This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/inCR3eFEyTL7jghyDh1WvEPXeKA.roa File: inCR3eFEyTL7jghyDh1WvEPXeKA.roa (raw, json) Hash identifier: ejthjyHSduvput3CocjdA0Eo0asNaU9wCge8BSjS0K0= Subject key identifier: 8A:70:91:DD:E1:44:C9:32:FB:8E:08:72:0E:1D:56:BC:43:D7:78:A0 Certificate issuer: /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478 Certificate serial: 019B7C8084FD9FB9EA0E4C7ECC9F1FDC941B Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/inCR3eFEyTL7jghyDh1WvEPXeKA.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200796 IP address blocks: 185.95.152.0/22 maxlen: 22 185.95.152.0/23 maxlen: 23 185.95.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:84:fd:9f:b9:ea:0e:4c:7e:cc:9f:1f:dc:94:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a7091dde144c932fb8e08720e1d56bc43d778a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:7b:97:01:21:de:f2:05:80:eb:31:26:94: e5:67:9a:2b:97:41:c1:37:da:8a:d7:5a:3e:37:c3: 33:12:cb:e4:d8:b1:b0:f3:c5:d0:48:85:9d:e5:53: 12:7a:96:42:ee:47:77:3f:2f:cd:52:b6:49:a6:cc: 01:29:ef:b5:89:a6:d0:f4:09:c2:e3:0f:f3:b1:ba: a4:3a:ac:de:13:e8:8e:78:89:58:39:b6:b4:53:ea: 28:94:c9:fd:05:c5:a1:64:c1:b1:dd:55:fd:1e:5c: 19:e7:a1:c9:87:f2:3a:8c:8e:f5:0b:18:a6:19:47: 04:40:1e:a7:c1:41:50:bc:b0:7f:9e:37:f0:dc:c1: a7:14:7d:76:cc:8e:4f:b0:d0:35:fe:8c:28:9b:c7: 16:b1:c6:5e:d0:b0:c5:2b:fd:bb:ae:95:c1:43:ae: 44:65:99:3c:6f:48:2f:38:89:1d:3b:eb:a6:28:55: db:02:e9:f2:d1:a1:d5:a9:d2:9e:91:8a:1b:91:41: 41:12:58:3e:a8:da:0f:7d:5b:95:e9:2a:ef:99:33: 44:9b:68:dd:66:5d:1c:ab:98:ce:15:42:6d:49:af: 3f:49:1e:4a:2c:8c:f5:a7:72:be:72:2c:99:77:65: a1:d7:53:2d:7b:60:a4:79:6e:03:af:44:34:b8:78: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:70:91:DD:E1:44:C9:32:FB:8E:08:72:0E:1D:56:BC:43:D7:78:A0 X509v3 Authority Key Identifier: keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/inCR3eFEyTL7jghyDh1WvEPXeKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.152.0/22 Signature Algorithm: sha256WithRSAEncryption 14:98:36:1a:03:4a:2f:6f:1f:aa:c8:5f:e4:16:31:df:ee:5f: 6a:ce:b4:8e:6f:b1:88:b9:1c:34:c0:cd:99:2b:f0:9f:9c:1c: e7:73:91:3e:34:6c:86:f8:e9:f7:21:c9:5a:e1:12:0f:0b:ca: ca:a8:ef:27:f7:6c:93:89:d4:b1:b5:1e:e9:83:8f:94:0a:d8: 37:54:39:df:79:b3:84:e1:f9:2c:88:ca:60:da:95:3e:70:67: 6f:86:6f:09:cf:a7:7b:ca:b9:61:21:6e:e5:6b:7f:27:a0:15: 2a:1c:12:6c:ec:37:fc:fa:25:5d:c7:00:d2:e7:97:61:2c:78: 59:5d:60:eb:e0:75:b0:9e:2b:99:ea:d1:40:5b:a6:33:f9:1f: 25:2f:51:d4:7c:b0:82:5d:72:43:5f:ff:34:3b:45:b3:c9:cc: e7:b7:77:cd:db:8e:97:b0:ee:3d:e0:43:68:4d:a6:4a:14:36: 67:22:2d:ad:31:62:cf:f8:a6:d2:45:ad:4d:6e:03:46:9d:36: 5b:86:74:82:b2:c1:a9:06:61:a3:30:09:e2:83:52:41:9b:69: 7e:d2:e6:b9:bc:e5:73:c7:b9:4a:8f:3c:eb:0b:89:7a:b1:4a: 59:8f:36:c3:00:b3:28:bd:12:4d:41:67:d9:8d:5a:d3:92:98: 6b:5f:f4:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIT9n7nqDkx+zJ8f3JQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmIxYzZlNWU4ODY1ODhjZDQ3NjE2YmFjYmQ3Y2NiNjRh YmY0NzgwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTcwOTFkZGUxNDRjOTMyZmI4ZTA4NzIwZTFkNTZiYzQzZDc3OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNt7lwEh3vIFgOsxJpTlZ5orl0HB N9qK11o+N8MzEsvk2LGw88XQSIWd5VMSepZC7kd3Py/NUrZJpswBKe+1iabQ9AnC 4w/zsbqkOqzeE+iOeIlYOba0U+oolMn9BcWhZMGx3VX9HlwZ56HJh/I6jI71Cxim GUcEQB6nwUFQvLB/njfw3MGnFH12zI5PsNA1/owom8cWscZe0LDFK/27rpXBQ65E ZZk8b0gvOIkdO+umKFXbAuny0aHVqdKekYobkUFBElg+qNoPfVuV6SrvmTNEm2jd Zl0cq5jOFUJtSa8/SR5KLIz1p3K+ciyZd2Wh11Mte2CkeW4Dr0Q0uHh59wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpwkd3hRMky+44Icg4dVrxD13igMB8GA1UdIwQY MBaAFGK7HG5eiGWIzUdha6y9fMtkq/R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYt N2M0NDViM2Y5ZmMzLzEvaW5DUjNlRkV5VEw3amdoeURoMVd2RVBYZUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYtN2M0NDViM2Y5ZmMz LzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV+YMA0G CSqGSIb3DQEBCwUAA4IBAQAUmDYaA0ovbx+qyF/kFjHf7l9qzrSOb7GIuRw0wM2Z K/CfnBznc5E+NGyG+On3Icla4RIPC8rKqO8n92yTidSxtR7pg4+UCtg3VDnfebOE 4fksiMpg2pU+cGdvhm8Jz6d7yrlhIW7la38noBUqHBJs7Df8+iVdxwDS55dhLHhZ XWDr4HWwniuZ6tFAW6Yz+R8lL1HUfLCCXXJDX/80O0Wzycznt3fN246XsO494ENo TaZKFDZnIi2tMWLP+KbSRa1NbgNGnTZbhnSCssGpBmGjMAnig1JBm2l+0ua5vOVz x7lKjzzrC4l6sUpZjzbDALMovRJNQWfZjVrTkphrX/Tw -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:20 2026 by rpki-client