This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa File: IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa (raw, json) Hash identifier: 6DhTi3XwDZIX8aIPWMhc+0Awf+2qKC+vCqi+I2myhow= Subject key identifier: 20:92:88:5F:05:AE:37:AF:9E:19:8A:B9:1B:E2:D8:51:59:EF:21:3F Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc Certificate serial: 019B797F1BCC3D5B7E88372FF4A9BE98D6F3 Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49046 IP address blocks: 95.130.40.0/21 maxlen: 21 95.130.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1b:cc:3d:5b:7e:88:37:2f:f4:a9:be:98:d6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2092885f05ae37af9e198ab91be2d85159ef213f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:33:c5:79:40:4f:38:0a:90:d7:64:c4:f4: 64:44:5e:5e:09:12:8f:60:7c:76:85:55:85:74:e4: af:9d:71:b2:60:a2:59:46:84:e2:74:35:68:3b:2e: 64:1e:2e:69:71:39:46:61:3e:35:e0:00:56:bd:9e: ba:97:81:79:92:ec:22:5d:ee:f9:fd:45:9d:87:de: 76:6c:53:e9:66:49:20:dc:09:f2:0d:7a:0f:44:ce: 87:84:60:63:83:ef:e9:44:3d:c8:29:da:6a:c9:43: 74:02:6f:8b:91:de:32:ab:fb:2e:19:11:42:04:ac: fc:64:30:2c:38:02:78:0b:71:4b:57:72:36:d5:a3: 03:57:35:0e:4b:5e:ca:42:fc:a5:e8:3e:80:c2:1a: 21:22:38:b4:6a:a8:5c:dc:e8:16:43:a9:f1:f1:63: 46:19:a8:56:04:6c:95:89:28:65:76:9b:0c:28:fb: b9:82:0a:6b:96:23:65:d9:f3:fb:65:a6:40:17:53: 52:2a:7e:21:dd:3a:ef:d8:74:d7:b3:6e:07:ec:73: 82:e8:0e:ae:79:c3:27:c1:ab:d7:90:43:12:ea:01: 5d:86:1b:99:fb:22:f4:e7:05:e1:b7:da:34:28:50: 2b:d5:db:e8:df:b0:d1:d4:94:e7:46:cb:81:0c:d3: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:88:5F:05:AE:37:AF:9E:19:8A:B9:1B:E2:D8:51:59:EF:21:3F X509v3 Authority Key Identifier: keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.40.0/21 Signature Algorithm: sha256WithRSAEncryption 14:bf:4e:0f:66:e5:0b:fa:a9:47:07:f0:96:ff:3f:71:c3:f9: a0:14:c3:60:10:24:91:8e:16:45:79:12:02:43:4a:f6:bb:66: ba:17:93:e8:ae:6c:c0:be:6d:66:aa:aa:9d:ac:c3:b3:fb:cf: 40:1a:70:68:f3:80:da:5c:1e:07:bf:73:7b:ff:54:db:c8:88: 5d:a8:b6:f1:cc:4b:2c:b1:4f:eb:81:48:2b:84:62:c6:cc:5b: cc:11:a2:01:83:18:10:81:1f:b0:cb:9a:91:6e:6f:d9:f0:17: 80:c6:e9:ec:60:fd:31:a7:63:e3:d2:cd:0c:f5:79:90:b6:43: f4:09:d1:12:e9:89:84:2d:4e:ed:17:7c:a5:1c:5f:54:40:3d: 9d:e4:96:c9:ed:0c:56:00:5c:17:ee:d3:c9:f1:d1:a7:64:75: 87:a7:4c:eb:0e:55:fc:39:36:7c:9f:00:30:62:c2:16:ff:59: 81:ff:aa:34:7c:1b:00:07:77:f6:2b:c3:36:94:5e:4b:16:06: 23:50:21:b0:20:2b:5f:c1:09:78:99:08:40:af:a4:04:d8:d4: f0:c2:bb:0b:02:e8:b3:03:0c:e7:2f:86:15:56:8e:fa:47:f9: 94:ad:53:dd:82:9b:f0:67:30:e5:08:b1:a9:88:16:0e:bd:de: 61:fa:4e:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxvMPVt+iDcv9Km+mNbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFkNDQ5YzdhZTRiZDIyYzZhZWU1ZmJkYzA4MjMwNDJm ZmY4ZmMwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDkyODg1ZjA1YWUzN2FmOWUxOThhYjkxYmUyZDg1MTU5ZWYyMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj0zxXlATzgKkNdkxPRkRF5eCRKP YHx2hVWFdOSvnXGyYKJZRoTidDVoOy5kHi5pcTlGYT414ABWvZ66l4F5kuwiXe75 /UWdh952bFPpZkkg3AnyDXoPRM6HhGBjg+/pRD3IKdpqyUN0Am+Lkd4yq/suGRFC BKz8ZDAsOAJ4C3FLV3I21aMDVzUOS17KQvyl6D6AwhohIji0aqhc3OgWQ6nx8WNG GahWBGyViShldpsMKPu5ggprliNl2fP7ZaZAF1NSKn4h3Trv2HTXs24H7HOC6A6u ecMnwavXkEMS6gFdhhuZ+yL05wXht9o0KFAr1dvo37DR1JTnRsuBDNMM7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCSiF8FrjevnhmKuRvi2FFZ7yE/MB8GA1UdIwQY MBaAFLFq1EnHrkvSLGruX73AgjBC//j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTIt MmI3ODgzMTIxNTFkLzEvSUpLSVh3V3VONi1lR1lxNUctTFlVVm52SVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTItMmI3ODgzMTIxNTFk LzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX4IoMA0G CSqGSIb3DQEBCwUAA4IBAQAUv04PZuUL+qlHB/CW/z9xw/mgFMNgECSRjhZFeRIC Q0r2u2a6F5PormzAvm1mqqqdrMOz+89AGnBo84DaXB4Hv3N7/1TbyIhdqLbxzEss sU/rgUgrhGLGzFvMEaIBgxgQgR+wy5qRbm/Z8BeAxunsYP0xp2Pj0s0M9XmQtkP0 CdES6YmELU7tF3ylHF9UQD2d5JbJ7QxWAFwX7tPJ8dGnZHWHp0zrDlX8OTZ8nwAw YsIW/1mB/6o0fBsAB3f2K8M2lF5LFgYjUCGwICtfwQl4mQhAr6QE2NTwwrsLAuiz AwznL4YVVo76R/mUrVPdgpvwZzDlCLGpiBYOvd5h+k6+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:58 2026 by rpki-client