This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa
File: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (raw, json)
Hash identifier: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=
Subject key identifier: 69:E5:3D:FD:8C:75:73:D9:F0:D7:2F:B8:C6:DC:F8:E1:2A:86:D6:6D
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019C3C3D8F3241FA32F11DE4FD8D0C264C5B
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa
Signing time: Sun 08 Feb 2026 07:53:13 +0000
ROA not before: Sun 08 Feb 2026 07:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44400
IP address blocks: 95.215.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3c:3d:8f:32:41:fa:32:f1:1d:e4:fd:8d:0c:26:4c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Feb 8 07:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e53dfd8c7573d9f0d72fb8c6dcf8e12a86d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:54:f4:19:f5:c9:ff:81:a3:74:88:15:e2:4e:
c9:40:38:1d:0c:1f:74:bc:27:31:08:1c:72:ff:84:
a0:1a:e1:39:23:43:bd:84:b3:00:b0:5e:2f:f1:69:
fc:17:d4:50:50:5b:ed:97:9c:27:d8:2f:18:2c:93:
9e:0f:45:42:55:94:0f:5c:9e:6f:22:0e:48:f2:b8:
df:5d:37:5a:36:7d:fd:62:78:71:aa:26:89:7b:0d:
72:ed:19:a4:59:7b:04:81:5c:33:e2:74:96:d3:b0:
d4:9a:7e:a5:00:dd:45:bd:a7:29:9a:bd:07:b9:ac:
fc:b7:8d:02:bf:69:1f:06:28:cc:04:45:70:12:7b:
c6:c4:20:5d:22:38:cf:5d:03:f6:cd:01:98:6a:ec:
ca:5c:76:b3:91:5a:73:c0:be:70:5c:c6:6b:59:45:
18:12:4e:27:52:d0:12:69:f7:99:f8:7a:bd:81:b2:
4b:a4:84:7c:58:74:00:20:54:9a:eb:d0:dc:8a:98:
e4:e7:5e:82:c7:22:ab:bd:ea:4b:94:fd:18:66:4b:
75:a7:93:5b:ca:4f:44:55:22:08:21:dd:e7:20:51:
58:8e:8f:16:1f:0e:42:70:f0:60:35:14:57:68:76:
41:2d:a0:55:0a:b1:98:dd:a8:b4:15:33:96:df:3c:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E5:3D:FD:8C:75:73:D9:F0:D7:2F:B8:C6:DC:F8:E1:2A:86:D6:6D
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d2:8c:7b:40:78:50:23:a1:e6:90:67:71:2e:b3:8b:5d:c4:
90:4c:72:85:e4:9d:85:52:c0:fd:19:ca:94:80:56:64:d7:24:
af:fc:07:c9:a5:16:68:1f:cb:c0:71:2b:3c:52:0b:1e:d8:87:
b6:bb:8b:95:e7:b6:b9:7f:a2:ff:d4:2a:de:7d:b1:99:95:d9:
e0:e3:59:90:4a:fe:c8:1b:de:2c:91:0b:19:2f:40:54:30:e8:
3b:54:c9:34:0b:37:85:62:ef:ef:ce:aa:5f:1a:61:fd:3a:39:
5c:de:96:31:e7:03:7f:7a:15:26:33:91:f3:58:39:a0:c1:04:
62:e4:69:95:f0:d0:f8:77:1f:ed:6a:e6:67:75:e5:4c:00:8f:
f6:2e:44:23:ae:d5:2e:1a:ec:70:4f:05:1d:71:e0:9f:62:aa:
67:09:f6:02:5c:b3:b1:da:53:72:a1:c4:94:18:75:31:34:bd:
66:d5:cf:ae:d1:52:ac:b4:03:4e:69:e0:0b:b0:55:7c:6c:f2:
f2:81:f0:08:7b:fa:f1:90:e3:f0:da:14:63:6e:13:85:dc:0c:
75:9c:f7:1f:49:7e:17:1a:33:25:ac:68:29:99:3a:23:72:93:
f2:49:85:15:7b:42:8c:bc:c4:e2:b9:ad:2e:bd:14:d5:4c:ee:
f3:f6:f4:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZw8PY8yQfoy8R3k/Y0MJkxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5
YjQ2NTEwHhcNMjYwMjA4MDc1MzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWU1M2RmZDhjNzU3M2Q5ZjBkNzJmYjhjNmRjZjhlMTJhODZkNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VT0GfXJ/4GjdIgV4k7JQDgdDB90
vCcxCBxy/4SgGuE5I0O9hLMAsF4v8Wn8F9RQUFvtl5wn2C8YLJOeD0VCVZQPXJ5v
Ig5I8rjfXTdaNn39YnhxqiaJew1y7RmkWXsEgVwz4nSW07DUmn6lAN1Fvacpmr0H
uaz8t40Cv2kfBijMBEVwEnvGxCBdIjjPXQP2zQGYauzKXHazkVpzwL5wXMZrWUUY
Ek4nUtASafeZ+Hq9gbJLpIR8WHQAIFSa69Dcipjk516CxyKrvepLlP0YZkt1p5Nb
yk9EVSIIId3nIFFYjo8WHw5CcPBgNRRXaHZBLaBVCrGY3ai0FTOW3zwFFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnlPf2MdXPZ8NcvuMbc+OEqhtZtMB8GA1UdIwQY
MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt
MzE3NjQ1Y2Q3ODg1LzEvYWVVOV9ZeDFjOW53MXktNHh0ejQ0U3FHMW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1
LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9etMA0G
CSqGSIb3DQEBCwUAA4IBAQBr0ox7QHhQI6HmkGdxLrOLXcSQTHKF5J2FUsD9GcqU
gFZk1ySv/AfJpRZoH8vAcSs8Ugse2Ie2u4uV57a5f6L/1CrefbGZldng41mQSv7I
G94skQsZL0BUMOg7VMk0CzeFYu/vzqpfGmH9Ojlc3pYx5wN/ehUmM5HzWDmgwQRi
5GmV8ND4dx/tauZndeVMAI/2LkQjrtUuGuxwTwUdceCfYqpnCfYCXLOx2lNyocSU
GHUxNL1m1c+u0VKstANOaeALsFV8bPLygfAIe/rxkOPw2hRjbhOF3Ax1nPcfSX4X
GjMlrGgpmTojcpPySYUVe0KMvMTiua0uvRTVTO7z9vSR
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:08:23 2026 by rpki-client