This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa File: vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa (raw, json) Hash identifier: rxEx9pdbLlzRrifCSn69fPPljhSEaN1XwXY/F5cFM9M= Subject key identifier: BC:49:AA:67:3E:D3:C8:E2:19:70:C1:46:5A:AE:6C:AF:4A:96:6B:D7 Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019B7E37D1CD92C0D8A779DF126F99422878 Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48937 IP address blocks: 95.140.160.0/22 maxlen: 22 95.140.160.0/24 maxlen: 24 95.140.161.0/24 maxlen: 24 95.140.162.0/24 maxlen: 24 95.140.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d1:cd:92:c0:d8:a7:79:df:12:6f:99:42:28:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc49aa673ed3c8e21970c1465aae6caf4a966bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:b2:d2:ba:99:fb:ef:a6:6b:c4:89:26:ac: e2:56:8b:ae:81:3a:87:84:27:10:65:e9:53:54:69: 70:58:74:df:d9:03:0a:bc:9b:c3:15:81:87:f5:02: ee:63:63:84:21:64:28:61:48:f3:db:be:76:f3:1b: 36:1a:b9:4a:5d:1a:be:af:0e:f4:1b:e5:07:8b:1e: af:bb:f8:74:df:90:57:4f:54:5b:62:76:de:f3:7f: 8d:bd:26:b8:ac:61:b5:2d:03:92:6d:b8:40:78:a4: 1e:44:d4:ae:5e:90:02:e9:ab:e4:81:6a:ed:e0:48: 96:2a:b5:a7:15:e2:bf:83:f7:e9:37:a1:cc:96:7a: e1:12:63:b6:bf:0f:2e:58:c4:34:f1:62:a7:82:41: d8:a8:f6:0f:bd:93:5a:51:20:a3:bd:1c:43:99:d8: e6:1b:5c:57:5a:06:9a:57:2e:85:f2:e3:25:d1:1a: 17:09:bb:7f:ec:4a:21:6a:f0:bc:ed:92:05:58:e8: 56:77:51:4a:ef:a4:09:f0:b8:be:c9:93:4c:70:3a: e1:01:47:16:38:c7:0d:30:98:81:9f:95:d0:46:74: c4:4c:5d:26:4e:32:c8:a4:72:d4:a4:19:c2:b7:3a: cd:62:cf:17:ca:3e:9a:a9:ad:47:9f:f2:1e:c1:f9: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:AA:67:3E:D3:C8:E2:19:70:C1:46:5A:AE:6C:AF:4A:96:6B:D7 X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.160.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:4d:23:5b:dd:9a:d2:4a:bc:7c:9d:2d:d1:7e:11:e0:92:ba: 4c:11:c3:0f:32:0b:84:23:ca:ac:ad:8d:86:d6:bd:ff:69:f9: 2f:3e:2e:3c:c1:1f:53:cd:6e:94:30:1a:ce:df:d8:b1:02:b9: e5:f4:63:cb:36:f9:b0:3a:91:75:ec:18:03:51:0f:ad:20:5a: a8:e2:5e:f7:94:73:d1:a9:ee:ab:bb:71:55:e0:95:93:d6:99: 47:c1:ed:ca:d5:9f:27:0a:53:fb:27:1c:98:5a:13:ad:3f:4b: 9c:07:5b:a8:af:c5:1a:b3:5d:cb:86:30:cb:d3:e3:3c:3a:1c: 5a:e4:7f:9d:c5:d2:a5:45:2b:bb:3e:c8:65:70:a9:f9:4c:e5: 3e:fb:81:6d:85:c0:4b:59:45:6b:22:01:e7:c7:b4:f3:5d:5a: 18:20:08:c6:80:56:f9:51:55:fa:40:df:91:05:e5:79:92:6f: d5:7f:33:98:4d:c7:bf:35:e0:b3:bd:ae:37:64:81:cc:d8:c3: e7:8b:34:6d:29:dc:69:92:fa:6b:43:2f:03:f8:89:fb:ea:aa: d4:b3:23:66:3b:b9:54:da:b3:cc:6c:f7:7b:4d:10:c3:08:97: 72:62:fd:0e:de:31:51:6b:91:2e:fe:6d:69:cf:15:02:1d:9e: 5a:a4:c0:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9HNksDYp3nfEm+ZQih4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzQ5YWE2NzNlZDNjOGUyMTk3MGMxNDY1YWFlNmNhZjRhOTY2YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOWy0rqZ+++ma8SJJqziVouugTqH hCcQZelTVGlwWHTf2QMKvJvDFYGH9QLuY2OEIWQoYUjz27528xs2GrlKXRq+rw70 G+UHix6vu/h035BXT1RbYnbe83+NvSa4rGG1LQOSbbhAeKQeRNSuXpAC6avkgWrt 4EiWKrWnFeK/g/fpN6HMlnrhEmO2vw8uWMQ08WKngkHYqPYPvZNaUSCjvRxDmdjm G1xXWgaaVy6F8uMl0RoXCbt/7EohavC87ZIFWOhWd1FK76QJ8Li+yZNMcDrhAUcW OMcNMJiBn5XQRnTETF0mTjLIpHLUpBnCtzrNYs8Xyj6aqa1Hn/Iewfme+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxJqmc+08jiGXDBRlqubK9KlmvXMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvdkVtcVp6N1R5T0laY01GR1dxNXNyMHFXYTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX4ygMA0G CSqGSIb3DQEBCwUAA4IBAQAtTSNb3ZrSSrx8nS3RfhHgkrpMEcMPMguEI8qsrY2G 1r3/afkvPi48wR9TzW6UMBrO39ixArnl9GPLNvmwOpF17BgDUQ+tIFqo4l73lHPR qe6ru3FV4JWT1plHwe3K1Z8nClP7JxyYWhOtP0ucB1uor8Uas13LhjDL0+M8Ohxa 5H+dxdKlRSu7PshlcKn5TOU++4FthcBLWUVrIgHnx7TzXVoYIAjGgFb5UVX6QN+R BeV5km/VfzOYTce/NeCzva43ZIHM2MPnizRtKdxpkvprQy8D+In76qrUsyNmO7lU 2rPMbPd7TRDDCJdyYv0O3jFRa5Eu/m1pzxUCHZ5apMA2 -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:11 2026 by rpki-client