This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R4KKGZ95C5X0_dkaRtMoAGgT_lk.roa File: R4KKGZ95C5X0_dkaRtMoAGgT_lk.roa (raw, json) Hash identifier: OumMjay8j0Bzk0faDzl477g8kWpGaEpp2DUdPv4MteQ= Subject key identifier: 47:82:8A:19:9F:79:0B:95:F4:FD:D9:1A:46:D3:28:00:68:13:FE:59 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B370D3339ED06A0E232D11865C439F7D5 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R4KKGZ95C5X0_dkaRtMoAGgT_lk.roa Signing time: Fri 19 Dec 2025 14:39:30 +0000 ROA not before: Fri 19 Dec 2025 14:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212940 IP address blocks: 95.46.106.0/24 maxlen: 24 95.47.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:0d:33:39:ed:06:a0:e2:32:d1:18:65:c4:39:f7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Dec 19 14:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=47828a199f790b95f4fdd91a46d328006813fe59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:11:1d:7e:1a:15:e5:ad:be:90:36:c7:75:31: 2a:f8:ac:95:bc:0d:1a:7b:5c:5b:c3:5c:15:39:51: 04:cc:fb:69:71:18:07:40:42:33:10:94:7c:f0:a8: dc:d8:e7:2d:5a:7f:5f:39:26:f7:a4:e4:ac:ea:c8: 88:66:33:5e:6c:59:1e:33:25:62:52:81:75:9c:d8: 57:4a:3c:0c:bf:a8:60:bf:7e:50:af:6e:32:0b:6a: b8:6a:26:8a:cd:ee:ce:1b:6d:35:9a:a2:10:16:a1: 77:4c:a4:e2:99:2a:b7:bd:a4:ba:b1:5d:87:b4:a4: 03:61:43:db:dc:36:bc:9f:ab:23:ab:35:e4:27:4c: 94:ea:7b:08:d3:90:11:22:9a:b7:0e:a0:fc:04:07: 24:60:b3:08:79:0b:5f:20:a1:fe:75:fd:ba:12:b2: d6:ec:3d:c0:a9:aa:ee:25:07:12:6c:0f:b1:4f:f9: b4:4f:89:51:08:b9:9a:ea:28:ef:69:53:98:cf:fc: b1:c7:41:54:38:52:9e:ca:4b:50:e5:11:1c:3f:d4: a1:29:01:99:79:9e:c9:bc:9b:cf:47:be:c0:3f:88: b2:d6:02:1b:59:f1:26:df:1a:1c:67:c1:df:6a:44: e0:5d:47:0f:1f:89:9a:24:82:4e:ca:44:17:fc:2a: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:82:8A:19:9F:79:0B:95:F4:FD:D9:1A:46:D3:28:00:68:13:FE:59 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R4KKGZ95C5X0_dkaRtMoAGgT_lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.106.0/24 95.47.177.0/24 Signature Algorithm: sha256WithRSAEncryption 76:d5:3a:36:24:29:d7:c2:8f:5c:dc:ab:eb:6a:74:66:de:6c: 8b:86:7e:b5:03:56:90:3a:f6:19:1d:2e:ae:be:82:35:ad:29: cb:42:2d:f6:6d:46:ee:a0:f3:fe:42:6f:fe:d7:e6:92:77:3f: a6:86:90:c1:3c:e9:a3:26:5a:8e:1d:32:fa:15:4a:c1:29:a1: cf:3b:a3:67:e6:e0:ed:ac:be:ab:0c:7f:2e:f4:64:87:4c:de: a4:7b:66:df:a9:29:22:42:54:a5:a1:8c:7e:8f:fb:cf:3d:9b: 0b:7f:6a:77:0c:24:02:63:c8:b8:c0:23:ee:a4:39:fc:bb:8a: 28:dd:2e:ac:4c:b6:f5:54:0f:4e:00:b0:3a:67:e5:5f:a2:62: 85:99:f7:14:2b:d9:59:04:c4:10:41:b8:72:5e:86:70:60:81: da:e8:0c:01:93:24:1d:40:5f:e7:21:20:80:59:c8:3d:b8:17: 0d:63:ac:be:7d:78:68:86:9f:25:f9:11:43:ad:12:26:cc:82: 3c:c7:fa:96:5e:0a:13:64:f9:ea:fb:45:55:6e:92:1a:df:5a: 8d:be:66:03:0c:d1:70:15:44:33:f0:fa:7c:be:ec:20:a3:f7: b5:c1:af:73:a7:0a:b0:60:ac:ea:35:bf:8c:37:c6:2a:02:de: c7:77:9a:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZs3DTM57Qag4jLRGGXEOffVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMjE5MTQzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzgyOGExOTlmNzkwYjk1ZjRmZGQ5MWE0NmQzMjgwMDY4MTNmZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hEdfhoV5a2+kDbHdTEq+KyVvA0a e1xbw1wVOVEEzPtpcRgHQEIzEJR88Kjc2OctWn9fOSb3pOSs6siIZjNebFkeMyVi UoF1nNhXSjwMv6hgv35Qr24yC2q4aiaKze7OG201mqIQFqF3TKTimSq3vaS6sV2H tKQDYUPb3Da8n6sjqzXkJ0yU6nsI05ARIpq3DqD8BAckYLMIeQtfIKH+df26ErLW 7D3AqaruJQcSbA+xT/m0T4lRCLma6ijvaVOYz/yxx0FUOFKeyktQ5REcP9ShKQGZ eZ7JvJvPR77AP4iy1gIbWfEm3xocZ8HfakTgXUcPH4maJIJOykQX/CqdSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEeCihmfeQuV9P3ZGkbTKABoE/5ZMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUjRLS0daOTVDNVgwX2RrYVJ0TW9BR2dUX2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXy5qAwQA Xy+xMA0GCSqGSIb3DQEBCwUAA4IBAQB21To2JCnXwo9c3KvranRm3myLhn61A1aQ OvYZHS6uvoI1rSnLQi32bUbuoPP+Qm/+1+aSdz+mhpDBPOmjJlqOHTL6FUrBKaHP O6Nn5uDtrL6rDH8u9GSHTN6ke2bfqSkiQlSloYx+j/vPPZsLf2p3DCQCY8i4wCPu pDn8u4oo3S6sTLb1VA9OALA6Z+VfomKFmfcUK9lZBMQQQbhyXoZwYIHa6AwBkyQd QF/nISCAWcg9uBcNY6y+fXhohp8l+RFDrRImzII8x/qWXgoTZPnq+0VVbpIa31qN vmYDDNFwFUQz8Pp8vuwgo/e1wa9zpwqwYKzqNb+MN8YqAt7Hd5oF -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:11 2025 by rpki-client