This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa File: Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa (raw, json) Hash identifier: Da6u9ERoM1g/y/tKKfNZmlBoBL9DF5Ukejxp9AtmT+E= Subject key identifier: 02:6F:45:BB:3A:3C:78:68:99:67:BA:A6:44:67:95:CD:E2:7B:3B:C9 Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029 Certificate serial: 019B7A5B27E815C592DEF7A343E0003EF07B Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43594 IP address blocks: 95.215.124.0/22 maxlen: 22 95.215.124.0/24 maxlen: 24 95.215.125.0/24 maxlen: 24 95.215.126.0/24 maxlen: 24 95.215.127.0/24 maxlen: 24 185.184.232.0/22 maxlen: 22 185.184.232.0/24 maxlen: 24 185.184.233.0/24 maxlen: 24 185.184.234.0/24 maxlen: 24 185.184.235.0/24 maxlen: 24 2a0b:4380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:27:e8:15:c5:92:de:f7:a3:43:e0:00:3e:f0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029 Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=026f45bb3a3c78689967baa6446795cde27b3bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:0b:30:b6:9e:55:65:bc:9a:95:b9:cb:43: cd:7f:70:81:11:f3:58:c4:90:07:6f:a7:17:09:cf: af:23:ef:de:80:30:8c:5e:3d:ab:76:e1:61:3e:b4: fb:4c:05:e8:6a:65:5d:02:d7:a4:f3:aa:59:51:cf: 32:f5:39:68:55:6d:40:7b:73:73:b4:1e:04:1a:ad: 65:b3:84:aa:e7:0f:26:2e:48:43:ad:58:63:22:e0: c5:63:32:16:d0:a8:88:94:14:f9:40:b5:4a:0f:3e: a5:47:c4:33:2a:6c:b5:37:83:68:c9:8e:57:5a:f1: f9:81:be:9e:f7:82:1e:c0:69:b9:5f:cd:7a:bb:4e: fa:d6:6d:17:d5:72:2f:e1:62:13:e7:2f:84:dc:c4: 8c:b0:08:0b:e7:b7:9b:39:9d:23:9d:2a:15:e8:9b: 75:c4:d8:c6:31:e0:50:c2:7b:2e:d8:a7:b6:14:8e: 80:36:a5:6e:bb:23:72:11:f9:9c:9e:26:7e:ff:e9: 5e:5b:22:22:64:92:c6:13:8c:b1:1d:3b:78:57:39: 78:66:b9:ac:d5:94:b5:3c:dd:7b:fa:49:59:d7:dc: 98:af:79:59:0b:90:78:a9:b6:3e:02:51:43:51:e2: 16:a5:aa:15:5d:0d:80:59:47:fc:05:d9:55:a5:87: 02:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6F:45:BB:3A:3C:78:68:99:67:BA:A6:44:67:95:CD:E2:7B:3B:C9 X509v3 Authority Key Identifier: keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.124.0/22 185.184.232.0/22 IPv6: 2a0b:4380::/32 Signature Algorithm: sha256WithRSAEncryption 37:1a:4e:19:a4:ff:f2:a7:29:12:d9:15:ea:a6:14:9e:19:64: 7d:43:fb:de:33:16:14:53:d8:d5:7b:34:8d:05:3e:98:84:e8: f5:28:0c:05:fb:21:46:1f:d4:be:d3:82:4c:f7:9e:9e:f0:2a: f1:83:4d:4e:66:c5:70:48:7f:d5:4a:87:f9:47:c4:d9:68:00: 33:75:2f:9c:3b:db:b8:aa:0e:ac:05:5b:e5:2d:8d:a9:61:15: cb:b6:d8:ed:76:a7:14:1d:26:04:06:57:19:85:5a:cb:48:81: c3:bb:c9:bc:16:21:60:67:7f:0c:20:33:88:d4:3d:39:9a:7a: 9f:3a:99:2a:1c:b2:91:dd:20:6e:65:50:b1:88:ed:a2:70:04: d2:84:40:a7:e3:4e:a3:3c:b7:d3:35:fc:7e:c0:3d:95:16:f1: 57:48:2d:97:2e:61:f8:18:21:ad:3d:64:98:9e:f3:c3:11:6f: 16:4d:25:94:aa:72:52:0b:21:02:b8:cc:d1:6b:c2:ea:33:aa: 4c:44:d6:5d:1d:45:43:12:2c:92:0d:ba:b3:1c:aa:f5:af:85: 42:1a:2e:21:44:c0:3e:d4:8d:d9:a7:a3:33:7d:89:4b:d7:56: be:90:b3:1f:bd:37:39:73:d9:a1:95:52:17:7c:2a:4a:2b:d2: 66:ee:f4:4e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WyfoFcWS3vejQ+AAPvB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMmYxNjlmYzc0NGNiZTg5NWE5Zjg1ZWRhYjc5NmQ0YWM3 MDAwMjkwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjZmNDViYjNhM2M3ODY4OTk2N2JhYTY0NDY3OTVjZGUyN2IzYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUgLMLaeVWW8mpW5y0PNf3CBEfNY xJAHb6cXCc+vI+/egDCMXj2rduFhPrT7TAXoamVdAtek86pZUc8y9TloVW1Ae3Nz tB4EGq1ls4Sq5w8mLkhDrVhjIuDFYzIW0KiIlBT5QLVKDz6lR8QzKmy1N4NoyY5X WvH5gb6e94IewGm5X816u0761m0X1XIv4WIT5y+E3MSMsAgL57ebOZ0jnSoV6Jt1 xNjGMeBQwnsu2Ke2FI6ANqVuuyNyEfmcniZ+/+leWyIiZJLGE4yxHTt4Vzl4Zrms 1ZS1PN17+klZ19yYr3lZC5B4qbY+AlFDUeIWpaoVXQ2AWUf8BdlVpYcCaQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAJvRbs6PHhomWe6pkRnlc3iezvJMB8GA1UdIwQY MBaAFJEvFp/HRMvolan4Xtq3ltSscAApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzct YjIyODNjOWE1MzZmLzEvQW05RnV6bzhlR2laWjdxbVJHZVZ6ZUo3TzhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzctYjIyODNjOWE1MzZm LzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCX9d8AwQC ubjoMA0EAgACMAcDBQAqC0OAMA0GCSqGSIb3DQEBCwUAA4IBAQA3Gk4ZpP/ypykS 2RXqphSeGWR9Q/veMxYUU9jVezSNBT6YhOj1KAwF+yFGH9S+04JM956e8Crxg01O ZsVwSH/VSof5R8TZaAAzdS+cO9u4qg6sBVvlLY2pYRXLttjtdqcUHSYEBlcZhVrL SIHDu8m8FiFgZ38MIDOI1D05mnqfOpkqHLKR3SBuZVCxiO2icATShECn406jPLfT Nfx+wD2VFvFXSC2XLmH4GCGtPWSYnvPDEW8WTSWUqnJSCyECuMzRa8LqM6pMRNZd HUVDEiySDbqzHKr1r4VCGi4hRMA+1I3Zp6MzfYlL11a+kLMfvTc5c9mhlVIXfCpK K9Jm7vRO -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:26 2026 by rpki-client