This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/3JYzRFMomy3SIlmvc60lTNqVY2w.roa File: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (raw, json) Hash identifier: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E= Subject key identifier: DC:96:33:44:53:28:9B:2D:D2:22:59:AF:73:AD:25:4C:DA:95:63:6C Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C67CAB9DC2687BF9F3CBC28F215B93 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/3JYzRFMomy3SIlmvc60lTNqVY2w.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 195.95.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:ab:9d:c2:68:7b:f9:f3:cb:c2:8f:21:5b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc96334453289b2dd22259af73ad254cda95636c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:a0:52:2b:98:9f:b0:d9:3c:1b:b4:02:9d: b7:65:fc:77:7f:d1:8a:b1:4a:dc:09:3e:b2:f6:0d: ec:28:d3:ad:ab:19:51:f5:39:34:28:18:1e:3b:3b: 37:2e:9f:e3:bd:5d:94:3f:3d:d9:24:bc:09:d3:dc: a3:2e:58:9f:7b:b9:22:ec:ab:0b:8d:e1:fb:b1:9b: 06:15:33:d1:a6:b0:d3:c5:10:07:4b:a9:ef:88:b3: da:da:54:6a:fd:d4:b9:9e:6b:d0:fe:2d:33:e2:94: 3e:c7:71:13:2b:63:34:31:88:c9:28:b7:4d:a8:46: fb:57:23:e2:2c:bc:8e:7c:21:78:8c:1a:f1:90:db: 01:40:f9:0b:ce:db:25:df:59:0e:3f:e7:bf:bc:88: 9a:78:06:37:6e:4b:aa:9b:93:e7:61:73:52:0a:86: 5d:e6:da:8c:c7:a8:18:72:b4:d4:d6:d2:78:32:59: 0a:08:50:93:e7:34:87:27:d7:f0:31:fd:01:74:61: 12:b5:47:76:fd:df:19:0f:15:05:b5:60:eb:a2:b9: f0:1e:69:98:cd:21:d3:bc:33:54:7c:23:4d:e1:f6: 90:7a:60:b0:3f:5a:88:cc:46:07:f4:07:a3:dc:18: aa:56:d8:c1:da:b5:15:b5:e2:ae:26:0c:f4:d7:c2: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:33:44:53:28:9B:2D:D2:22:59:AF:73:AD:25:4C:DA:95:63:6C X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/3JYzRFMomy3SIlmvc60lTNqVY2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.201.0/24 Signature Algorithm: sha256WithRSAEncryption 04:0d:0f:a6:76:e3:d0:f0:b7:54:55:5e:74:5e:be:00:14:be: a8:2c:e0:f2:19:b2:4d:e5:fb:07:b4:3d:43:7e:77:85:11:aa: 5a:cf:96:28:00:6e:20:2f:8d:be:70:65:72:6e:f0:f3:ef:7c: 2d:7f:fa:7b:56:24:71:57:5e:95:e6:19:66:30:34:3d:b6:f1: 5a:d7:72:96:1c:87:14:64:3b:89:43:1c:4e:7c:3d:53:11:14: c7:50:42:e2:72:f4:79:0b:ad:25:cb:ef:93:7b:2e:81:53:e6: 0e:c7:29:4e:8b:48:80:1a:58:66:1c:dd:75:bc:85:f4:49:6b: a3:6e:5f:11:40:a5:24:b7:a2:9e:40:32:06:b8:11:aa:18:ef: e5:17:c2:c5:2e:93:91:4e:a3:40:9f:08:54:e2:fe:53:7e:49: 5d:9b:12:9f:e4:a1:ae:a8:12:8a:a6:f2:54:d2:e8:5b:26:f5: e5:53:a6:45:e2:4b:5d:92:b6:c1:6a:21:32:40:31:9b:69:0f: da:d4:1d:d1:f0:e5:e9:ce:da:21:61:9c:ad:e8:b0:18:e7:a2: dd:86:be:9b:e2:f8:70:3e:a2:97:2c:c7:2d:63:85:7f:56:b4: 1a:fb:69:8d:45:fe:c6:e1:88:91:a0:82:1f:23:12:5d:4a:24: e0:74:77:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnyrncJoe/nzy8KPIVuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzk2MzM0NDUzMjg5YjJkZDIyMjU5YWY3M2FkMjU0Y2RhOTU2MzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw52gUiuYn7DZPBu0Ap23Zfx3f9GK sUrcCT6y9g3sKNOtqxlR9Tk0KBgeOzs3Lp/jvV2UPz3ZJLwJ09yjLlife7ki7KsL jeH7sZsGFTPRprDTxRAHS6nviLPa2lRq/dS5nmvQ/i0z4pQ+x3ETK2M0MYjJKLdN qEb7VyPiLLyOfCF4jBrxkNsBQPkLztsl31kOP+e/vIiaeAY3bkuqm5PnYXNSCoZd 5tqMx6gYcrTU1tJ4MlkKCFCT5zSHJ9fwMf0BdGEStUd2/d8ZDxUFtWDrornwHmmY zSHTvDNUfCNN4faQemCwP1qIzEYH9Aej3BiqVtjB2rUVteKuJgz018IIcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyWM0RTKJst0iJZr3OtJUzalWNsMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvM0pZelJGTW9teTNTSWxtdmM2MGxUTnFWWTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/JMA0G CSqGSIb3DQEBCwUAA4IBAQAEDQ+mduPQ8LdUVV50Xr4AFL6oLODyGbJN5fsHtD1D fneFEapaz5YoAG4gL42+cGVybvDz73wtf/p7ViRxV16V5hlmMDQ9tvFa13KWHIcU ZDuJQxxOfD1TERTHUELicvR5C60ly++Tey6BU+YOxylOi0iAGlhmHN11vIX0SWuj bl8RQKUkt6KeQDIGuBGqGO/lF8LFLpORTqNAnwhU4v5TfkldmxKf5KGuqBKKpvJU 0uhbJvXlU6ZF4ktdkrbBaiEyQDGbaQ/a1B3R8OXpztohYZyt6LAY56Ldhr6b4vhw PqKXLMctY4V/VrQa+2mNRf7G4YiRoIIfIxJdSiTgdHc/ -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:47 2026 by rpki-client