This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/0nKy3DcrJQbiUx0L11st8vPu4iU.roa File: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (raw, json) Hash identifier: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE= Subject key identifier: D2:72:B2:DC:37:2B:25:06:E2:53:1D:0B:D7:5B:2D:F2:F3:EE:E2:25 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80BEB0392A819AC01A14BCEFCCE84D Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/0nKy3DcrJQbiUx0L11st8vPu4iU.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44100 IP address blocks: 95.169.206.0/24 maxlen: 24 95.169.207.0/24 maxlen: 24 95.169.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:be:b0:39:2a:81:9a:c0:1a:14:bc:ef:cc:e8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d272b2dc372b2506e2531d0bd75b2df2f3eee225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:f2:5c:25:86:26:63:88:74:aa:88:3b:d4: 45:89:7e:7c:15:96:b1:3f:c6:43:ff:1a:a0:ab:4e: f4:7f:e0:e7:f4:9d:09:e7:8f:09:bc:ed:12:78:d3: 4b:61:a9:f4:c6:77:cd:93:8c:1c:25:06:7d:c2:cb: ba:d7:52:fe:17:03:80:08:2c:6f:e7:93:03:c5:0a: b0:73:9f:2e:87:4b:17:97:97:24:66:3b:f5:42:53: f1:90:32:69:af:c4:cb:0a:3f:54:56:52:68:28:83: a5:cc:61:fa:bc:e6:6a:94:0a:9c:a4:a2:0d:56:0d: b2:f2:e5:b0:73:06:a7:75:0f:d7:ef:d9:9b:f1:34: f2:74:a2:f2:7b:39:78:43:71:74:25:77:4a:5f:3f: d6:fe:b2:02:90:f2:3a:f5:07:c6:5b:52:1b:29:b1: 4f:4a:92:d1:ab:cb:1d:98:71:dc:01:88:23:db:5c: fb:75:d9:db:5b:4f:d5:2a:8a:a7:bf:1b:3e:c5:1f: fd:a6:10:61:0f:74:17:d2:dd:40:0a:19:be:3e:5b: 18:b0:14:90:15:c5:3c:db:5d:85:15:59:31:12:27: f2:9f:87:4d:97:57:55:10:c2:17:70:f9:44:56:7b: 51:45:26:43:3f:03:e9:83:50:49:75:f7:52:56:d7: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:72:B2:DC:37:2B:25:06:E2:53:1D:0B:D7:5B:2D:F2:F3:EE:E2:25 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/0nKy3DcrJQbiUx0L11st8vPu4iU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.206.0/23 95.169.221.0/24 Signature Algorithm: sha256WithRSAEncryption 87:de:19:e5:cd:6f:56:92:d1:e1:fb:77:54:f6:44:83:cd:8e: 79:58:d4:45:47:4b:68:a0:a2:49:73:a3:19:c3:73:24:7f:d9: 03:e8:b9:63:d5:d1:42:4f:ea:3d:9e:ab:bb:f0:c2:80:70:c7: 59:d4:96:42:d6:2c:10:69:17:23:62:15:a6:76:38:db:65:b2: be:e6:4e:a2:f5:bb:43:93:b2:bc:a2:11:6c:41:f1:f0:d6:aa: 2e:db:bf:bb:a2:b1:1b:19:6a:b5:37:02:8c:c9:8c:cb:cf:04: a0:6c:9f:42:cf:36:41:72:c0:6d:e1:95:cc:1f:47:36:10:50: ab:bd:0f:73:59:9a:e8:fb:9e:a0:26:96:65:f0:1d:40:6e:8a: fb:1e:44:05:1e:ac:eb:97:d6:71:e5:cd:3c:11:09:0d:7c:99: 44:1a:8a:1d:66:79:cd:27:40:57:88:73:82:a9:fc:f1:19:82: e1:b8:97:76:20:8b:ba:ea:1a:cf:ac:5a:dc:87:4f:db:3f:b9: 37:f3:08:2b:be:f1:93:d7:62:a5:e4:71:3e:19:ad:5f:1e:d5: f9:39:ca:a2:6d:3c:cb:e4:19:a1:1d:3f:59:c0:d9:4c:1d:a0: f2:97:72:c6:3b:eb:8b:e2:3d:7b:b5:8f:be:d8:70:1b:f3:e7: 74:9b:0f:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gL6wOSqBmsAaFLzvzOhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjcyYjJkYzM3MmIyNTA2ZTI1MzFkMGJkNzViMmRmMmYzZWVlMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswLyXCWGJmOIdKqIO9RFiX58FZax P8ZD/xqgq070f+Dn9J0J548JvO0SeNNLYan0xnfNk4wcJQZ9wsu611L+FwOACCxv 55MDxQqwc58uh0sXl5ckZjv1QlPxkDJpr8TLCj9UVlJoKIOlzGH6vOZqlAqcpKIN Vg2y8uWwcwandQ/X79mb8TTydKLyezl4Q3F0JXdKXz/W/rICkPI69QfGW1IbKbFP SpLRq8sdmHHcAYgj21z7ddnbW0/VKoqnvxs+xR/9phBhD3QX0t1AChm+PlsYsBSQ FcU8212FFVkxEifyn4dNl1dVEMIXcPlEVntRRSZDPwPpg1BJdfdSVtcCfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNJystw3KyUG4lMdC9dbLfLz7uIlMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvMG5LeTNEY3JKUWJpVXgwTDExc3Q4dlB1NGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX6nOAwQA X6ndMA0GCSqGSIb3DQEBCwUAA4IBAQCH3hnlzW9WktHh+3dU9kSDzY55WNRFR0to oKJJc6MZw3Mkf9kD6Llj1dFCT+o9nqu78MKAcMdZ1JZC1iwQaRcjYhWmdjjbZbK+ 5k6i9btDk7K8ohFsQfHw1qou27+7orEbGWq1NwKMyYzLzwSgbJ9CzzZBcsBt4ZXM H0c2EFCrvQ9zWZro+56gJpZl8B1Abor7HkQFHqzrl9Zx5c08EQkNfJlEGoodZnnN J0BXiHOCqfzxGYLhuJd2IIu66hrPrFrch0/bP7k38wgrvvGT12Kl5HE+Ga1fHtX5 OcqibTzL5BmhHT9ZwNlMHaDyl3LGO+uL4j17tY++2HAb8+d0mw9Y -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:24 2026 by rpki-client