This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa File: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (raw, json) Hash identifier: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc= Subject key identifier: 5E:1F:D5:48:F2:4A:3A:32:7C:D3:C7:59:67:D7:23:C3:E4:1E:DD:1F Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Certificate serial: 019B78A30590B6EED5B23989634FA9B4CE4E Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21203 IP address blocks: 95.81.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:05:90:b6:ee:d5:b2:39:89:63:4f:a9:b4:ce:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e1fd548f24a3a327cd3c75967d723c3e41edd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:fa:13:7b:93:a4:fc:dc:88:85:af:eb:30: 2d:9b:54:1f:cf:cd:8c:54:dc:90:65:4d:cf:a3:f9: 50:fc:38:f4:45:22:7b:8e:ec:72:23:f3:74:9a:9d: 8f:8e:ba:b9:b4:c6:38:3b:5a:16:19:35:51:9e:d1: d8:90:84:df:39:8d:0f:d6:cb:6b:27:6d:17:4b:10: 28:20:8f:d9:07:86:1c:71:e3:ee:01:d0:36:4a:10: d3:1f:be:65:a4:ee:bd:84:8e:bb:fc:b1:c8:7b:2c: 09:cf:26:71:3c:3d:56:86:cb:47:c0:44:ce:fa:0a: de:6a:c7:35:b8:8f:cd:ba:07:aa:8a:a7:d5:d3:d9: f9:58:b2:3c:55:93:f8:f2:bd:bf:cc:c0:3f:81:0d: a9:55:50:6d:5b:34:6c:aa:1b:2f:3a:37:a1:83:d2: c9:0b:6c:1c:b4:1d:bd:79:b0:6a:fa:de:15:d9:bd: 72:13:fa:cb:61:8f:ce:f7:39:a1:3d:62:c2:51:bc: 3a:27:41:e2:f1:65:54:d4:1e:93:af:29:23:6f:bf: 72:8a:1c:d7:c0:46:d5:0b:16:d8:57:5b:c4:a7:7a: b3:9c:59:dc:73:82:11:63:c8:c7:0f:6e:64:52:4f: 32:0a:3c:f7:9c:a8:d3:43:49:80:fd:f6:e5:37:40: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:D5:48:F2:4A:3A:32:7C:D3:C7:59:67:D7:23:C3:E4:1E:DD:1F X509v3 Authority Key Identifier: keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.81.174.0/24 Signature Algorithm: sha256WithRSAEncryption 64:05:ac:5a:18:14:7e:ef:3e:21:ab:e3:89:e1:f9:2c:dc:6e: 5c:fe:a9:33:f9:dc:a3:ed:d5:b0:37:56:52:d4:ef:62:f0:b8: 76:60:3b:a3:98:04:41:6b:7f:e2:8c:1c:2b:19:83:35:0c:ee: df:58:d0:2d:a0:74:c6:b1:9b:e6:f4:2f:2c:98:3e:44:58:67: a6:88:e3:78:18:fa:84:16:7d:8e:e1:29:95:07:34:8a:12:1e: b8:80:d4:e9:10:d8:3b:a6:9e:d4:f3:12:50:36:44:6a:c7:ce: ea:e9:bb:4d:40:00:84:cb:63:de:e6:4c:e9:99:9e:ea:4d:fd: b4:9a:94:73:af:65:19:c1:db:98:e7:a6:9b:89:02:dd:72:a4: 1e:c4:d2:90:eb:43:d9:a5:27:7b:84:36:e6:dd:46:fc:a1:39: f6:f2:b0:ad:06:82:d4:17:da:d7:7c:3a:79:03:29:bb:9a:90: 34:aa:c5:b9:70:ea:ca:d6:b8:e9:e7:ce:cd:8f:72:a3:d3:90: 8b:cc:84:fc:4a:b9:88:6f:dc:36:56:5a:cd:c3:c7:83:e4:40: 70:92:e4:10:24:67:7b:84:a2:01:39:9e:ce:c0:e5:a2:29:09: e6:01:7f:02:06:b5:53:2f:57:b0:21:ac:96:39:79:ec:d3:00: e6:b5:31:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owWQtu7VsjmJY0+ptM5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMGNhMzQ4YWM4OTFjMzM2ZDhjNzk0NWE1YmQ1YjMzMjVl YjVmMGIwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTFmZDU0OGYyNGEzYTMyN2NkM2M3NTk2N2Q3MjNjM2U0MWVkZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMX6E3uTpPzciIWv6zAtm1Qfz82M VNyQZU3Po/lQ/Dj0RSJ7juxyI/N0mp2Pjrq5tMY4O1oWGTVRntHYkITfOY0P1str J20XSxAoII/ZB4YccePuAdA2ShDTH75lpO69hI67/LHIeywJzyZxPD1WhstHwETO +greasc1uI/NugeqiqfV09n5WLI8VZP48r2/zMA/gQ2pVVBtWzRsqhsvOjehg9LJ C2wctB29ebBq+t4V2b1yE/rLYY/O9zmhPWLCUbw6J0Hi8WVU1B6Trykjb79yihzX wEbVCxbYV1vEp3qznFncc4IRY8jHD25kUk8yCjz3nKjTQ0mA/fblN0BYDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4f1UjySjoyfNPHWWfXI8PkHt0fMB8GA1UdIwQY MBaAFMsMo0isiRwzbYx5RaW9WzMl618LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEt NDI1MjMyZmQ1NjQzLzEvWGhfVlNQSktPako4MDhkWlo5Y2p3LVFlM1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEtNDI1MjMyZmQ1NjQz LzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1GuMA0G CSqGSIb3DQEBCwUAA4IBAQBkBaxaGBR+7z4hq+OJ4fks3G5c/qkz+dyj7dWwN1ZS 1O9i8Lh2YDujmARBa3/ijBwrGYM1DO7fWNAtoHTGsZvm9C8smD5EWGemiON4GPqE Fn2O4SmVBzSKEh64gNTpENg7pp7U8xJQNkRqx87q6btNQACEy2Pe5kzpmZ7qTf20 mpRzr2UZwduY56abiQLdcqQexNKQ60PZpSd7hDbm3Ub8oTn28rCtBoLUF9rXfDp5 Aym7mpA0qsW5cOrK1rjp587Nj3Kj05CLzIT8SrmIb9w2VlrNw8eD5EBwkuQQJGd7 hKIBOZ7OwOWiKQnmAX8CBrVTL1ewIayWOXns0wDmtTGn -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:45 2026 by rpki-client