This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Latg5HfFxVV45cY_wXpQ9M7y2UM.roa File: Latg5HfFxVV45cY_wXpQ9M7y2UM.roa (raw, json) Hash identifier: AMl3v5ozRzV/5w1KglWOLAOe0okRBu64taR6MmvtD44= Subject key identifier: 2D:AB:60:E4:77:C5:C5:55:78:E5:C6:3F:C1:7A:50:F4:CE:F2:D9:43 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6FA12D45CC80DDA127AE853A59CCA Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Latg5HfFxVV45cY_wXpQ9M7y2UM.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 95.164.12.0/24 maxlen: 24 95.164.53.0/24 maxlen: 24 95.164.55.0/24 maxlen: 24 95.164.123.0/24 maxlen: 24 95.164.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fa:12:d4:5c:c8:0d:da:12:7a:e8:53:a5:9c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dab60e477c5c55578e5c63fc17a50f4cef2d943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:6a:2d:d0:75:65:3b:64:10:65:a6:a6:fc: 66:53:8b:37:2e:76:4d:68:fb:d3:d9:ca:5d:e3:03: c5:c3:d3:ea:72:a8:e4:d9:6c:f4:b7:13:33:66:83: 86:eb:dc:36:42:ea:6a:3d:04:be:90:8f:4e:be:06: bf:52:65:65:64:69:15:65:4b:a1:e1:2b:08:4e:62: c2:65:e9:20:9a:f6:36:6d:64:a3:6d:a0:5f:0f:a0: a0:1e:1f:d6:67:88:06:48:33:e9:11:0a:4c:45:5b: d1:32:93:2b:2c:64:1a:49:d3:30:60:78:b0:36:10: b8:ff:c2:ba:dd:8b:e0:46:e2:cf:eb:a9:13:28:e6: b4:8e:33:49:88:da:1c:d3:b7:7c:e5:4e:0c:c8:36: 97:86:a9:86:0a:d9:2d:87:ac:c3:fd:e7:1c:dc:e4: bc:63:3c:da:17:b1:57:35:66:5d:0d:81:9c:49:ba: a8:63:be:da:6e:5d:d8:69:f1:d8:bb:71:0c:38:ba: d0:b0:34:96:3b:61:0b:4f:fe:c1:64:d3:6b:e1:60: 5c:76:73:5d:b8:fc:28:e8:f6:97:aa:1f:d5:8f:26: ae:c1:35:77:6e:c6:72:c0:c6:1e:2d:50:44:bd:60: 57:b8:5f:e0:ff:75:c4:e9:af:43:5a:a4:c5:59:52: 9d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:60:E4:77:C5:C5:55:78:E5:C6:3F:C1:7A:50:F4:CE:F2:D9:43 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Latg5HfFxVV45cY_wXpQ9M7y2UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.12.0/24 95.164.53.0/24 95.164.55.0/24 95.164.123.0/24 95.164.250.0/24 Signature Algorithm: sha256WithRSAEncryption 04:83:5b:df:04:b1:d3:05:4a:ce:35:a2:8a:81:11:7a:f8:2c: 23:49:97:95:54:86:52:52:4a:6e:d1:da:6d:8c:98:c2:a3:26: 3a:2b:9d:71:86:c5:16:92:a8:46:4d:d6:cc:fb:cf:5c:18:a6: f0:dc:24:9e:45:ec:bb:b1:59:0c:6e:4a:31:3f:70:87:a5:1d: 3b:4a:3d:3a:ee:81:88:d0:a2:22:69:6f:75:8c:2c:e9:f3:df: d9:17:fc:e1:54:01:1e:3b:d0:44:6c:55:e0:1d:a1:44:88:f1: e9:5c:02:14:cc:0b:03:02:38:38:64:47:9b:8f:eb:b4:d2:ca: 4a:71:5e:41:fa:ee:6c:37:0c:38:f2:59:d5:19:50:63:77:d7: c7:d4:c1:91:37:5c:44:4e:37:11:9d:9a:cc:33:c0:18:4a:43: 6e:a4:65:e5:f9:ed:dd:88:eb:d5:bb:5c:46:1c:98:9c:f2:24: 43:a8:38:34:b5:1c:7e:3e:26:8b:17:93:39:36:c9:99:92:fe: 28:2f:67:bc:8e:57:9c:50:0a:05:5d:77:c4:f8:d7:7a:44:d7: 2b:dc:57:6c:a2:e8:6a:dc:b9:e0:33:3c:8b:a4:4e:4c:bf:6e: 20:12:60:22:c0:90:01:40:19:d2:48:1f:fc:bc:b1:73:ff:d5: 97:86:f9:46 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xvoS1FzIDdoSeuhTpZzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGFiNjBlNDc3YzVjNTU1NzhlNWM2M2ZjMTdhNTBmNGNlZjJkOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntRqLdB1ZTtkEGWmpvxmU4s3LnZN aPvT2cpd4wPFw9Pqcqjk2Wz0txMzZoOG69w2QupqPQS+kI9Ovga/UmVlZGkVZUuh 4SsITmLCZekgmvY2bWSjbaBfD6CgHh/WZ4gGSDPpEQpMRVvRMpMrLGQaSdMwYHiw NhC4/8K63YvgRuLP66kTKOa0jjNJiNoc07d85U4MyDaXhqmGCtkth6zD/ecc3OS8 YzzaF7FXNWZdDYGcSbqoY77abl3YafHYu3EMOLrQsDSWO2ELT/7BZNNr4WBcdnNd uPwo6PaXqh/VjyauwTV3bsZywMYeLVBEvWBXuF/g/3XE6a9DWqTFWVKdlQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFC2rYOR3xcVVeOXGP8F6UPTO8tlDMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvTGF0ZzVIZkZ4VlY0NWNZX3dYcFE5TTd5MlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAX6QMAwQA X6Q1AwQAX6Q3AwQAX6R7AwQAX6T6MA0GCSqGSIb3DQEBCwUAA4IBAQAEg1vfBLHT BUrONaKKgRF6+CwjSZeVVIZSUkpu0dptjJjCoyY6K51xhsUWkqhGTdbM+89cGKbw 3CSeRey7sVkMbkoxP3CHpR07Sj067oGI0KIiaW91jCzp89/ZF/zhVAEeO9BEbFXg HaFEiPHpXAIUzAsDAjg4ZEebj+u00spKcV5B+u5sNww48lnVGVBjd9fH1MGRN1xE TjcRnZrMM8AYSkNupGXl+e3diOvVu1xGHJic8iRDqDg0tRx+PiaLF5M5NsmZkv4o L2e8jlecUAoFXXfE+Nd6RNcr3Fdsouhq3LngMzyLpE5Mv24gEmAiwJABQBnSSB/8 vLFz/9WXhvlG -----END CERTIFICATE-----Generated at Wed Jan 21 12:46:25 2026 by rpki-client