This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/atbvOkPcslJHbkU3uvvlUOmO5QA.roa File: atbvOkPcslJHbkU3uvvlUOmO5QA.roa (raw, json) Hash identifier: m8lm+LEVDg93zlIOjeA/ZuskWIypJuSv0WG7IFYzhxg= Subject key identifier: 6A:D6:EF:3A:43:DC:B2:52:47:6E:45:37:BA:FB:E5:50:E9:8E:E5:00 Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec Certificate serial: 019B7C8000CCB07F90AB43F6941B130C28B6 Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/atbvOkPcslJHbkU3uvvlUOmO5QA.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29210 IP address blocks: 195.69.120.0/22 maxlen: 22 195.69.120.0/24 maxlen: 24 195.69.121.0/24 maxlen: 24 195.69.122.0/24 maxlen: 24 195.69.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:00:cc:b0:7f:90:ab:43:f6:94:1b:13:0c:28:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ad6ef3a43dcb252476e4537bafbe550e98ee500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:da:f3:f1:62:c5:54:5b:0a:28:bb:7a:cf: b5:1f:d7:d8:50:3a:28:26:1a:bf:fd:1f:b1:39:68: 95:82:f8:71:bb:45:bf:95:7e:ea:d7:eb:85:0e:27: cd:8b:83:77:4b:9d:59:f9:b3:57:6d:d8:7d:bf:ff: ca:51:28:99:bf:75:93:91:cb:b9:4a:6f:72:f5:5e: ae:f3:22:cb:25:3e:93:c0:3b:85:96:e0:87:8e:86: 99:c4:ca:34:ea:21:14:da:ab:74:03:b7:64:9f:6d: 28:1d:6a:0c:d3:ca:29:bd:59:19:b7:53:eb:e1:5f: 2e:0f:52:b8:3b:a6:4b:2e:b0:33:a3:b2:8c:92:42: 83:50:8a:ab:41:54:e4:bf:b0:d4:44:63:86:07:eb: 31:19:cf:ee:8e:be:44:a5:8c:36:9c:0f:2e:0b:44: 14:01:13:4a:6d:f6:cd:1a:6b:ea:1d:b7:b1:2d:a9: 62:74:d2:29:d7:b8:ba:78:e0:fd:78:82:05:6a:62: f4:4b:c1:2f:05:2e:92:41:1e:d6:8b:9c:f8:aa:dc: 04:07:2d:b7:84:00:4c:d4:81:a7:68:9f:bd:4b:29: b0:82:5a:2e:ea:4a:a7:34:fe:f3:11:ea:f9:7a:1d: 46:74:57:1d:62:2a:55:62:bb:ba:ea:3f:f8:9a:e2: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D6:EF:3A:43:DC:B2:52:47:6E:45:37:BA:FB:E5:50:E9:8E:E5:00 X509v3 Authority Key Identifier: keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/atbvOkPcslJHbkU3uvvlUOmO5QA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.120.0/22 Signature Algorithm: sha256WithRSAEncryption 84:dd:9f:a3:de:d1:f9:96:88:ac:94:40:95:2b:2e:c9:f2:03: af:e4:b0:31:8b:91:04:81:e1:7b:e1:81:30:52:86:8d:f9:3a: af:b0:02:71:c3:90:9e:c8:38:79:77:0d:0f:64:f2:21:8b:f7: 51:10:c5:f6:a9:e7:fa:81:75:0a:fb:18:a6:80:b2:ac:b5:c3: 4f:e3:a4:86:e9:5e:b0:35:9f:89:cf:92:da:cb:81:fb:f5:cd: 19:99:15:15:cb:65:0f:92:a0:e4:f8:c1:76:f4:5f:d3:6b:5a: 69:10:fa:99:88:98:8a:13:95:e5:dc:86:d1:b4:dc:07:ec:34: 64:57:bc:fa:81:ab:54:44:71:00:02:96:4e:33:79:ab:07:86: 25:91:c6:c6:79:ed:50:e2:f0:18:f8:31:95:8d:9e:5b:cd:27: 40:18:48:cc:6a:dd:47:96:6c:2b:13:bb:5a:83:da:41:ac:78: b6:dc:8a:b0:48:80:44:8b:45:46:0a:08:50:35:9c:65:d0:a9: a9:4e:5c:99:fa:08:30:15:1a:86:f3:de:91:9c:00:fd:56:fc: ac:ad:8d:ab:f3:e7:4d:a6:11:be:87:89:4d:4e:e9:87:3e:65: b2:16:b5:95:11:6d:cf:46:4f:a1:17:f0:d3:8e:b8:71:f6:b9: 40:21:a1:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gADMsH+Qq0P2lBsTDCi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2 NjU5ZWMwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWQ2ZWYzYTQzZGNiMjUyNDc2ZTQ1MzdiYWZiZTU1MGU5OGVlNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBja8/FixVRbCii7es+1H9fYUDoo Jhq//R+xOWiVgvhxu0W/lX7q1+uFDifNi4N3S51Z+bNXbdh9v//KUSiZv3WTkcu5 Sm9y9V6u8yLLJT6TwDuFluCHjoaZxMo06iEU2qt0A7dkn20oHWoM08opvVkZt1Pr 4V8uD1K4O6ZLLrAzo7KMkkKDUIqrQVTkv7DURGOGB+sxGc/ujr5EpYw2nA8uC0QU ARNKbfbNGmvqHbexLalidNIp17i6eOD9eIIFamL0S8EvBS6SQR7Wi5z4qtwEBy23 hABM1IGnaJ+9Symwglou6kqnNP7zEer5eh1GdFcdYipVYru66j/4muL8twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrW7zpD3LJSR25FN7r75VDpjuUAMB8GA1UdIwQY MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt OTQxNzdmOGQ4NzdjLzEvYXRidk9rUGNzbEpIYmtVM3V2dmxVT21PNVFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0V4MA0G CSqGSIb3DQEBCwUAA4IBAQCE3Z+j3tH5loislECVKy7J8gOv5LAxi5EEgeF74YEw UoaN+TqvsAJxw5CeyDh5dw0PZPIhi/dREMX2qef6gXUK+ximgLKstcNP46SG6V6w NZ+Jz5Lay4H79c0ZmRUVy2UPkqDk+MF29F/Ta1ppEPqZiJiKE5Xl3IbRtNwH7DRk V7z6gatURHEAApZOM3mrB4YlkcbGee1Q4vAY+DGVjZ5bzSdAGEjMat1HlmwrE7ta g9pBrHi23IqwSIBEi0VGCghQNZxl0KmpTlyZ+ggwFRqG896RnAD9VvysrY2r8+dN phG+h4lNTumHPmWyFrWVEW3PRk+hF/DTjrhx9rlAIaFf -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:23 2026 by rpki-client