This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/zTdnnLc0QIacm1YbtJWIsiovLTw.roa File: zTdnnLc0QIacm1YbtJWIsiovLTw.roa (raw, json) Hash identifier: kSnRCK8ElhlM0eULOEc3cJ4DBP5BQZF3/MbAm+M0XF0= Subject key identifier: CD:37:67:9C:B7:34:40:86:9C:9B:56:1B:B4:95:88:B2:2A:2F:2D:3C Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0 Certificate serial: 019B7C11923D316FA74C21165E7D43B24FF0 Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/zTdnnLc0QIacm1YbtJWIsiovLTw.roa Signing time: Fri 02 Jan 2026 00:18:04 +0000 ROA not before: Fri 02 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 95.130.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:92:3d:31:6f:a7:4c:21:16:5e:7d:43:b2:4f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0 Validity Not Before: Jan 2 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd37679cb73440869c9b561bb49588b22a2f2d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:49:0a:1f:c2:74:65:27:5c:0c:2d:72:3a: 9d:c1:1b:b2:b6:97:84:8a:c8:ee:7a:e1:f0:62:14: 4d:78:b3:d8:86:8c:cf:71:95:7f:d5:0b:c5:fa:9f: 83:32:06:77:13:a5:59:be:65:92:57:0e:89:19:d5: 2a:83:6f:93:1b:09:ce:d9:3a:76:fc:df:20:9f:22: 2b:a0:91:d8:64:90:12:b7:59:84:97:92:c6:d7:b1: af:de:ce:8b:b6:67:0f:cc:b7:de:bc:24:be:9a:26: 95:59:57:63:df:bc:b4:e6:f0:60:62:68:b1:fd:bb: 83:e1:68:21:5c:83:75:ec:0a:3b:75:32:c9:44:bd: 3c:e7:6a:aa:d0:c4:60:0d:2a:c4:93:d1:99:eb:b5: fb:24:c3:b1:f9:5e:df:a1:5e:a9:03:5e:2d:0c:72: 78:c3:0f:e5:93:d5:9f:35:9a:05:4d:eb:de:f9:06: 03:8d:53:7f:25:7a:2d:c8:e8:b0:ac:eb:b0:62:3e: dd:e7:59:f1:00:25:69:3f:8f:38:2d:4e:67:f9:44: 8f:67:81:a9:86:20:ca:f6:22:21:3a:18:a5:2a:ec: b5:49:72:13:b4:fb:2e:a1:78:f9:0f:be:51:a5:73: 63:a2:ae:82:60:7d:c9:99:be:14:bf:5a:f0:bb:0d: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:37:67:9C:B7:34:40:86:9C:9B:56:1B:B4:95:88:B2:2A:2F:2D:3C X509v3 Authority Key Identifier: keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/zTdnnLc0QIacm1YbtJWIsiovLTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.184.0/23 Signature Algorithm: sha256WithRSAEncryption a9:39:3e:bf:32:9b:1d:7a:8b:de:12:f4:a9:6b:6c:44:e6:39: 57:d2:c7:47:06:c3:5f:69:62:d2:ec:7a:60:3d:d8:39:c0:1b: f7:7b:cc:2d:9c:ec:27:64:f1:d8:be:d7:f3:33:cc:c0:68:27: 14:89:02:ec:f9:b7:36:52:30:8a:0f:96:25:17:b8:94:7f:6b: 1a:fc:54:d6:86:0a:af:05:c0:5e:8b:64:24:50:6e:86:50:a0: 69:e9:21:27:2e:10:35:ca:1e:d7:d4:dc:07:b2:93:ca:ce:00: 4e:2a:f7:93:5c:9a:c6:9c:43:b1:a9:94:da:ef:15:63:e0:3f: be:ab:10:73:ff:5b:67:0d:02:f3:c4:0d:d2:bc:c0:5f:67:4f: 60:07:a2:1d:73:37:56:9b:23:76:8b:ed:92:6e:93:ff:00:8e: 66:d0:e8:e2:82:08:40:80:d8:0e:94:bf:82:45:c7:dd:8c:ab: 45:96:43:31:8a:d5:ef:6e:81:18:99:cd:b5:77:a3:1f:7c:90: 94:c2:de:43:e2:b4:87:79:23:cb:97:2c:47:24:f7:b4:63:ba: fd:80:6a:74:34:8b:6e:b3:d4:4c:0d:7b:bc:de:ff:ef:d2:56: ff:68:18:b6:44:56:60:0f:bf:ca:ba:b6:a5:3a:27:e4:a2:c6: f4:5f:3c:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZI9MW+nTCEWXn1Dsk/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz NzZlZjAwHhcNMjYwMTAyMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDM3Njc5Y2I3MzQ0MDg2OWM5YjU2MWJiNDk1ODhiMjJhMmYyZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYJJCh/CdGUnXAwtcjqdwRuytpeE isjueuHwYhRNeLPYhozPcZV/1QvF+p+DMgZ3E6VZvmWSVw6JGdUqg2+TGwnO2Tp2 /N8gnyIroJHYZJASt1mEl5LG17Gv3s6LtmcPzLfevCS+miaVWVdj37y05vBgYmix /buD4WghXIN17Ao7dTLJRL0852qq0MRgDSrEk9GZ67X7JMOx+V7foV6pA14tDHJ4 ww/lk9WfNZoFTeve+QYDjVN/JXotyOiwrOuwYj7d51nxACVpP484LU5n+USPZ4Gp hiDK9iIhOhilKuy1SXITtPsuoXj5D75RpXNjoq6CYH3Jmb4Uv1rwuw1RmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM03Z5y3NECGnJtWG7SViLIqLy08MB8GA1UdIwQY MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct YzgxM2NlMGY1ZTQ3LzEvelRkbm5MYzBRSWFjbTFZYnRKV0lzaW92TFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3 LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX4K4MA0G CSqGSIb3DQEBCwUAA4IBAQCpOT6/MpsdeoveEvSpa2xE5jlX0sdHBsNfaWLS7Hpg Pdg5wBv3e8wtnOwnZPHYvtfzM8zAaCcUiQLs+bc2UjCKD5YlF7iUf2sa/FTWhgqv BcBei2QkUG6GUKBp6SEnLhA1yh7X1NwHspPKzgBOKveTXJrGnEOxqZTa7xVj4D++ qxBz/1tnDQLzxA3SvMBfZ09gB6IdczdWmyN2i+2SbpP/AI5m0OjigghAgNgOlL+C RcfdjKtFlkMxitXvboEYmc21d6MffJCUwt5D4rSHeSPLlyxHJPe0Y7r9gGp0NItu s9RMDXu83v/v0lb/aBi2RFZgD7/KuralOifkosb0Xzz+ -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:54 2026 by rpki-client