This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/iXFmpJcbdC_alh8LcO0Nf0P_n0M.roa File: iXFmpJcbdC_alh8LcO0Nf0P_n0M.roa (raw, json) Hash identifier: KkwxhEDYXLe2MBFqdTHE3W60lWeRxKdgxRGdxisVvdI= Subject key identifier: 89:71:66:A4:97:1B:74:2F:DA:96:1F:0B:70:ED:0D:7F:43:FF:9F:43 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5414DCD23774C3B77AC89893C29F3 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/iXFmpJcbdC_alh8LcO0Nf0P_n0M.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197236 IP address blocks: 95.43.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:4d:cd:23:77:4c:3b:77:ac:89:89:3c:29:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=897166a4971b742fda961f0b70ed0d7f43ff9f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f9:9f:7b:b9:7d:5e:85:bf:7a:85:a5:d4:66: d1:04:78:8a:1d:a1:12:79:e9:de:f6:df:a8:15:3a: e2:27:8d:92:37:c0:a6:41:1c:3d:9e:f1:cc:4d:c3: ab:a6:29:e8:c6:ab:e8:2a:35:99:1a:b9:70:ab:80: 4b:a2:8c:9d:62:2b:7e:1c:1e:3e:90:4a:d1:a4:6b: 5c:13:d7:d1:ab:42:e5:ab:99:c7:29:f4:f4:21:15: 95:9c:ec:74:26:7f:c5:71:e1:36:d3:d7:4b:fa:61: 70:8e:fe:27:0b:0b:dd:c0:30:f9:28:ae:ad:c9:2c: 0c:6a:64:70:9e:50:ee:bd:93:cd:7f:10:c7:7e:c2: a0:69:22:75:f4:df:f3:95:88:e3:70:13:9c:7e:b7: e0:74:31:7b:8c:17:0b:c7:3a:ba:ce:5a:25:a9:47: 26:28:d3:97:55:75:f7:3e:73:7f:08:34:b4:cb:f9: c1:e6:de:f0:40:11:21:c9:77:73:31:8c:33:4a:b3: 2a:af:19:be:3d:5c:d8:dc:fa:58:26:07:1e:94:09: 37:7f:a0:ce:c9:59:32:4c:56:d8:8f:8e:c0:1b:ab: cd:bc:6e:a1:0c:f1:88:10:1a:7a:20:19:51:66:8f: cb:10:b8:74:31:5c:24:42:29:90:15:a2:0a:3b:47: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:71:66:A4:97:1B:74:2F:DA:96:1F:0B:70:ED:0D:7F:43:FF:9F:43 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/iXFmpJcbdC_alh8LcO0Nf0P_n0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.43.229.0/24 Signature Algorithm: sha256WithRSAEncryption a4:36:ba:a0:f3:98:b3:34:3b:12:47:86:17:3f:c3:e7:e0:cd: fc:d7:55:d7:19:c8:21:77:0d:11:92:6d:57:f1:eb:17:dc:7f: 9d:48:40:3e:12:3a:b3:96:25:68:ba:f3:9a:8a:51:2e:fd:b1: 4d:74:cf:1f:b3:d1:8c:fa:65:e7:e8:6a:42:64:15:70:6d:4d: 11:8b:52:0e:78:d7:c1:75:77:a2:8b:8a:50:e3:e3:e0:cc:21: df:37:b0:89:f1:32:20:fc:74:a4:2d:ae:35:99:a8:51:8f:3c: 57:58:b0:02:d4:b1:0b:31:52:6c:bd:c1:9b:8a:0a:b9:83:5d: ea:d3:d8:77:ac:d2:59:c2:8a:8c:18:f8:cb:97:b2:a7:e9:4b: 12:ce:a0:82:8f:da:8c:85:96:79:db:2d:79:1e:7d:39:c9:df: da:05:c5:fa:be:c8:53:e8:88:b1:ab:a1:b8:86:74:ce:57:b8: be:36:90:2c:e1:65:0e:14:43:a4:de:80:26:f2:b4:d8:52:86: 8b:0a:bb:8f:74:2a:26:0b:50:bb:e8:8c:e6:1b:22:50:de:f1: 37:87:1e:ec:95:88:18:15:69:84:d0:4f:6f:bc:7d:0a:c1:b8: 1d:b3:3b:a3:72:a8:65:48:e9:c9:13:e7:2b:39:5b:b2:94:74: 9c:61:b0:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUFNzSN3TDt3rImJPCnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTcxNjZhNDk3MWI3NDJmZGE5NjFmMGI3MGVkMGQ3ZjQzZmY5ZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vmfe7l9XoW/eoWl1GbRBHiKHaES eene9t+oFTriJ42SN8CmQRw9nvHMTcOrpinoxqvoKjWZGrlwq4BLooydYit+HB4+ kErRpGtcE9fRq0Llq5nHKfT0IRWVnOx0Jn/FceE209dL+mFwjv4nCwvdwDD5KK6t ySwMamRwnlDuvZPNfxDHfsKgaSJ19N/zlYjjcBOcfrfgdDF7jBcLxzq6zlolqUcm KNOXVXX3PnN/CDS0y/nB5t7wQBEhyXdzMYwzSrMqrxm+PVzY3PpYJgcelAk3f6DO yVkyTFbYj47AG6vNvG6hDPGIEBp6IBlRZo/LELh0MVwkQimQFaIKO0diTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlxZqSXG3Qv2pYfC3DtDX9D/59DMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvaVhGbXBKY2JkQ19hbGg4TGNPME5mMFBfbjBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXyvlMA0G CSqGSIb3DQEBCwUAA4IBAQCkNrqg85izNDsSR4YXP8Pn4M3811XXGcghdw0Rkm1X 8esX3H+dSEA+EjqzliVouvOailEu/bFNdM8fs9GM+mXn6GpCZBVwbU0Ri1IOeNfB dXeii4pQ4+PgzCHfN7CJ8TIg/HSkLa41mahRjzxXWLAC1LELMVJsvcGbigq5g13q 09h3rNJZwoqMGPjLl7Kn6UsSzqCCj9qMhZZ52y15Hn05yd/aBcX6vshT6Iixq6G4 hnTOV7i+NpAs4WUOFEOk3oAm8rTYUoaLCruPdComC1C76IzmGyJQ3vE3hx7slYgY FWmE0E9vvH0KwbgdszujcqhlSOnJE+crOVuylHScYbC6 -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:39 2026 by rpki-client