This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/59JIOcrvwaeo-sYFo7t-MHws0gw.roa File: 59JIOcrvwaeo-sYFo7t-MHws0gw.roa (raw, json) Hash identifier: 4M2J02zr2QMxD8HQmUQji1N30RyT0kcqU00uheMc840= Subject key identifier: E7:D2:48:39:CA:EF:C1:A7:A8:FA:C6:05:A3:BB:7E:30:7C:2C:D2:0C Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384 Certificate serial: 019B7C80464DF5FA74E7A38FA0017C25A4AE Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/59JIOcrvwaeo-sYFo7t-MHws0gw.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43019 IP address blocks: 95.214.212.0/24 maxlen: 24 95.214.213.0/24 maxlen: 24 95.214.214.0/24 maxlen: 24 95.214.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:46:4d:f5:fa:74:e7:a3:8f:a0:01:7c:25:a4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7d24839caefc1a7a8fac605a3bb7e307c2cd20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:e4:c4:61:8b:85:37:e9:f3:7d:8b:ea:b0: 60:31:e1:b9:8a:a3:a4:3e:48:42:11:03:4d:8d:a5: a4:07:4d:ec:c4:6a:87:e1:93:dd:1c:ec:d4:e1:c9: 93:74:32:53:11:0a:a8:0a:ff:c7:d4:f3:53:3f:9f: 4d:7e:2d:90:b1:3d:29:a5:65:45:20:8a:32:55:c4: 12:e8:3b:a9:e5:fe:f8:90:df:47:91:aa:ca:e4:3c: a5:51:08:75:31:30:a9:cf:c0:e8:44:5a:8a:67:ba: 07:f7:68:6c:dd:7a:47:f7:8d:73:47:1f:6b:f2:e8: 20:56:75:a0:ef:5c:2c:70:07:5e:7b:a8:20:c5:11: 4f:ac:f5:e8:c0:e4:4d:ef:c9:31:d6:ea:5e:9c:5a: a2:d5:ec:26:99:5b:5a:9a:84:05:82:cb:da:50:86: 14:38:eb:90:5e:21:f0:18:4f:29:60:ee:51:68:1e: 78:25:aa:dd:36:3b:f9:03:e8:ce:50:b3:f8:1a:65: 98:5f:ae:4a:94:0f:bb:c6:cd:d1:7d:7f:e4:0e:34: 81:34:25:60:4f:1c:24:04:32:9d:81:05:70:57:5f: 96:9f:9a:e9:35:7c:9c:74:ad:c1:42:86:9c:cc:92: 26:7c:c5:a8:90:db:d8:f7:b5:8f:bf:00:51:0f:d7: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D2:48:39:CA:EF:C1:A7:A8:FA:C6:05:A3:BB:7E:30:7C:2C:D2:0C X509v3 Authority Key Identifier: keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/59JIOcrvwaeo-sYFo7t-MHws0gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.212.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:53:9a:14:53:0e:bd:11:00:72:8b:19:5d:4a:e2:3b:a0:06: 8d:f2:55:f1:10:0c:3e:88:54:62:37:72:9b:1c:e0:66:a2:c2: 12:39:95:57:31:49:a6:35:fc:34:1f:d5:b7:8e:1f:c3:9a:27: 22:30:18:83:b4:fa:2f:b1:05:9c:e1:98:1b:09:85:00:d5:33: f0:0c:5a:6f:ed:f6:10:10:f6:76:be:a6:b9:68:cb:87:dd:fe: 83:e9:3e:f4:57:08:5a:16:fc:5d:99:85:b7:d7:f9:27:d1:f4: da:75:6e:f5:9d:6d:da:27:be:b8:84:4d:8b:c3:39:a6:26:08: 83:1b:a0:e8:ed:90:7e:d6:b3:93:71:0c:3f:f3:d3:d8:d8:5e: 88:a4:31:f1:8e:cb:18:61:28:00:2b:36:3b:b9:e2:73:f2:15: c0:c5:b6:f6:0a:85:60:2b:51:c1:79:95:c6:cf:5d:35:f5:be: bb:56:65:6c:a9:c3:7b:8e:0f:b2:32:f6:94:c1:28:8c:83:04: ec:41:3d:a3:e4:ed:1c:c2:e9:3e:37:65:82:d5:e8:dd:22:d1: 23:5f:87:1b:65:af:c2:65:7e:cc:c6:f2:48:15:37:5b:31:ab: 2d:5f:6b:97:18:1b:9c:bb:a4:97:7b:ca:a2:a2:dc:c7:51:b5: 72:d7:f2:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEZN9fp056OPoAF8JaSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy ZGYzODQwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2QyNDgzOWNhZWZjMWE3YThmYWM2MDVhM2JiN2UzMDdjMmNkMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+PkxGGLhTfp832L6rBgMeG5iqOk PkhCEQNNjaWkB03sxGqH4ZPdHOzU4cmTdDJTEQqoCv/H1PNTP59Nfi2QsT0ppWVF IIoyVcQS6Dup5f74kN9HkarK5DylUQh1MTCpz8DoRFqKZ7oH92hs3XpH941zRx9r 8uggVnWg71wscAdee6ggxRFPrPXowORN78kx1upenFqi1ewmmVtamoQFgsvaUIYU OOuQXiHwGE8pYO5RaB54JardNjv5A+jOULP4GmWYX65KlA+7xs3RfX/kDjSBNCVg TxwkBDKdgQVwV1+Wn5rpNXycdK3BQoaczJImfMWokNvY97WPvwBRD9d0kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOfSSDnK78GnqPrGBaO7fjB8LNIMMB8GA1UdIwQY MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt ODlmZjA2Zjc5NjM1LzEvNTlKSU9jcnZ3YWVvLXNZRm83dC1NSHdzMGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1 LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9bUMA0G CSqGSIb3DQEBCwUAA4IBAQCfU5oUUw69EQByixldSuI7oAaN8lXxEAw+iFRiN3Kb HOBmosISOZVXMUmmNfw0H9W3jh/DmiciMBiDtPovsQWc4ZgbCYUA1TPwDFpv7fYQ EPZ2vqa5aMuH3f6D6T70VwhaFvxdmYW31/kn0fTadW71nW3aJ764hE2LwzmmJgiD G6Do7ZB+1rOTcQw/89PY2F6IpDHxjssYYSgAKzY7ueJz8hXAxbb2CoVgK1HBeZXG z1019b67VmVsqcN7jg+yMvaUwSiMgwTsQT2j5O0cwuk+N2WC1ejdItEjX4cbZa/C ZX7MxvJIFTdbMastX2uXGBucu6SXe8qiotzHUbVy1/KC -----END CERTIFICATE-----Generated at Wed Jan 21 19:31:52 2026 by rpki-client