This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa File: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (raw, json) Hash identifier: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0= Subject key identifier: 73:42:22:4F:F6:E1:7F:8B:00:7A:AD:99:27:AF:66:0C:48:92:78:A1 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B7F14E76F40F46B7854B076BBD83000EF Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203425 IP address blocks: 93.95.8.0/21 maxlen: 24 151.236.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e7:6f:40:f4:6b:78:54:b0:76:bb:d8:30:00:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7342224ff6e17f8b007aad9927af660c489278a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:7c:7f:a9:8f:54:b7:e1:48:2d:29:27:5a: 7d:e6:c7:11:66:6b:37:07:b2:61:c4:1d:d9:f5:ab: 6a:e4:91:59:36:76:a7:dc:da:62:2f:e4:c9:51:91: 92:a2:c4:b8:ca:bb:8a:35:23:fd:f6:fb:a4:0e:7b: 2a:ac:fc:4d:bd:07:7f:38:a1:f9:bd:08:37:83:aa: f3:95:58:72:49:38:47:84:ce:08:eb:d1:bf:f3:38: 9f:da:bc:69:2f:10:f7:db:7c:76:cf:b3:e7:7f:35: a8:ca:2e:85:de:bf:03:ef:bf:0c:b9:8f:85:76:2f: 1e:b9:a6:ff:9d:03:ab:44:3f:08:44:34:68:99:d9: 87:7f:32:64:1f:74:2e:35:fb:a9:12:cc:ed:c3:15: 15:94:74:36:b5:f8:cb:c5:1e:71:ae:70:b1:f3:67: 6b:64:11:3d:1a:8f:ed:bb:1c:14:88:ea:11:83:ad: 9c:be:4c:c8:e8:ea:ad:3b:2e:29:dc:77:ce:ca:63: e2:2b:e7:a0:20:a1:e1:af:68:c8:69:9f:d4:75:08: 12:86:ca:ef:2e:f3:ef:03:4e:f6:82:6e:7a:f6:e6: 42:cf:0e:fd:e2:89:cd:ea:c2:0e:01:e4:3d:3f:19: 67:2f:df:18:9a:1e:19:1d:69:d7:cb:a8:48:ac:b2: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:42:22:4F:F6:E1:7F:8B:00:7A:AD:99:27:AF:66:0C:48:92:78:A1 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.8.0/21 151.236.208.0/21 Signature Algorithm: sha256WithRSAEncryption 90:96:67:6b:6b:c2:04:9b:c0:ff:22:cc:0c:28:a6:73:14:50: ba:97:3e:98:7e:de:fd:8f:19:01:d6:8d:d4:8c:f8:af:59:2e: ca:00:72:e5:ca:ee:41:77:3f:e9:8e:84:c8:34:60:cf:59:c5: 4b:74:a4:46:f8:ae:f6:29:18:a5:f9:5a:36:c0:43:71:62:a9: 56:9e:4a:05:91:51:72:dc:fe:a2:84:42:56:75:10:fb:4e:23: 0e:ed:95:c9:c3:8b:3a:2b:7f:21:89:a2:e5:7c:32:bd:37:98: 2f:98:63:92:f5:e4:d9:4b:57:cf:72:a1:75:fc:d9:12:e3:8e: 4f:08:d0:43:24:ed:2b:9f:2f:d9:2d:48:85:9f:49:92:56:76: bd:2c:d3:7e:90:28:2c:59:42:94:95:71:fe:c9:4e:bb:44:3d: 2d:0b:2e:42:cf:67:19:e9:d1:6b:1f:f2:ac:2c:02:5a:13:a1: 10:46:67:36:05:c0:7e:1e:e0:12:30:b1:f7:31:7a:17:27:6c: a6:f7:62:ea:52:c3:94:a0:85:d8:4d:75:21:1e:a1:3f:f3:71: 49:f7:a5:41:d1:21:a6:ff:67:f4:09:98:1f:74:cd:15:72:c6: e3:6c:b5:3d:dc:17:37:10:26:89:59:b2:67:21:ea:5f:69:cb: b5:26:5c:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FOdvQPRreFSwdrvYMADvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzQyMjI0ZmY2ZTE3ZjhiMDA3YWFkOTkyN2FmNjYwYzQ4OTI3OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iB8f6mPVLfhSC0pJ1p95scRZms3 B7JhxB3Z9atq5JFZNnan3NpiL+TJUZGSosS4yruKNSP99vukDnsqrPxNvQd/OKH5 vQg3g6rzlVhySThHhM4I69G/8zif2rxpLxD323x2z7PnfzWoyi6F3r8D778MuY+F di8euab/nQOrRD8IRDRomdmHfzJkH3QuNfupEsztwxUVlHQ2tfjLxR5xrnCx82dr ZBE9Go/tuxwUiOoRg62cvkzI6OqtOy4p3HfOymPiK+egIKHhr2jIaZ/UdQgShsrv LvPvA072gm569uZCzw794onN6sIOAeQ9PxlnL98Ymh4ZHWnXy6hIrLJFTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHNCIk/24X+LAHqtmSevZgxIknihMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEvYzBJaVRfYmhmNHNBZXEyWko2OW1ERWlTZUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXV8IAwQD l+zQMA0GCSqGSIb3DQEBCwUAA4IBAQCQlmdra8IEm8D/IswMKKZzFFC6lz6Yft79 jxkB1o3UjPivWS7KAHLlyu5Bdz/pjoTINGDPWcVLdKRG+K72KRil+Vo2wENxYqlW nkoFkVFy3P6ihEJWdRD7TiMO7ZXJw4s6K38hiaLlfDK9N5gvmGOS9eTZS1fPcqF1 /NkS445PCNBDJO0rny/ZLUiFn0mSVna9LNN+kCgsWUKUlXH+yU67RD0tCy5Cz2cZ 6dFrH/KsLAJaE6EQRmc2BcB+HuASMLH3MXoXJ2ym92LqUsOUoIXYTXUhHqE/83FJ 96VB0SGm/2f0CZgfdM0VcsbjbLU93Bc3ECaJWbJnIepfacu1Jlyz -----END CERTIFICATE-----Generated at Sat Jan 10 23:27:19 2026 by rpki-client