This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/NWpkYaFwH-UdZM8H57Ep6cPlXvA.roa File: NWpkYaFwH-UdZM8H57Ep6cPlXvA.roa (raw, json) Hash identifier: XnLw8zGB4jnI1+E8H9pq/YVhYUyseVGm4hyg2IXHg64= Subject key identifier: 35:6A:64:61:A1:70:1F:E5:1D:64:CF:07:E7:B1:29:E9:C3:E5:5E:F0 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B775900C10B8C39F18352B90B49CBBAAD Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/NWpkYaFwH-UdZM8H57Ep6cPlXvA.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 95.173.48.0/24 maxlen: 24 95.173.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:c1:0b:8c:39:f1:83:52:b9:0b:49:cb:ba:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=356a6461a1701fe51d64cf07e7b129e9c3e55ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:b1:e3:51:b0:02:01:4f:15:da:3b:f5:a9: 14:b0:a0:31:77:a8:ab:67:82:53:b0:35:12:d8:80: 05:35:fc:3e:51:ec:4f:02:b7:94:2a:27:13:5d:90: 45:d2:3c:52:15:03:14:5f:65:87:28:42:13:d5:17: 58:0f:66:b0:af:87:e1:cf:1b:ce:74:32:77:4a:75: a4:40:17:ff:e7:5c:28:07:ba:b8:9f:71:c7:10:64: 57:95:d2:cb:44:19:5a:5b:a6:d4:69:90:69:6a:c2: 4c:19:00:29:67:3b:db:f6:54:d2:b0:0e:2e:2e:65: ae:df:d2:e4:fd:de:96:d5:0e:f4:50:41:56:9b:fc: 2b:d5:9f:0e:fd:5e:52:41:cf:19:69:6c:cb:26:fb: 9d:07:bb:33:b2:58:ae:e0:84:90:36:32:ff:61:b1: 2f:eb:92:73:9b:71:97:8b:08:5b:2e:70:aa:a6:ff: 46:e0:24:ec:2f:5b:48:19:1b:51:8d:96:f6:94:7d: 3c:5c:3b:37:f5:43:37:f6:f1:10:9f:4c:4f:ed:4a: c6:fc:9e:6d:eb:57:76:a3:c3:a7:67:db:5e:ff:e3: b0:c2:16:35:2c:47:2a:86:e7:ec:0a:59:a2:bb:74: 86:7f:2c:96:e2:d1:34:94:a9:d3:2b:3b:cf:3e:20: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6A:64:61:A1:70:1F:E5:1D:64:CF:07:E7:B1:29:E9:C3:E5:5E:F0 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/NWpkYaFwH-UdZM8H57Ep6cPlXvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.48.0/24 95.173.50.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:6a:65:34:c5:a9:f9:65:72:1b:60:5c:5b:a6:27:9c:54:57: e2:82:c7:23:7a:8a:e7:ab:81:42:fc:75:21:db:a1:3c:02:d7: cd:14:e0:5a:6c:43:2d:3e:d9:0a:42:66:f1:1d:05:04:20:58: 9d:8a:c2:09:cb:35:d5:38:9e:cc:41:6d:40:44:48:e1:86:18: 9d:e1:47:48:c8:ce:ea:ab:01:8e:26:06:08:6c:0c:1c:71:3d: 7b:c6:5e:1f:5e:39:31:c7:f9:36:1b:c3:43:2f:81:a5:2a:3b: 0f:79:6d:2d:58:c4:51:a7:ec:75:ab:5c:4c:99:5c:93:a5:12: 81:1a:5a:0a:c4:80:98:94:d7:9b:42:10:fd:e5:c0:1b:44:8f: 46:35:e9:7c:4f:dc:2b:d9:b7:fb:41:d1:0e:d8:19:1f:83:cc: 2e:23:9a:9e:80:f2:95:93:7b:bb:33:6c:d4:8e:c2:c4:86:65: 69:52:c3:2d:16:1f:9e:e5:d9:2a:85:e6:57:77:81:54:51:6c: c2:8d:1d:83:c9:43:6a:24:b2:9f:f6:68:35:5d:2a:67:5e:b2: 8d:c6:67:b5:60:82:1c:92:35:0c:4e:70:43:14:ab:ed:ee:28: bc:bc:78:5b:6d:25:7f:dd:4d:d9:0c:16:5b:e1:0a:c4:9e:e3: 23:be:9f:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WQDBC4w58YNSuQtJy7qtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTZhNjQ2MWExNzAxZmU1MWQ2NGNmMDdlN2IxMjllOWMzZTU1ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQmx41GwAgFPFdo79akUsKAxd6ir Z4JTsDUS2IAFNfw+UexPAreUKicTXZBF0jxSFQMUX2WHKEIT1RdYD2awr4fhzxvO dDJ3SnWkQBf/51woB7q4n3HHEGRXldLLRBlaW6bUaZBpasJMGQApZzvb9lTSsA4u LmWu39Lk/d6W1Q70UEFWm/wr1Z8O/V5SQc8ZaWzLJvudB7szsliu4ISQNjL/YbEv 65Jzm3GXiwhbLnCqpv9G4CTsL1tIGRtRjZb2lH08XDs39UM39vEQn0xP7UrG/J5t 61d2o8OnZ9te/+OwwhY1LEcqhufsClmiu3SGfyyW4tE0lKnTKzvPPiCTjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDVqZGGhcB/lHWTPB+exKenD5V7wMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvTldwa1lhRndILVVkWk04SDU3RXA2Y1BsWHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX60wAwQA X60yMA0GCSqGSIb3DQEBCwUAA4IBAQBtamU0xan5ZXIbYFxbpiecVFfigscjeorn q4FC/HUh26E8AtfNFOBabEMtPtkKQmbxHQUEIFidisIJyzXVOJ7MQW1AREjhhhid 4UdIyM7qqwGOJgYIbAwccT17xl4fXjkxx/k2G8NDL4GlKjsPeW0tWMRRp+x1q1xM mVyTpRKBGloKxICYlNebQhD95cAbRI9GNel8T9wr2bf7QdEO2Bkfg8wuI5qegPKV k3u7M2zUjsLEhmVpUsMtFh+e5dkqheZXd4FUUWzCjR2DyUNqJLKf9mg1XSpnXrKN xme1YIIckjUMTnBDFKvt7ii8vHhbbSV/3U3ZDBZb4QrEnuMjvp8C -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:55 2026 by rpki-client