This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/i3QUut5SMNf_fArC-6BC-nBPQQM.roa File: i3QUut5SMNf_fArC-6BC-nBPQQM.roa (raw, json) Hash identifier: 7btmFOwpyPSREQe20ktqE8Ad/SXj1H2Vai32GvAnjwI= Subject key identifier: 8B:74:14:BA:DE:52:30:D7:FF:7C:0A:C2:FB:A0:42:FA:70:4F:41:03 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7759041A71A62A8D6340FFA30B27A009 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/i3QUut5SMNf_fArC-6BC-nBPQQM.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 95.173.34.0/23 maxlen: 23 95.173.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:1a:71:a6:2a:8d:63:40:ff:a3:0b:27:a0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7414bade5230d7ff7c0ac2fba042fa704f4103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:b4:cd:37:a8:a9:e0:7d:27:91:96:2e:99: 41:4d:3b:e7:52:e2:52:d3:41:0b:c7:1f:65:fe:ba: 77:e5:5e:cb:19:9a:16:7a:1f:d2:c1:d1:b4:1e:e2: ba:0d:6b:24:4e:01:1a:7f:d4:cd:57:7e:96:99:69: e3:13:6a:cb:d5:c9:c8:73:d4:bd:ed:db:fc:6f:96: 93:89:6c:05:de:77:20:7b:e4:8a:c2:06:49:87:b5: 8b:44:3d:72:f4:44:7a:b5:6a:35:5c:ff:cc:8b:5c: 56:5a:b2:cb:1c:86:d8:4f:f4:95:02:d7:cb:20:7e: e6:f0:4b:ae:6d:a0:56:bd:2f:21:27:77:b8:dc:46: ac:53:bb:9a:be:c2:4f:05:47:30:74:5f:89:15:6b: 29:ac:f1:a7:be:85:f8:25:31:8a:00:a7:39:f3:17: 50:cd:e3:88:f5:e2:4a:63:2d:85:1e:47:f9:52:03: f5:8a:a2:dc:a9:b8:61:7e:54:97:d0:bd:e1:0a:5e: df:2e:a5:06:7d:f1:36:e4:e5:5d:51:6c:f0:fb:af: 38:65:e6:8a:0f:b8:ac:bc:f2:5a:7b:98:47:e4:70: 01:b0:ba:07:e6:7e:88:ae:0b:43:82:a7:2f:a3:40: 9f:38:86:07:1c:98:5d:f1:c3:77:1a:c8:ac:c6:96: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:74:14:BA:DE:52:30:D7:FF:7C:0A:C2:FB:A0:42:FA:70:4F:41:03 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/i3QUut5SMNf_fArC-6BC-nBPQQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.34.0-95.173.39.255 Signature Algorithm: sha256WithRSAEncryption 70:c1:7e:80:2e:75:da:a8:cf:7c:93:29:c0:21:30:05:03:fd: 98:c0:62:df:b7:2d:2f:c7:4b:3c:af:39:2c:e4:b0:0f:08:f7: 50:18:31:07:fb:c8:d1:a0:ba:2f:14:3e:d8:59:d5:36:8f:4c: 03:9f:01:81:31:06:fe:cd:cf:4d:f1:a7:8d:37:5a:17:49:c6: 5d:b7:ad:14:b7:26:3a:c5:5d:c4:6b:fb:ff:1b:fc:24:ee:f3: 58:a2:e4:a1:e4:7e:17:62:50:78:1a:2a:3d:d9:8f:d4:66:7c: 72:8f:b7:19:9e:f9:b8:07:14:74:7a:c0:41:fc:b1:05:ee:40: 3e:52:6c:80:dc:9b:49:c0:ea:8e:bf:9b:ed:52:8b:2f:d0:db: fc:7b:5b:b8:28:01:d5:62:63:fb:8b:65:7b:b7:13:97:94:93: 2e:f0:76:62:7f:01:99:ab:8b:d9:a6:0b:c8:1b:ae:38:77:32: 31:4c:47:a8:9c:07:5a:11:ae:61:e6:e8:65:a6:83:a7:e9:29: 75:2f:a7:47:72:e3:f6:d8:35:68:89:45:5f:6a:ef:4b:a0:5a: e0:88:cf:31:83:29:b2:28:6b:46:fd:00:ed:4c:23:17:5f:73: 24:26:d0:d0:5a:0b:77:a1:c1:9a:d0:a2:4b:2b:d5:90:b3:54: e7:32:46:ba -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WQQacaYqjWNA/6MLJ6AJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjc0MTRiYWRlNTIzMGQ3ZmY3YzBhYzJmYmEwNDJmYTcwNGY0MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bm0zTeoqeB9J5GWLplBTTvnUuJS 00ELxx9l/rp35V7LGZoWeh/SwdG0HuK6DWskTgEaf9TNV36WmWnjE2rL1cnIc9S9 7dv8b5aTiWwF3ncge+SKwgZJh7WLRD1y9ER6tWo1XP/Mi1xWWrLLHIbYT/SVAtfL IH7m8EuubaBWvS8hJ3e43EasU7uavsJPBUcwdF+JFWsprPGnvoX4JTGKAKc58xdQ zeOI9eJKYy2FHkf5UgP1iqLcqbhhflSX0L3hCl7fLqUGffE25OVdUWzw+684ZeaK D7isvPJae5hH5HABsLoH5n6IrgtDgqcvo0CfOIYHHJhd8cN3GsisxpaxyQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIt0FLreUjDX/3wKwvugQvpwT0EDMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvaTNRVXV0NVNNTmZfZkFyQy02QkMtbkJQUVFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfrSID BANfrSAwDQYJKoZIhvcNAQELBQADggEBAHDBfoAuddqoz3yTKcAhMAUD/ZjAYt+3 LS/HSzyvOSzksA8I91AYMQf7yNGgui8UPthZ1TaPTAOfAYExBv7Nz03xp403WhdJ xl23rRS3JjrFXcRr+/8b/CTu81ii5KHkfhdiUHgaKj3Zj9RmfHKPtxme+bgHFHR6 wEH8sQXuQD5SbIDcm0nA6o6/m+1Siy/Q2/x7W7goAdViY/uLZXu3E5eUky7wdmJ/ AZmri9mmC8gbrjh3MjFMR6icB1oRrmHm6GWmg6fpKXUvp0dy4/bYNWiJRV9q70ug WuCIzzGDKbIoa0b9AO1MIxdfcyQm0NBaC3ehwZrQoksr1ZCzVOcyRro= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:25 2026 by rpki-client