This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/1oYlZgxPctAxMYb6-vhwUO72lhc.roa File: 1oYlZgxPctAxMYb6-vhwUO72lhc.roa (raw, json) Hash identifier: o/RuyvVOaKsuCpKHwcm+jaQwGnTX4Si67GviNKnjKDE= Subject key identifier: D6:86:25:66:0C:4F:72:D0:31:31:86:FA:FA:F8:70:50:EE:F6:96:17 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F0E22C2BC1922E703CDC704E70F2 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/1oYlZgxPctAxMYb6-vhwUO72lhc.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 95.164.15.0/24 maxlen: 24 95.164.40.0/22 maxlen: 22 95.164.49.0/24 maxlen: 24 95.164.50.0/24 maxlen: 24 95.164.56.0/22 maxlen: 22 95.164.72.0/22 maxlen: 22 95.164.76.0/24 maxlen: 24 95.164.80.0/22 maxlen: 22 95.164.120.0/24 maxlen: 24 95.164.121.0/24 maxlen: 24 95.164.170.0/23 maxlen: 23 95.164.172.0/22 maxlen: 22 95.164.248.0/24 maxlen: 24 95.164.249.0/24 maxlen: 24 95.164.251.0/24 maxlen: 24 185.234.254.0/24 maxlen: 24 2a10:eb80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f0:e2:2c:2b:c1:92:2e:70:3c:dc:70:4e:70:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d68625660c4f72d0313186fafaf87050eef69617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:2a:43:a2:fa:70:3f:a8:d6:10:81:d8:37: 3a:e4:e1:fe:37:11:18:81:8a:56:ac:1b:ab:46:e1: 64:13:43:4e:ba:aa:9a:91:b9:2b:86:e0:19:ac:39: 5e:ee:45:4f:b1:bf:1f:97:8c:a3:df:a4:9c:42:64: 65:f3:1f:87:db:e9:21:e7:7f:a2:91:52:26:6f:da: ca:3a:0b:01:4f:25:bb:1c:bf:65:02:b0:2d:e3:5d: c7:e0:d7:f8:a8:83:59:10:be:45:f6:1e:4a:61:2b: fc:f1:ba:de:d1:67:49:ec:6c:d5:d6:a0:c3:80:3f: b4:1e:f7:e0:04:07:47:62:42:67:a7:16:80:ae:d9: f5:6a:d4:af:b8:38:eb:e3:23:42:86:88:46:ed:dc: f7:d8:33:c2:c9:d6:24:c0:2b:26:bd:8b:a2:6f:3c: 26:55:93:b2:38:1c:03:7f:a8:ca:33:4f:67:0f:db: 46:e1:7c:06:99:d1:29:ca:ee:c8:86:ea:67:43:78: b1:de:2f:c7:1f:b0:c1:c4:5c:15:36:0e:52:9f:32: 3a:d8:da:85:f6:8d:d2:fb:ff:0f:3b:f4:2f:47:4e: 45:49:c2:35:b0:e1:e1:aa:60:73:23:70:3d:55:de: d0:3d:02:0a:a2:84:ef:cf:ee:2e:12:cf:c5:24:32: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:25:66:0C:4F:72:D0:31:31:86:FA:FA:F8:70:50:EE:F6:96:17 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/1oYlZgxPctAxMYb6-vhwUO72lhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.15.0/24 95.164.40.0/22 95.164.49.0-95.164.50.255 95.164.56.0/22 95.164.72.0-95.164.76.255 95.164.80.0/22 95.164.120.0/23 95.164.170.0-95.164.175.255 95.164.248.0/23 95.164.251.0/24 185.234.254.0/24 IPv6: 2a10:eb80::/29 Signature Algorithm: sha256WithRSAEncryption 49:ae:56:4a:b3:54:3e:50:3d:93:2a:94:9d:56:2b:6d:5b:6f: 58:9e:f5:d8:cc:e9:93:ff:6d:5e:fe:c4:62:b8:69:ee:be:c5: 12:f8:16:05:c6:08:6f:65:cb:32:9b:82:e7:6d:bf:c8:d8:47: 2f:09:6b:81:94:48:ef:88:53:a9:dc:50:f8:7f:7c:d1:6c:d2: 81:9a:1e:77:f9:83:67:b2:87:12:e0:fb:f1:4a:40:15:f7:cf: 84:14:86:c2:f8:03:39:51:a7:85:4f:d4:35:7d:b4:d2:3f:54: 65:a6:79:9b:28:e0:6c:ed:3b:62:ee:f7:42:a9:26:3e:04:b8: a6:d1:85:64:48:8e:15:67:a1:94:65:bc:d3:de:d1:7f:f0:96: 73:4c:20:6c:a9:ad:c0:07:49:ab:72:cf:fa:c0:16:45:a0:c1: 5f:5f:26:68:5a:29:76:f5:b5:1b:96:a5:f4:56:6d:07:6b:d2: 23:42:dc:72:75:ac:6e:39:dc:a7:70:98:6d:eb:8b:dc:ad:e1: 9f:9d:04:2a:8d:e3:4a:81:36:4b:a2:29:47:69:25:de:6a:a1: e6:37:b5:9a:22:a1:e0:e8:4b:7a:03:a8:45:89:a5:63:46:e1: 2a:09:bc:93:0b:e8:a1:7f:ca:1b:67:b4:27:93:34:34:8e:29: 83:13:66:19 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt3xvDiLCvBki5wPNxwTnDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjg2MjU2NjBjNGY3MmQwMzEzMTg2ZmFmYWY4NzA1MGVlZjY5NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ0qQ6L6cD+o1hCB2Dc65OH+NxEY gYpWrBurRuFkE0NOuqqakbkrhuAZrDle7kVPsb8fl4yj36ScQmRl8x+H2+kh53+i kVImb9rKOgsBTyW7HL9lArAt413H4Nf4qINZEL5F9h5KYSv88bre0WdJ7GzV1qDD gD+0HvfgBAdHYkJnpxaArtn1atSvuDjr4yNChohG7dz32DPCydYkwCsmvYuibzwm VZOyOBwDf6jKM09nD9tG4XwGmdEpyu7IhupnQ3ix3i/HH7DBxFwVNg5SnzI62NqF 9o3S+/8PO/QvR05FScI1sOHhqmBzI3A9Vd7QPQIKooTvz+4uEs/FJDJVWwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFNaGJWYMT3LQMTGG+vr4cFDu9pYXMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvMW9ZbFpneFBjdEF4TVliNi12aHdVTzcybGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEAF+kDwME Al+kKDAMAwQAX6QxAwQAX6QyAwQCX6Q4MAwDBANfpEgDBABfpEwDBAJfpFADBAFf pHgwDAMEAV+kqgMEBF+koAMEAV+k+AMEAF+k+wMEALnq/jANBAIAAjAHAwUDKhDr gDANBgkqhkiG9w0BAQsFAAOCAQEASa5WSrNUPlA9kyqUnVYrbVtvWJ712Mzpk/9t Xv7EYrhp7r7FEvgWBcYIb2XLMpuC522/yNhHLwlrgZRI74hTqdxQ+H980WzSgZoe d/mDZ7KHEuD78UpAFffPhBSGwvgDOVGnhU/UNX200j9UZaZ5myjgbO07Yu73Qqkm PgS4ptGFZEiOFWehlGW8097Rf/CWc0wgbKmtwAdJq3LP+sAWRaDBX18maFopdvW1 G5al9FZtB2vSI0LccnWsbjncp3CYbeuL3K3hn50EKo3jSoE2S6IpR2kl3mqh5je1 miKh4OhLegOoRYmlY0bhKgm8kwvooX/KG2e0J5M0NI4pgxNmGQ== -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:50 2026 by rpki-client