This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/R_wOLHxRdbMvQPUDD2kbpdhTyWQ.roa File: R_wOLHxRdbMvQPUDD2kbpdhTyWQ.roa (raw, json) Hash identifier: AvVjOFPlntVjwcVwzUFQjqma9nqN82TMD6afuJ0trHk= Subject key identifier: 47:FC:0E:2C:7C:51:75:B3:2F:40:F5:03:0F:69:1B:A5:D8:53:C9:64 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA757630D901EF691A909890EF7F635 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/R_wOLHxRdbMvQPUDD2kbpdhTyWQ.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8570 IP address blocks: 95.179.0.0/18 maxlen: 22 95.179.64.0/19 maxlen: 20 95.179.80.0/20 maxlen: 24 95.179.96.0/19 maxlen: 22 109.172.32.0/22 maxlen: 22 109.172.40.0/22 maxlen: 22 178.234.0.0/16 maxlen: 18 195.34.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:57:63:0d:90:1e:f6:91:a9:09:89:0e:f7:f6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47fc0e2c7c5175b32f40f5030f691ba5d853c964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:08:95:be:1c:46:5d:e1:9d:3a:8b:11:71: 09:d9:ba:f0:54:aa:33:d3:68:9f:c6:3f:05:46:82: ae:ce:68:17:52:8d:5d:98:22:79:6e:70:fc:c4:ec: f0:99:02:4c:11:9f:55:10:1f:20:cb:a2:6e:3b:01: 10:4e:f6:d2:fd:2e:55:1a:ba:bf:a6:80:4e:44:55: 55:54:11:63:d1:45:20:f1:cd:91:f8:45:fa:ec:ed: c1:fc:d9:5e:9f:82:75:78:5f:fa:de:8d:2d:1c:46: 0b:38:44:d4:ee:d6:7f:6b:95:a9:28:13:ba:cb:fe: b9:b3:3d:d2:57:53:45:f4:3c:a4:57:54:b3:fa:85: 6b:f3:44:a5:5e:74:0c:9d:1e:18:f6:2e:16:fd:b1: 64:99:c5:e9:0e:c3:a2:12:04:ca:61:7c:63:d1:fa: 2f:ce:4e:2a:bc:c6:ac:08:a3:0f:f3:c9:f7:59:a4: 75:c1:e1:e0:db:60:0a:52:74:2d:ff:0a:45:be:93: 12:d2:35:9b:9a:bb:86:24:f9:aa:16:a1:44:a5:f2: 6e:a8:5d:57:c7:7a:c6:3e:bd:22:16:73:02:9a:22: 5d:2e:fc:40:a6:ba:d9:a3:bc:45:15:0b:9a:2b:30: 4e:f9:29:df:6b:1f:d0:28:02:60:00:40:27:53:24: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FC:0E:2C:7C:51:75:B3:2F:40:F5:03:0F:69:1B:A5:D8:53:C9:64 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/R_wOLHxRdbMvQPUDD2kbpdhTyWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.179.0.0/17 109.172.32.0/22 109.172.40.0/22 178.234.0.0/16 195.34.224.0/19 Signature Algorithm: sha256WithRSAEncryption 7e:d2:78:70:45:6c:2f:53:8e:6f:e0:66:e7:fe:0b:dd:91:39: 77:3a:e0:cb:f4:22:7a:92:5b:fe:a2:bf:fd:97:00:48:ae:f3: 5c:46:66:22:aa:d8:6b:44:78:e9:a1:73:e3:bf:d4:a7:2c:d0: a5:e2:c9:4c:44:2e:fa:3a:5b:05:78:70:14:40:ea:03:67:6b: bc:ee:ac:73:53:16:ed:e8:f4:14:61:5c:73:07:59:0f:31:f2: d9:e2:8e:8a:4a:7c:94:6e:04:87:8b:d5:b7:b3:1e:ed:33:f3: 5c:27:64:86:5e:8c:60:1d:a1:29:1c:cd:ba:41:4a:82:91:bd: 36:8b:85:20:71:b0:f4:63:a0:5f:fc:7f:8d:26:29:fd:e7:f4: c6:e3:e5:9d:6a:d1:de:da:44:41:fe:2b:bf:5a:8b:92:e7:c0: f3:1a:39:52:a8:f4:e7:97:92:39:ce:2d:54:49:08:6f:0c:7b: 3f:b4:f9:e8:bf:a9:11:e4:da:64:41:c0:ab:18:cb:c6:72:2e: 70:ff:10:b1:80:11:51:ae:23:34:d9:81:3d:22:b2:c2:2e:ed: 57:8f:5b:25:9d:f4:68:76:aa:1a:e6:e8:2f:e0:02:bc:b1:65: ca:c7:9a:21:f9:24:da:cd:82:e2:2b:1e:d1:f8:00:15:ac:61: 31:38:c3:0f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+p1djDZAe9pGpCYkO9/Y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2ZjMGUyYzdjNTE3NWIzMmY0MGY1MDMwZjY5MWJhNWQ4NTNjOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzgIlb4cRl3hnTqLEXEJ2brwVKoz 02ifxj8FRoKuzmgXUo1dmCJ5bnD8xOzwmQJMEZ9VEB8gy6JuOwEQTvbS/S5VGrq/ poBORFVVVBFj0UUg8c2R+EX67O3B/Nlen4J1eF/63o0tHEYLOETU7tZ/a5WpKBO6 y/65sz3SV1NF9DykV1Sz+oVr80SlXnQMnR4Y9i4W/bFkmcXpDsOiEgTKYXxj0fov zk4qvMasCKMP88n3WaR1weHg22AKUnQt/wpFvpMS0jWbmruGJPmqFqFEpfJuqF1X x3rGPr0iFnMCmiJdLvxAprrZo7xFFQuaKzBO+Snfax/QKAJgAEAnUyQ3OQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEf8Dix8UXWzL0D1Aw9pG6XYU8lkMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUl93T0xIeFJkYk12UVBVREQya2JwZGhUeVdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAATAdAwQHX7MAAwQC bawgAwQCbawoAwMAsuoDBAXDIuAwDQYJKoZIhvcNAQELBQADggEBAH7SeHBFbC9T jm/gZuf+C92ROXc64Mv0InqSW/6iv/2XAEiu81xGZiKq2GtEeOmhc+O/1Kcs0KXi yUxELvo6WwV4cBRA6gNna7zurHNTFu3o9BRhXHMHWQ8x8tnijopKfJRuBIeL1bez Hu0z81wnZIZejGAdoSkczbpBSoKRvTaLhSBxsPRjoF/8f40mKf3n9Mbj5Z1q0d7a REH+K79ai5LnwPMaOVKo9OeXkjnOLVRJCG8Mez+0+ei/qRHk2mRBwKsYy8ZyLnD/ ELGAEVGuIzTZgT0issIu7VePWyWd9Gh2qhrm6C/gAryxZcrHmiH5JNrNguIrHtH4 ABWsYTE4ww8= -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:15 2026 by rpki-client