This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/n9dePE-8doRmgAcLb-V1GxACf1A.roa File: n9dePE-8doRmgAcLb-V1GxACf1A.roa (raw, json) Hash identifier: ADESDsbFQ5ErCKCjAI0XJzAPyEqk8f5eIkgXjjScfiw= Subject key identifier: 9F:D7:5E:3C:4F:BC:76:84:66:80:07:0B:6F:E5:75:1B:10:02:7F:50 Certificate issuer: /CN=763e5f06a0dfb616220fb561ec014f14f96aa8da Certificate serial: 019B7CEE1921C39666B39F520788D102DE84 Authority key identifier: 76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/n9dePE-8doRmgAcLb-V1GxACf1A.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201514 IP address blocks: 95.130.4.0/22 maxlen: 22 95.130.4.0/23 maxlen: 23 95.130.4.0/24 maxlen: 24 95.130.5.0/24 maxlen: 24 95.130.6.0/23 maxlen: 23 95.130.6.0/24 maxlen: 24 95.130.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:19:21:c3:96:66:b3:9f:52:07:88:d1:02:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=763e5f06a0dfb616220fb561ec014f14f96aa8da Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fd75e3c4fbc76846680070b6fe5751b10027f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:f5:a7:29:2b:b6:e0:c6:f1:d8:d4:bd:12: c6:9f:9e:1d:33:05:a1:dd:e2:25:c4:06:cb:3f:00: c2:2c:10:2b:50:fc:8c:d3:fa:5f:bc:5f:be:5f:9f: 32:5f:31:7c:06:52:ad:02:88:b8:c6:7d:18:2d:76: 21:9d:23:ce:a7:fd:ee:60:54:95:17:9c:7b:d5:9d: c8:9f:04:99:97:be:8d:d8:0e:2b:13:6d:ac:2e:4a: 25:22:db:45:b6:bc:74:44:b4:12:8f:fb:75:1b:e9: 11:48:49:b5:f4:17:72:dc:27:1e:14:95:d5:25:86: b9:70:6d:8f:e9:15:c1:b7:1d:89:56:80:5b:b3:80: be:71:af:76:6c:94:9b:03:0c:fa:70:df:89:35:a4: 16:c7:ae:6d:48:bc:10:ca:78:f5:f1:86:87:6f:a1: f8:80:4a:df:97:37:53:ce:19:cb:e8:9b:d3:a7:89: e5:2f:bc:0e:e3:39:fc:d7:73:f7:c9:75:0e:4e:c5: 5f:c0:cf:1b:96:74:60:c1:70:28:9f:04:2a:e5:ad: cd:2b:c3:2b:f8:a1:92:e9:88:cd:2b:82:5e:72:c1: d0:1d:71:ca:e8:df:f1:70:37:09:e8:96:39:b1:cb: 80:ef:5e:6b:cf:86:47:be:25:71:bb:7d:0c:f1:8d: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D7:5E:3C:4F:BC:76:84:66:80:07:0B:6F:E5:75:1B:10:02:7F:50 X509v3 Authority Key Identifier: keyid:76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/n9dePE-8doRmgAcLb-V1GxACf1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.4.0/22 Signature Algorithm: sha256WithRSAEncryption 48:c3:75:00:5b:57:a5:7a:3d:89:06:b1:b7:75:73:79:92:88: 38:23:75:62:8a:bd:15:70:1d:88:f2:80:87:4e:d3:e2:21:5a: 16:90:51:05:f7:02:47:ae:83:2a:86:90:7c:cb:da:50:90:64: 34:17:2f:54:98:9c:af:e7:5e:cf:a8:bf:5b:cc:76:6a:e5:ca: 99:89:f2:73:f7:e2:ed:22:38:0b:33:53:76:f0:11:2c:20:80: d8:65:8b:90:50:6b:5a:43:4c:af:10:c0:00:19:60:67:ee:64: 4c:c8:73:2c:74:8d:33:1f:bb:a0:13:4d:83:fd:36:a1:57:bc: f0:ee:c4:ca:11:e2:bb:50:8f:46:42:e0:03:d5:08:53:31:74: 93:2b:0c:bd:3c:cc:40:4c:36:52:ca:7d:1f:6e:62:20:2b:ba: 29:2d:28:72:2f:e8:a6:ff:66:06:e6:8e:ca:a0:35:2e:dc:9d: 43:aa:b0:ae:c9:1f:ab:bf:8c:d6:06:6f:2f:31:14:ca:b0:cb: 28:ba:a9:a0:a0:77:33:0f:5c:c4:bf:d2:e5:d5:25:ac:47:40: 63:72:9a:ca:f5:f0:7c:28:e2:cb:b4:f7:e6:fc:32:79:b7:6c: 9b:43:15:7a:d9:7e:f0:ff:e2:75:7c:3c:80:0d:d5:bb:73:10: c9:65:02:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87hkhw5Zms59SB4jRAt6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2M2U1ZjA2YTBkZmI2MTYyMjBmYjU2MWVjMDE0ZjE0Zjk2 YWE4ZGEwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmQ3NWUzYzRmYmM3Njg0NjY4MDA3MGI2ZmU1NzUxYjEwMDI3ZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsL1pykrtuDG8djUvRLGn54dMwWh 3eIlxAbLPwDCLBArUPyM0/pfvF++X58yXzF8BlKtAoi4xn0YLXYhnSPOp/3uYFSV F5x71Z3InwSZl76N2A4rE22sLkolIttFtrx0RLQSj/t1G+kRSEm19Bdy3CceFJXV JYa5cG2P6RXBtx2JVoBbs4C+ca92bJSbAwz6cN+JNaQWx65tSLwQynj18YaHb6H4 gErflzdTzhnL6JvTp4nlL7wO4zn813P3yXUOTsVfwM8blnRgwXAonwQq5a3NK8Mr +KGS6YjNK4JecsHQHXHK6N/xcDcJ6JY5scuA715rz4ZHviVxu30M8Y2MBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/XXjxPvHaEZoAHC2/ldRsQAn9QMB8GA1UdIwQY MBaAFHY+Xwag37YWIg+1YewBTxT5aqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGo1ZkJxRGZ0aFlpRDdWaDdBRlBGUGxxcU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81Y2EwNzktZjUzNS00OTA3LTg4MmMt MTM4MmMwMWFjYzQ4LzEvbjlkZVBFLThkb1JtZ0FjTGItVjFHeEFDZjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81Y2EwNzktZjUzNS00OTA3LTg4MmMtMTM4MmMwMWFjYzQ4 LzEvZGo1ZkJxRGZ0aFlpRDdWaDdBRlBGUGxxcU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX4IEMA0G CSqGSIb3DQEBCwUAA4IBAQBIw3UAW1elej2JBrG3dXN5kog4I3Viir0VcB2I8oCH TtPiIVoWkFEF9wJHroMqhpB8y9pQkGQ0Fy9UmJyv517PqL9bzHZq5cqZifJz9+Lt IjgLM1N28BEsIIDYZYuQUGtaQ0yvEMAAGWBn7mRMyHMsdI0zH7ugE02D/TahV7zw 7sTKEeK7UI9GQuAD1QhTMXSTKwy9PMxATDZSyn0fbmIgK7opLShyL+im/2YG5o7K oDUu3J1DqrCuyR+rv4zWBm8vMRTKsMsouqmgoHczD1zEv9Ll1SWsR0BjcprK9fB8 KOLLtPfm/DJ5t2ybQxV62X7w/+J1fDyADdW7cxDJZQJM -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:55 2026 by rpki-client