This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/RRvj6jA_nYDzJBp7ogthcP0y7VY.roa File: RRvj6jA_nYDzJBp7ogthcP0y7VY.roa (raw, json) Hash identifier: hclGu2G2Ndcw+rnt68c4a6GDMJPUZyI6imm8b7B2EvU= Subject key identifier: 45:1B:E3:EA:30:3F:9D:80:F3:24:1A:7B:A2:0B:61:70:FD:32:ED:56 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019C0026D756B81EF19180644E054093E312 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/RRvj6jA_nYDzJBp7ogthcP0y7VY.roa Signing time: Tue 27 Jan 2026 15:51:11 +0000 ROA not before: Tue 27 Jan 2026 15:51:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8772 IP address blocks: 95.164.15.0/24 maxlen: 24 95.164.40.0/22 maxlen: 22 95.164.49.0/24 maxlen: 24 95.164.50.0/24 maxlen: 24 95.164.56.0/22 maxlen: 22 95.164.72.0/22 maxlen: 22 95.164.76.0/24 maxlen: 24 95.164.80.0/22 maxlen: 22 95.164.115.0/24 maxlen: 24 95.164.120.0/24 maxlen: 24 95.164.121.0/24 maxlen: 24 95.164.170.0/23 maxlen: 23 95.164.172.0/22 maxlen: 22 95.164.248.0/24 maxlen: 24 95.164.249.0/24 maxlen: 24 95.164.251.0/24 maxlen: 24 185.234.254.0/24 maxlen: 24 2a10:eb80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:26:d7:56:b8:1e:f1:91:80:64:4e:05:40:93:e3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 27 15:51:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=451be3ea303f9d80f3241a7ba20b6170fd32ed56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:50:d0:1d:c5:ed:56:3d:37:0f:47:48:1c: e7:cc:b2:4a:41:50:9f:91:dd:3d:42:47:30:69:3e: d0:ef:35:a3:10:76:89:e3:35:b9:04:de:e6:3f:63: d8:4f:16:21:fb:6c:ff:42:56:7d:48:d3:ec:f2:8a: d4:bd:51:98:cc:b4:52:69:93:56:65:8d:43:ae:91: a9:b1:b5:ab:f3:81:b6:4c:28:9b:fd:b3:89:d9:1d: fe:0c:16:81:e9:3f:ee:56:ef:5e:bc:fc:37:68:c1: 56:05:11:49:f8:ce:b5:19:c5:06:9f:b9:03:b9:8f: ba:45:76:00:83:54:f2:8b:5c:27:2a:c6:0d:01:91: b2:30:6e:c1:e1:9b:d4:10:92:b6:ed:1d:ad:1e:bc: 99:81:7e:cc:9c:9c:2b:f2:70:c8:7b:c4:27:f7:3d: 50:c6:2f:3c:b7:cc:f7:3d:88:89:82:37:a6:09:81: 75:03:2f:df:8a:8b:47:97:81:67:0c:96:46:56:a9: 3c:ce:22:ae:4f:c3:93:c4:6f:d1:2a:fc:b3:38:ab: 3c:f7:61:20:34:e2:0e:ec:ba:64:66:b1:91:f1:98: 6f:9a:cb:7c:37:41:29:ed:3f:60:9a:2c:7b:70:7a: 61:9b:41:92:a8:67:bf:1a:80:1e:91:61:0c:6d:b0: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1B:E3:EA:30:3F:9D:80:F3:24:1A:7B:A2:0B:61:70:FD:32:ED:56 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/RRvj6jA_nYDzJBp7ogthcP0y7VY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.15.0/24 95.164.40.0/22 95.164.49.0-95.164.50.255 95.164.56.0/22 95.164.72.0-95.164.76.255 95.164.80.0/22 95.164.115.0/24 95.164.120.0/23 95.164.170.0-95.164.175.255 95.164.248.0/23 95.164.251.0/24 185.234.254.0/24 IPv6: 2a10:eb80::/29 Signature Algorithm: sha256WithRSAEncryption b2:34:bb:31:31:43:9b:cf:2f:98:57:21:b1:a8:98:6f:f4:1c: ff:e6:aa:ee:31:33:7d:d3:6a:ad:fe:0a:cf:74:e3:ad:d8:94: bc:eb:e1:93:eb:a6:8e:88:c0:4c:a8:47:3a:8c:7b:8e:66:16: 9e:dc:ab:84:e4:ee:12:e3:85:b8:66:d9:9f:60:ae:e9:7c:5a: 76:63:a1:4e:ec:a3:56:e4:02:ce:d8:42:a1:3e:ed:9f:e8:ec: e1:1d:4d:44:59:4c:c3:aa:d1:b8:22:10:ff:79:6c:79:b2:67: 2d:5e:40:70:93:7b:f7:f7:80:8c:64:1c:ea:b3:d4:cd:f3:6c: 09:b5:d1:95:f5:96:e0:b2:7f:f9:89:43:90:1c:5c:53:3d:55: ea:b8:15:63:9f:e9:db:42:47:c4:e9:45:e8:45:09:ad:83:c5: 1b:89:77:df:48:2c:2e:79:b7:f8:28:71:ef:37:82:23:fe:16: 41:91:22:68:a9:be:40:63:d7:e9:c3:e5:9e:52:2a:a5:53:43: 2c:35:f8:b6:05:38:4f:a2:37:61:34:a4:35:2b:f9:58:19:ef: 3a:cf:e4:12:69:21:23:aa:f9:c5:ee:fa:80:bc:cc:5e:54:74: c3:15:f6:be:db:66:6b:9d:a4:ef:62:18:f6:11:a8:bc:b8:bd: 24:15:ed:dd -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZwAJtdWuB7xkYBkTgVAk+MSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTI3MTU1MTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTFiZTNlYTMwM2Y5ZDgwZjMyNDFhN2JhMjBiNjE3MGZkMzJlZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBNQ0B3F7VY9Nw9HSBznzLJKQVCf kd09QkcwaT7Q7zWjEHaJ4zW5BN7mP2PYTxYh+2z/QlZ9SNPs8orUvVGYzLRSaZNW ZY1DrpGpsbWr84G2TCib/bOJ2R3+DBaB6T/uVu9evPw3aMFWBRFJ+M61GcUGn7kD uY+6RXYAg1Tyi1wnKsYNAZGyMG7B4ZvUEJK27R2tHryZgX7MnJwr8nDIe8Qn9z1Q xi88t8z3PYiJgjemCYF1Ay/fiotHl4FnDJZGVqk8ziKuT8OTxG/RKvyzOKs892Eg NOIO7LpkZrGR8Zhvmst8N0Ep7T9gmix7cHphm0GSqGe/GoAekWEMbbAW8QIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFEUb4+owP52A8yQae6ILYXD9Mu1WMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvUlJ2ajZqQV9uWUR6SkJwN29ndGhjUDB5N1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAF+kDwME Al+kKDAMAwQAX6QxAwQAX6QyAwQCX6Q4MAwDBANfpEgDBABfpEwDBAJfpFADBABf pHMDBAFfpHgwDAMEAV+kqgMEBF+koAMEAV+k+AMEAF+k+wMEALnq/jANBAIAAjAH AwUDKhDrgDANBgkqhkiG9w0BAQsFAAOCAQEAsjS7MTFDm88vmFchsaiYb/Qc/+aq 7jEzfdNqrf4Kz3TjrdiUvOvhk+umjojATKhHOox7jmYWntyrhOTuEuOFuGbZn2Cu 6XxadmOhTuyjVuQCzthCoT7tn+js4R1NRFlMw6rRuCIQ/3lsebJnLV5AcJN79/eA jGQc6rPUzfNsCbXRlfWW4LJ/+YlDkBxcUz1V6rgVY5/p20JHxOlF6EUJrYPFG4l3 30gsLnm3+Chx7zeCI/4WQZEiaKm+QGPX6cPlnlIqpVNDLDX4tgU4T6I3YTSkNSv5 WBnvOs/kEmkhI6r5xe76gLzMXlR0wxX2vttma52k72IY9hGovLi9JBXt3Q== -----END CERTIFICATE-----Generated at Mon Feb 2 15:43:29 2026 by rpki-client