This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UwS2ldZnFZY6RVZvqVXGYAzC3D8.roa File: UwS2ldZnFZY6RVZvqVXGYAzC3D8.roa (raw, json) Hash identifier: 2xm4mRf6BTn3TJuabqDM9hsUIn1RdaUohHBvEfdoEDY= Subject key identifier: 53:04:B6:95:D6:67:15:96:3A:45:56:6F:A9:55:C6:60:0C:C2:DC:3F Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B9D55A60124F7B73E72811A0E3860FDFE Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UwS2ldZnFZY6RVZvqVXGYAzC3D8.roa Signing time: Thu 08 Jan 2026 11:19:54 +0000 ROA not before: Thu 08 Jan 2026 11:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 95.155.129.0/24 maxlen: 24 95.155.133.0/24 maxlen: 24 95.155.146.0/24 maxlen: 24 152.89.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:55:a6:01:24:f7:b7:3e:72:81:1a:0e:38:60:fd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 8 11:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5304b695d66715963a45566fa955c6600cc2dc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:18:e7:34:15:c1:32:4a:12:b5:20:4d:1a: 84:a6:4c:ad:50:1f:5f:c0:bc:c8:9e:4f:be:e3:8f: a3:eb:81:3f:36:5a:03:3d:4e:e9:6d:9c:0b:e8:bc: af:65:8d:c2:d0:6a:50:aa:31:1c:8e:4d:c4:c6:f9: 05:a5:fa:68:01:45:3c:fe:0b:cd:d6:1e:b8:26:44: c8:d2:7f:72:96:da:7e:8a:60:ce:cf:51:df:47:0e: c5:03:43:af:15:ec:65:65:fe:42:76:49:75:a0:c8: ef:14:bd:ca:af:5c:6b:f9:4b:60:70:69:cd:ce:a3: 9b:7b:bd:ad:61:96:76:ff:90:ea:87:d6:d9:4c:46: fc:1a:e7:e9:37:4c:cb:3d:ac:a2:c1:ac:9a:17:85: 69:de:48:40:8a:c7:66:82:68:43:3c:41:05:04:83: d4:1c:99:76:66:c2:25:87:0d:4c:ae:7e:ba:61:0a: 84:09:15:30:f7:74:b6:4b:ae:f1:06:b7:d7:ab:0e: 4b:9c:f6:d5:4c:59:13:f9:7c:63:24:c9:9c:c5:74: 49:3a:89:0d:00:1e:b2:d4:cb:a3:7a:ef:bb:80:c4: 4d:2e:62:21:02:c2:97:00:7d:82:08:3d:5e:5e:30: 4b:6a:07:da:d6:d2:bd:39:f2:1a:0a:16:bd:25:95: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:B6:95:D6:67:15:96:3A:45:56:6F:A9:55:C6:60:0C:C2:DC:3F X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/UwS2ldZnFZY6RVZvqVXGYAzC3D8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.129.0/24 95.155.133.0/24 95.155.146.0/24 152.89.84.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:ce:1b:5f:e9:0e:8a:b9:45:51:35:6e:ce:8e:dd:96:7b:2c: 1c:8d:ad:c4:f0:95:5f:2d:1c:0f:e3:d9:b4:a6:72:9f:3a:36: 34:27:ea:4b:a5:38:8b:54:a3:27:c9:ef:46:a6:8a:7c:17:33: 20:2d:d4:a8:e0:4b:59:b3:b1:b8:fc:76:b2:7e:7b:3b:15:e5: e3:91:64:f8:fb:f2:89:68:64:0e:2c:0f:cf:6f:81:5e:6d:9b: 90:4b:0d:24:06:a6:98:42:a4:60:70:c6:36:55:2a:49:af:f3: 13:30:0f:28:00:64:fe:e5:50:13:b2:af:0f:fa:26:4d:ae:ab: f2:4b:dc:d2:eb:5f:f7:90:4b:16:67:c0:22:6c:82:89:92:a9: 18:af:24:da:a4:02:2f:6e:85:22:25:33:83:38:5f:fa:cc:8b: 4f:88:2e:e7:2c:50:e1:9c:dd:d8:92:0d:2b:05:1d:0d:7e:2e: 0b:5d:5e:7e:a0:6f:3d:36:f5:22:c0:71:0c:cc:48:03:11:29: b2:d9:5e:32:94:2c:f5:d3:7c:a4:0f:11:3e:16:3b:c6:0e:12: 5a:4d:79:e2:d8:f2:0b:68:4c:61:e8:e3:67:b9:0e:cb:6d:8f: 77:11:a3:f8:f7:11:a8:3e:54:61:e3:36:3d:e3:24:34:45:f1: b1:77:e5:34 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZudVaYBJPe3PnKBGg44YP3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTA4MTExOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzA0YjY5NWQ2NjcxNTk2M2E0NTU2NmZhOTU1YzY2MDBjYzJkYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQEY5zQVwTJKErUgTRqEpkytUB9f wLzInk++44+j64E/NloDPU7pbZwL6LyvZY3C0GpQqjEcjk3ExvkFpfpoAUU8/gvN 1h64JkTI0n9yltp+imDOz1HfRw7FA0OvFexlZf5Cdkl1oMjvFL3Kr1xr+UtgcGnN zqObe72tYZZ2/5Dqh9bZTEb8GufpN0zLPayiwayaF4Vp3khAisdmgmhDPEEFBIPU HJl2ZsIlhw1Mrn66YQqECRUw93S2S67xBrfXqw5LnPbVTFkT+XxjJMmcxXRJOokN AB6y1Mujeu+7gMRNLmIhAsKXAH2CCD1eXjBLagfa1tK9OfIaCha9JZW+7QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFMEtpXWZxWWOkVWb6lVxmAMwtw/MB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvVXdTMmxkWm5GWlk2UlZadnFWWEdZQXpDM0Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX5uBAwQA X5uFAwQAX5uSAwQAmFlUMA0GCSqGSIb3DQEBCwUAA4IBAQBOzhtf6Q6KuUVRNW7O jt2Weywcja3E8JVfLRwP49m0pnKfOjY0J+pLpTiLVKMnye9Gpop8FzMgLdSo4EtZ s7G4/Hayfns7FeXjkWT4+/KJaGQOLA/Pb4FebZuQSw0kBqaYQqRgcMY2VSpJr/MT MA8oAGT+5VATsq8P+iZNrqvyS9zS61/3kEsWZ8AibIKJkqkYryTapAIvboUiJTOD OF/6zItPiC7nLFDhnN3Ykg0rBR0Nfi4LXV5+oG89NvUiwHEMzEgDESmy2V4ylCz1 03ykDxE+FjvGDhJaTXni2PILaExh6ONnuQ7LbY93EaP49xGoPlRh4zY94yQ0RfGx d+U0 -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:44 2026 by rpki-client