This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/hYsxL4CUWoNh1mO7dY4UpGFrYh4.roa File: hYsxL4CUWoNh1mO7dY4UpGFrYh4.roa (raw, json) Hash identifier: 4Q3j+EDFc4gBwqw/9FACmms9ixeQJhG2Mzs9vpdrL2Q= Subject key identifier: 85:8B:31:2F:80:94:5A:83:61:D6:63:BB:75:8E:14:A4:61:6B:62:1E Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808148B516B6F49FC9451A3D564F1E Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/hYsxL4CUWoNh1mO7dY4UpGFrYh4.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52008 IP address blocks: 95.81.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:48:b5:16:b6:f4:9f:c9:45:1a:3d:56:4f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=858b312f80945a8361d663bb758e14a4616b621e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:b4:80:1f:e2:62:17:f5:ce:ab:10:c1:d5: c4:d5:70:90:ba:e5:78:9d:dc:91:ff:20:fa:94:b0: e3:fe:55:2e:be:47:cc:91:23:a1:ea:25:13:a4:53: 35:1e:44:c6:f3:30:7c:8e:1a:3d:d2:23:5a:3e:5c: e1:14:22:ff:d7:1f:62:7b:ab:44:16:af:a1:71:86: de:b5:e4:78:5a:12:59:6b:8d:46:0a:82:4b:55:92: d6:22:e0:02:1a:55:28:be:1a:1c:1a:78:7e:1c:55: 41:76:ea:73:e8:9b:a2:6f:80:d0:30:25:bc:3e:32: 5f:f1:f4:03:85:58:5f:4f:a0:2a:42:7a:56:e9:ec: 11:b6:ba:98:dc:cc:90:19:97:0a:be:af:c2:63:9c: fb:c9:8e:14:d6:10:ac:4b:ac:06:7f:8e:06:15:62: c2:c5:aa:2e:c5:81:f1:7a:95:70:79:7d:27:e6:62: 8c:de:e9:63:87:fd:c4:f1:ac:b0:8f:9e:55:31:87: 08:9e:87:65:dd:45:ca:55:20:d2:50:73:44:d8:42: fb:51:43:bb:97:21:e2:40:fc:6c:1f:33:c3:3a:ba: d5:a7:a7:2a:5f:3d:1e:5a:11:35:bf:1b:8b:ad:7e: 25:77:6a:84:08:50:ee:79:fc:2c:2f:f7:ef:93:5c: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8B:31:2F:80:94:5A:83:61:D6:63:BB:75:8E:14:A4:61:6B:62:1E X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/hYsxL4CUWoNh1mO7dY4UpGFrYh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.81.116.0/24 Signature Algorithm: sha256WithRSAEncryption 77:cd:2d:f8:db:b5:67:f3:f3:b8:6b:0f:19:ec:dd:f0:0a:64: 03:cc:97:e6:21:25:9a:e6:ba:6e:72:59:6c:19:78:4e:d5:43: 28:ff:bc:1d:b6:0e:bd:0f:dd:ed:04:ea:6c:02:f3:b2:53:7c: 0a:53:54:ac:bf:0d:4b:f9:aa:97:f3:95:3e:f2:51:70:ef:f8: 69:f4:7c:12:db:30:18:fb:77:64:f7:55:00:50:4f:90:9b:8f: 04:2e:8e:dd:67:75:58:f1:32:74:79:44:e6:86:1e:7b:b4:da: ba:52:0d:4e:2c:1e:a9:7b:cc:4e:74:d6:4b:e5:ce:f3:5e:c0: 49:ed:c6:fc:13:a3:bb:b0:04:bb:9e:7b:04:f0:0a:fd:36:80: 82:15:50:32:51:dd:b9:9c:e6:22:f9:9c:27:94:6e:44:f9:41: a5:94:77:05:22:ed:ac:2e:8a:bf:72:23:b3:d4:5f:48:61:78: d0:c4:6f:ad:3b:c4:8c:eb:45:9b:06:15:17:21:5f:86:c4:78: 60:bb:43:0d:11:61:79:76:cb:0d:fa:b9:c9:4e:69:07:29:7a: 2a:d6:a8:61:4d:a2:1e:07:a5:c5:95:91:62:b5:a6:94:c7:3c: 26:9c:7c:af:5d:d6:79:35:37:b1:5f:3e:e2:eb:eb:0d:b6:75: d1:4a:05:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIFItRa29J/JRRo9Vk8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NThiMzEyZjgwOTQ1YTgzNjFkNjYzYmI3NThlMTRhNDYxNmI2MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvu0gB/iYhf1zqsQwdXE1XCQuuV4 ndyR/yD6lLDj/lUuvkfMkSOh6iUTpFM1HkTG8zB8jho90iNaPlzhFCL/1x9ie6tE Fq+hcYbeteR4WhJZa41GCoJLVZLWIuACGlUovhocGnh+HFVBdupz6Juib4DQMCW8 PjJf8fQDhVhfT6AqQnpW6ewRtrqY3MyQGZcKvq/CY5z7yY4U1hCsS6wGf44GFWLC xaouxYHxepVweX0n5mKM3uljh/3E8aywj55VMYcInodl3UXKVSDSUHNE2EL7UUO7 lyHiQPxsHzPDOrrVp6cqXz0eWhE1vxuLrX4ld2qECFDuefwsL/fvk1ychQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWLMS+AlFqDYdZju3WOFKRha2IeMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvaFlzeEw0Q1VXb05oMW1PN2RZNFVwR0ZyWWg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1F0MA0G CSqGSIb3DQEBCwUAA4IBAQB3zS3427Vn8/O4aw8Z7N3wCmQDzJfmISWa5rpuclls GXhO1UMo/7wdtg69D93tBOpsAvOyU3wKU1Ssvw1L+aqX85U+8lFw7/hp9HwS2zAY +3dk91UAUE+Qm48ELo7dZ3VY8TJ0eUTmhh57tNq6Ug1OLB6pe8xOdNZL5c7zXsBJ 7cb8E6O7sAS7nnsE8Ar9NoCCFVAyUd25nOYi+ZwnlG5E+UGllHcFIu2sLoq/ciOz 1F9IYXjQxG+tO8SM60WbBhUXIV+GxHhgu0MNEWF5dssN+rnJTmkHKXoq1qhhTaIe B6XFlZFitaaUxzwmnHyvXdZ5NTexXz7i6+sNtnXRSgXD -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:45 2026 by rpki-client