This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/lQVcu0mrKSOlkRDQc01UGrWHxvE.roa File: lQVcu0mrKSOlkRDQc01UGrWHxvE.roa (raw, json) Hash identifier: i5zo+lW66qJej40sDXPRoPhdX0P76Fy2ACp5y2o0fq4= Subject key identifier: 95:05:5C:BB:49:AB:29:23:A5:91:10:D0:73:4D:54:1A:B5:87:C6:F1 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A97E598FBC7C4C5EA765723000AD10769 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/lQVcu0mrKSOlkRDQc01UGrWHxvE.roa Signing time: Tue 18 Nov 2025 16:56:37 +0000 ROA not before: Tue 18 Nov 2025 16:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 95.170.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:e5:98:fb:c7:c4:c5:ea:76:57:23:00:0a:d1:07:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 18 16:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95055cbb49ab2923a59110d0734d541ab587c6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:09:54:ea:cf:34:88:85:28:8a:ed:0f:16: 98:b8:8e:13:39:a1:0f:8b:95:3d:a5:5a:87:1e:fe: 86:41:d4:70:74:0f:e8:c2:fa:4d:28:7a:cc:30:ed: 36:2b:da:1a:1c:30:3e:d1:8f:56:f5:9c:22:50:03: 87:2d:86:9b:93:c5:6c:4a:0b:3f:44:e4:ff:e1:60: 2d:88:2f:de:b3:4b:4c:39:94:ad:ed:79:8a:2b:ae: 1f:f2:80:79:a2:c2:92:60:95:9c:f1:cf:ae:e3:d1: 6a:99:96:62:d8:5b:ab:86:9e:81:90:01:c0:3c:04: d6:6a:67:9f:31:77:a7:10:37:e8:1e:8e:b1:5e:69: ba:9c:fd:d6:f3:d0:16:3d:ff:5e:81:64:c1:e1:0e: ba:db:e0:bb:eb:54:2a:c5:4a:69:7c:23:66:4f:82: ab:14:df:11:19:59:c7:e7:aa:f6:7a:95:1d:77:33: 15:4a:41:d6:64:29:9b:14:1d:2c:e7:df:57:fb:55: b4:52:30:71:d6:21:87:c8:5e:d4:22:4b:84:00:a2: 5b:f4:89:28:9a:0e:aa:2e:8b:22:1a:9b:5e:d5:f3: bd:1b:6c:fa:ab:86:6c:6c:52:6a:db:ca:7c:f1:5a: 07:ec:1b:83:ae:43:10:e6:06:84:0b:b9:ad:4c:89: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:05:5C:BB:49:AB:29:23:A5:91:10:D0:73:4D:54:1A:B5:87:C6:F1 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/lQVcu0mrKSOlkRDQc01UGrWHxvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.29.0/24 Signature Algorithm: sha256WithRSAEncryption 70:a7:a5:2b:ef:99:c2:d5:fe:3f:fc:24:8e:b0:3e:67:57:11: c3:c5:b0:a7:97:c3:0a:44:d0:8f:92:ca:65:ba:2e:55:be:10: c7:1a:78:8f:03:64:02:8b:a0:63:b6:43:ac:1e:e8:63:e9:91: f9:92:06:1b:f4:b7:83:23:ff:a5:24:12:a6:e3:6d:1c:91:a2: 4f:9a:26:2e:c7:af:8d:bb:e6:f2:6d:fe:e7:14:c3:8f:79:2c: 93:24:7c:d1:c1:ef:7c:8e:c1:68:78:ed:c1:aa:42:af:89:93: cd:3a:98:3c:6b:42:6c:8a:b9:59:cb:06:de:ca:54:4f:ea:97: fa:38:e4:36:da:e7:84:e7:34:cb:ef:a5:27:3c:b3:f0:87:d0: 5e:98:9c:98:c7:10:b6:ef:69:43:a3:57:5e:9f:5b:bb:e9:d0: 78:8d:ca:2c:c6:d8:73:1a:19:b2:2a:4e:d3:38:e9:cb:b2:15: 88:af:94:c9:b2:24:2b:e8:78:68:b8:4b:9e:f6:74:fb:ee:36: 14:99:9a:04:26:ac:6a:d3:49:95:60:9e:1c:55:18:9b:cd:d7: 94:ca:ab:c5:df:20:a7:aa:e6:c9:2a:23:4e:b8:63:60:15:50: c9:10:63:5f:6c:00:70:72:ed:74:2f:cd:a1:d2:3a:5e:30:27: 4a:28:8e:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqX5Zj7x8TF6nZXIwAK0QdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTE4MTY1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTA1NWNiYjQ5YWIyOTIzYTU5MTEwZDA3MzRkNTQxYWI1ODdjNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtUJVOrPNIiFKIrtDxaYuI4TOaEP i5U9pVqHHv6GQdRwdA/owvpNKHrMMO02K9oaHDA+0Y9W9ZwiUAOHLYabk8VsSgs/ ROT/4WAtiC/es0tMOZSt7XmKK64f8oB5osKSYJWc8c+u49FqmZZi2Furhp6BkAHA PATWamefMXenEDfoHo6xXmm6nP3W89AWPf9egWTB4Q662+C761QqxUppfCNmT4Kr FN8RGVnH56r2epUddzMVSkHWZCmbFB0s599X+1W0UjBx1iGHyF7UIkuEAKJb9Iko mg6qLosiGpte1fO9G2z6q4ZsbFJq28p88VoH7BuDrkMQ5gaEC7mtTIlbcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJUFXLtJqykjpZEQ0HNNVBq1h8bxMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvbFFWY3UwbXJLU09sa1JEUWMwMVVHcldIeHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6odMA0G CSqGSIb3DQEBCwUAA4IBAQBwp6Ur75nC1f4//CSOsD5nVxHDxbCnl8MKRNCPkspl ui5VvhDHGniPA2QCi6BjtkOsHuhj6ZH5kgYb9LeDI/+lJBKm420ckaJPmiYux6+N u+bybf7nFMOPeSyTJHzRwe98jsFoeO3BqkKviZPNOpg8a0JsirlZywbeylRP6pf6 OOQ22ueE5zTL76UnPLPwh9BemJyYxxC272lDo1den1u76dB4jcosxthzGhmyKk7T OOnLshWIr5TJsiQr6HhouEue9nT77jYUmZoEJqxq00mVYJ4cVRibzdeUyqvF3yCn qubJKiNOuGNgFVDJEGNfbABwcu10L82h0jpeMCdKKI4b -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:46 2025 by rpki-client