This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/Y360lwoG9eyseVvOT5wT1Z7gt7U.roa File: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (raw, json) Hash identifier: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw= Subject key identifier: 63:7E:B4:97:0A:06:F5:EC:AC:79:5B:CE:4F:9C:13:D5:9E:E0:B7:B5 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019B7AC89905EA5509EC59412022DB9B302C Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/Y360lwoG9eyseVvOT5wT1Z7gt7U.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 95.174.80.0/24 maxlen: 24 185.144.16.0/22 maxlen: 24 2a04:2f81::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:99:05:ea:55:09:ec:59:41:20:22:db:9b:30:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=637eb4970a06f5ecac795bce4f9c13d59ee0b7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:6d:53:bd:2b:99:3b:dc:40:b9:24:55:9d: b0:b6:9f:7a:96:81:14:fd:22:70:62:61:0a:bd:2f: 27:4b:1c:5b:9a:62:3a:b3:2c:b3:5a:5d:ae:09:62: 1a:64:e7:55:80:69:5c:72:9f:ee:cd:6d:36:a1:20: fa:99:ca:f5:c6:13:13:9d:de:a7:4b:02:2d:1f:9b: f9:0e:e6:4e:e2:2b:05:cf:2a:9f:46:d5:80:2a:42: 41:29:bd:f0:d2:34:46:0f:33:51:c1:66:b7:29:0c: e0:94:fd:43:e6:3f:55:a7:48:c0:44:60:fb:e3:38: ca:5a:75:1a:79:61:d7:d4:78:fc:89:b3:fb:79:e9: cd:57:c9:1d:55:20:55:e9:cd:fb:0b:f7:b5:d1:cc: 55:03:0d:7f:7e:f8:ce:6a:36:c4:21:41:3a:6d:82: cc:5c:21:fa:26:7a:0f:6d:60:31:db:e0:1f:12:99: 4f:1e:48:df:5f:d5:f6:59:22:dd:88:c4:3d:18:66: f8:6c:06:d1:a5:2e:6a:43:b8:8a:a1:92:dd:b7:cb: 45:77:0a:0e:e2:a5:e6:43:1c:00:46:2f:3d:c3:72: 93:95:43:1f:d9:c8:db:75:ae:50:d9:6f:90:cb:8a: dc:fb:9e:80:a9:5e:7b:6b:bd:ac:ca:c1:b2:f7:41: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7E:B4:97:0A:06:F5:EC:AC:79:5B:CE:4F:9C:13:D5:9E:E0:B7:B5 X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/Y360lwoG9eyseVvOT5wT1Z7gt7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.80.0/24 185.144.16.0/22 IPv6: 2a04:2f81::/42 Signature Algorithm: sha256WithRSAEncryption 13:09:3c:75:5c:1d:b7:a6:05:87:d3:b8:75:27:e8:e1:15:2a: f7:9a:4e:88:77:69:e2:d1:cd:96:92:26:35:fc:66:b3:ed:5a: 90:f3:6b:43:7d:bd:a6:2c:61:f4:ce:e4:da:b1:dc:4b:45:81: 9d:10:92:05:f1:ef:a8:98:4b:fd:de:4a:0d:59:5a:33:8d:8a: e3:84:23:e6:de:d8:81:f7:4c:50:7c:d3:9a:89:0a:98:82:f5: 35:c2:6b:4f:80:c5:bb:ff:6e:ea:fb:8d:0c:5e:6b:be:02:02: f4:ab:c0:b1:ba:25:1e:8c:d3:28:9b:22:06:3a:71:15:ed:22: 92:8c:1b:08:48:f4:1a:7e:53:27:e5:4f:9a:07:77:bd:92:78: 69:62:3c:45:e1:c6:0c:50:c8:c3:93:14:3d:9c:22:b5:60:3a: 12:ba:fa:78:7f:52:a4:48:6d:7a:32:a2:27:68:85:74:0f:d6: 3b:55:36:de:34:37:af:d1:6c:c9:de:ec:9f:97:8e:89:04:58: 14:00:a3:bd:42:be:62:2a:b3:0d:1e:42:b8:ef:3c:d6:38:31: 16:79:e0:eb:09:a3:e3:aa:85:1f:fc:74:90:29:26:7f:10:09: 08:c5:87:af:5b:45:a3:42:5c:7d:ed:f7:b6:b0:8b:bf:07:aa: ff:f6:5b:8f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6yJkF6lUJ7FlBICLbmzAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzdlYjQ5NzBhMDZmNWVjYWM3OTViY2U0ZjljMTNkNTllZTBiN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBJtU70rmTvcQLkkVZ2wtp96loEU /SJwYmEKvS8nSxxbmmI6syyzWl2uCWIaZOdVgGlccp/uzW02oSD6mcr1xhMTnd6n SwItH5v5DuZO4isFzyqfRtWAKkJBKb3w0jRGDzNRwWa3KQzglP1D5j9Vp0jARGD7 4zjKWnUaeWHX1Hj8ibP7eenNV8kdVSBV6c37C/e10cxVAw1/fvjOajbEIUE6bYLM XCH6JnoPbWAx2+AfEplPHkjfX9X2WSLdiMQ9GGb4bAbRpS5qQ7iKoZLdt8tFdwoO 4qXmQxwARi89w3KTlUMf2cjbda5Q2W+Qy4rc+56AqV57a72sysGy90EAoQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGN+tJcKBvXsrHlbzk+cE9We4Le1MB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvWTM2MGx3b0c5ZXlzZVZ2T1Q1d1QxWjdndDdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAX65QAwQC uZAQMA8EAgACMAkDBwYqBC+BAAAwDQYJKoZIhvcNAQELBQADggEBABMJPHVcHbem BYfTuHUn6OEVKveaToh3aeLRzZaSJjX8ZrPtWpDza0N9vaYsYfTO5Nqx3EtFgZ0Q kgXx76iYS/3eSg1ZWjONiuOEI+be2IH3TFB805qJCpiC9TXCa0+Axbv/bur7jQxe a74CAvSrwLG6JR6M0yibIgY6cRXtIpKMGwhI9Bp+UyflT5oHd72SeGliPEXhxgxQ yMOTFD2cIrVgOhK6+nh/UqRIbXoyoidohXQP1jtVNt40N6/RbMne7J+XjokEWBQA o71CvmIqsw0eQrjvPNY4MRZ54OsJo+OqhR/8dJApJn8QCQjFh69bRaNCXH3t97aw i78Hqv/2W48= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client