This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/RNg5Iw6hK9lFknD64uFpzzZFifw.roa File: RNg5Iw6hK9lFknD64uFpzzZFifw.roa (raw, json) Hash identifier: MPWSSdeEZMH3BcEWDJHSPzUc1H1Qu6OWSelB4NXhiuk= Subject key identifier: 44:D8:39:23:0E:A1:2B:D9:45:92:70:FA:E2:E1:69:CF:36:45:89:FC Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0 Certificate serial: 019BDBDE5D006EBBA1DD0CFC62E4EB75BBE7 Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/RNg5Iw6hK9lFknD64uFpzzZFifw.roa Signing time: Tue 20 Jan 2026 14:45:41 +0000 ROA not before: Tue 20 Jan 2026 14:45:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214469 IP address blocks: 95.143.103.0/24 maxlen: 24 2a13:9ec0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:de:5d:00:6e:bb:a1:dd:0c:fc:62:e4:eb:75:bb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0 Validity Not Before: Jan 20 14:45:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44d839230ea12bd9459270fae2e169cf364589fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:8d:41:98:91:9d:d2:c3:20:d2:09:03:5b: 65:2f:fe:02:42:a1:2d:3b:61:68:df:94:79:62:dc: ae:af:58:3f:d4:1e:f3:90:54:96:d1:fe:02:74:b8: b0:e2:52:b7:c8:02:74:d7:70:96:5e:79:ee:39:1d: a0:61:2e:74:93:8b:eb:85:8f:b0:a7:53:26:39:d2: 77:3f:b6:60:50:bf:78:4e:aa:82:80:e0:86:ef:f7: 3a:d9:b4:e2:eb:7a:55:bf:a9:09:90:3b:22:b2:6f: 20:87:7c:b0:57:19:69:7f:b4:9b:5c:c2:46:54:47: 31:70:ad:7d:3d:a3:a0:f7:77:43:22:76:fc:02:92: 26:c2:7e:11:3f:8d:7d:6d:f6:eb:32:94:b4:28:3e: f4:56:42:17:e1:68:d1:82:e1:46:90:60:c7:f9:82: d2:9d:f9:00:54:3e:ac:b6:38:a5:2d:71:61:b9:77: 3a:e0:d0:20:d4:85:cc:51:0d:64:0f:1e:c6:5b:c2: ad:67:0a:d0:31:f6:50:58:49:3a:40:99:ae:80:2a: be:52:72:47:64:c2:45:d1:48:b4:a1:38:2b:49:37: c6:0f:47:3d:12:8c:69:a3:0d:fb:5c:4d:d1:62:86: a9:b5:6d:d7:3a:48:53:0b:b4:90:a7:4a:5f:fe:ca: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D8:39:23:0E:A1:2B:D9:45:92:70:FA:E2:E1:69:CF:36:45:89:FC X509v3 Authority Key Identifier: keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/RNg5Iw6hK9lFknD64uFpzzZFifw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.143.103.0/24 IPv6: 2a13:9ec0::/29 Signature Algorithm: sha256WithRSAEncryption ae:dc:7c:5b:4b:0c:23:6a:f6:7c:95:f7:3c:bb:64:0f:ad:aa: 89:ab:3f:3d:53:20:97:79:9d:4c:e1:09:d3:d9:94:59:10:c4: f5:e9:27:83:e0:1d:12:7a:7c:c6:9d:db:c0:0b:62:f4:2c:2d: 67:55:c3:73:c1:3f:34:65:11:18:0c:d0:bc:5d:1f:54:70:89: 7f:1d:e6:ff:25:53:3c:07:8e:31:08:31:27:72:30:3c:7c:45: 8a:b9:81:26:01:af:29:a2:a2:c2:46:41:b4:60:af:b2:cb:25: 7f:9c:d3:4d:50:73:42:4b:f2:b5:3f:f0:42:d5:1b:a9:80:3a: 33:17:d7:f6:84:18:58:33:57:b5:24:d1:a2:45:5b:c8:49:2a: 64:60:c1:da:4a:ee:a7:d3:8a:1c:53:96:03:24:0a:3b:5e:a8: 91:c3:fb:55:bc:14:e5:b7:1c:4e:21:be:39:5e:4b:da:de:f1: 42:5d:09:2d:14:af:5b:ae:3c:c6:46:54:80:a0:de:a6:f7:25: 79:1a:fa:0c:8a:44:c0:99:5d:a2:1b:8e:c3:aa:7a:0f:50:8b: 3e:c4:c4:6e:93:0a:b8:74:f5:0e:44:38:22:d4:d0:7c:e2:3b: 03:d1:b1:3f:eb:00:24:4a:f8:4d:59:20:8e:47:84:01:f3:43: d4:fc:55:e8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvb3l0Abruh3Qz8YuTrdbvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTU3OWZkNzQ2MDlkMjY4Y2NiY2ZiODJmNTNhNWE0ZDA2 MTM1YjAwHhcNMjYwMTIwMTQ0NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGQ4MzkyMzBlYTEyYmQ5NDU5MjcwZmFlMmUxNjljZjM2NDU4OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSGNQZiRndLDINIJA1tlL/4CQqEt O2Fo35R5Ytyur1g/1B7zkFSW0f4CdLiw4lK3yAJ013CWXnnuOR2gYS50k4vrhY+w p1MmOdJ3P7ZgUL94TqqCgOCG7/c62bTi63pVv6kJkDsism8gh3ywVxlpf7SbXMJG VEcxcK19PaOg93dDInb8ApImwn4RP419bfbrMpS0KD70VkIX4WjRguFGkGDH+YLS nfkAVD6stjilLXFhuXc64NAg1IXMUQ1kDx7GW8KtZwrQMfZQWEk6QJmugCq+UnJH ZMJF0Ui0oTgrSTfGD0c9Eoxpow37XE3RYoaptW3XOkhTC7SQp0pf/sqtsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFETYOSMOoSvZRZJw+uLhac82RYn8MB8GA1UdIwQY MBaAFBnlef10YJ0mjMvPuC9TpaTQYTWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMt NzQ4NDU0MTRlMDcxLzEvUk5nNUl3NmhLOWxGa25ENjR1RnB6elpGaWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMtNzQ4NDU0MTRlMDcx LzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAX49nMA0E AgACMAcDBQMqE57AMA0GCSqGSIb3DQEBCwUAA4IBAQCu3HxbSwwjavZ8lfc8u2QP raqJqz89UyCXeZ1M4QnT2ZRZEMT16SeD4B0SenzGndvAC2L0LC1nVcNzwT80ZREY DNC8XR9UcIl/Heb/JVM8B44xCDEncjA8fEWKuYEmAa8poqLCRkG0YK+yyyV/nNNN UHNCS/K1P/BC1RupgDozF9f2hBhYM1e1JNGiRVvISSpkYMHaSu6n04ocU5YDJAo7 XqiRw/tVvBTltxxOIb45Xkva3vFCXQktFK9brjzGRlSAoN6m9yV5GvoMikTAmV2i G47DqnoPUIs+xMRukwq4dPUORDgi1NB84jsD0bE/6wAkSvhNWSCOR4QB80PU/FXo -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:49 2026 by rpki-client