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:07 2026 by rpki-client