This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/awGbKeiIXvU216fzJMCxNDxUUJY.roa File: awGbKeiIXvU216fzJMCxNDxUUJY.roa (raw, json) Hash identifier: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M= Subject key identifier: 6B:01:9B:29:E8:88:5E:F5:36:D7:A7:F3:24:C0:B1:34:3C:54:50:96 Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77 Certificate serial: 019B7EA74C8D75E9C37BE741855796F32F41 Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/awGbKeiIXvU216fzJMCxNDxUUJY.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213314 IP address blocks: 95.214.168.0/22 maxlen: 24 2a09:ea80::/29 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4c:8d:75:e9:c3:7b:e7:41:85:57:96:f3:2f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b019b29e8885ef536d7a7f324c0b1343c545096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:ca:9a:86:0d:38:39:f1:28:45:e3:14:01: 93:02:e4:b0:aa:80:b0:77:52:68:f9:06:45:1f:25: 86:08:fc:21:65:86:d4:98:08:0e:49:fe:a9:d8:c3: a3:59:8b:a5:aa:d2:c5:3e:d0:37:82:05:3b:29:24: a2:05:7b:4a:c0:e6:22:ff:dd:b4:82:e4:5b:c7:a9: f2:e2:85:42:d0:f1:b1:88:36:ce:3d:9e:bb:e7:1c: 91:44:e2:81:69:db:78:5f:52:07:54:6e:74:8e:7b: 6a:7d:9d:f0:e9:28:bb:59:97:07:61:bf:af:a6:d5: 42:63:60:6e:9c:d6:0f:d9:e0:66:7d:0e:13:66:f8: ee:0a:c8:7d:a5:5e:7e:9b:5f:cc:e0:a1:d9:12:50: 67:0f:0e:97:1d:cb:2b:5c:20:75:e9:e7:c9:fb:3c: a9:42:40:1b:5b:34:63:cf:76:13:37:3e:31:90:e6: ba:b2:7b:e7:f8:f7:77:5c:20:bc:91:22:c9:53:9d: 9d:32:8d:c2:98:71:b0:e3:cc:31:58:a1:1c:e8:90: 8b:a7:bb:de:69:35:6d:2c:2f:b3:2f:94:4b:b5:ca: ef:7e:56:c6:b4:7a:5f:fe:26:d8:f6:fc:5d:0d:10: 71:49:07:36:ba:57:bd:d8:63:e7:4f:98:c3:81:b6: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:01:9B:29:E8:88:5E:F5:36:D7:A7:F3:24:C0:B1:34:3C:54:50:96 X509v3 Authority Key Identifier: keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/awGbKeiIXvU216fzJMCxNDxUUJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.168.0/22 IPv6: 2a09:ea80::/29 Signature Algorithm: sha256WithRSAEncryption ca:0e:ea:1e:ca:6a:fb:96:37:61:7d:2e:95:71:e0:5c:e6:04: ee:c1:9c:11:d5:4a:c4:f9:73:19:51:6e:35:3b:79:d2:7e:5d: 2a:d5:20:05:b3:25:e7:9c:9c:a8:e3:18:9a:58:cb:95:3e:32: 64:d5:88:6a:ed:60:7f:2d:75:fb:8d:23:d9:41:11:04:f3:9d: b1:d0:23:02:a6:e2:a1:48:ba:27:fa:df:dc:60:74:68:b3:92: a7:7f:bf:f0:a5:c0:74:08:33:c3:2c:9c:14:5d:9d:e7:90:7b: 82:bf:c4:58:96:88:b6:2b:9d:e1:9e:0e:b7:4a:99:de:6f:69: 3d:5d:7d:50:92:f8:0e:a2:6f:64:22:9b:42:4d:ae:39:d2:7a: df:1f:06:6e:6e:62:42:db:53:70:54:cf:0e:87:8b:f9:e7:ef: 62:ed:d5:32:fb:c3:a7:df:ff:21:77:fe:52:e8:75:1f:98:8e: ac:22:0c:99:52:6a:a9:75:f1:32:f1:6c:bf:46:92:f2:f5:0d: 4d:82:31:98:7f:b2:92:fb:4c:9c:e2:4c:92:40:fa:1e:85:39: 8a:21:e2:38:22:88:a3:c4:56:ce:1c:c2:62:a0:8c:4d:8e:3c: f7:60:23:9d:af:2e:78:f5:80:94:97:12:58:02:d3:47:ad:a7: e4:9e:c2:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p0yNdenDe+dBhVeW8y9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk YjdiNzcwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjAxOWIyOWU4ODg1ZWY1MzZkN2E3ZjMyNGMwYjEzNDNjNTQ1MDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0LKmoYNODnxKEXjFAGTAuSwqoCw d1Jo+QZFHyWGCPwhZYbUmAgOSf6p2MOjWYulqtLFPtA3ggU7KSSiBXtKwOYi/920 guRbx6ny4oVC0PGxiDbOPZ675xyRROKBadt4X1IHVG50jntqfZ3w6Si7WZcHYb+v ptVCY2BunNYP2eBmfQ4TZvjuCsh9pV5+m1/M4KHZElBnDw6XHcsrXCB16efJ+zyp QkAbWzRjz3YTNz4xkOa6snvn+Pd3XCC8kSLJU52dMo3CmHGw48wxWKEc6JCLp7ve aTVtLC+zL5RLtcrvflbGtHpf/ibY9vxdDRBxSQc2ule92GPnT5jDgbYVMQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGsBmynoiF71Nten8yTAsTQ8VFCWMB8GA1UdIwQY MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt NDEwNWY4YTNiYjljLzEvYXdHYktlaUlYdlUyMTZmekpNQ3hORHhVVUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCX9aoMA0E AgACMAcDBQMqCeqAMA0GCSqGSIb3DQEBCwUAA4IBAQDKDuoeymr7ljdhfS6VceBc 5gTuwZwR1UrE+XMZUW41O3nSfl0q1SAFsyXnnJyo4xiaWMuVPjJk1Yhq7WB/LXX7 jSPZQREE852x0CMCpuKhSLon+t/cYHRos5Knf7/wpcB0CDPDLJwUXZ3nkHuCv8RY loi2K53hng63Spneb2k9XX1QkvgOom9kIptCTa450nrfHwZubmJC21NwVM8Oh4v5 5+9i7dUy+8On3/8hd/5S6HUfmI6sIgyZUmqpdfEy8Wy/RpLy9Q1NgjGYf7KS+0yc 4kySQPoehTmKIeI4IoijxFbOHMJioIxNjjz3YCOdry549YCUlxJYAtNHrafknsLJ -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:03 2026 by rpki-client