This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/95fE5XU1a1pGoSxnu5vxMKDbXJg.roa File: 95fE5XU1a1pGoSxnu5vxMKDbXJg.roa (raw, json) Hash identifier: 4/Ix+l1myZu6RT/8dZ3jkzpVwV0AaDZm+INviGp4TeQ= Subject key identifier: F7:97:C4:E5:75:35:6B:5A:46:A1:2C:67:BB:9B:F1:30:A0:DB:5C:98 Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76 Certificate serial: 019B7CEE3B227F2E3243AF0316CE9995190E Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/95fE5XU1a1pGoSxnu5vxMKDbXJg.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205341 IP address blocks: 45.140.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3b:22:7f:2e:32:43:af:03:16:ce:99:95:19:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f797c4e575356b5a46a12c67bb9bf130a0db5c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:41:7c:97:d3:1e:8f:15:05:80:c4:31:ad: 09:9c:42:70:55:2b:32:a2:e0:6c:e4:da:7c:7f:7e: 40:1d:de:8f:d0:48:c0:56:cb:88:d2:74:ca:36:d4: 74:52:bc:fe:b0:61:36:29:47:41:8a:67:43:0e:e2: 00:77:d1:87:5b:e8:87:50:88:71:b0:75:e9:41:36: 88:be:a4:57:8d:32:83:54:0e:d4:be:e4:51:18:2b: 3d:88:8f:b9:2e:9f:71:5c:57:a0:29:78:14:f5:19: a1:bf:ae:62:04:bb:92:ca:27:4b:60:a3:6e:57:86: c2:e9:e0:51:c5:29:14:7e:13:13:47:79:d5:e3:e5: 90:e9:8e:5a:4f:4e:dd:ff:f6:45:21:d3:c9:72:2d: 8a:17:6a:f7:7d:0f:5e:80:f9:50:ac:ed:16:40:a7: 0a:10:a0:8e:2a:2e:4d:26:26:ab:b1:0c:09:a9:76: a5:38:ac:7b:bf:7e:e5:11:dd:80:8f:ae:33:77:b3: 09:18:9f:44:f2:c0:f2:2b:fb:a8:90:66:6c:f2:07: 1b:63:92:69:98:8d:e5:54:6c:8e:95:81:90:ea:2d: c1:50:d3:54:64:ad:65:60:e5:8a:82:5f:16:42:a3: e9:a7:65:2b:ef:62:88:a6:e3:1c:97:0a:1b:a7:91: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:C4:E5:75:35:6B:5A:46:A1:2C:67:BB:9B:F1:30:A0:DB:5C:98 X509v3 Authority Key Identifier: keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/95fE5XU1a1pGoSxnu5vxMKDbXJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.160.0/22 Signature Algorithm: sha256WithRSAEncryption 27:2a:cb:d4:e5:83:66:45:d2:c0:91:61:6c:5c:4f:3b:bb:de: 94:66:e6:c5:2b:d8:ec:b3:b3:03:ec:de:91:f8:5a:4c:05:e0: d8:1c:86:b9:f0:3e:0d:30:60:78:2e:6f:61:60:83:14:4a:3e: 23:f5:38:52:27:f6:0a:ba:42:94:9a:9f:6c:bb:0d:af:48:83: 84:81:d8:c0:89:a2:a7:b2:6d:01:fb:00:e5:01:35:55:1f:02: 7b:b6:71:08:c9:6f:3e:e0:48:2a:1a:10:7c:c1:91:52:ea:6e: cd:90:41:fd:e3:69:60:b6:22:f6:3f:ce:0a:0b:61:18:bc:28: fe:a0:c2:0c:64:ae:70:b0:e6:17:66:99:3b:af:d7:27:e8:ae: a6:17:11:53:13:6a:d1:3b:f4:ab:63:66:98:0b:d9:80:ed:38: 52:a1:88:26:a2:0e:9e:76:bf:e7:ab:81:db:1c:10:af:01:9e: f4:ce:4d:5e:4c:61:a7:01:9b:ed:16:9b:96:c3:0b:62:f5:3b: 73:e9:6e:80:64:98:9f:e5:7a:4b:e5:68:ce:4b:de:6a:a2:2b: 92:6f:9b:1f:5d:f6:c3:cb:c1:f1:46:d2:94:cf:b7:59:aa:ab: 47:dc:e1:fa:f8:fe:dc:f5:e2:eb:b0:c9:b9:50:75:3c:5e:8a: c7:80:b4:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jsify4yQ68DFs6ZlRkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODAzYTJjZjI5MGIwYmRjNjlhZGRjMDAzZDU2NGEyMzRh YTRmNzYwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzk3YzRlNTc1MzU2YjVhNDZhMTJjNjdiYjliZjEzMGEwZGI1Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/9BfJfTHo8VBYDEMa0JnEJwVSsy ouBs5Np8f35AHd6P0EjAVsuI0nTKNtR0Urz+sGE2KUdBimdDDuIAd9GHW+iHUIhx sHXpQTaIvqRXjTKDVA7UvuRRGCs9iI+5Lp9xXFegKXgU9Rmhv65iBLuSyidLYKNu V4bC6eBRxSkUfhMTR3nV4+WQ6Y5aT07d//ZFIdPJci2KF2r3fQ9egPlQrO0WQKcK EKCOKi5NJiarsQwJqXalOKx7v37lEd2Aj64zd7MJGJ9E8sDyK/uokGZs8gcbY5Jp mI3lVGyOlYGQ6i3BUNNUZK1lYOWKgl8WQqPpp2Ur72KIpuMclwobp5FyZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPeXxOV1NWtaRqEsZ7ub8TCg21yYMB8GA1UdIwQY MBaAFDSAOizykLC9xprdwAPVZKI0qk92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mZTYyMzQtNjQzNy00OTY3LWJhNjMt ODVjM2ZhNzllYmMxLzEvOTVmRTVYVTFhMXBHb1N4bnU1dnhNS0RiWEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mZTYyMzQtNjQzNy00OTY3LWJhNjMtODVjM2ZhNzllYmMx LzEvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYygMA0G CSqGSIb3DQEBCwUAA4IBAQAnKsvU5YNmRdLAkWFsXE87u96UZubFK9jss7MD7N6R +FpMBeDYHIa58D4NMGB4Lm9hYIMUSj4j9ThSJ/YKukKUmp9suw2vSIOEgdjAiaKn sm0B+wDlATVVHwJ7tnEIyW8+4EgqGhB8wZFS6m7NkEH942lgtiL2P84KC2EYvCj+ oMIMZK5wsOYXZpk7r9cn6K6mFxFTE2rRO/SrY2aYC9mA7ThSoYgmog6edr/nq4Hb HBCvAZ70zk1eTGGnAZvtFpuWwwti9Ttz6W6AZJif5XpL5WjOS95qoiuSb5sfXfbD y8HxRtKUz7dZqqtH3OH6+P7c9eLrsMm5UHU8XorHgLT5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:42 2026 by rpki-client