This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/X_QIXpc1D9Swl7RHSJxujli_8yk.roa File: X_QIXpc1D9Swl7RHSJxujli_8yk.roa (raw, json) Hash identifier: 18pzA1Lx0ABoYaRYkMn900C2smbYbwmxYD/sh/UcCOM= Subject key identifier: 5F:F4:08:5E:97:35:0F:D4:B0:97:B4:47:48:9C:6E:8E:58:BF:F3:29 Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa Certificate serial: 019B79ECC803A9B1340DCA75C3F41736A618 Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/X_QIXpc1D9Swl7RHSJxujli_8yk.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215326 IP address blocks: 95.87.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c8:03:a9:b1:34:0d:ca:75:c3:f4:17:36:a6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff4085e97350fd4b097b447489c6e8e58bff329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:8d:ae:ab:0d:2c:12:c6:6b:37:8d:bb:50: dd:d9:0c:7d:21:d8:67:41:6d:8e:75:8a:46:26:88: 08:23:19:d1:a6:93:f5:6f:64:5d:1d:19:d6:78:87: a9:31:91:61:29:69:dc:9d:77:d8:c1:e7:53:8c:0e: d1:df:02:fe:23:0f:a9:b1:b7:33:60:1b:91:09:94: 0c:11:cf:fe:65:6e:f0:2c:53:e4:92:8b:89:c8:87: 0a:28:fd:4d:7f:ee:54:86:b7:45:21:79:47:1b:12: 30:10:90:dc:9b:13:23:61:1e:86:75:19:51:67:1b: a3:7a:0c:b0:19:c7:35:ff:19:8e:69:08:31:97:ee: 4a:6c:31:21:ed:8c:5c:10:23:03:5a:0f:98:7d:66: 4f:c4:8d:29:76:82:06:ca:a3:9a:4f:30:2e:8a:21: 65:7b:4e:46:f3:7b:2e:8d:e7:25:c9:1d:15:03:27: 62:61:28:7a:9f:9b:62:d7:f3:a4:7b:6d:6c:a8:c9: ca:05:f1:dd:4a:80:6b:6f:85:b6:19:e6:ae:e8:3e: b7:1d:ff:21:6b:62:36:72:6a:2a:6f:a6:93:ad:e4: 7e:08:34:3c:31:55:47:30:e2:da:c9:c6:e9:46:cb: ee:cc:15:29:86:0a:f0:00:fc:66:d3:20:ae:98:13: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:08:5E:97:35:0F:D4:B0:97:B4:47:48:9C:6E:8E:58:BF:F3:29 X509v3 Authority Key Identifier: keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/X_QIXpc1D9Swl7RHSJxujli_8yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.87.90.0/23 Signature Algorithm: sha256WithRSAEncryption 11:5e:06:db:84:8d:f5:9a:b8:60:03:08:8a:30:80:bc:c4:1a: cb:1f:1b:96:68:74:f8:30:b6:c6:83:b0:9d:08:3a:cb:c0:d8: df:95:c6:1b:41:83:00:b8:5e:85:34:f3:6c:4f:f4:05:96:59: d1:27:70:99:8c:a9:92:62:cb:c2:5b:91:53:4f:91:a8:e2:99: a6:fa:f0:94:6d:5b:25:80:4d:5a:a5:13:a3:d0:88:b8:5e:d3: 8a:f4:4a:9f:95:04:1d:53:ca:b7:29:b9:88:d4:94:c1:e1:82: 5b:66:9b:e1:88:1b:2f:81:c0:a3:54:40:3d:f6:76:b0:60:5d: 95:7a:c7:fc:77:f3:f8:86:aa:02:e8:1a:cd:23:a5:e5:68:85: 0f:67:6b:c6:da:b6:06:1b:24:f4:d9:d9:cf:d8:21:e5:2e:c5: cd:48:c5:70:bb:8a:fe:be:44:9c:cf:d7:80:53:79:34:06:99: 52:22:17:7e:68:c4:93:1c:24:4c:2d:db:1e:27:1b:19:45:f6: b6:68:cf:f7:67:a2:51:54:72:41:b4:75:a1:20:a6:0d:e2:6a: df:d9:81:51:41:d0:b0:2b:0d:30:b7:b5:93:e4:fb:b9:b7:cb: 85:5b:41:03:85:a9:3c:e2:2c:2b:e2:1e:82:4a:b2:e4:9c:27: da:52:84:27 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57MgDqbE0Dcp1w/QXNqYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMDdhZTNhNzkxOGY5MzJlYTI0Y2MxNTZiNGI2ZTliYTU1 ODFiZmEwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY0MDg1ZTk3MzUwZmQ0YjA5N2I0NDc0ODljNmU4ZTU4YmZmMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjeNrqsNLBLGazeNu1Dd2Qx9Idhn QW2OdYpGJogIIxnRppP1b2RdHRnWeIepMZFhKWncnXfYwedTjA7R3wL+Iw+psbcz YBuRCZQMEc/+ZW7wLFPkkouJyIcKKP1Nf+5UhrdFIXlHGxIwEJDcmxMjYR6GdRlR ZxujegywGcc1/xmOaQgxl+5KbDEh7YxcECMDWg+YfWZPxI0pdoIGyqOaTzAuiiFl e05G83sujeclyR0VAydiYSh6n5ti1/Oke21sqMnKBfHdSoBrb4W2Geau6D63Hf8h a2I2cmoqb6aTreR+CDQ8MVVHMOLaycbpRsvuzBUphgrwAPxm0yCumBOfWQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFF/0CF6XNQ/UsJe0R0icbo5Yv/MpMB8GA1UdIwQY MBaAFPoHrjp5GPky6iTMFWtLbpulWBv6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1nZXVPbmtZLVRMcUpNd1ZhMHR1bTZWWUdfby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYTk3ZGMwLTU2ODUtNGY2ZS05ODdm LTJhNWE2ZTJkNzk0OC8xL1hfUUlYcGMxRDlTd2w3UkhTSnh1amxpXzh5ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTUvYTk3ZGMwLTU2ODUtNGY2ZS05ODdmLTJhNWE2ZTJkNzk0 OC8xLzEtZ2V1T25rWS1UTHFKTXdWYTB0dW02VllHX28uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFfV1ow DQYJKoZIhvcNAQELBQADggEBABFeBtuEjfWauGADCIowgLzEGssfG5ZodPgwtsaD sJ0IOsvA2N+VxhtBgwC4XoU082xP9AWWWdEncJmMqZJiy8JbkVNPkajimab68JRt WyWATVqlE6PQiLhe04r0Sp+VBB1TyrcpuYjUlMHhgltmm+GIGy+BwKNUQD32drBg XZV6x/x38/iGqgLoGs0jpeVohQ9na8batgYbJPTZ2c/YIeUuxc1IxXC7iv6+RJzP 14BTeTQGmVIiF35oxJMcJEwt2x4nGxlF9rZoz/dnolFUckG0daEgpg3iat/ZgVFB 0LArDTC3tZPk+7m3y4VbQQOFqTziLCviHoJKsuScJ9pShCc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:23 2026 by rpki-client