This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa File: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (raw, json) Hash identifier: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4= Subject key identifier: C3:44:54:CC:32:50:DA:C4:A2:E2:58:EE:E0:DA:12:BB:A2:1A:64:43 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F824556FEAFF1EAF30A6A7B731832AA Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa Signing time: Fri 02 Jan 2026 16:20:02 +0000 ROA not before: Fri 02 Jan 2026 16:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 95.172.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:45:56:fe:af:f1:ea:f3:0a:6a:7b:73:18:32:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c34454cc3250dac4a2e258eee0da12bba21a6443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:1e:a2:6e:95:d8:04:71:6e:d0:3d:87:f2: 91:39:61:95:20:c5:65:dc:ef:ca:9e:1d:49:02:23: fb:94:38:8f:0a:2a:eb:97:93:bb:f9:fc:fa:df:4c: 0b:13:33:c0:d6:12:04:c3:3b:13:63:e5:8d:cb:8a: ea:d9:46:3b:7d:95:da:fe:14:e1:52:ee:67:30:5a: 24:60:92:e4:f4:39:a8:62:96:af:4d:eb:9d:1e:4e: 5d:d2:ac:69:6c:70:05:c9:05:f6:36:45:52:bd:fe: d8:85:e4:e2:9c:54:03:ed:8c:34:27:b0:19:d3:87: 35:a0:07:38:23:a5:96:4f:3f:ab:49:09:6a:46:0f: b9:69:cb:8a:e0:d7:1e:1b:c1:98:f6:f4:c7:be:2c: d8:86:9f:c7:13:80:25:a2:06:31:b7:83:5a:7c:9a: d5:7c:60:1e:98:55:e5:7b:56:e5:b6:6d:34:ac:dc: d6:3e:33:e3:3f:51:8a:42:db:c2:28:a0:e2:55:ce: 6e:66:b2:42:c3:7d:81:4e:b3:3c:35:7a:08:89:65: 21:8b:05:87:cc:f3:dc:83:e3:9b:6b:f6:94:3d:0c: e3:4d:f7:91:c4:aa:26:0c:b5:bc:f8:ce:37:0c:7b: dc:fc:c0:7c:7f:eb:3f:38:35:e6:63:d5:b5:8f:5e: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:44:54:CC:32:50:DA:C4:A2:E2:58:EE:E0:DA:12:BB:A2:1A:64:43 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.172.76.0/24 Signature Algorithm: sha256WithRSAEncryption a0:62:4a:32:ff:f5:8c:fe:86:5d:05:08:4a:dd:66:0d:e8:4a: e1:bc:70:78:66:07:23:ba:ce:93:07:e1:ae:73:d7:fb:a7:5f: 1a:78:f7:54:32:f3:61:31:74:b7:0c:a3:1e:68:99:8b:70:b2: 8a:05:41:37:84:7d:b5:44:7e:d1:cc:1a:b7:61:26:f6:5d:bb: d2:f9:c6:f1:ba:94:3a:d9:88:0a:bd:b0:7b:1d:f9:f9:89:50: d5:cb:1d:3c:98:96:28:ce:32:ee:79:ba:9f:40:d1:ab:c3:89: f4:52:8c:69:aa:63:4a:e9:39:64:4b:3b:d0:39:1b:ae:d6:bc: e7:d7:3b:8a:81:af:7c:85:16:13:92:c1:b0:99:b5:08:0a:23: 75:fc:a4:18:40:fe:60:d0:bc:e0:15:45:d8:27:da:89:b1:d5: e0:bb:02:d0:f0:3f:d3:0a:81:6f:c3:89:74:a2:c1:4c:97:f8: ee:ce:93:ee:f4:ff:9c:51:63:5c:b6:66:c1:f5:e9:3b:e3:56: e5:6e:a8:a0:a0:6a:d5:cd:1e:49:88:24:6a:96:46:e1:fe:47: 05:b1:8b:78:ec:f1:87:7e:04:46:cf:a4:88:a3:82:7e:fb:95: 98:ee:dc:85:e8:85:c8:cf:40:71:81:15:57:dd:60:b2:85:9e: 21:52:3b:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkVW/q/x6vMKantzGDKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQ0NTRjYzMyNTBkYWM0YTJlMjU4ZWVlMGRhMTJiYmEyMWE2NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Meom6V2ARxbtA9h/KROWGVIMVl 3O/Knh1JAiP7lDiPCirrl5O7+fz630wLEzPA1hIEwzsTY+WNy4rq2UY7fZXa/hTh Uu5nMFokYJLk9DmoYpavTeudHk5d0qxpbHAFyQX2NkVSvf7YheTinFQD7Yw0J7AZ 04c1oAc4I6WWTz+rSQlqRg+5acuK4NceG8GY9vTHvizYhp/HE4AlogYxt4NafJrV fGAemFXle1bltm00rNzWPjPjP1GKQtvCKKDiVc5uZrJCw32BTrM8NXoIiWUhiwWH zPPcg+Oba/aUPQzjTfeRxKomDLW8+M43DHvc/MB8f+s/ODXmY9W1j14AYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNEVMwyUNrEouJY7uDaEruiGmRDMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvdzBSVXpESlEyc1NpNGxqdTROb1N1NklhWkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6xMMA0G CSqGSIb3DQEBCwUAA4IBAQCgYkoy//WM/oZdBQhK3WYN6ErhvHB4Zgcjus6TB+Gu c9f7p18aePdUMvNhMXS3DKMeaJmLcLKKBUE3hH21RH7RzBq3YSb2XbvS+cbxupQ6 2YgKvbB7Hfn5iVDVyx08mJYozjLuebqfQNGrw4n0UoxpqmNK6TlkSzvQORuu1rzn 1zuKga98hRYTksGwmbUICiN1/KQYQP5g0LzgFUXYJ9qJsdXguwLQ8D/TCoFvw4l0 osFMl/juzpPu9P+cUWNctmbB9ek741blbqigoGrVzR5JiCRqlkbh/kcFsYt47PGH fgRGz6SIo4J++5WY7tyF6IXIz0BxgRVX3WCyhZ4hUjvR -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:22 2026 by rpki-client