This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa File: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (raw, json) Hash identifier: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow= Subject key identifier: D3:F3:DB:E4:5E:5F:25:76:85:78:28:D8:65:67:4F:D0:76:F3:C3:45 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F59944FB3CE7414F6098CA7DEDA5 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 95.170.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f5:99:44:fb:3c:e7:41:4f:60:98:ca:7d:ed:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3f3dbe45e5f2576857828d865674fd076f3c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:5b:86:06:ec:2f:79:f9:07:c1:73:17:6e: 26:b8:46:e1:e0:e3:0f:0b:56:8f:07:93:96:77:c2: dc:2c:26:b5:27:40:3e:87:1b:6a:44:ed:17:81:f4: 40:fd:d7:db:75:1e:43:9c:e1:3b:e8:6d:e1:c9:71: 69:a8:a0:4f:1e:eb:64:d7:05:6c:0c:07:2a:1e:5b: c1:8c:62:d9:f7:7a:10:a2:51:f5:41:57:60:2b:fb: 53:ed:de:1d:d9:1c:ef:46:d4:2a:34:a5:63:b0:58: 55:e3:9f:86:3e:c0:99:7c:97:49:05:d7:a7:4c:c2: 54:15:c1:d7:85:d4:a5:d2:20:8c:23:8f:f4:e4:18: e1:7a:24:08:43:60:ff:f4:c9:49:0f:ca:7b:3e:db: 35:d5:66:e5:d0:47:6d:62:4e:14:c2:97:11:56:c0: e0:eb:19:ba:10:0d:7e:a0:00:31:9f:36:8e:15:96: 9c:7a:2c:04:3b:f6:73:13:c4:89:d0:1c:77:df:54: 64:10:d5:97:c6:f9:f7:f9:a1:95:67:39:57:f0:20: 86:5f:13:ab:24:be:36:78:36:5d:31:35:cd:df:d5: 0a:74:f7:0d:06:fb:27:c5:e0:2d:f2:6d:f0:3d:89: ca:15:4f:7e:97:f1:5b:cd:7e:7e:99:99:7e:5e:29: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F3:DB:E4:5E:5F:25:76:85:78:28:D8:65:67:4F:D0:76:F3:C3:45 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:56:6d:81:ba:8e:3f:5e:bf:4e:a4:1b:e6:0c:99:18:fc:47: 97:58:ac:22:30:ef:eb:da:77:00:60:0c:73:c5:18:89:73:17: cb:ac:b9:7e:3e:3f:fe:a0:56:e2:4f:8d:13:40:9c:4e:43:c0: 99:79:22:a4:cf:cc:2e:e4:ac:cf:d9:d4:5e:75:e3:e5:12:71: 3c:35:c6:9f:03:41:86:9b:fd:03:9f:97:2e:59:d1:23:6b:1f: 85:36:23:d7:6f:0b:d3:16:73:bf:03:cf:71:3d:c4:90:a2:5f: 87:b7:6b:14:ca:de:b8:a1:df:d9:f3:11:de:c6:3e:62:93:7b: 6f:90:03:7e:96:bd:62:5d:9d:ec:46:fa:92:6a:ea:1a:81:bc: 4f:cd:3d:26:3f:37:ac:53:66:e5:45:2f:6d:e7:e6:c1:f3:6e: 8c:f5:57:4d:de:c7:ef:20:cb:4b:c4:51:36:4e:3d:fa:8e:08: 21:1a:67:8f:aa:99:c2:a5:07:bb:74:1d:ca:51:29:ff:b5:2e: 7f:6c:a5:73:ba:51:10:92:43:99:3c:c3:e5:e8:00:99:95:b8: 1e:c4:4a:a1:c2:24:bd:92:d9:c1:84:09:c8:7f:8b:7e:8b:ee: c6:80:bc:e1:f1:7c:35:ae:4a:0f:aa:1d:81:fd:de:8f:4d:c8: 98:0d:34:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfWZRPs850FPYJjKfe2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2YzZGJlNDVlNWYyNTc2ODU3ODI4ZDg2NTY3NGZkMDc2ZjNjMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywNbhgbsL3n5B8FzF24muEbh4OMP C1aPB5OWd8LcLCa1J0A+hxtqRO0XgfRA/dfbdR5DnOE76G3hyXFpqKBPHutk1wVs DAcqHlvBjGLZ93oQolH1QVdgK/tT7d4d2RzvRtQqNKVjsFhV45+GPsCZfJdJBden TMJUFcHXhdSl0iCMI4/05BjheiQIQ2D/9MlJD8p7Pts11Wbl0EdtYk4UwpcRVsDg 6xm6EA1+oAAxnzaOFZaceiwEO/ZzE8SJ0Bx331RkENWXxvn3+aGVZzlX8CCGXxOr JL42eDZdMTXN39UKdPcNBvsnxeAt8m3wPYnKFU9+l/FbzX5+mZl+Xim4rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPz2+ReXyV2hXgo2GVnT9B288NFMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvMF9QYjVGNWZKWGFGZUNqWVpXZFAwSGJ6dzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6odMA0G CSqGSIb3DQEBCwUAA4IBAQBfVm2Buo4/Xr9OpBvmDJkY/EeXWKwiMO/r2ncAYAxz xRiJcxfLrLl+Pj/+oFbiT40TQJxOQ8CZeSKkz8wu5KzP2dRedePlEnE8NcafA0GG m/0Dn5cuWdEjax+FNiPXbwvTFnO/A89xPcSQol+Ht2sUyt64od/Z8xHexj5ik3tv kAN+lr1iXZ3sRvqSauoagbxPzT0mPzesU2blRS9t5+bB826M9VdN3sfvIMtLxFE2 Tj36jgghGmePqpnCpQe7dB3KUSn/tS5/bKVzulEQkkOZPMPl6ACZlbgexEqhwiS9 ktnBhAnIf4t+i+7GgLzh8Xw1rkoPqh2B/d6PTciYDTQn -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:50 2026 by rpki-client