This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/1-1lvKVidMjz9SqtbPt81s0r7r0I.roa File: 1-1lvKVidMjz9SqtbPt81s0r7r0I.roa (raw, json) Hash identifier: ZlBElaLY1A20NV3b70L3QV0eyy9Ku8m61r7maErkkKY= Subject key identifier: FB:59:6F:29:58:9D:32:3C:FD:4A:AB:5B:3E:DF:35:B3:4A:FB:AF:42 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F403FA59958F6A31BB4F9D62B3C2 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/1-1lvKVidMjz9SqtbPt81s0r7r0I.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39249 IP address blocks: 95.164.71.0/24 maxlen: 24 195.149.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f4:03:fa:59:95:8f:6a:31:bb:4f:9d:62:b3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb596f29589d323cfd4aab5b3edf35b34afbaf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:c2:14:35:bc:32:89:a3:14:35:87:a2:a6: c1:62:66:4e:f8:69:31:ec:08:d3:c1:c5:38:56:7f: 7c:93:4b:72:83:3f:b8:64:e4:4d:70:04:e1:68:25: a8:5a:b8:a2:aa:54:a6:dc:d4:0f:e1:15:47:e9:11: 55:6b:fa:ee:2e:98:2b:6d:c3:38:8a:0c:c4:b4:bf: 94:86:6d:08:24:c6:b6:1e:a5:aa:b4:aa:cd:49:8e: 04:e5:94:6b:20:71:aa:0c:98:1e:af:2a:e2:98:0d: 2b:5d:10:45:3e:57:39:d3:36:3c:1e:27:d1:01:22: 36:71:a5:1e:d7:90:6c:5d:e6:ce:8d:64:74:da:0d: d6:8c:6b:e8:a1:cc:07:48:cd:b4:ee:5b:be:f5:a7: 61:01:8f:e0:73:7a:86:90:42:bb:da:5b:1a:cc:61: 07:80:40:78:db:c7:e2:a5:d2:a7:f5:51:c6:ca:e4: f6:8b:d6:e7:2b:db:0e:3c:53:ca:1a:6c:c5:2d:ea: 88:07:89:b9:c0:a9:46:9a:54:3f:de:b0:06:6f:59: f2:b0:a6:bf:7d:b3:86:f6:4e:3d:c1:a1:df:c2:24: 67:e0:e5:2d:08:99:a7:9e:79:e8:d8:c4:3f:f9:6c: 25:bf:74:4f:07:a0:1e:6e:93:8f:66:a3:ba:f6:4c: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:6F:29:58:9D:32:3C:FD:4A:AB:5B:3E:DF:35:B3:4A:FB:AF:42 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/1-1lvKVidMjz9SqtbPt81s0r7r0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.71.0/24 195.149.96.0/24 Signature Algorithm: sha256WithRSAEncryption 32:1f:53:a8:33:ea:2e:8c:06:62:35:a8:59:1f:d2:47:71:19: d9:75:f3:6c:a7:2b:eb:c8:c0:fa:82:d2:a6:e5:cf:3a:49:ee: 55:a9:db:5d:fe:0f:13:20:50:5d:03:b2:0c:31:e1:f4:75:f2: b3:2e:d7:f2:f8:3f:9e:26:9d:05:8a:e1:a0:e7:3f:bf:0e:72: 84:86:a4:b1:ca:0a:a2:70:c7:59:00:e7:b2:d4:2d:23:4e:cf: 39:5c:d9:38:71:2d:f6:7b:a4:be:35:4c:46:9f:41:32:67:49: 4a:69:38:0c:17:28:5f:9e:26:de:99:b0:68:5c:db:1f:cd:29: dd:69:f0:6b:a6:45:58:20:44:39:36:46:37:5d:1f:92:56:b0: 3e:24:af:20:69:90:86:cf:52:57:e7:aa:2b:00:21:9c:15:f5: 06:57:f2:9c:7a:c3:a3:a1:7e:27:3f:2f:8c:00:bf:46:4a:25: 4c:a1:8e:16:3c:86:1f:a2:8b:7b:f2:4d:2e:fe:31:af:35:bf: 51:74:1f:79:c2:46:2b:d1:be:ed:a5:c0:ca:68:b2:10:f5:a8: 1f:67:b5:a3:73:79:1e:11:fc:e0:ee:e0:57:a0:a0:42:86:c2: 7e:12:58:40:e9:ea:d3:e7:0e:12:c1:b8:42:95:1b:fa:3e:c4: 3f:ca:8d:02 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt3xvQD+lmVj2oxu0+dYrPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjU5NmYyOTU4OWQzMjNjZmQ0YWFiNWIzZWRmMzViMzRhZmJhZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nCFDW8MomjFDWHoqbBYmZO+Gkx 7AjTwcU4Vn98k0tygz+4ZORNcAThaCWoWriiqlSm3NQP4RVH6RFVa/ruLpgrbcM4 igzEtL+Uhm0IJMa2HqWqtKrNSY4E5ZRrIHGqDJgeryrimA0rXRBFPlc50zY8HifR ASI2caUe15BsXebOjWR02g3WjGvoocwHSM207lu+9adhAY/gc3qGkEK72lsazGEH gEB428fipdKn9VHGyuT2i9bnK9sOPFPKGmzFLeqIB4m5wKlGmlQ/3rAGb1nysKa/ fbOG9k49waHfwiRn4OUtCJmnnnno2MQ/+Wwlv3RPB6AebpOPZqO69kxTvQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPtZbylYnTI8/UqrWz7fNbNK+69CMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvMS0xbHZLVmlkTWp6OVNxdGJQdDgxczByN3IwSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWQvNDI4ODE1LTAyYjktNDYwNi1iMDY2LTY1ZDE1NjczNDBm ZC8xL2FaSEZieEduRnh4aFV5T1hhZlZYdnJvUUdDMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF+kRwME AMOVYDANBgkqhkiG9w0BAQsFAAOCAQEAMh9TqDPqLowGYjWoWR/SR3EZ2XXzbKcr 68jA+oLSpuXPOknuVanbXf4PEyBQXQOyDDHh9HXysy7X8vg/niadBYrhoOc/vw5y hIakscoKonDHWQDnstQtI07POVzZOHEt9nukvjVMRp9BMmdJSmk4DBcoX54m3pmw aFzbH80p3Wnwa6ZFWCBEOTZGN10fklawPiSvIGmQhs9SV+eqKwAhnBX1BlfynHrD o6F+Jz8vjAC/RkolTKGOFjyGH6KLe/JNLv4xrzW/UXQfecJGK9G+7aXAymiyEPWo H2e1o3N5HhH84O7gV6CgQobCfhJYQOnq0+cOEsG4QpUb+j7EP8qNAg== -----END CERTIFICATE-----Generated at Wed Jan 21 12:47:16 2026 by rpki-client