This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa File: nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa (raw, json) Hash identifier: b5roqxrC5hM3q/j7Y7kUe7Tu2I31wiF3qmJCqWlG9jo= Subject key identifier: 9C:FC:B9:23:AC:DB:DD:00:BB:C7:0D:09:FC:8B:C9:8D:1D:A1:77:D6 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B9D54BB270A307CE7508FB4A78E90EE96 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa Signing time: Thu 08 Jan 2026 11:18:54 +0000 ROA not before: Thu 08 Jan 2026 11:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401322 IP address blocks: 95.155.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:54:bb:27:0a:30:7c:e7:50:8f:b4:a7:8e:90:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 8 11:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cfcb923acdbdd00bbc70d09fc8bc98d1da177d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:b3:5d:7b:25:f3:e3:26:0b:28:29:56:fb: 65:b9:3d:b7:e6:59:18:12:fe:d4:41:56:a3:b0:c5: f8:85:5b:ce:4b:86:a5:a3:7a:00:83:06:ff:d9:62: 32:d1:31:00:b6:c9:9c:70:9f:be:06:07:05:ee:ff: 35:4c:c7:0f:c0:d7:89:ba:17:29:f7:c2:49:21:ee: 0c:00:45:92:2f:5f:81:e7:6a:e2:d1:8a:f1:58:25: 15:e1:36:66:98:e8:8f:9d:66:cc:02:89:a1:b1:62: 21:8f:a4:1a:38:46:c7:63:ed:a0:7c:7c:d1:ac:89: ec:53:3b:98:e9:f2:3d:80:ba:5e:43:a2:7a:91:18: d6:ed:3f:95:24:f1:4d:20:04:af:43:e1:e6:cf:35: 4b:a2:6e:8e:4f:03:0a:69:ac:38:c7:ee:d5:1d:20: f8:2c:d5:f9:ee:19:f2:af:f9:aa:c0:86:e3:3b:a0: 73:36:85:b4:04:7b:f5:9f:bf:02:79:e6:52:23:8f: 42:5b:32:20:3e:48:e9:ec:aa:3f:6e:c8:b7:b9:34: b6:b4:eb:70:a7:5c:40:71:a4:58:e3:2d:61:63:23: e7:d7:02:b2:fd:d4:0b:24:94:8b:32:c0:0f:2a:74: c4:e9:0d:8e:3b:ed:57:6f:8b:5f:83:49:c7:30:51: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:B9:23:AC:DB:DD:00:BB:C7:0D:09:FC:8B:C9:8D:1D:A1:77:D6 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.131.0/24 Signature Algorithm: sha256WithRSAEncryption 48:23:ab:b8:90:57:4b:6b:3e:37:2e:11:bf:35:3c:12:fe:1d: 6e:8f:b6:b6:59:d9:7b:49:79:60:fc:c4:ab:c4:3b:66:62:86: a8:02:76:b0:96:8d:79:04:c3:ff:31:1d:bb:f3:0c:cc:5f:55: 61:9c:01:c8:7b:46:60:51:28:55:bb:72:93:5e:85:aa:96:4c: 52:7e:f1:4f:65:a8:f6:c9:e2:34:f1:a1:9c:9b:d1:07:8f:72: 2d:dd:2c:d9:1d:60:6e:9d:26:75:8f:7c:74:c6:40:5b:6c:4c: 4f:c9:6a:99:7d:5a:65:a9:41:3b:6b:f2:6c:67:f1:c9:a5:6e: 87:e7:5c:da:db:d1:e6:69:96:af:8b:b8:85:b0:6b:3a:6f:de: a1:88:a8:db:30:95:fb:6a:3f:1d:41:46:90:74:4d:98:be:13: d8:77:7e:96:f9:9b:b6:ca:6f:93:05:6f:c2:7f:e1:d8:a8:c5: 72:ef:75:0a:d0:71:fa:3b:01:cd:5b:f3:dd:31:74:51:6f:16: a6:43:75:56:73:37:3b:a4:ab:60:11:23:60:d8:81:33:73:14: 8a:c9:a3:f6:a1:a9:e7:69:98:82:c0:e2:79:db:dc:eb:3d:dc: 33:94:e8:8a:b5:c7:a4:1c:12:3e:46:46:1a:d9:a0:e7:d2:be: b5:99:a7:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudVLsnCjB851CPtKeOkO6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTA4MTExODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2ZjYjkyM2FjZGJkZDAwYmJjNzBkMDlmYzhiYzk4ZDFkYTE3N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl6zXXsl8+MmCygpVvtluT235lkY Ev7UQVajsMX4hVvOS4alo3oAgwb/2WIy0TEAtsmccJ++BgcF7v81TMcPwNeJuhcp 98JJIe4MAEWSL1+B52ri0YrxWCUV4TZmmOiPnWbMAomhsWIhj6QaOEbHY+2gfHzR rInsUzuY6fI9gLpeQ6J6kRjW7T+VJPFNIASvQ+HmzzVLom6OTwMKaaw4x+7VHSD4 LNX57hnyr/mqwIbjO6BzNoW0BHv1n78CeeZSI49CWzIgPkjp7Ko/bsi3uTS2tOtw p1xAcaRY4y1hYyPn1wKy/dQLJJSLMsAPKnTE6Q2OO+1Xb4tfg0nHMFFyGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJz8uSOs290Au8cNCfyLyY0doXfWMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvblB5NUk2emIzUUM3eHcwSl9JdkpqUjJoZDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5uDMA0G CSqGSIb3DQEBCwUAA4IBAQBII6u4kFdLaz43LhG/NTwS/h1uj7a2Wdl7SXlg/MSr xDtmYoaoAnawlo15BMP/MR278wzMX1VhnAHIe0ZgUShVu3KTXoWqlkxSfvFPZaj2 yeI08aGcm9EHj3It3SzZHWBunSZ1j3x0xkBbbExPyWqZfVplqUE7a/JsZ/HJpW6H 51za29HmaZavi7iFsGs6b96hiKjbMJX7aj8dQUaQdE2YvhPYd36W+Zu2ym+TBW/C f+HYqMVy73UK0HH6OwHNW/PdMXRRbxamQ3VWczc7pKtgESNg2IEzcxSKyaP2oann aZiCwOJ529zrPdwzlOiKtcekHBI+RkYa2aDn0r61maeF -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:46 2026 by rpki-client