This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/9IUhfW_W_atT4Rdt9waLsluclNM.roa File: 9IUhfW_W_atT4Rdt9waLsluclNM.roa (raw, json) Hash identifier: Yv60tx6MkUHbKTa9fL1Ng3xfyWGESFLss/yfVo5hLwk= Subject key identifier: F4:85:21:7D:6F:D6:FD:AB:53:E1:17:6D:F7:06:8B:B2:5B:9C:94:D3 Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e Certificate serial: 019B7CECFB3C03B2FB47660E196531326526 Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/9IUhfW_W_atT4Rdt9waLsluclNM.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201856 IP address blocks: 95.141.254.0/24 maxlen: 24 2a13:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fb:3c:03:b2:fb:47:66:0e:19:65:31:32:65:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f485217d6fd6fdab53e1176df7068bb25b9c94d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:e5:63:cc:cc:6d:63:79:7f:97:e4:33:e4: c9:0e:ea:10:7a:cc:98:d9:37:8a:80:66:b6:c5:68: 21:4c:de:8b:23:b7:96:03:e4:ee:00:62:ce:15:3a: 59:61:09:e1:a0:7f:d2:e6:8d:b3:8c:1f:9e:c1:a1: d3:4b:14:1e:6c:d2:cb:75:ce:03:32:0f:38:7b:c0: 6c:ba:83:16:c1:05:a3:0b:92:08:ec:aa:0c:ef:08: bb:b0:9f:f7:6d:9d:cc:7c:3e:06:72:17:2f:91:3b: 56:2e:d4:9b:e4:49:49:8c:79:be:e9:71:43:eb:65: 2b:8b:21:c7:86:21:53:5e:22:b6:52:16:ca:76:6a: 97:97:23:b8:cb:45:fd:4f:12:b4:b8:88:8a:f3:c8: 69:1b:54:81:f5:3f:59:e4:35:61:20:a3:64:43:ba: 4d:81:fa:67:c6:44:1f:ec:83:32:c1:07:66:4e:52: 01:f5:a5:e2:53:d4:2f:4c:79:d7:e6:05:1f:4b:24: c9:89:5a:d9:ac:de:5d:ff:7b:19:b9:aa:e6:34:c8: 46:87:4c:02:b4:90:91:64:82:c4:5b:98:78:97:3e: 62:d3:9c:2f:d3:e9:6e:5c:80:d9:99:ca:83:9c:3e: 62:f7:0c:62:22:3c:cf:b2:16:49:27:63:e0:dc:b3: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:21:7D:6F:D6:FD:AB:53:E1:17:6D:F7:06:8B:B2:5B:9C:94:D3 X509v3 Authority Key Identifier: keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/9IUhfW_W_atT4Rdt9waLsluclNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.254.0/24 IPv6: 2a13:4d80::/32 Signature Algorithm: sha256WithRSAEncryption b1:91:fb:be:5b:b5:01:cb:32:45:0b:b3:54:9f:b7:ed:0b:e1: 15:27:f3:77:d9:3c:77:ea:16:d8:c2:f2:2d:2c:6e:09:15:f7: 31:35:ab:e2:9b:10:30:6e:22:6c:4d:64:2d:19:19:ac:0c:78: ae:00:75:af:45:1a:c3:1c:b2:19:46:c5:81:71:8c:2a:c6:f5: 12:d3:ac:d5:a8:9c:38:df:b4:10:4d:1f:fb:ec:7c:40:5a:dd: a0:03:6e:b1:7b:36:89:b9:0e:8a:81:ee:3d:84:ef:b9:b9:ea: e8:9c:70:78:82:e8:4f:8d:9c:df:e8:92:da:52:9d:3e:db:d0: d0:d3:a5:e4:e6:dd:e7:5c:9f:97:53:74:de:93:af:6c:2c:51: 94:13:26:90:82:a9:cf:e3:21:57:e4:f9:c4:5f:28:61:c6:a0: 91:8f:fd:1a:08:bb:09:05:f7:29:78:78:d6:94:77:92:af:fc: 15:d5:99:a3:fc:2f:3e:5b:e3:fb:1d:7d:90:fa:02:49:a8:f7: 6d:fc:4a:8f:e0:37:b4:b7:2f:e5:10:04:11:31:8a:2a:a4:86: f7:7f:c8:1a:4c:a8:7a:c8:bb:02:2d:60:7b:b1:c3:c1:57:56: 58:69:8e:6b:d5:10:65:39:6e:c0:50:62:a7:1d:c0:8a:5f:fb: 21:cb:16:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87Ps8A7L7R2YOGWUxMmUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGU4MTdiZWFlNGMwYTJkNTdmN2ZjM2YwOGM2MjdkNTY1 NDBlN2UwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDg1MjE3ZDZmZDZmZGFiNTNlMTE3NmRmNzA2OGJiMjViOWM5NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+LlY8zMbWN5f5fkM+TJDuoQesyY 2TeKgGa2xWghTN6LI7eWA+TuAGLOFTpZYQnhoH/S5o2zjB+ewaHTSxQebNLLdc4D Mg84e8BsuoMWwQWjC5II7KoM7wi7sJ/3bZ3MfD4GchcvkTtWLtSb5ElJjHm+6XFD 62UriyHHhiFTXiK2UhbKdmqXlyO4y0X9TxK0uIiK88hpG1SB9T9Z5DVhIKNkQ7pN gfpnxkQf7IMywQdmTlIB9aXiU9QvTHnX5gUfSyTJiVrZrN5d/3sZuarmNMhGh0wC tJCRZILEW5h4lz5i05wv0+luXIDZmcqDnD5i9wxiIjzPshZJJ2Pg3LNhhQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPSFIX1v1v2rU+EXbfcGi7JbnJTTMB8GA1UdIwQY MBaAFP/egXvq5MCi1X9/w/CMYn1WVA5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjkt NmNjYTY2ZmQzYzk5LzEvOUlVaGZXX1dfYXRUNFJkdDl3YUxzbHVjbE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjktNmNjYTY2ZmQzYzk5 LzEvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAX43+MA0E AgACMAcDBQAqE02AMA0GCSqGSIb3DQEBCwUAA4IBAQCxkfu+W7UByzJFC7NUn7ft C+EVJ/N32Tx36hbYwvItLG4JFfcxNavimxAwbiJsTWQtGRmsDHiuAHWvRRrDHLIZ RsWBcYwqxvUS06zVqJw437QQTR/77HxAWt2gA26xezaJuQ6Kge49hO+5ueronHB4 guhPjZzf6JLaUp0+29DQ06Xk5t3nXJ+XU3Tek69sLFGUEyaQgqnP4yFX5PnEXyhh xqCRj/0aCLsJBfcpeHjWlHeSr/wV1Zmj/C8+W+P7HX2Q+gJJqPdt/EqP4De0ty/l EAQRMYoqpIb3f8gaTKh6yLsCLWB7scPBV1ZYaY5r1RBlOW7AUGKnHcCKX/shyxYa -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:49 2026 by rpki-client