This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/95LH8iT08gOP0LyS5iIMvY0i6Y4.roa File: 95LH8iT08gOP0LyS5iIMvY0i6Y4.roa (raw, json) Hash identifier: rvbh2lQJxuy6pklt/YLcgLGAVc7KO25xNNDsARVJ8hc= Subject key identifier: F7:92:C7:F2:24:F4:F2:03:8F:D0:BC:92:E6:22:0C:BD:8D:22:E9:8E Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Certificate serial: 019B7F1594597DD2DE65FB5981BB99C8EB38 Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/95LH8iT08gOP0LyS5iIMvY0i6Y4.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198330 IP address blocks: 91.223.240.0/24 maxlen: 24 185.74.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:94:59:7d:d2:de:65:fb:59:81:bb:99:c8:eb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f792c7f224f4f2038fd0bc92e6220cbd8d22e98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:38:aa:f2:1f:91:a0:ae:4e:1f:57:ae:6e: 23:98:e5:c3:eb:a4:68:fd:07:15:31:bc:a3:f1:33: 1c:47:c0:e1:c7:4b:d0:0e:1e:c3:78:53:8c:85:8d: cb:3d:60:e7:2a:1b:3d:c8:22:13:74:80:6a:ed:94: a8:3d:f2:d5:d5:fc:aa:c2:4a:f5:a6:45:c8:84:0f: e1:69:97:42:94:c9:0c:bc:7d:f6:1e:50:8c:fc:80: 8e:54:12:ea:e7:e3:05:4e:be:a3:a4:5d:47:91:02: 54:4c:a2:92:87:79:a4:d4:21:f6:9f:1f:a0:50:7d: 6c:4d:6a:b4:42:59:7e:2e:34:bc:b7:bb:0c:9f:d8: c9:19:44:86:88:90:16:6f:89:6c:e8:3b:00:35:a2: 22:ed:a7:24:d6:8c:3b:22:7b:8d:4c:5b:4d:08:25: 07:b1:33:86:4a:c1:4c:86:dd:6a:d3:c8:1e:9b:ba: 0b:60:fd:d7:6f:5e:cd:65:ef:ca:25:2f:3c:ef:20: 6b:cd:1e:9f:18:e1:78:51:d0:fc:f7:42:bb:61:0f: 4c:1a:5f:20:9c:f4:08:78:98:81:bd:c1:42:7f:8d: 0e:48:f7:92:68:b0:09:c3:00:f8:6b:83:15:08:98: a9:13:5a:c8:5a:9e:d6:bc:d6:ca:08:49:25:f0:c7: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:C7:F2:24:F4:F2:03:8F:D0:BC:92:E6:22:0C:BD:8D:22:E9:8E X509v3 Authority Key Identifier: keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/95LH8iT08gOP0LyS5iIMvY0i6Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.240.0/24 185.74.200.0/22 Signature Algorithm: sha256WithRSAEncryption 78:d8:94:b8:c0:86:68:5d:af:f7:5e:b9:68:e5:05:47:ac:ae: f9:59:88:ef:76:4d:ac:1a:34:5f:1b:fa:9e:88:6a:74:09:b2: 04:88:bd:02:81:dc:d5:15:d6:52:15:a5:f1:49:ca:90:30:6e: 78:f2:af:94:83:be:5e:fd:3c:0e:c6:23:5e:0c:61:66:41:b4: eb:b2:8a:22:e7:b5:1a:8a:f4:40:9e:67:41:d7:1e:f7:d6:3d: 2e:92:2b:d5:4c:9d:f0:01:37:b2:be:9b:ed:e4:6c:07:e0:a4: 55:55:71:f1:15:d4:05:17:d6:fe:bd:e9:0a:7d:33:5d:6f:f5: 00:5d:4e:17:d7:b6:0e:c0:d7:be:72:b2:1e:b4:3d:2a:ee:72: 55:e4:c2:6c:39:b2:8a:e8:c9:28:16:94:dd:11:d5:79:9d:03: 75:23:a2:9a:8e:d7:26:ac:1f:6a:69:74:12:14:24:e6:67:f2: 41:78:e6:29:b9:91:22:4e:00:e9:cb:e4:0e:56:98:07:33:01: 31:9b:52:8e:ff:c4:f9:d9:80:b1:21:6d:0f:e9:f6:33:e3:4f: 79:17:a7:cb:f9:15:db:97:bc:25:45:39:4f:b7:cd:49:85:a6: 31:cb:5b:d9:d7:da:79:49:b1:35:78:39:36:82:a1:4a:b3:7f: 92:1b:15:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZRZfdLeZftZgbuZyOs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2 MDhlMmIwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzkyYzdmMjI0ZjRmMjAzOGZkMGJjOTJlNjIyMGNiZDhkMjJlOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyec4qvIfkaCuTh9Xrm4jmOXD66Ro /QcVMbyj8TMcR8Dhx0vQDh7DeFOMhY3LPWDnKhs9yCITdIBq7ZSoPfLV1fyqwkr1 pkXIhA/haZdClMkMvH32HlCM/ICOVBLq5+MFTr6jpF1HkQJUTKKSh3mk1CH2nx+g UH1sTWq0Qll+LjS8t7sMn9jJGUSGiJAWb4ls6DsANaIi7ack1ow7InuNTFtNCCUH sTOGSsFMht1q08gem7oLYP3Xb17NZe/KJS887yBrzR6fGOF4UdD890K7YQ9MGl8g nPQIeJiBvcFCf40OSPeSaLAJwwD4a4MVCJipE1rIWp7WvNbKCEkl8McWKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPeSx/Ik9PIDj9C8kuYiDL2NIumOMB8GA1UdIwQY MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct N2RkNTdlNzM2NzQ2LzEvOTVMSDhpVDA4Z09QMEx5UzVpSU12WTBpNlk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2 LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9/wAwQC uUrIMA0GCSqGSIb3DQEBCwUAA4IBAQB42JS4wIZoXa/3Xrlo5QVHrK75WYjvdk2s GjRfG/qeiGp0CbIEiL0CgdzVFdZSFaXxScqQMG548q+Ug75e/TwOxiNeDGFmQbTr sooi57UaivRAnmdB1x731j0ukivVTJ3wATeyvpvt5GwH4KRVVXHxFdQFF9b+vekK fTNdb/UAXU4X17YOwNe+crIetD0q7nJV5MJsObKK6MkoFpTdEdV5nQN1I6Kajtcm rB9qaXQSFCTmZ/JBeOYpuZEiTgDpy+QOVpgHMwExm1KO/8T52YCxIW0P6fYz4095 F6fL+RXbl7wlRTlPt81JhaYxy1vZ19p5SbE1eDk2gqFKs3+SGxXF -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:46 2026 by rpki-client