This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/d61QkjArffvt5fKMvIXWF8nIPcE.roa File: d61QkjArffvt5fKMvIXWF8nIPcE.roa (raw, json) Hash identifier: n77B2cSkql2uFL2mgGTUwbPJJQCN8pumVVKiMumdlmQ= Subject key identifier: 77:AD:50:92:30:2B:7D:FB:ED:E5:F2:8C:BC:85:D6:17:C9:C8:3D:C1 Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019B7E37CE670FB729BE266945EEBC87528E Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/d61QkjArffvt5fKMvIXWF8nIPcE.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 95.140.160.0/24 maxlen: 24 95.140.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ce:67:0f:b7:29:be:26:69:45:ee:bc:87:52:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77ad5092302b7dfbede5f28cbc85d617c9c83dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:1c:b1:f6:ed:aa:b8:a3:22:b2:e6:14:59: a8:92:16:91:6b:d0:35:63:3f:64:12:65:c5:82:5a: c2:fe:83:60:e4:b2:76:b9:f6:6d:73:1c:a6:54:49: 15:94:16:3d:5b:39:ff:6f:7a:05:22:2e:c1:5c:d3: 49:2e:7e:04:81:c9:cf:89:7c:cb:20:27:07:16:b3: 7c:25:d2:47:ec:dc:9e:2d:eb:c6:80:ca:28:a6:1d: 93:e8:68:8b:fe:f2:a3:b8:36:ca:ee:0c:b1:74:f6: a9:33:3d:e1:b5:a0:16:5b:6e:b7:d9:7f:2d:70:4a: 8e:43:e6:9f:6f:bb:d1:c9:6f:e7:02:2c:96:97:5f: 0a:03:07:f0:cd:f7:62:1a:34:bb:d3:c3:1f:07:b7: 7c:95:92:88:d3:e3:87:82:2c:c0:0a:d6:b2:3b:bd: 28:56:26:a1:d8:19:51:f0:42:51:bd:df:6f:90:ca: c9:cc:0b:fc:61:b4:91:bf:f2:be:5a:9f:b7:4c:87: 1b:b8:0e:13:1f:91:8c:dc:6b:f0:88:aa:5c:98:a5: 2b:7c:06:85:c1:bb:fa:06:89:99:9a:b9:97:10:dd: 53:bf:d0:ac:f0:95:46:07:0a:f0:b0:83:8d:ee:ca: 29:10:af:73:6b:da:bf:97:80:b5:32:06:24:91:f5: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:50:92:30:2B:7D:FB:ED:E5:F2:8C:BC:85:D6:17:C9:C8:3D:C1 X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/d61QkjArffvt5fKMvIXWF8nIPcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.160.0/23 Signature Algorithm: sha256WithRSAEncryption 72:e6:43:a8:2a:b3:6b:67:ef:32:f9:cb:48:b9:d0:10:59:f8: 3b:f1:c3:a9:ce:92:f1:d7:90:ab:55:85:28:fa:c1:c6:6a:77: e4:6b:3b:e0:4e:1a:3e:6d:87:14:2d:b9:3b:71:d2:ca:0e:80: 3f:73:c0:6a:a3:81:5f:4c:6c:10:87:59:01:d2:bc:2f:a6:6f: 4e:d4:16:a5:d2:0c:38:09:02:26:ac:4f:05:d0:9e:a9:3d:ec: 75:b0:2a:fa:78:11:43:a8:54:00:ac:a0:82:d0:23:15:52:ba: b1:5c:53:76:f8:89:e3:32:47:56:ca:b9:0f:4b:db:22:f6:2e: 74:e8:42:b1:72:a6:0b:eb:77:07:94:be:41:03:b8:9f:b4:65: aa:90:01:ad:ff:37:ff:63:09:df:a5:b5:fe:ce:25:8f:70:75: 39:ed:4e:3f:0a:91:5c:6a:ed:33:67:9a:22:a7:bc:4f:17:5b: 1b:32:b0:92:9b:bf:eb:ad:97:42:d3:ce:11:4a:17:19:e7:e3: b4:d0:29:13:a7:20:ff:e2:8b:1b:c3:34:a7:fb:49:9d:a2:9d: 35:ac:43:7b:4f:ab:3d:26:67:60:89:59:49:55:b9:2a:48:48: 1a:fa:95:0b:f1:7f:7b:14:5f:9c:e4:a5:e3:a3:e1:df:83:ce: 73:84:ea:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N85nD7cpviZpRe68h1KOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2FkNTA5MjMwMmI3ZGZiZWRlNWYyOGNiYzg1ZDYxN2M5YzgzZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP0csfbtqrijIrLmFFmokhaRa9A1 Yz9kEmXFglrC/oNg5LJ2ufZtcxymVEkVlBY9Wzn/b3oFIi7BXNNJLn4EgcnPiXzL ICcHFrN8JdJH7NyeLevGgMooph2T6GiL/vKjuDbK7gyxdPapMz3htaAWW2632X8t cEqOQ+afb7vRyW/nAiyWl18KAwfwzfdiGjS708MfB7d8lZKI0+OHgizACtayO70o Viah2BlR8EJRvd9vkMrJzAv8YbSRv/K+Wp+3TIcbuA4TH5GM3GvwiKpcmKUrfAaF wbv6BomZmrmXEN1Tv9Cs8JVGBwrwsION7sopEK9za9q/l4C1MgYkkfX29wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHetUJIwK3377eXyjLyF1hfJyD3BMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvZDYxUWtqQXJmZnZ0NWZLTXZJWFdGOG5JUGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4ygMA0G CSqGSIb3DQEBCwUAA4IBAQBy5kOoKrNrZ+8y+ctIudAQWfg78cOpzpLx15CrVYUo +sHGanfkazvgTho+bYcULbk7cdLKDoA/c8Bqo4FfTGwQh1kB0rwvpm9O1Bal0gw4 CQImrE8F0J6pPex1sCr6eBFDqFQArKCC0CMVUrqxXFN2+InjMkdWyrkPS9si9i50 6EKxcqYL63cHlL5BA7iftGWqkAGt/zf/YwnfpbX+ziWPcHU57U4/CpFcau0zZ5oi p7xPF1sbMrCSm7/rrZdC084RShcZ5+O00CkTpyD/4osbwzSn+0mdop01rEN7T6s9 JmdgiVlJVbkqSEga+pUL8X97FF+c5KXjo+Hfg85zhOpq -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:51 2026 by rpki-client