This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/95sNY-Q9tITjtKR9noJSBzhBv7U.roa File: 95sNY-Q9tITjtKR9noJSBzhBv7U.roa (raw, json) Hash identifier: O5Bf8DWkB1Y77/jieG5zEFmdx8Ha2WXfYFyTSYiSDcc= Subject key identifier: F7:9B:0D:63:E4:3D:B4:84:E3:B4:A4:7D:9E:82:52:07:38:41:BF:B5 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D8F715EF0FB8A87DC9B76527A554 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/95sNY-Q9tITjtKR9noJSBzhBv7U.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201315 IP address blocks: 85.254.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d8:f7:15:ef:0f:b8:a8:7d:c9:b7:65:27:a5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f79b0d63e43db484e3b4a47d9e8252073841bfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:30:cb:e4:af:99:bf:c3:58:74:df:2b:a3: 92:8c:b0:56:d1:28:72:20:2d:70:94:14:99:6a:56: 29:11:52:74:4b:67:19:cf:0d:44:e8:7e:70:cd:cd: bc:af:43:95:d8:a1:60:94:b4:2f:4b:c1:59:80:46: f4:f0:05:22:9d:29:63:6a:74:e3:96:b2:d3:66:df: 98:c5:af:96:bb:00:cb:fc:05:53:c6:b4:5d:ad:3a: 6d:f5:c7:4d:92:6d:eb:e6:e5:b7:ac:8d:73:78:79: 55:89:06:b2:2f:0b:76:99:45:2f:a0:e9:ca:12:8a: 72:41:3d:a0:97:11:41:35:83:b3:3f:a3:ce:29:24: 9a:94:0e:6f:84:a3:22:da:cd:6b:75:99:4d:a2:e2: 35:d4:8c:f4:da:4d:f7:de:ed:f5:d7:b8:af:2c:e3: 36:e0:08:13:e3:e2:97:2c:d6:91:f0:02:38:b4:80: 1d:d3:04:94:16:1c:a6:f1:a8:b8:23:32:f2:86:41: 94:7d:46:e5:03:67:6a:cd:18:25:4a:4f:5d:75:ab: d6:9b:53:9f:75:67:f4:d4:b3:cf:69:cc:41:cb:c3: 7b:e8:2b:08:96:82:26:c1:c3:c4:f6:89:73:17:85: 8a:c3:46:2e:39:ba:29:21:c9:28:50:2a:52:c6:e8: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9B:0D:63:E4:3D:B4:84:E3:B4:A4:7D:9E:82:52:07:38:41:BF:B5 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/95sNY-Q9tITjtKR9noJSBzhBv7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.48.0/24 Signature Algorithm: sha256WithRSAEncryption 74:18:aa:ed:99:f9:cb:7d:96:72:d9:a5:af:b2:03:90:4c:ba: 49:27:c7:1b:b6:8f:a3:7c:8b:1b:3e:91:fc:2a:bd:0a:fa:ac: 7d:a0:44:01:99:2b:7d:67:33:3c:d7:17:aa:17:72:d9:51:fb: a5:57:7c:27:0f:c8:a0:78:1c:7e:ed:56:87:b1:d1:9b:03:4d: 82:cc:67:c8:b0:06:d2:79:d6:01:5e:5c:71:25:40:0c:e1:6f: 90:12:17:1c:f0:9f:da:9f:83:e1:f6:d7:02:d1:19:2b:3a:d1: f0:48:b7:96:38:5d:cd:00:fb:d2:c1:88:79:01:06:f3:f2:95: c7:7d:b2:63:6a:9a:74:e4:3e:aa:89:82:94:01:71:12:65:2d: ff:19:43:47:52:4b:59:a1:4d:2d:01:b7:18:52:17:60:a9:b8: 00:b8:21:20:f5:54:61:5b:77:37:fa:fc:8a:7c:8e:ca:76:f0: 27:03:88:02:1e:ba:4e:2f:ee:26:2c:90:fb:d0:db:90:49:35: 6a:1c:95:da:96:a3:bf:dc:f5:99:40:c3:0f:a7:3d:67:68:2e: 19:ea:72:af:c6:9b:6b:9d:e0:92:54:b2:af:32:6c:2a:06:83: 25:4c:3b:7d:67:5a:9a:7d:6f:0f:66:98:3b:2c:2e:87:77:2e: 25:61:0c:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9j3Fe8PuKh9ybdlJ6VUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzliMGQ2M2U0M2RiNDg0ZTNiNGE0N2Q5ZTgyNTIwNzM4NDFiZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Uwy+Svmb/DWHTfK6OSjLBW0Shy IC1wlBSZalYpEVJ0S2cZzw1E6H5wzc28r0OV2KFglLQvS8FZgEb08AUinSljanTj lrLTZt+Yxa+WuwDL/AVTxrRdrTpt9cdNkm3r5uW3rI1zeHlViQayLwt2mUUvoOnK EopyQT2glxFBNYOzP6POKSSalA5vhKMi2s1rdZlNouI11Iz02k333u3117ivLOM2 4AgT4+KXLNaR8AI4tIAd0wSUFhym8ai4IzLyhkGUfUblA2dqzRglSk9ddavWm1Of dWf01LPPacxBy8N76CsIloImwcPE9olzF4WKw0YuObopIckoUCpSxugQ6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPebDWPkPbSE47SkfZ6CUgc4Qb+1MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvOTVzTlktUTl0SVRqdEtSOW5vSlNCemhCdjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf4wMA0G CSqGSIb3DQEBCwUAA4IBAQB0GKrtmfnLfZZy2aWvsgOQTLpJJ8cbto+jfIsbPpH8 Kr0K+qx9oEQBmSt9ZzM81xeqF3LZUfulV3wnD8igeBx+7VaHsdGbA02CzGfIsAbS edYBXlxxJUAM4W+QEhcc8J/an4Ph9tcC0RkrOtHwSLeWOF3NAPvSwYh5AQbz8pXH fbJjapp05D6qiYKUAXESZS3/GUNHUktZoU0tAbcYUhdgqbgAuCEg9VRhW3c3+vyK fI7KdvAnA4gCHrpOL+4mLJD70NuQSTVqHJXalqO/3PWZQMMPpz1naC4Z6nKvxptr neCSVLKvMmwqBoMlTDt9Z1qafW8PZpg7LC6Hdy4lYQwk -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:38 2026 by rpki-client