This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa File: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (raw, json) Hash identifier: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4= Subject key identifier: A7:E0:71:0B:75:15:0F:F9:C4:44:E6:0C:FE:25:10:B2:BC:C3:F4:6C Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc Certificate serial: 019B78A25E89D4CA4C35DE70C10D0E20E480 Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 95.130.110.0/24 maxlen: 24 195.93.196.0/24 maxlen: 24 195.93.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5e:89:d4:ca:4c:35:de:70:c1:0d:0e:20:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7e0710b75150ff9c444e60cfe2510b2bcc3f46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:71:33:9a:4f:59:ca:43:e7:4b:36:7f:97: 6e:f3:a8:c6:ed:12:54:29:0c:44:55:85:6a:d2:29: ef:ce:bb:23:14:42:d0:ff:da:07:c2:4d:ef:db:2d: 39:2e:0b:4e:d0:b3:bd:82:66:71:f4:50:b3:e7:82: 06:ab:18:a6:74:6d:7a:97:b8:f6:d0:1b:12:15:16: 0e:31:71:46:fd:41:76:e2:27:2c:c4:eb:16:15:32: 3b:78:9d:8b:70:3d:24:79:98:32:cb:ab:03:94:4e: 13:aa:17:36:fc:8a:6b:38:54:03:74:91:e9:86:08: 9b:60:c6:9c:dc:0c:34:d5:e3:13:65:94:f3:a5:a3: f2:88:a6:81:e8:27:0e:6e:4d:95:49:39:2a:18:72: 6a:ed:ba:5b:1e:01:50:ca:6d:f9:60:db:76:7a:56: cf:e1:3e:18:f8:bc:7b:5a:b3:1f:f4:a7:6f:5b:40: 34:97:6c:0b:d3:84:43:39:55:f6:cd:d4:91:5a:87: 24:83:ea:27:b5:7e:ad:bd:46:ba:80:67:8c:0e:0c: 3a:82:3a:22:e7:6d:76:89:be:eb:f0:77:9d:aa:6c: 8e:41:25:76:49:bf:ae:06:9d:9b:11:b3:e6:9e:fe: 4e:2a:2f:d2:1d:96:1f:3d:de:65:91:c9:d3:e0:7e: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E0:71:0B:75:15:0F:F9:C4:44:E6:0C:FE:25:10:B2:BC:C3:F4:6C X509v3 Authority Key Identifier: keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.110.0/24 195.93.196.0/23 Signature Algorithm: sha256WithRSAEncryption dd:c3:fd:22:ae:49:54:4b:11:c8:65:51:b2:af:f9:d8:8e:c9: ba:c5:a2:76:df:35:de:ae:1a:57:d3:25:56:aa:89:c5:28:55: 2a:34:54:50:56:64:19:eb:c1:f2:d9:47:1b:61:bf:5a:3b:90: 77:43:a9:84:fd:90:1e:32:8f:af:24:f4:95:28:89:a2:f1:66: 08:e2:12:d2:7d:b7:02:49:f1:2b:d9:4c:a0:ec:6e:e7:04:1c: f8:4f:82:6a:c0:c9:ed:15:2c:ea:31:81:0d:ee:f6:ad:c3:f2: 39:c2:0c:e5:a5:1b:3e:4d:65:0a:f4:7a:b8:15:80:9d:b8:40: 00:c9:7e:ef:f0:60:21:55:7e:73:4b:51:bb:4c:70:b0:ac:27: 36:b4:07:ad:b2:bb:22:6b:8e:73:82:43:90:2e:45:e6:52:53: e9:87:1e:f4:a3:da:04:3c:bb:7e:c6:43:47:99:98:87:80:ca: be:26:d9:b7:e8:02:0b:9d:2c:d7:c8:ff:2d:4b:29:1e:e9:05: 85:b8:b9:db:21:b6:2c:0e:e8:13:53:05:db:1a:72:2d:cf:e2: b0:22:20:93:ec:95:b8:04:3f:a9:2f:f7:93:42:85:96:89:60: a2:db:3a:64:39:31:27:bb:53:94:71:c6:01:0f:e1:b1:78:6a: 0c:0f:47:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ol6J1MpMNd5wwQ0OIOSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk MGRjYmMwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2UwNzEwYjc1MTUwZmY5YzQ0NGU2MGNmZTI1MTBiMmJjYzNmNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rpxM5pPWcpD50s2f5du86jG7RJU KQxEVYVq0invzrsjFELQ/9oHwk3v2y05LgtO0LO9gmZx9FCz54IGqximdG16l7j2 0BsSFRYOMXFG/UF24icsxOsWFTI7eJ2LcD0keZgyy6sDlE4Tqhc2/IprOFQDdJHp hgibYMac3Aw01eMTZZTzpaPyiKaB6CcObk2VSTkqGHJq7bpbHgFQym35YNt2elbP 4T4Y+Lx7WrMf9KdvW0A0l2wL04RDOVX2zdSRWockg+ontX6tvUa6gGeMDgw6gjoi 5212ib7r8HedqmyOQSV2Sb+uBp2bEbPmnv5OKi/SHZYfPd5lkcnT4H5SRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKfgcQt1FQ/5xETmDP4lELK8w/RsMB8GA1UdIwQY MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt YzUyZGY0YWE1MjFkLzEvcC1CeEMzVVZEX25FUk9ZTV9pVVFzcnpEOUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4JuAwQB w13EMA0GCSqGSIb3DQEBCwUAA4IBAQDdw/0irklUSxHIZVGyr/nYjsm6xaJ23zXe rhpX0yVWqonFKFUqNFRQVmQZ68Hy2UcbYb9aO5B3Q6mE/ZAeMo+vJPSVKImi8WYI 4hLSfbcCSfEr2Uyg7G7nBBz4T4JqwMntFSzqMYEN7vatw/I5wgzlpRs+TWUK9Hq4 FYCduEAAyX7v8GAhVX5zS1G7THCwrCc2tAetsrsia45zgkOQLkXmUlPphx70o9oE PLt+xkNHmZiHgMq+Jtm36AILnSzXyP8tSyke6QWFuLnbIbYsDugTUwXbGnItz+Kw IiCT7JW4BD+pL/eTQoWWiWCi2zpkOTEnu1OUccYBD+GxeGoMD0f4 -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:43 2026 by rpki-client