This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DRzVfcqwbUY62KDYfovCQTJDRjE.roa File: DRzVfcqwbUY62KDYfovCQTJDRjE.roa (raw, json) Hash identifier: Tx45vzfokVndT1ICPGLTsaFN3Mr+FsPULABFY4abF+Y= Subject key identifier: 0D:1C:D5:7D:CA:B0:6D:46:3A:D8:A0:D8:7E:8B:C2:41:32:43:46:31 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F1599406D7647D9535891DC9FE71565 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DRzVfcqwbUY62KDYfovCQTJDRjE.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9050 IP address blocks: 95.100.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:99:40:6d:76:47:d9:53:58:91:dc:9f:e7:15:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d1cd57dcab06d463ad8a0d87e8bc24132434631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:1d:6e:c8:df:69:b8:e0:f9:76:ca:2b:33: 3a:ee:7e:ae:88:a8:6d:38:8e:14:90:e0:67:5e:be: b2:80:0f:c3:2b:ee:00:b6:e2:c9:8b:ac:d5:b1:d2: 86:27:5a:b9:09:38:c4:24:b4:53:1b:87:b5:25:6c: fa:f7:5e:47:d2:f0:be:20:97:68:77:5a:67:72:72: d4:dc:67:36:57:fb:42:75:e0:1e:78:65:75:a8:bd: 8c:ae:98:ed:ca:ac:2b:79:ae:e4:e3:b5:cc:56:96: f4:68:a9:0e:f2:89:05:77:b9:45:ec:24:d8:7e:81: e6:51:2f:01:a5:23:ce:f4:f6:f3:93:f1:ef:d5:34: 52:5a:91:ff:73:6b:3b:3d:22:59:98:34:cf:6c:93: 4a:79:0d:c8:e6:19:6c:35:52:b0:19:b9:a0:71:be: 82:59:9f:c0:ec:1c:dd:59:95:12:f5:8f:26:67:e0: ce:f2:77:18:8c:29:cd:78:be:80:f5:cb:b0:a0:c1: 7d:32:c0:c9:1d:6f:82:1e:0b:5d:c7:04:c6:c9:86: 0e:04:16:09:45:c7:9d:84:74:4b:48:a8:e2:de:8b: 5f:54:8f:59:d0:3c:9f:8e:1f:ae:31:40:60:d2:88: 26:3e:5c:92:5e:dd:3c:10:7f:d9:10:b7:55:a7:3d: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1C:D5:7D:CA:B0:6D:46:3A:D8:A0:D8:7E:8B:C2:41:32:43:46:31 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DRzVfcqwbUY62KDYfovCQTJDRjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.100.220.0/22 Signature Algorithm: sha256WithRSAEncryption 41:dc:b9:7d:26:a3:52:9b:81:e1:36:3c:76:83:ee:1a:3a:c7: e5:2b:cb:1d:00:b3:fa:c4:c6:b5:82:09:e2:92:52:f2:ea:11: 93:d6:b5:76:35:ce:7e:ce:3d:a6:29:94:ac:55:7e:39:e1:86: 75:43:17:0e:0f:48:d6:92:99:ac:1d:e5:22:6a:a4:5c:ac:a8: b1:48:f6:42:4b:7e:ea:ba:20:96:8c:b3:8f:6d:67:25:eb:00: 6c:d5:b3:3c:c7:33:4c:e2:1c:f1:03:72:1b:48:d9:2a:2b:5e: e4:3b:84:50:70:cb:5f:19:cb:5c:c9:18:4e:89:86:dd:27:6c: 80:4b:42:6a:49:ee:ce:0e:30:14:0a:70:5e:d2:28:6e:4a:1d: d3:f6:7b:84:36:6e:ee:9f:03:a2:94:f4:84:b5:f8:a9:df:d4: c5:fa:a7:15:55:99:b0:fb:92:fd:53:8d:e8:8a:f8:76:7e:df: 0c:b8:d9:13:ad:cb:7d:51:c3:03:fb:18:7f:4b:27:f4:ed:1f: 9f:fb:5f:03:25:44:e5:8f:fb:75:d6:0c:33:17:43:10:ed:33: b8:94:73:6a:51:24:c7:ee:cf:6d:29:7c:39:89:7c:25:30:73: 8c:ff:4a:c1:a0:1e:01:82:5d:25:2d:0d:24:52:e2:5e:1c:99: 7e:7c:a8:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZlAbXZH2VNYkdyf5xVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDFjZDU3ZGNhYjA2ZDQ2M2FkOGEwZDg3ZThiYzI0MTMyNDM0NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12cdbsjfabjg+XbKKzM67n6uiKht OI4UkOBnXr6ygA/DK+4AtuLJi6zVsdKGJ1q5CTjEJLRTG4e1JWz6915H0vC+IJdo d1pncnLU3Gc2V/tCdeAeeGV1qL2Mrpjtyqwrea7k47XMVpb0aKkO8okFd7lF7CTY foHmUS8BpSPO9Pbzk/Hv1TRSWpH/c2s7PSJZmDTPbJNKeQ3I5hlsNVKwGbmgcb6C WZ/A7BzdWZUS9Y8mZ+DO8ncYjCnNeL6A9cuwoMF9MsDJHW+CHgtdxwTGyYYOBBYJ RcedhHRLSKji3otfVI9Z0Dyfjh+uMUBg0ogmPlySXt08EH/ZELdVpz1hhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0c1X3KsG1GOtig2H6LwkEyQ0YxMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvRFJ6VmZjcXdiVVk2MktEWWZvdkNRVEpEUmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX2TcMA0G CSqGSIb3DQEBCwUAA4IBAQBB3Ll9JqNSm4HhNjx2g+4aOsflK8sdALP6xMa1ggni klLy6hGT1rV2Nc5+zj2mKZSsVX454YZ1QxcOD0jWkpmsHeUiaqRcrKixSPZCS37q uiCWjLOPbWcl6wBs1bM8xzNM4hzxA3IbSNkqK17kO4RQcMtfGctcyRhOiYbdJ2yA S0JqSe7ODjAUCnBe0ihuSh3T9nuENm7unwOilPSEtfip39TF+qcVVZmw+5L9U43o ivh2ft8MuNkTrct9UcMD+xh/Syf07R+f+18DJUTlj/t11gwzF0MQ7TO4lHNqUSTH 7s9tKXw5iXwlMHOM/0rBoB4Bgl0lLQ0kUuJeHJl+fKhd -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:18 2026 by rpki-client