This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/6DzoadzIvflRSCanXdL7FqtC2L8.roa File: 6DzoadzIvflRSCanXdL7FqtC2L8.roa (raw, json) Hash identifier: sur+A1CIETAgbr0Wn6YpsRLy5mn4DaVVYa9DTnS/yYU= Subject key identifier: E8:3C:E8:69:DC:C8:BD:F9:51:48:26:A7:5D:D2:FB:16:AB:42:D8:BF Certificate issuer: /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261 Certificate serial: 019B783547432F47AD553FD6C85D79719D58 Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/6DzoadzIvflRSCanXdL7FqtC2L8.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43201 IP address blocks: 195.158.220.0/22 maxlen: 22 195.158.220.0/23 maxlen: 23 195.158.220.0/24 maxlen: 24 195.158.221.0/24 maxlen: 24 195.158.222.0/23 maxlen: 23 195.158.222.0/24 maxlen: 24 195.158.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:47:43:2f:47:ad:55:3f:d6:c8:5d:79:71:9d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e83ce869dcc8bdf9514826a75dd2fb16ab42d8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3b:b1:c1:df:73:2c:e9:6b:84:37:ee:c7:05: d7:06:f4:e5:b7:85:51:43:bd:64:60:b6:05:ba:d1: 5b:89:1a:f8:a0:3e:1e:73:99:53:a7:23:ca:61:b2: 55:9f:10:2f:32:aa:4d:24:90:40:83:0d:b3:32:3f: e2:aa:9e:02:85:1c:dc:0a:6a:32:93:2c:33:b4:62: f4:17:2b:04:cc:6d:98:62:73:29:6a:f0:23:a8:f9: 50:4c:b5:0d:25:b7:c0:07:16:d2:f1:2d:9e:d7:7f: b8:6a:bd:7b:aa:77:4e:1a:f4:fa:43:d0:fc:47:ea: 0b:7b:56:b7:2e:0c:0c:64:d6:b7:4d:c6:8a:6e:f4: 4d:19:4c:92:c0:41:90:d2:54:6c:ba:20:a2:e2:1a: 32:00:6e:cf:9f:59:4d:e9:cf:72:bf:6c:d6:0a:06: 55:a5:1e:12:a7:59:98:13:34:9e:62:35:b9:43:11: 4b:33:78:f1:db:7a:72:2f:71:ce:3e:12:1d:6c:e4: 2a:6b:a2:15:de:88:08:ba:83:17:4e:36:4b:86:e4: 4a:d5:d6:2b:41:19:1d:1b:6c:51:0e:9e:3f:6a:7c: e5:ad:49:f8:79:63:4d:cc:dd:59:48:e6:10:7e:97: 76:5a:6d:6c:2c:27:f9:08:93:66:2a:9e:11:ac:03: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3C:E8:69:DC:C8:BD:F9:51:48:26:A7:5D:D2:FB:16:AB:42:D8:BF X509v3 Authority Key Identifier: keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/6DzoadzIvflRSCanXdL7FqtC2L8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.158.220.0/22 Signature Algorithm: sha256WithRSAEncryption 82:2c:ad:eb:fe:37:ad:ec:17:07:11:59:af:d7:22:aa:76:41: ed:77:8f:16:ec:0c:9e:81:15:d3:5e:71:53:5f:64:2d:0d:08: 07:53:08:68:51:d5:18:93:62:04:54:62:97:91:00:b9:a0:5f: ca:d3:4e:ae:3e:f2:33:8e:c5:78:5e:5a:0a:26:54:b4:52:67: fd:03:6f:b8:15:c7:89:35:c9:d8:e2:a4:dd:a7:e2:83:47:e3: b8:cb:16:55:ae:a5:f8:3a:44:83:a2:2b:5a:ed:09:79:9f:d8: cc:46:67:39:94:0b:a1:3c:68:4e:fe:94:f5:c5:17:a3:1d:32: 6e:bd:01:38:6e:b3:4c:66:46:95:d7:7c:fd:df:a0:f7:3d:2a: 15:a8:e4:eb:c9:85:33:ea:df:c4:7f:8d:39:c9:62:dc:11:7d: 03:87:05:64:ba:ed:c4:44:17:6e:93:5d:4f:a1:60:81:a5:d1: 12:0c:53:e9:f3:6f:e1:0b:ae:f9:4b:84:16:77:df:f1:54:bd: 3e:b1:1b:8b:8d:36:3c:71:b3:3d:fe:ca:a6:40:66:91:e8:53: 6d:6a:5f:97:b2:c9:40:2a:ac:ef:61:e5:10:10:bb:a1:12:77: db:11:3f:5c:bf:cb:af:7d:90:1e:34:1c:d2:90:65:96:06:5b: fc:9a:bf:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUdDL0etVT/WyF15cZ1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGZhN2MwYWQ3ZWY2NzRkZDViNDE5NDk2MGYyZmZkNDEx NWYyNjEwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODNjZTg2OWRjYzhiZGY5NTE0ODI2YTc1ZGQyZmIxNmFiNDJkOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Duxwd9zLOlrhDfuxwXXBvTlt4VR Q71kYLYFutFbiRr4oD4ec5lTpyPKYbJVnxAvMqpNJJBAgw2zMj/iqp4ChRzcCmoy kywztGL0FysEzG2YYnMpavAjqPlQTLUNJbfABxbS8S2e13+4ar17qndOGvT6Q9D8 R+oLe1a3LgwMZNa3TcaKbvRNGUySwEGQ0lRsuiCi4hoyAG7Pn1lN6c9yv2zWCgZV pR4Sp1mYEzSeYjW5QxFLM3jx23pyL3HOPhIdbOQqa6IV3ogIuoMXTjZLhuRK1dYr QRkdG2xRDp4/anzlrUn4eWNNzN1ZSOYQfpd2Wm1sLCf5CJNmKp4RrANDbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOg86GncyL35UUgmp13S+xarQti/MB8GA1UdIwQY MBaAFOvfp8CtfvZ03VtBlJYPL/1BFfJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MzRmZWQtODc3ZC00YTBmLWEyNTYt ODUzNDVmNjYwNjU1LzEvNkR6b2Fkekl2ZmxSU0NhblhkTDdGcXRDMkw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80MzRmZWQtODc3ZC00YTBmLWEyNTYtODUzNDVmNjYwNjU1 LzEvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw57cMA0G CSqGSIb3DQEBCwUAA4IBAQCCLK3r/jet7BcHEVmv1yKqdkHtd48W7AyegRXTXnFT X2QtDQgHUwhoUdUYk2IEVGKXkQC5oF/K006uPvIzjsV4XloKJlS0Umf9A2+4FceJ NcnY4qTdp+KDR+O4yxZVrqX4OkSDoita7Ql5n9jMRmc5lAuhPGhO/pT1xRejHTJu vQE4brNMZkaV13z936D3PSoVqOTryYUz6t/Ef405yWLcEX0DhwVkuu3ERBduk11P oWCBpdESDFPp82/hC675S4QWd9/xVL0+sRuLjTY8cbM9/sqmQGaR6FNtal+XsslA KqzvYeUQELuhEnfbET9cv8uvfZAeNBzSkGWWBlv8mr9p -----END CERTIFICATE-----Generated at Thu Jan 15 16:59:30 2026 by rpki-client