This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/_opU9Zflr19Qgw9wxcT5CzBzFeE.roa File: _opU9Zflr19Qgw9wxcT5CzBzFeE.roa (raw, json) Hash identifier: hVBzTOs1aH7AxZYfWOOyLBurJardjc8RPMc3Hjjv5+g= Subject key identifier: FE:8A:54:F5:97:E5:AF:5F:50:83:0F:70:C5:C4:F9:0B:30:73:15:E1 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6FC42091317F6F0223A0DA5DD9CF4 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/_opU9Zflr19Qgw9wxcT5CzBzFeE.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 266827 IP address blocks: 95.164.8.0/24 maxlen: 24 95.164.33.0/24 maxlen: 24 95.164.51.0/24 maxlen: 24 95.164.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:42:09:13:17:f6:f0:22:3a:0d:a5:dd:9c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe8a54f597e5af5f50830f70c5c4f90b307315e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:fd:6a:bf:86:55:ad:99:39:83:5b:3a:08: 8a:58:bc:73:3b:f5:eb:1d:b3:95:76:90:74:a4:ce: 76:8c:3b:4a:f8:32:8b:2a:b9:11:c2:39:57:6d:cf: bd:64:63:1b:77:b8:06:f0:7a:ff:2e:53:ee:e3:79: cc:28:01:e9:d7:6c:c5:eb:f5:09:a0:1b:8e:88:aa: 5f:e6:c0:14:05:78:2d:be:6f:fd:2e:c1:07:01:fa: 9b:bc:ba:fb:b0:3a:0b:b7:d4:42:a6:ee:10:ee:0c: 1a:04:08:f0:6d:a0:97:58:0d:82:0a:0f:b0:1e:32: be:b4:ac:7a:38:c9:44:55:f4:2c:c4:4e:05:15:fe: 57:90:19:69:c0:95:ec:88:95:60:44:b6:db:68:82: ca:f5:d1:91:4c:c2:b2:5b:ba:70:aa:f9:e2:9a:47: 20:6e:ef:22:4f:37:54:84:59:f6:33:6c:46:6c:5c: 22:a3:6d:d3:00:cc:0d:47:21:06:cb:14:15:c7:ad: b4:dd:74:cb:52:ce:a1:2d:f2:18:58:6c:0d:5c:07: 44:ee:cc:4a:f1:c3:89:f5:8a:2b:c1:38:b4:93:30: 9b:ff:71:44:0c:8c:ba:b2:e6:df:d0:81:f1:47:98: c9:fe:f9:c7:5b:c0:b8:dd:48:32:b7:96:1c:85:7c: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:54:F5:97:E5:AF:5F:50:83:0F:70:C5:C4:F9:0B:30:73:15:E1 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/_opU9Zflr19Qgw9wxcT5CzBzFeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.8.0/24 95.164.33.0/24 95.164.51.0/24 95.164.149.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b1:3b:80:3b:08:77:3e:4c:0d:e9:0f:2b:2d:9a:d4:50:d9: c2:cc:c8:11:7c:0a:02:b4:64:31:2c:a9:b2:2c:52:db:86:c1: 98:24:b6:d5:61:74:5d:14:85:9c:59:09:3e:f3:cc:b9:bb:70: 3d:96:18:c5:81:7c:e1:83:de:d6:b5:8a:52:fd:cb:6f:41:c4: 4a:34:ba:af:51:4e:7a:6d:80:23:fa:5a:a0:6b:42:12:ec:db: 1b:73:3c:a1:eb:9f:d3:12:d6:50:e4:97:2d:f2:b9:c1:ee:df: d4:ad:71:47:c5:c9:a4:85:93:11:6d:4c:b3:5e:7a:42:9d:05: 8b:e2:6c:1a:a5:28:2d:84:0c:c8:cf:5d:5f:6d:fb:2f:e2:4b: a5:f9:08:84:fc:7e:e4:27:bd:aa:05:7c:a2:9e:46:8d:6c:ec: b4:60:f1:da:a6:b9:63:d6:6c:54:76:2f:5d:df:cd:70:aa:f0: a3:86:25:e3:87:46:1d:03:f0:fa:9f:5a:4a:17:2e:4b:fe:92: 7c:b5:64:89:a2:c2:71:c3:56:50:2c:d2:f0:79:ef:1b:01:bb: d3:40:b5:0e:bf:09:eb:57:47:41:22:d1:62:68:f2:ca:21:90: cd:07:ca:62:1d:a2:25:6f:20:fd:10:68:d5:b4:25:a6:5c:9f: 76:cd:ce:a3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xvxCCRMX9vAiOg2l3Zz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZThhNTRmNTk3ZTVhZjVmNTA4MzBmNzBjNWM0ZjkwYjMwNzMxNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4T9ar+GVa2ZOYNbOgiKWLxzO/Xr HbOVdpB0pM52jDtK+DKLKrkRwjlXbc+9ZGMbd7gG8Hr/LlPu43nMKAHp12zF6/UJ oBuOiKpf5sAUBXgtvm/9LsEHAfqbvLr7sDoLt9RCpu4Q7gwaBAjwbaCXWA2CCg+w HjK+tKx6OMlEVfQsxE4FFf5XkBlpwJXsiJVgRLbbaILK9dGRTMKyW7pwqvnimkcg bu8iTzdUhFn2M2xGbFwio23TAMwNRyEGyxQVx6203XTLUs6hLfIYWGwNXAdE7sxK 8cOJ9YorwTi0kzCb/3FEDIy6subf0IHxR5jJ/vnHW8C43Ugyt5YchXz4HQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFP6KVPWX5a9fUIMPcMXE+QswcxXhMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvX29wVTlaZmxyMTlRZ3c5d3hjVDVDekJ6RmVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX6QIAwQA X6QhAwQAX6QzAwQAX6SVMA0GCSqGSIb3DQEBCwUAA4IBAQCFsTuAOwh3PkwN6Q8r LZrUUNnCzMgRfAoCtGQxLKmyLFLbhsGYJLbVYXRdFIWcWQk+88y5u3A9lhjFgXzh g97WtYpS/ctvQcRKNLqvUU56bYAj+lqga0IS7Nsbczyh65/TEtZQ5Jct8rnB7t/U rXFHxcmkhZMRbUyzXnpCnQWL4mwapSgthAzIz11fbfsv4kul+QiE/H7kJ72qBXyi nkaNbOy0YPHaprlj1mxUdi9d381wqvCjhiXjh0YdA/D6n1pKFy5L/pJ8tWSJosJx w1ZQLNLwee8bAbvTQLUOvwnrV0dBItFiaPLKIZDNB8piHaIlbyD9EGjVtCWmXJ92 zc6j -----END CERTIFICATE-----Generated at Wed Jan 21 12:46:25 2026 by rpki-client