This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tp5-3g6HSx93fgOazZe59ui_5Ng.roa File: Tp5-3g6HSx93fgOazZe59ui_5Ng.roa (raw, json) Hash identifier: U3lYFMt+LWNt6fYKePMxd/G4z7/6GH98jhMauV3FtLc= Subject key identifier: 4E:9E:7E:DE:0E:87:4B:1F:77:7E:03:9A:CD:97:B9:F6:E8:BF:E4:D8 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FB013897FB492FFC20940D09850B Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tp5-3g6HSx93fgOazZe59ui_5Ng.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204752 IP address blocks: 95.47.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fb:01:38:97:fb:49:2f:fc:20:94:0d:09:85:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e9e7ede0e874b1f777e039acd97b9f6e8bfe4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:0e:8c:f3:02:d1:85:9d:09:c1:24:a2:94: d9:f4:e4:12:4c:3d:0f:74:df:1d:56:98:19:8d:04: 9a:b9:bf:31:16:81:0f:72:3a:51:05:dd:2f:74:c1: b0:5f:db:3c:96:a1:48:eb:3f:30:fb:bf:c5:da:e5: fe:1b:b9:bb:fa:6f:a7:17:fb:49:59:98:f1:cd:73: ee:40:02:d5:9b:7f:24:e7:54:7e:43:a1:6f:22:cc: c0:05:e0:64:72:09:d4:24:a9:3a:d5:8c:b1:71:81: 9c:6b:44:91:df:0b:91:04:0b:ae:57:4c:f3:92:02: db:48:c5:09:dd:e5:de:46:a1:28:34:4f:06:c8:52: b6:f7:13:a9:1c:88:ed:e1:63:da:33:35:70:fb:26: 38:26:ce:e3:9f:c6:0d:a6:f5:55:ba:cc:af:80:db: 74:d1:e2:6a:ee:11:a0:7f:c5:02:b0:b9:b5:3f:7b: ff:77:94:ba:73:6d:75:8c:cb:47:eb:42:34:b4:13: 03:da:97:29:c1:1f:41:66:03:a6:cf:e7:85:0f:6e: 30:ee:63:41:b7:05:c9:24:64:73:83:2c:d7:63:c2: 65:07:5d:ba:3d:02:df:b4:2e:3c:83:3c:81:b1:69: 7d:36:39:e6:e9:8e:a2:76:e8:dc:e9:cf:fb:7d:2a: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9E:7E:DE:0E:87:4B:1F:77:7E:03:9A:CD:97:B9:F6:E8:BF:E4:D8 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tp5-3g6HSx93fgOazZe59ui_5Ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.118.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e6:33:a8:e9:31:d0:5a:ee:ed:c5:14:4c:89:77:4f:ce:15: 7b:ab:eb:83:de:a1:97:ae:d6:80:1c:61:bb:78:df:12:9e:19: 3b:57:69:ac:ca:0f:f9:6f:bb:c1:f7:1a:50:6a:da:2a:6b:99: aa:b5:07:20:ce:1d:27:51:fa:3b:0b:d0:cb:52:e7:a5:08:f4: 13:ee:4a:8d:43:1a:3c:db:14:b1:48:96:2a:42:80:e8:b6:dc: e9:fc:57:05:e9:0d:45:66:41:ce:ff:bc:b1:dd:93:e7:66:18: 12:55:78:99:93:b6:6c:fc:80:1a:8e:5c:bd:57:f5:b2:2b:16: 5a:56:58:3e:b4:b4:40:21:65:38:4d:d4:ac:da:58:51:ba:d4: 03:96:a7:ff:08:47:e2:57:9a:d5:d1:0e:09:e3:6a:52:24:a5: 55:f6:72:1a:e9:64:81:73:af:cb:b3:f5:4b:8e:05:74:67:3a: b2:af:58:b5:0a:91:88:b6:2a:fc:96:43:04:27:47:fe:1d:1d: 4d:b5:a8:a7:18:f5:e2:fc:b1:fb:17:a1:f5:06:4a:97:e0:8b: da:a3:a3:13:52:70:c1:ca:8d:9c:e4:e9:6e:b3:66:54:d8:b4: 98:70:8b:48:a0:2f:1b:43:96:fd:bc:ff:d1:6c:29:3d:58:1f: f6:45:49:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPsBOJf7SS/8IJQNCYULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTllN2VkZTBlODc0YjFmNzc3ZTAzOWFjZDk3YjlmNmU4YmZlNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jwOjPMC0YWdCcEkopTZ9OQSTD0P dN8dVpgZjQSaub8xFoEPcjpRBd0vdMGwX9s8lqFI6z8w+7/F2uX+G7m7+m+nF/tJ WZjxzXPuQALVm38k51R+Q6FvIszABeBkcgnUJKk61YyxcYGca0SR3wuRBAuuV0zz kgLbSMUJ3eXeRqEoNE8GyFK29xOpHIjt4WPaMzVw+yY4Js7jn8YNpvVVusyvgNt0 0eJq7hGgf8UCsLm1P3v/d5S6c211jMtH60I0tBMD2pcpwR9BZgOmz+eFD24w7mNB twXJJGRzgyzXY8JlB126PQLftC48gzyBsWl9Njnm6Y6idujc6c/7fSruLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6eft4Oh0sfd34Dms2Xufbov+TYMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVHA1LTNnNkhTeDkzZmdPYXpaZTU5dWlfNU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy92MA0G CSqGSIb3DQEBCwUAA4IBAQBW5jOo6THQWu7txRRMiXdPzhV7q+uD3qGXrtaAHGG7 eN8Snhk7V2msyg/5b7vB9xpQatoqa5mqtQcgzh0nUfo7C9DLUuelCPQT7kqNQxo8 2xSxSJYqQoDottzp/FcF6Q1FZkHO/7yx3ZPnZhgSVXiZk7Zs/IAajly9V/WyKxZa Vlg+tLRAIWU4TdSs2lhRutQDlqf/CEfiV5rV0Q4J42pSJKVV9nIa6WSBc6/Ls/VL jgV0Zzqyr1i1CpGItir8lkMEJ0f+HR1NtainGPXi/LH7F6H1BkqX4Ivao6MTUnDB yo2c5Olus2ZU2LSYcItIoC8bQ5b9vP/RbCk9WB/2RUnn -----END CERTIFICATE-----Generated at Fri Jan 9 07:31:51 2026 by rpki-client