This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/_nwT7ESfHVfxuJ5xuyAyCnmBj3E.roa File: _nwT7ESfHVfxuJ5xuyAyCnmBj3E.roa (raw, json) Hash identifier: 0sqZhNRQl0O1OrhKsd69Nxx6CI7ZCmRXpC58u8z0xWk= Subject key identifier: FE:7C:13:EC:44:9F:1D:57:F1:B8:9E:71:BB:20:32:0A:79:81:8F:71 Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693 Certificate serial: 019B7F81621F2E2CEC1E4F88CEB80601AC45 Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/_nwT7ESfHVfxuJ5xuyAyCnmBj3E.roa Signing time: Fri 02 Jan 2026 16:19:04 +0000 ROA not before: Fri 02 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197809 IP address blocks: 91.227.116.0/22 maxlen: 22 193.169.112.0/22 maxlen: 22 193.169.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:62:1f:2e:2c:ec:1e:4f:88:ce:b8:06:01:ac:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693 Validity Not Before: Jan 2 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7c13ec449f1d57f1b89e71bb20320a79818f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:24:d7:9f:84:e8:86:55:ca:89:82:0d:42: ab:f9:aa:f8:3e:db:de:4c:50:12:a9:68:87:3c:13: 10:70:da:15:22:cd:80:dd:67:a5:05:be:e5:70:a6: ca:ea:38:f8:9d:58:f1:14:9f:b8:aa:7a:aa:25:80: 83:31:07:d3:ce:44:78:05:92:01:37:6f:8b:59:6a: ce:f3:d0:9c:4b:62:5b:d5:60:64:e1:62:7e:a9:b5: 77:04:6a:32:1b:c2:85:bc:8f:12:16:1a:c5:1a:b8: 04:81:0a:6f:02:10:e8:f2:b2:01:e7:25:fe:e5:4f: 99:b6:37:94:30:18:9d:00:bf:19:d9:da:14:1f:e1: e0:a4:57:65:8b:18:b8:c5:d1:eb:95:2c:ad:f0:7c: 0b:c3:c9:d4:21:7a:7c:d5:a2:f3:f2:b0:f1:74:37: 2e:48:a9:45:9f:03:b3:4b:96:ab:2a:1a:ea:e9:96: ad:dc:fd:6e:c8:02:cd:ae:51:20:da:05:ff:5b:96: da:24:df:46:f9:99:5e:60:72:17:0f:ac:be:e0:14: 61:56:5f:b5:8d:79:ea:e0:e8:e0:71:79:50:56:43: c9:e4:c2:73:b4:8d:e1:e9:d0:ac:83:ef:1d:09:a8: 1c:c1:85:72:a8:94:17:09:52:f4:a9:e7:c1:49:75: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:13:EC:44:9F:1D:57:F1:B8:9E:71:BB:20:32:0A:79:81:8F:71 X509v3 Authority Key Identifier: keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/_nwT7ESfHVfxuJ5xuyAyCnmBj3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.116.0/22 193.169.112.0-193.169.117.255 Signature Algorithm: sha256WithRSAEncryption b5:91:4f:61:c2:37:5f:24:21:d9:f9:25:77:bb:8a:00:64:42: 9d:ac:3b:5c:14:cf:9e:b8:37:fb:a6:88:d7:07:1b:81:57:c1: b7:fb:1f:f4:6b:fc:f5:6f:25:54:13:b5:34:e6:45:1c:c6:6e: 42:e4:a5:46:be:0a:d0:7c:9d:f6:00:d7:39:26:c8:d5:d5:4d: f7:08:ed:05:b1:79:1f:d6:87:f5:f6:eb:35:60:34:cd:88:cb: c9:90:b8:a1:be:1f:33:c0:3d:bc:ec:b0:64:1b:47:28:4b:c2: eb:3e:17:c4:55:43:7c:a8:11:20:2b:00:78:28:3b:7a:93:15: 53:65:a7:1d:4a:c6:2f:99:68:56:80:ee:53:68:2b:b2:6f:f5: d8:0e:c1:86:ce:87:77:06:af:66:e2:be:b5:12:92:77:46:5d: c7:1e:32:41:9b:7a:f7:49:3e:45:81:96:d0:5b:0b:67:8c:78: d7:70:27:63:96:c8:01:79:cc:ea:09:56:26:ee:e5:a9:1a:c5: 99:d9:1a:19:c7:fa:19:28:a6:cb:d0:b4:b0:04:67:6e:e4:6b: a6:d2:09:91:b7:7b:56:1c:58:ac:f0:ed:e0:d2:d4:31:bd:36: f4:b5:c4:78:5d:c4:4b:e1:9e:dd:0c:2c:b7:07:07:d6:c5:96: 7d:b2:c1:47 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/gWIfLizsHk+IzrgGAaxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWEwNTUxNDZhMDEzNjcwNWNiNmE2ZGFlNGQ0MjQ5YzUx NGM2OTMwHhcNMjYwMTAyMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdjMTNlYzQ0OWYxZDU3ZjFiODllNzFiYjIwMzIwYTc5ODE4ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfwk15+E6IZVyomCDUKr+ar4Ptve TFASqWiHPBMQcNoVIs2A3WelBb7lcKbK6jj4nVjxFJ+4qnqqJYCDMQfTzkR4BZIB N2+LWWrO89CcS2Jb1WBk4WJ+qbV3BGoyG8KFvI8SFhrFGrgEgQpvAhDo8rIB5yX+ 5U+ZtjeUMBidAL8Z2doUH+HgpFdlixi4xdHrlSyt8HwLw8nUIXp81aLz8rDxdDcu SKlFnwOzS5arKhrq6Zat3P1uyALNrlEg2gX/W5baJN9G+ZleYHIXD6y+4BRhVl+1 jXnq4OjgcXlQVkPJ5MJztI3h6dCsg+8dCagcwYVyqJQXCVL0qefBSXVskwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFP58E+xEnx1X8biecbsgMgp5gY9xMB8GA1UdIwQY MBaAFJXqBVFGoBNnBctqba5NQknFFMaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVvRlVVYWdFMmNGeTJwdHJrMUNTY1VVeHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNDcyYTItZWY3OC00MjRiLWJlM2Yt Njc4MjYyNWVmMmY5LzEvX253VDdFU2ZIVmZ4dUo1eHV5QXlDbm1CajNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNDcyYTItZWY3OC00MjRiLWJlM2YtNjc4MjYyNWVmMmY5 LzEvbGVvRlVVYWdFMmNGeTJwdHJrMUNTY1VVeHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCW+N0MAwD BATBqXADBAHBqXQwDQYJKoZIhvcNAQELBQADggEBALWRT2HCN18kIdn5JXe7igBk Qp2sO1wUz564N/umiNcHG4FXwbf7H/Rr/PVvJVQTtTTmRRzGbkLkpUa+CtB8nfYA 1zkmyNXVTfcI7QWxeR/Wh/X26zVgNM2Iy8mQuKG+HzPAPbzssGQbRyhLwus+F8RV Q3yoESArAHgoO3qTFVNlpx1Kxi+ZaFaA7lNoK7Jv9dgOwYbOh3cGr2bivrUSkndG XcceMkGbevdJPkWBltBbC2eMeNdwJ2OWyAF5zOoJVibu5akaxZnZGhnH+hkopsvQ tLAEZ27ka6bSCZG3e1YcWKzw7eDS1DG9NvS1xHhdxEvhnt0MLLcHB9bFln2ywUc= -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:02 2026 by rpki-client