This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/gCwdPZm7-2mkCNs_6h-_knpGMgA.roa File: gCwdPZm7-2mkCNs_6h-_knpGMgA.roa (raw, json) Hash identifier: zOOdjbIrjBtj8zo7gLNAmynH9YT4viYiJaXTAoE0p/w= Subject key identifier: 80:2C:1D:3D:99:BB:FB:69:A4:08:DB:3F:EA:1F:BF:92:7A:46:32:00 Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f Certificate serial: 019B7910CFCCC960471CD3C01E8D360CE1FD Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/gCwdPZm7-2mkCNs_6h-_knpGMgA.roa Signing time: Thu 01 Jan 2026 10:18:23 +0000 ROA not before: Thu 01 Jan 2026 10:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204105 IP address blocks: 95.215.59.0/24 maxlen: 24 2a13:c640::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cf:cc:c9:60:47:1c:d3:c0:1e:8d:36:0c:e1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=802c1d3d99bbfb69a408db3fea1fbf927a463200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:51:9f:c9:8f:14:a3:5c:6e:fb:ee:09:b7: 8b:54:4a:23:15:48:1e:9f:d9:70:c5:76:d0:21:a2: 11:43:0b:4e:da:96:c6:f3:b8:25:9a:9d:98:ce:f7: 3d:d7:94:c4:a1:2e:39:d9:44:10:5b:bb:56:23:be: e8:cf:4d:75:b2:34:14:e9:17:da:72:a2:b3:c3:65: b8:cc:14:2e:32:47:7c:4a:90:c4:c1:24:61:7f:0b: c1:02:db:bd:9a:15:84:0c:c4:ac:02:3e:1c:8f:7f: 8f:f2:f6:58:74:cd:61:a7:81:8e:d7:c4:5f:f1:e2: b7:dd:6a:c6:50:ef:7b:72:2b:9b:b2:e3:d4:e1:6e: a7:a5:7b:bd:7e:71:e5:1f:d6:58:e2:b8:8c:d3:cf: d9:08:53:77:f1:39:79:ae:8b:73:fb:da:55:b6:57: 76:f8:8d:82:1c:c9:77:de:e8:f9:75:a6:af:14:94: 0f:51:54:8e:8e:49:b1:f1:e8:2a:39:2e:60:d5:97: f2:e8:93:97:e3:4e:96:77:e7:5a:67:53:66:ed:c2: 94:87:e2:02:8c:65:04:05:ba:7f:19:0d:db:37:94: 38:80:01:df:d8:0a:2f:86:d7:b0:6b:d9:26:2f:99: cc:f0:84:cc:45:83:56:5d:dd:be:d5:d6:0c:90:4e: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2C:1D:3D:99:BB:FB:69:A4:08:DB:3F:EA:1F:BF:92:7A:46:32:00 X509v3 Authority Key Identifier: keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/gCwdPZm7-2mkCNs_6h-_knpGMgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.59.0/24 IPv6: 2a13:c640::/30 Signature Algorithm: sha256WithRSAEncryption 66:61:1e:80:3f:2d:e0:37:ae:41:bf:c1:eb:45:54:0e:66:eb: 9a:78:12:f2:8c:dc:90:dc:64:d9:6c:9e:9d:59:3a:86:93:23: 45:21:34:6b:4c:49:ec:59:0c:38:ec:ed:bd:04:ea:24:0a:b0: e9:82:11:e2:b0:25:12:26:1d:32:81:66:db:30:2a:4e:05:e1: 93:c2:cd:32:53:82:81:49:41:7e:c5:32:9a:b6:4a:be:9e:d4: 93:45:45:9e:f6:62:90:35:af:55:c1:23:60:eb:7a:fa:cb:04: 29:92:9c:dd:9c:7f:05:34:57:60:3f:73:1f:1c:79:f0:a3:54: bc:14:9f:b5:75:f2:90:34:e9:39:b0:e7:90:69:43:1c:d9:50: f3:e6:5e:88:52:e9:c1:13:f5:e9:3c:bf:a6:18:f3:4e:cf:96: a1:3e:8e:c8:1b:87:4a:12:7e:d9:27:ba:b6:12:45:eb:e8:25: 3c:5e:bd:2a:69:c4:77:fc:3a:7f:e0:70:2d:58:46:8f:9d:f6: 00:65:e8:17:44:e3:b5:1d:ae:4d:2e:c1:2a:2a:ea:e7:2e:08: d9:53:68:b6:55:4d:16:04:26:84:e0:ab:b2:71:49:9c:53:01: f6:99:0d:33:93:97:00:a4:a4:aa:9c:be:1e:49:8f:e6:15:40: c0:75:87:50 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EM/MyWBHHNPAHo02DOH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDIyZWFhM2RhZWRmNmI5MDIxNTllZWRiZTk0Y2E5Yjdk MjI4NGYwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDJjMWQzZDk5YmJmYjY5YTQwOGRiM2ZlYTFmYmY5MjdhNDYzMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaVRn8mPFKNcbvvuCbeLVEojFUge n9lwxXbQIaIRQwtO2pbG87glmp2Yzvc915TEoS452UQQW7tWI77oz011sjQU6Rfa cqKzw2W4zBQuMkd8SpDEwSRhfwvBAtu9mhWEDMSsAj4cj3+P8vZYdM1hp4GO18Rf 8eK33WrGUO97ciubsuPU4W6npXu9fnHlH9ZY4riM08/ZCFN38Tl5rotz+9pVtld2 +I2CHMl33uj5daavFJQPUVSOjkmx8egqOS5g1Zfy6JOX406Wd+daZ1Nm7cKUh+IC jGUEBbp/GQ3bN5Q4gAHf2Aovhtewa9kmL5nM8ITMRYNWXd2+1dYMkE4eLQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIAsHT2Zu/tppAjbP+ofv5J6RjIAMB8GA1UdIwQY MBaAFERCLqo9rt9rkCFZ7tvpTKm30ihPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUt YzA1MGY0YzA1ZjI5LzEvZ0N3ZFBabTctMm1rQ05zXzZoLV9rbnBHTWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUtYzA1MGY0YzA1ZjI5 LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAX9c7MA0E AgACMAcDBQIqE8ZAMA0GCSqGSIb3DQEBCwUAA4IBAQBmYR6APy3gN65Bv8HrRVQO ZuuaeBLyjNyQ3GTZbJ6dWTqGkyNFITRrTEnsWQw47O29BOokCrDpghHisCUSJh0y gWbbMCpOBeGTws0yU4KBSUF+xTKatkq+ntSTRUWe9mKQNa9VwSNg63r6ywQpkpzd nH8FNFdgP3MfHHnwo1S8FJ+1dfKQNOk5sOeQaUMc2VDz5l6IUunBE/XpPL+mGPNO z5ahPo7IG4dKEn7ZJ7q2EkXr6CU8Xr0qacR3/Dp/4HAtWEaPnfYAZegXROO1Ha5N LsEqKurnLgjZU2i2VU0WBCaE4KuycUmcUwH2mQ0zk5cApKSqnL4eSY/mFUDAdYdQ -----END CERTIFICATE-----Generated at Thu Jan 8 11:03:23 2026 by rpki-client