This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa File: D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa (raw, json) Hash identifier: jViXNh0mGGwVxxVrUk5eRxQ1z7TU/R1eWWRkMk+2l7U= Subject key identifier: 0F:84:24:06:07:4F:50:26:24:0C:DD:A5:63:98:AF:B2:A8:57:07:C3 Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8 Certificate serial: 019B7E37BE3772AA0EBB23E3C9DE46A21082 Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209684 IP address blocks: 95.214.56.0/24 maxlen: 24 95.214.56.5/32 maxlen: 32 95.214.58.0/24 maxlen: 24 95.214.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:be:37:72:aa:0e:bb:23:e3:c9:de:46:a2:10:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8 Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f842406074f5026240cdda56398afb2a85707c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:d9:d2:b9:2b:6d:ab:4b:ab:a0:1a:9d:0e: b3:f6:2e:04:ea:3c:48:09:d6:5c:af:d1:4d:25:df: ad:ed:ce:3e:3e:30:58:d5:dd:ce:89:74:06:84:d8: 4e:90:00:3e:b8:f8:28:55:8f:32:32:05:a3:ed:34: 79:56:3c:fb:8d:8e:5b:b7:cf:39:30:af:b5:08:48: 06:10:bd:1a:b1:34:36:45:37:ee:cf:96:c2:63:df: 4a:7f:a4:2b:19:f5:8b:3b:df:8c:42:59:86:4f:36: bd:0b:f1:01:8d:6e:fe:cb:c0:69:69:c0:c7:43:79: 8a:aa:c0:98:78:0c:1a:8a:98:ac:39:f4:b4:2f:82: 42:e0:54:a5:f8:42:6f:2f:2e:02:3b:cd:50:b6:59: a3:a2:fb:9c:d3:8f:54:11:4a:3c:47:ee:b8:a7:51: e3:52:70:40:67:37:e3:cc:47:47:77:1c:40:cc:a5: 21:2c:63:92:8b:13:cc:d1:1c:fc:62:9a:11:34:90: 8a:65:e8:4b:05:ef:c2:9c:40:9b:58:7f:c4:4c:2b: 51:f4:59:82:87:94:34:05:47:a4:fb:45:b6:9c:f5: b4:59:2f:7a:32:83:1b:10:56:86:8d:11:92:36:1c: 11:7c:46:88:6b:0f:14:c1:af:6f:d7:9f:50:4f:db: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:24:06:07:4F:50:26:24:0C:DD:A5:63:98:AF:B2:A8:57:07:C3 X509v3 Authority Key Identifier: keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.56.0/24 95.214.58.0/23 Signature Algorithm: sha256WithRSAEncryption 63:25:21:fa:bd:f8:c3:16:7b:39:11:42:f5:65:09:63:8b:c7: 1d:28:0a:50:26:4c:c1:12:a9:06:c2:7c:ee:9a:63:49:13:ce: 27:b4:59:fa:8c:1c:84:fd:2e:1d:78:9c:f5:0d:67:3d:8d:a6: be:f3:84:9c:76:97:e2:46:04:11:42:93:c5:b6:a1:ed:3a:37: 5e:16:4a:72:79:3b:a8:d8:e5:ae:93:b0:26:eb:71:11:fe:5e: f8:05:65:ed:30:55:62:f7:1d:98:d6:6b:63:c4:79:9e:ec:f9: f9:cf:d1:e8:b4:46:00:30:f7:46:1c:a9:71:30:8e:08:ab:03: 89:9a:ad:16:95:bc:24:e6:ba:f4:5b:4d:03:e2:04:57:af:01: 2b:44:5b:05:e6:3a:db:99:d0:a8:c3:15:74:f3:d7:00:1e:4c: 5d:96:08:f5:ef:70:19:f4:ee:32:86:d2:ab:e6:65:04:98:ce: ef:62:0b:85:46:aa:f3:f2:8d:75:2a:7c:7d:37:3b:a2:f8:5d: bb:ee:2b:ab:4c:64:7d:fd:1a:32:52:de:24:69:44:5d:95:8a: 24:84:e9:e2:f6:30:d6:5b:23:4f:8f:ad:e2:e8:91:42:fe:68: 4f:99:ec:a5:4d:68:10:77:6c:19:4d:1f:1d:17:c9:52:c9:e6: 45:90:83:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N743cqoOuyPjyd5GohCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi NmY5ZjgwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjg0MjQwNjA3NGY1MDI2MjQwY2RkYTU2Mzk4YWZiMmE4NTcwN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8jZ0rkrbatLq6AanQ6z9i4E6jxI CdZcr9FNJd+t7c4+PjBY1d3OiXQGhNhOkAA+uPgoVY8yMgWj7TR5Vjz7jY5bt885 MK+1CEgGEL0asTQ2RTfuz5bCY99Kf6QrGfWLO9+MQlmGTza9C/EBjW7+y8BpacDH Q3mKqsCYeAwaipisOfS0L4JC4FSl+EJvLy4CO81Qtlmjovuc049UEUo8R+64p1Hj UnBAZzfjzEdHdxxAzKUhLGOSixPM0Rz8YpoRNJCKZehLBe/CnECbWH/ETCtR9FmC h5Q0BUek+0W2nPW0WS96MoMbEFaGjRGSNhwRfEaIaw8Uwa9v159QT9sU9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA+EJAYHT1AmJAzdpWOYr7KoVwfDMB8GA1UdIwQY MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt NTlkOWQ0OGVhM2IxLzEvRDRRa0JnZFBVQ1lrRE4ybFk1aXZzcWhYQjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX9Y4AwQB X9Y6MA0GCSqGSIb3DQEBCwUAA4IBAQBjJSH6vfjDFns5EUL1ZQlji8cdKApQJkzB EqkGwnzummNJE84ntFn6jByE/S4deJz1DWc9jaa+84ScdpfiRgQRQpPFtqHtOjde FkpyeTuo2OWuk7Am63ER/l74BWXtMFVi9x2Y1mtjxHme7Pn5z9HotEYAMPdGHKlx MI4IqwOJmq0Wlbwk5rr0W00D4gRXrwErRFsF5jrbmdCowxV089cAHkxdlgj173AZ 9O4yhtKr5mUEmM7vYguFRqrz8o11Knx9Nzui+F277iurTGR9/RoyUt4kaURdlYok hOni9jDWWyNPj63i6JFC/mhPmeylTWgQd2wZTR8dF8lSyeZFkIMe -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:03 2026 by rpki-client