This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/8JXiL7XzwcUKWslrEH3fiUl9_1Q.roa File: 8JXiL7XzwcUKWslrEH3fiUl9_1Q.roa (raw, json) Hash identifier: XHMaFPKefGJYFcZdQ/GsdUkoHTLr9GXBB/VoyGHP+zA= Subject key identifier: F0:95:E2:2F:B5:F3:C1:C5:0A:5A:C9:6B:10:7D:DF:89:49:7D:FF:54 Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af Certificate serial: 019B7C80AF3ED44BD1AFAA31D13ED2D88EB3 Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/8JXiL7XzwcUKWslrEH3fiUl9_1Q.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43030 IP address blocks: 77.95.0.0/21 maxlen: 21 77.95.0.0/24 maxlen: 24 77.95.1.0/24 maxlen: 24 77.95.2.0/24 maxlen: 24 77.95.3.0/24 maxlen: 24 77.95.4.0/24 maxlen: 24 77.95.5.0/24 maxlen: 24 77.95.6.0/24 maxlen: 24 77.95.7.0/24 maxlen: 24 185.194.196.0/23 maxlen: 23 185.194.196.0/24 maxlen: 24 185.194.197.0/24 maxlen: 24 185.194.198.0/24 maxlen: 24 2a0b:ae80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:af:3e:d4:4b:d1:af:aa:31:d1:3e:d2:d8:8e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f095e22fb5f3c1c50a5ac96b107ddf89497dff54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:19:93:43:26:59:87:ff:ef:d6:4d:4c:0c: f9:50:4b:f8:74:23:96:d5:b6:d7:31:39:f3:13:83: e2:71:63:f1:73:ee:5c:0c:5c:64:f3:4d:8e:1f:5a: cd:e7:bf:38:85:bf:14:21:c9:dd:3d:b9:d8:51:e8: 74:84:3f:13:79:a0:d4:67:bb:eb:e1:5a:45:67:2c: ff:4a:7d:10:dd:9d:d2:bd:c0:16:8e:4a:4b:89:97: 17:e5:a4:55:ce:4c:3a:29:df:f2:da:34:84:21:70: b7:74:a6:5c:69:0c:d7:7d:cb:bc:ea:5d:aa:99:8e: cf:c2:0f:d7:8b:19:0e:4e:b6:3a:8c:4d:28:7c:47: 55:30:bc:1a:23:1a:03:81:02:77:14:28:f6:0c:1f: 5f:24:aa:06:93:b2:e9:c4:1e:5a:88:c3:97:1e:87: a8:bb:7c:f9:18:ba:ef:f6:49:24:77:7f:05:1c:eb: 1d:60:a0:2c:75:d4:4e:92:96:63:0c:34:18:7c:95: 7d:bb:e8:c4:4d:fe:d9:ee:3a:26:64:58:38:7e:52: c8:26:c9:4a:19:45:8a:ef:b1:a8:54:86:42:89:96: 46:99:3c:2c:f4:44:ff:f6:14:1a:77:da:e9:0f:11: ae:b9:9b:80:d8:0d:2e:7c:fa:e9:32:53:33:ad:1d: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:E2:2F:B5:F3:C1:C5:0A:5A:C9:6B:10:7D:DF:89:49:7D:FF:54 X509v3 Authority Key Identifier: keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/8JXiL7XzwcUKWslrEH3fiUl9_1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.0.0/21 185.194.196.0-185.194.198.255 IPv6: 2a0b:ae80::/32 Signature Algorithm: sha256WithRSAEncryption bb:f2:f9:62:92:f9:74:2b:4f:2b:45:a0:68:ef:7f:25:13:96: 27:f5:1c:17:6d:4b:ea:1b:31:86:c1:20:21:ed:12:61:f0:6d: c9:1a:d2:39:5a:75:66:42:fc:3c:96:bf:8d:43:33:d3:e6:c4: 6e:2f:c2:f4:39:d4:f7:39:36:0b:ac:67:ee:de:cc:3e:7e:4b: bf:44:39:93:3d:14:c6:9d:27:96:bb:c5:fc:e4:ec:0d:bd:a4: 8f:6d:5e:3a:63:ac:eb:1a:51:48:88:9e:cf:a3:7a:b3:10:df: 88:4a:2c:e5:7c:b4:2d:a3:40:e6:9f:b0:7c:62:11:a0:87:cd: 5c:ef:a8:2b:a2:9a:6f:b1:95:45:13:1d:ec:a5:14:87:95:93: a5:40:61:f7:87:9f:3c:78:35:76:84:85:41:30:f8:f3:46:0b: 0d:7a:6b:89:cf:75:b9:30:00:42:bf:80:6f:ba:b6:59:07:9a: 8f:97:9e:35:e9:23:3a:01:cc:ad:be:87:66:76:a5:c6:e0:ca: 39:2d:f3:10:5b:a4:9a:d8:74:3f:1b:37:37:e2:3e:d2:b5:46: 4f:24:08:1e:4a:ac:79:e9:b8:7a:a5:37:9b:0e:81:e2:dc:b8: d2:82:2a:7d:07:de:b3:a8:81:f9:f4:e0:c0:d8:00:23:86:95: 74:0f:6f:56 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8gK8+1EvRr6ox0T7S2I6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm MmEwYWYwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDk1ZTIyZmI1ZjNjMWM1MGE1YWM5NmIxMDdkZGY4OTQ5N2RmZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGQZk0MmWYf/79ZNTAz5UEv4dCOW 1bbXMTnzE4PicWPxc+5cDFxk802OH1rN5784hb8UIcndPbnYUeh0hD8TeaDUZ7vr 4VpFZyz/Sn0Q3Z3SvcAWjkpLiZcX5aRVzkw6Kd/y2jSEIXC3dKZcaQzXfcu86l2q mY7Pwg/XixkOTrY6jE0ofEdVMLwaIxoDgQJ3FCj2DB9fJKoGk7LpxB5aiMOXHoeo u3z5GLrv9kkkd38FHOsdYKAsddROkpZjDDQYfJV9u+jETf7Z7jomZFg4flLIJslK GUWK77GoVIZCiZZGmTws9ET/9hQad9rpDxGuuZuA2A0ufPrpMlMzrR2XPQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFPCV4i+188HFClrJaxB934lJff9UMB8GA1UdIwQY MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt ZjU5ZDIwZWYyN2I0LzEvOEpYaUw3WHp3Y1VLV3NsckVIM2ZpVWw5XzFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0 LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDTV8AMAwD BAK5wsQDBAC5wsYwDQQCAAIwBwMFACoLroAwDQYJKoZIhvcNAQELBQADggEBALvy +WKS+XQrTytFoGjvfyUTlif1HBdtS+obMYbBICHtEmHwbcka0jladWZC/DyWv41D M9PmxG4vwvQ51Pc5NgusZ+7ezD5+S79EOZM9FMadJ5a7xfzk7A29pI9tXjpjrOsa UUiIns+jerMQ34hKLOV8tC2jQOafsHxiEaCHzVzvqCuimm+xlUUTHeylFIeVk6VA YfeHnzx4NXaEhUEw+PNGCw16a4nPdbkwAEK/gG+6tlkHmo+XnjXpIzoBzK2+h2Z2 pcbgyjkt8xBbpJrYdD8bNzfiPtK1Rk8kCB5KrHnpuHqlN5sOgeLcuNKCKn0H3rOo gfn04MDYACOGlXQPb1Y= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:08 2026 by rpki-client