This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/V97JGHXEJUvnQL0Bi6HeWwB_JqY.roa File: V97JGHXEJUvnQL0Bi6HeWwB_JqY.roa (raw, json) Hash identifier: MRQQM/s1kbFOPSsxObupFCPww/4WbEzFQh8DbE58o+4= Subject key identifier: 57:DE:C9:18:75:C4:25:4B:E7:40:BD:01:8B:A1:DE:5B:00:7F:26:A6 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA54B9652298C8FEEFC327F86D67D6F Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/V97JGHXEJUvnQL0Bi6HeWwB_JqY.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205808 IP address blocks: 95.43.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4b:96:52:29:8c:8f:ee:fc:32:7f:86:d6:7d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57dec91875c4254be740bd018ba1de5b007f26a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:a3:55:2a:38:0a:79:f3:d1:52:1c:f9:45: 83:c5:39:d2:ff:cc:79:7e:9a:14:77:a4:35:4a:e1: ff:8b:b1:14:b4:4b:ae:a7:07:49:b7:47:7b:fa:5b: 35:dd:d7:2b:1c:ca:4d:85:e0:dd:50:33:d8:49:3d: 7a:b0:ee:39:8d:98:1a:ed:28:c4:23:9a:33:97:10: bb:62:38:a0:6d:5d:89:78:4d:d9:08:86:58:c3:fe: 49:87:67:11:00:63:fb:95:1b:4e:34:5e:bb:98:6f: 8f:fd:12:66:12:6f:09:24:0e:81:29:30:9c:f6:53: 30:33:43:73:0e:df:bb:03:2c:1c:15:91:72:c3:7d: de:80:80:a7:8a:30:e7:90:06:e3:02:f1:c3:70:72: b3:60:7f:72:33:82:b3:61:d8:50:63:ba:49:c5:a8: 81:77:b0:3b:c1:c5:d0:5a:85:6e:9c:91:3c:85:ed: ba:cf:78:8f:5a:0a:78:0b:1f:4b:33:b2:02:ea:b5: c7:82:00:b3:42:c7:c8:d9:1a:d1:5a:66:97:22:21: 81:48:6f:41:10:50:ba:82:43:5f:2a:9c:c3:98:bb: 77:c6:cb:8f:61:14:f0:22:e3:ba:a0:09:e3:f1:40: fc:3d:27:5e:bf:82:45:77:c5:67:bb:4a:06:fe:e1: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:C9:18:75:C4:25:4B:E7:40:BD:01:8B:A1:DE:5B:00:7F:26:A6 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/V97JGHXEJUvnQL0Bi6HeWwB_JqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.43.202.0/24 Signature Algorithm: sha256WithRSAEncryption 66:22:2d:cd:09:80:73:b2:be:80:c7:8e:76:47:d4:f0:ba:92: bd:21:cc:66:91:6f:24:ea:f9:6d:28:e1:c1:8e:91:6d:10:3d: 4e:83:b3:39:f7:ca:9a:98:14:a2:2a:a1:c8:0e:17:f6:96:4f: 9b:73:61:ed:3d:83:10:97:4a:9e:24:f1:ae:99:28:b7:53:e0: fd:5c:00:84:22:bb:82:6c:7f:7e:b2:48:5e:c5:78:39:2a:43: e9:e4:0e:3a:5b:70:98:81:a5:7e:61:4c:1b:3c:47:bd:a6:1e: 51:2b:27:13:a3:aa:a1:7b:4e:db:f9:c9:40:e5:f4:0f:30:2c: e0:ad:31:f7:e5:83:4d:3e:70:41:12:e1:47:8e:a6:fd:36:4f: f1:63:69:19:1a:17:97:5d:b0:5b:2b:2f:48:51:57:90:30:a7: 49:93:cd:be:99:cc:77:e6:09:20:20:a4:22:24:18:e4:65:2c: 92:41:8e:4a:b5:5a:ce:78:7e:01:5f:36:8e:b5:3f:d1:e6:24: 7f:e5:e2:10:7f:46:bc:f1:8f:d3:a6:e5:98:b9:38:d4:02:62: 25:d9:82:ce:dd:02:54:ee:cc:08:6b:52:a9:8b:e0:62:13:14: 78:fe:71:c5:88:61:81:9a:7c:bb:bf:b5:dc:51:0c:b4:7f:c1: 8d:a0:5d:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUuWUimMj+78Mn+G1n1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2RlYzkxODc1YzQyNTRiZTc0MGJkMDE4YmExZGU1YjAwN2YyNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGjVSo4Cnnz0VIc+UWDxTnS/8x5 fpoUd6Q1SuH/i7EUtEuupwdJt0d7+ls13dcrHMpNheDdUDPYST16sO45jZga7SjE I5ozlxC7YjigbV2JeE3ZCIZYw/5Jh2cRAGP7lRtONF67mG+P/RJmEm8JJA6BKTCc 9lMwM0NzDt+7AywcFZFyw33egICnijDnkAbjAvHDcHKzYH9yM4KzYdhQY7pJxaiB d7A7wcXQWoVunJE8he26z3iPWgp4Cx9LM7IC6rXHggCzQsfI2RrRWmaXIiGBSG9B EFC6gkNfKpzDmLt3xsuPYRTwIuO6oAnj8UD8PSdev4JFd8Vnu0oG/uHzuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfeyRh1xCVL50C9AYuh3lsAfyamMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvVjk3SkdIWEVKVXZuUUwwQmk2SGVXd0JfSnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXyvKMA0G CSqGSIb3DQEBCwUAA4IBAQBmIi3NCYBzsr6Ax452R9TwupK9IcxmkW8k6vltKOHB jpFtED1Og7M598qamBSiKqHIDhf2lk+bc2HtPYMQl0qeJPGumSi3U+D9XACEIruC bH9+skhexXg5KkPp5A46W3CYgaV+YUwbPEe9ph5RKycTo6qhe07b+clA5fQPMCzg rTH35YNNPnBBEuFHjqb9Nk/xY2kZGheXXbBbKy9IUVeQMKdJk82+mcx35gkgIKQi JBjkZSySQY5KtVrOeH4BXzaOtT/R5iR/5eIQf0a88Y/TpuWYuTjUAmIl2YLO3QJU 7swIa1Kpi+BiExR4/nHFiGGBmny7v7XcUQy0f8GNoF1F -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:53 2026 by rpki-client