This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/4K_95KFZWMhbPpIfz5E1jHBv5aw.roa File: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (raw, json) Hash identifier: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ= Subject key identifier: E0:AF:FD:E4:A1:59:58:C8:5B:3E:92:1F:CF:91:35:8C:70:6F:E5:AC Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347DFE4DE3334C9A74295D16751991 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/4K_95KFZWMhbPpIfz5E1jHBv5aw.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.95.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7d:fe:4d:e3:33:4c:9a:74:29:5d:16:75:19:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0affde4a15958c85b3e921fcf91358c706fe5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:bf:1f:b1:ba:b4:81:0a:5c:5a:4d:38:ad: ce:d1:c7:22:b8:dc:a6:87:bf:a4:76:38:7d:02:e6: ea:54:22:da:ca:98:54:4b:53:eb:97:64:c3:21:fa: a3:2d:33:7e:77:c3:31:ac:03:bc:9a:bf:ae:50:63: 11:06:7d:8a:ea:0f:75:66:b5:de:af:bc:49:8f:fa: 46:f0:35:5c:2c:2a:d6:fc:75:55:1b:2e:67:5f:dc: c4:5d:fe:71:32:64:bb:b9:ea:cf:28:86:6c:85:90: a1:4f:04:f7:40:d9:4d:df:46:3f:2d:78:f8:3e:d0: 50:34:03:6b:af:3c:42:ad:9e:0b:44:a7:be:28:13: ff:43:3e:41:23:6b:5d:81:cf:87:80:0a:bc:b0:04: 78:be:3d:58:35:9e:f4:b1:c7:19:d1:b3:e6:31:3a: 59:a3:d6:01:8d:96:74:ec:ac:78:90:75:c7:0d:f9: 6b:03:9f:b5:ac:c1:0b:81:c8:9c:c7:bb:9e:ac:c8: 32:1a:79:0d:15:ae:64:bf:56:d1:79:18:10:ff:16: e2:a4:9d:fe:de:7f:a4:18:7a:09:87:b9:da:db:a7: c1:77:eb:98:c9:8e:32:87:6c:5f:d7:49:ce:67:31: 28:bc:9a:e2:16:94:24:e2:3b:a9:f7:dc:7a:d7:6e: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:FD:E4:A1:59:58:C8:5B:3E:92:1F:CF:91:35:8C:70:6F:E5:AC X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/4K_95KFZWMhbPpIfz5E1jHBv5aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.227.0/24 Signature Algorithm: sha256WithRSAEncryption 32:80:11:09:9e:eb:b9:16:36:eb:c4:5e:4f:34:6e:54:98:c4: 19:7d:1d:95:d2:a0:3c:fa:98:eb:5d:4b:e7:35:0f:c9:e1:c9: bc:4c:e8:78:ac:99:31:46:82:99:7e:cf:62:13:13:2e:07:47: 1f:0c:dd:21:51:4b:c5:c1:b0:bf:04:af:8e:c9:b0:d1:52:6c: aa:aa:43:91:24:6a:bb:34:b7:f9:de:11:d8:b4:32:23:d3:cd: c4:e6:4d:04:45:10:b2:8c:48:ee:c3:71:20:49:58:9a:e2:46: b7:16:98:99:fa:b7:e1:19:72:16:05:16:ce:ec:43:27:08:1d: ce:af:8e:99:3b:53:95:e0:e6:08:70:05:29:2b:ac:54:17:59: 49:68:84:93:99:c9:6a:2d:f8:99:d3:a3:06:c0:b7:d6:16:d2: 00:42:52:4f:cd:d7:f2:47:fd:14:0f:a8:c2:bb:3b:be:ac:54: b7:94:bc:3b:60:34:b7:4f:22:04:e3:e2:aa:b3:46:c4:37:0a: 22:ae:18:12:29:4e:d1:b2:96:a1:2c:98:96:6a:8f:6a:c6:e7: 44:d8:6f:20:a0:4c:ef:c4:cf:83:12:d3:80:e5:33:81:fa:c1: dd:f6:cb:94:24:f4:15:c6:25:7a:b5:6d:8c:52:bb:59:a4:a8: 49:6d:69:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NH3+TeMzTJp0KV0WdRmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFmZmRlNGExNTk1OGM4NWIzZTkyMWZjZjkxMzU4YzcwNmZlNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LS/H7G6tIEKXFpNOK3O0cciuNym h7+kdjh9AubqVCLayphUS1Prl2TDIfqjLTN+d8MxrAO8mr+uUGMRBn2K6g91ZrXe r7xJj/pG8DVcLCrW/HVVGy5nX9zEXf5xMmS7uerPKIZshZChTwT3QNlN30Y/LXj4 PtBQNANrrzxCrZ4LRKe+KBP/Qz5BI2tdgc+HgAq8sAR4vj1YNZ70sccZ0bPmMTpZ o9YBjZZ07Kx4kHXHDflrA5+1rMELgcicx7uerMgyGnkNFa5kv1bReRgQ/xbipJ3+ 3n+kGHoJh7na26fBd+uYyY4yh2xf10nOZzEovJriFpQk4jup99x6124UTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCv/eShWVjIWz6SH8+RNYxwb+WsMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvNEtfOTVLRlpXTWhiUHBJZno1RTFqSEJ2NWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/jMA0G CSqGSIb3DQEBCwUAA4IBAQAygBEJnuu5FjbrxF5PNG5UmMQZfR2V0qA8+pjrXUvn NQ/J4cm8TOh4rJkxRoKZfs9iExMuB0cfDN0hUUvFwbC/BK+OybDRUmyqqkORJGq7 NLf53hHYtDIj083E5k0ERRCyjEjuw3EgSVia4ka3FpiZ+rfhGXIWBRbO7EMnCB3O r46ZO1OV4OYIcAUpK6xUF1lJaISTmclqLfiZ06MGwLfWFtIAQlJPzdfyR/0UD6jC uzu+rFS3lLw7YDS3TyIE4+Kqs0bENwoirhgSKU7RspahLJiWao9qxudE2G8goEzv xM+DEtOA5TOB+sHd9suUJPQVxiV6tW2MUrtZpKhJbWlF -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:33 2026 by rpki-client