This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa File: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (raw, json) Hash identifier: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc= Subject key identifier: 9C:33:0E:FA:2E:00:C6:94:4A:A1:0F:DB:0A:FD:67:89:76:3B:33:03 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80BDB04A01B1C19AD171CBCCC7C7BB Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34909 IP address blocks: 95.169.210.0/23 maxlen: 23 95.169.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bd:b0:4a:01:b1:c1:9a:d1:71:cb:cc:c7:c7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c330efa2e00c6944aa10fdb0afd6789763b3303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:ac:20:1d:3e:08:2e:5a:47:3f:bd:63:9d: 7b:21:b6:d2:cd:53:66:b7:9d:85:d6:52:bd:02:d6: ea:2c:c1:2b:e1:6a:43:12:2e:90:1b:58:19:7e:a1: ac:53:50:8f:a1:bf:bb:25:0f:2c:9e:24:da:1c:7c: ac:81:65:ef:ef:9f:01:3d:b3:82:50:68:f3:02:3b: 30:4a:5d:60:7b:3e:7f:86:44:57:61:e0:47:5b:6b: 76:bf:15:dc:f2:bf:c8:d8:d2:31:7e:c2:65:55:a4: 92:aa:91:50:89:ab:c9:4d:96:b6:ad:8d:7f:f5:d1: e2:eb:ef:44:e6:c3:69:5e:ea:70:5f:01:c3:69:a3: 9a:40:20:ed:e4:35:2a:9b:5a:b7:e6:7a:4b:c5:4e: 6e:e2:56:de:d5:cc:72:a5:40:a5:89:67:0a:9f:55: 25:88:55:04:68:c2:ae:6a:65:98:60:e7:68:14:fc: 76:05:0e:d4:18:e0:d9:ba:ab:c5:44:d8:fe:89:24: 59:77:32:9d:8a:e4:e4:5f:b6:c7:09:66:bf:96:d1: c3:af:85:95:9e:1a:90:01:f8:73:4d:cc:8e:f0:d5: b4:92:c5:19:60:e3:de:be:e0:f9:cc:6d:d6:3b:35: e1:94:4e:31:22:07:59:18:ac:8f:9d:4d:18:07:ec: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:0E:FA:2E:00:C6:94:4A:A1:0F:DB:0A:FD:67:89:76:3B:33:03 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.210.0-95.169.212.255 Signature Algorithm: sha256WithRSAEncryption 9a:8d:8a:8d:c1:4d:16:1d:e6:40:c9:78:e3:26:cd:f9:94:2f: cf:b2:b7:1e:bb:cd:41:24:7d:71:ef:c6:87:07:0a:16:96:d7: e1:a1:81:a9:ad:7f:27:15:9d:fc:68:86:91:3e:12:3a:23:38: a0:cf:b8:4f:8b:29:0c:ef:f7:23:19:12:af:be:bd:73:f1:82: 36:c0:d9:2c:b2:14:cd:cc:23:87:4f:70:05:17:2a:c9:20:13: bc:c3:1d:e3:87:6d:7d:98:e8:22:81:7d:b0:6e:d3:5f:42:50: 1b:89:63:52:e2:42:9a:9a:cf:0b:d0:f9:b0:28:cc:da:42:6a: 0d:7f:9d:08:f7:a0:cb:be:85:77:8d:63:33:88:fe:9d:40:62: 1a:e7:e4:8c:9e:44:ad:b1:f2:2d:84:be:0e:41:3a:10:08:8a: 72:ca:ad:73:ca:81:5e:f4:cd:4b:4c:c6:a3:7a:e7:77:e2:ad: b7:c1:cf:68:aa:b4:be:2a:50:8b:1f:d4:ff:14:f0:2b:ab:32: 8b:d6:e6:a3:8e:a6:9d:38:9d:6a:9d:c9:cb:87:64:d2:dc:17: 3c:3c:d0:f1:0f:04:23:bf:f8:3f:4a:1d:1f:56:62:35:0f:35: 90:5e:6d:72:93:41:4b:e6:8e:a5:3f:07:8e:40:b9:aa:21:09: 5b:d1:0d:fb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gL2wSgGxwZrRccvMx8e7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzMzMGVmYTJlMDBjNjk0NGFhMTBmZGIwYWZkNjc4OTc2M2IzMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvCsIB0+CC5aRz+9Y517IbbSzVNm t52F1lK9AtbqLMEr4WpDEi6QG1gZfqGsU1CPob+7JQ8sniTaHHysgWXv758BPbOC UGjzAjswSl1gez5/hkRXYeBHW2t2vxXc8r/I2NIxfsJlVaSSqpFQiavJTZa2rY1/ 9dHi6+9E5sNpXupwXwHDaaOaQCDt5DUqm1q35npLxU5u4lbe1cxypUCliWcKn1Ul iFUEaMKuamWYYOdoFPx2BQ7UGODZuqvFRNj+iSRZdzKdiuTkX7bHCWa/ltHDr4WV nhqQAfhzTcyO8NW0ksUZYOPevuD5zG3WOzXhlE4xIgdZGKyPnU0YB+yAuwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJwzDvouAMaUSqEP2wr9Z4l2OzMDMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvbkRNTy1pNEF4cFJLb1FfYkN2MW5pWFk3TXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfqdID BABfqdQwDQYJKoZIhvcNAQELBQADggEBAJqNio3BTRYd5kDJeOMmzfmUL8+ytx67 zUEkfXHvxocHChaW1+GhgamtfycVnfxohpE+EjojOKDPuE+LKQzv9yMZEq++vXPx gjbA2SyyFM3MI4dPcAUXKskgE7zDHeOHbX2Y6CKBfbBu019CUBuJY1LiQpqazwvQ +bAozNpCag1/nQj3oMu+hXeNYzOI/p1AYhrn5IyeRK2x8i2Evg5BOhAIinLKrXPK gV70zUtMxqN653firbfBz2iqtL4qUIsf1P8U8CurMovW5qOOpp04nWqdycuHZNLc Fzw80PEPBCO/+D9KHR9WYjUPNZBebXKTQUvmjqU/B45AuaohCVvRDfs= -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:27 2026 by rpki-client