This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/wFPcFTfLNLeeu52DTqhU-V8PVts.roa File: wFPcFTfLNLeeu52DTqhU-V8PVts.roa (raw, json) Hash identifier: NDGhqeRV7hsYmZ5mOPeghOQaf73uDqp19ZwPDNgT1mw= Subject key identifier: C0:53:DC:15:37:CB:34:B7:9E:BB:9D:83:4E:A8:54:F9:5F:0F:56:DB Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603 Certificate serial: 019B797F3B390CA3F5CE28844CB3B5C21F48 Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/wFPcFTfLNLeeu52DTqhU-V8PVts.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209681 IP address blocks: 95.214.68.0/22 maxlen: 24 2a09:d980::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3b:39:0c:a3:f5:ce:28:84:4c:b3:b5:c2:1f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c053dc1537cb34b79ebb9d834ea854f95f0f56db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:48:98:4e:5e:61:73:f4:8b:a9:cf:17:b5: 81:94:7d:46:ef:87:3c:a9:fc:30:eb:c6:3d:2b:7f: df:2c:28:c0:8a:6c:32:1c:77:06:ba:ec:fa:bd:a1: 2e:c2:ea:e9:0c:dd:41:5c:01:c7:9b:ac:21:af:20: ca:a4:ff:da:aa:44:ea:85:c5:5f:49:fb:5c:f6:94: 9c:0b:95:c4:79:0f:85:6b:79:1b:a6:6e:f6:07:30: db:fe:44:68:68:c3:64:fe:0a:30:6d:40:30:ae:1b: c9:21:aa:59:79:80:d1:9b:20:72:dd:60:14:1c:ce: 16:1d:5c:2d:d2:c1:9a:6b:be:b7:e4:cb:4d:a7:28: 94:d8:4b:93:ca:12:b9:e3:b7:ac:5c:11:d7:3f:91: c6:2f:34:4a:6f:b5:12:f0:23:ab:02:11:cf:df:ae: 2d:25:21:f1:6c:0e:8c:f7:0c:91:82:e2:61:be:d9: 96:72:68:f6:83:83:3b:e2:38:f7:be:ad:6c:4a:3e: be:34:19:9f:e5:64:c9:8e:a2:f4:6e:bc:8f:89:41: 9f:5d:5f:60:d8:26:2e:b7:6f:48:eb:cf:ac:00:9c: 34:03:2f:4d:e9:b8:27:d6:a5:ad:6e:20:37:df:53: c0:7e:a1:a1:33:81:77:34:98:ba:06:fd:76:2f:fb: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:53:DC:15:37:CB:34:B7:9E:BB:9D:83:4E:A8:54:F9:5F:0F:56:DB X509v3 Authority Key Identifier: keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/wFPcFTfLNLeeu52DTqhU-V8PVts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.68.0/22 IPv6: 2a09:d980::/29 Signature Algorithm: sha256WithRSAEncryption 51:37:b6:07:f0:fa:6d:21:ae:24:40:49:4c:2f:b0:29:fe:f1: bc:28:ba:7f:14:da:1a:1e:ff:8d:0e:ae:61:59:a4:f8:2e:a9: d9:84:ce:11:57:21:39:0b:3a:b1:81:44:d1:73:19:69:2b:64: e7:c7:cd:41:25:46:80:e6:69:77:de:53:47:87:e6:74:a4:52: a3:10:ca:22:cd:27:ad:e8:61:73:38:cf:aa:cb:f0:d4:48:4c: 27:23:84:23:3f:be:2e:00:c3:74:28:1c:63:ff:31:99:96:aa: b2:01:12:3e:28:c4:8d:3b:81:b6:65:8b:4c:d5:fc:86:13:e3: 87:d5:9e:f5:30:83:a3:56:62:ad:ae:bd:31:c3:b3:94:45:89: 2c:e2:17:dc:28:0c:c1:b7:ef:20:94:c3:d2:61:45:23:8b:8a: 6a:3e:21:a6:d9:4d:44:2c:ba:47:8f:c8:18:9d:79:80:05:92: 1f:27:29:99:d9:ef:15:19:9d:91:e9:8b:8b:1c:62:3e:ca:1e: 67:cd:51:6e:22:81:41:a5:6a:17:21:96:e0:3d:dd:12:4e:f1: 38:41:60:8b:90:32:30:b1:6b:bf:0b:8d:f1:74:ce:77:29:4d: 7c:e5:d5:3f:b5:8d:8d:86:d7:7d:39:28:7a:9f:8d:1a:e4:9a: ff:15:ae:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fzs5DKP1ziiETLO1wh9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OGRjYzVkN2U2ODg3Yzk0MWFlM2IyOGNlM2NiZjJmYjRm MjA2MDMwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDUzZGMxNTM3Y2IzNGI3OWViYjlkODM0ZWE4NTRmOTVmMGY1NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L9ImE5eYXP0i6nPF7WBlH1G74c8 qfww68Y9K3/fLCjAimwyHHcGuuz6vaEuwurpDN1BXAHHm6whryDKpP/aqkTqhcVf Sftc9pScC5XEeQ+Fa3kbpm72BzDb/kRoaMNk/gowbUAwrhvJIapZeYDRmyBy3WAU HM4WHVwt0sGaa7635MtNpyiU2EuTyhK547esXBHXP5HGLzRKb7US8COrAhHP364t JSHxbA6M9wyRguJhvtmWcmj2g4M74jj3vq1sSj6+NBmf5WTJjqL0bryPiUGfXV9g 2CYut29I68+sAJw0Ay9N6bgn1qWtbiA331PAfqGhM4F3NJi6Bv12L/uwKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMBT3BU3yzS3nrudg06oVPlfD1bbMB8GA1UdIwQY MBaAFFWNzF1+aIfJQa47KM48vy+08gYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMDRhNTctNWVlOS00YjZhLTlkYTIt YmQ5YTNiNTVmMTI1LzEvd0ZQY0ZUZkxOTGVldTUyRFRxaFUtVjhQVnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mMDRhNTctNWVlOS00YjZhLTlkYTItYmQ5YTNiNTVmMTI1 LzEvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCX9ZEMA0E AgACMAcDBQMqCdmAMA0GCSqGSIb3DQEBCwUAA4IBAQBRN7YH8PptIa4kQElML7Ap /vG8KLp/FNoaHv+NDq5hWaT4LqnZhM4RVyE5CzqxgUTRcxlpK2Tnx81BJUaA5ml3 3lNHh+Z0pFKjEMoizSet6GFzOM+qy/DUSEwnI4QjP74uAMN0KBxj/zGZlqqyARI+ KMSNO4G2ZYtM1fyGE+OH1Z71MIOjVmKtrr0xw7OURYks4hfcKAzBt+8glMPSYUUj i4pqPiGm2U1ELLpHj8gYnXmABZIfJymZ2e8VGZ2R6YuLHGI+yh5nzVFuIoFBpWoX IZbgPd0STvE4QWCLkDIwsWu/C43xdM53KU185dU/tY2Nhtd9OSh6n40a5Jr/Fa6t -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:18 2026 by rpki-client