This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/i6ZPGK_7Bigyr85KXz1VVHT10Q0.roa File: i6ZPGK_7Bigyr85KXz1VVHT10Q0.roa (raw, json) Hash identifier: joh45/eIjcr7bpYGjukpldugHoxa03PMZKsduB6yEWU= Subject key identifier: 8B:A6:4F:18:AF:FB:06:28:32:AF:CE:4A:5F:3D:55:54:74:F5:D1:0D Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461 Certificate serial: 019B7F85277170406B93E56C3C6B4622330E Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/i6ZPGK_7Bigyr85KXz1VVHT10Q0.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199245 IP address blocks: 195.85.44.0/24 maxlen: 24 2a12:b940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:27:71:70:40:6b:93:e5:6c:3c:6b:46:22:33:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54913026f079cda241aef4514fd353c28330e461 Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ba64f18affb062832afce4a5f3d555474f5d10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:1a:c1:f7:ee:9f:37:fb:08:c8:cd:9e:63: 52:42:99:e8:97:02:07:aa:eb:00:2d:d9:aa:fa:a5: e9:95:9f:c0:5b:4a:18:49:89:1f:01:e7:bc:c9:5d: c7:f8:69:b1:fa:be:ed:9e:d1:6a:2b:4e:15:0c:52: f0:a0:81:45:2d:c0:52:1a:4f:55:c8:42:96:b1:09: 9b:74:ee:5d:ac:b8:b0:9b:41:17:bb:43:dd:ef:43: fa:3a:07:0c:78:fa:08:91:48:9c:09:08:fc:9a:24: b9:06:a8:44:41:dc:c0:c0:8c:d7:f3:83:97:6b:95: ed:5d:52:f1:aa:20:5f:1a:96:46:1c:1a:01:ba:a1: ae:ae:81:0e:d8:8e:02:dd:af:43:e8:00:f0:c9:49: 60:93:94:44:69:f1:00:8c:43:64:ce:38:b9:5c:0c: 4d:bc:f3:d4:a9:2d:ea:24:34:61:3e:20:61:56:2b: 2a:ab:48:02:63:bc:2e:80:51:a5:7f:5b:39:54:f8: 03:ac:ea:5d:8a:8c:17:bb:e5:64:c7:2c:5e:b2:96: a2:7d:87:5b:10:fe:0b:39:c3:07:22:19:ff:9c:24: 2d:0b:0f:f4:e9:d2:4f:87:8c:bb:2e:e3:b1:16:18: b1:52:d4:8f:96:b3:dd:fe:a0:3e:d1:38:98:ad:fd: 38:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A6:4F:18:AF:FB:06:28:32:AF:CE:4A:5F:3D:55:54:74:F5:D1:0D X509v3 Authority Key Identifier: keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/i6ZPGK_7Bigyr85KXz1VVHT10Q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.44.0/24 IPv6: 2a12:b940::/29 Signature Algorithm: sha256WithRSAEncryption a4:31:59:cb:f8:01:c5:1b:09:db:41:bf:ce:5b:02:8b:0e:5c: 6c:49:8f:0a:26:20:5c:25:c2:4a:16:42:3e:44:bb:76:15:10: 70:f9:17:66:89:cc:51:3a:51:d5:61:65:bc:1a:53:0b:6d:3f: d3:69:5c:12:fc:7e:b9:99:0c:95:5b:60:df:06:32:38:6e:1f: ac:c6:19:0b:f5:a4:d1:4b:c1:76:e4:3c:e8:b7:4d:6c:5a:4a: 56:0e:5b:ba:c9:43:ae:4d:4d:3e:b7:2d:d8:44:53:05:87:63: 9b:ff:5d:b1:b1:2f:01:0c:c3:b0:44:45:36:d3:61:e4:ac:3c: 9c:32:ad:58:d4:22:8e:b8:8c:bc:94:4e:59:c9:9b:b5:64:91: 96:a5:31:22:5b:28:84:ec:0b:29:3a:75:a8:08:53:3e:8c:96: 26:99:68:5f:23:49:9b:9c:c5:8b:df:c9:62:a8:1f:d3:e6:66: 2b:9d:e4:d8:9c:5e:ab:d9:9b:9c:d0:e8:43:b3:64:7a:21:5f: a2:8f:69:5a:eb:90:94:5b:b8:d3:07:3e:7c:e0:36:5c:c9:b4: 57:ea:55:9c:7d:6f:cb:bd:f2:01:41:e5:9a:33:87:70:95:21: 73:be:ef:2b:77:7d:b8:de:4c:4b:cd:ed:98:0c:66:7d:4c:ef: f0:4a:5d:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hSdxcEBrk+VsPGtGIjMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OTEzMDI2ZjA3OWNkYTI0MWFlZjQ1MTRmZDM1M2MyODMz MGU0NjEwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmE2NGYxOGFmZmIwNjI4MzJhZmNlNGE1ZjNkNTU1NDc0ZjVkMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Uawffunzf7CMjNnmNSQpnolwIH qusALdmq+qXplZ/AW0oYSYkfAee8yV3H+Gmx+r7tntFqK04VDFLwoIFFLcBSGk9V yEKWsQmbdO5drLiwm0EXu0Pd70P6OgcMePoIkUicCQj8miS5BqhEQdzAwIzX84OX a5XtXVLxqiBfGpZGHBoBuqGuroEO2I4C3a9D6ADwyUlgk5REafEAjENkzji5XAxN vPPUqS3qJDRhPiBhVisqq0gCY7wugFGlf1s5VPgDrOpdiowXu+VkxyxespaifYdb EP4LOcMHIhn/nCQtCw/06dJPh4y7LuOxFhixUtSPlrPd/qA+0TiYrf04mQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIumTxiv+wYoMq/OSl89VVR09dENMB8GA1UdIwQY MBaAFFSRMCbwec2iQa70UU/TU8KDMORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZjYzZGYtYjZmNy00ZDQyLWE5YTkt MWE3Njc4NGEwYTIxLzEvaTZaUEdLXzdCaWd5cjg1S1h6MVZWSFQxMFEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZjYzZGYtYjZmNy00ZDQyLWE5YTktMWE3Njc4NGEwYTIx LzEvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw1UsMA0E AgACMAcDBQMqErlAMA0GCSqGSIb3DQEBCwUAA4IBAQCkMVnL+AHFGwnbQb/OWwKL DlxsSY8KJiBcJcJKFkI+RLt2FRBw+RdmicxROlHVYWW8GlMLbT/TaVwS/H65mQyV W2DfBjI4bh+sxhkL9aTRS8F25Dzot01sWkpWDlu6yUOuTU0+ty3YRFMFh2Ob/12x sS8BDMOwREU202HkrDycMq1Y1CKOuIy8lE5ZyZu1ZJGWpTEiWyiE7AspOnWoCFM+ jJYmmWhfI0mbnMWL38liqB/T5mYrneTYnF6r2Zuc0OhDs2R6IV+ij2la65CUW7jT Bz584DZcybRX6lWcfW/LvfIBQeWaM4dwlSFzvu8rd3243kxLze2YDGZ9TO/wSl35 -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:13 2026 by rpki-client