This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/cDdMTjngtYsLIOOxQvsdmflV-aA.roa File: cDdMTjngtYsLIOOxQvsdmflV-aA.roa (raw, json) Hash identifier: dZ55CHAusf0JcOT9iKjBrQ/9IwdfrGFZWIyMSLpgGtA= Subject key identifier: 70:37:4C:4E:39:E0:B5:8B:0B:20:E3:B1:42:FB:1D:99:F9:55:F9:A0 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F945D3E78023E4C070FD8AC2A45B Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/cDdMTjngtYsLIOOxQvsdmflV-aA.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209847 IP address blocks: 95.164.0.0/24 maxlen: 24 95.164.1.0/24 maxlen: 24 95.164.2.0/23 maxlen: 24 95.164.4.0/24 maxlen: 24 95.164.5.0/24 maxlen: 24 95.164.6.0/23 maxlen: 24 95.164.9.0/24 maxlen: 24 95.164.10.0/24 maxlen: 24 95.164.11.0/24 maxlen: 24 95.164.16.0/23 maxlen: 24 95.164.18.0/24 maxlen: 24 95.164.19.0/24 maxlen: 24 95.164.21.0/24 maxlen: 24 95.164.22.0/24 maxlen: 24 95.164.23.0/24 maxlen: 24 95.164.32.0/24 maxlen: 24 95.164.34.0/24 maxlen: 24 95.164.35.0/24 maxlen: 24 95.164.36.0/24 maxlen: 24 95.164.37.0/24 maxlen: 24 95.164.44.0/24 maxlen: 24 95.164.45.0/24 maxlen: 24 95.164.46.0/24 maxlen: 24 95.164.47.0/24 maxlen: 24 95.164.61.0/24 maxlen: 24 95.164.62.0/24 maxlen: 24 95.164.63.0/24 maxlen: 24 95.164.68.0/24 maxlen: 24 95.164.69.0/24 maxlen: 24 95.164.85.0/24 maxlen: 24 95.164.86.0/23 maxlen: 24 95.164.88.0/24 maxlen: 24 95.164.89.0/24 maxlen: 24 95.164.112.0/24 maxlen: 24 95.164.113.0/24 maxlen: 24 95.164.114.0/24 maxlen: 24 95.164.115.0/24 maxlen: 24 95.164.116.0/24 maxlen: 24 95.164.117.0/24 maxlen: 24 95.164.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f9:45:d3:e7:80:23:e4:c0:70:fd:8a:c2:a4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70374c4e39e0b58b0b20e3b142fb1d99f955f9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:53:55:1c:25:d5:8c:f3:4d:e3:5e:fb:05: 0b:cb:3f:65:23:cb:7f:8f:c6:cd:82:fa:98:44:1d: c1:ad:49:a9:e6:52:e0:d4:3d:2d:6a:ee:06:f2:69: 8b:40:e5:37:8a:4d:e2:a7:1f:46:8b:10:47:c8:9d: ac:cf:01:18:75:f9:21:27:68:7e:d3:81:ed:0d:a3: d6:af:0e:c1:28:63:88:ae:28:4f:cb:80:ee:59:6f: 82:d7:5b:66:79:0c:3e:35:c3:fc:2f:2d:9f:7e:9b: 34:85:c1:4f:45:bb:d2:87:63:cb:b4:b1:fd:d1:c3: c3:e1:4c:52:4b:18:e8:e0:d1:f2:d1:0d:03:42:31: 6c:16:2c:20:58:17:38:49:ae:4d:4a:2b:ee:88:f5: 73:a3:72:93:06:e6:62:80:7b:46:21:8b:f1:41:98: 28:c1:fb:be:d1:5c:f3:05:39:a6:7f:30:53:a6:3e: 65:75:84:3f:c8:93:74:fe:f6:a9:06:a8:ac:8b:3b: cc:3c:9a:cb:80:0a:42:47:d4:1c:01:4c:85:ac:86: 39:b7:e5:d3:28:2e:ff:c6:f4:7f:ae:82:99:cd:e4: 0e:f7:24:7d:f5:3e:71:be:13:47:e3:e8:64:1f:4f: 47:d0:95:57:91:7a:67:85:bf:a5:56:ff:62:06:3f: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:37:4C:4E:39:E0:B5:8B:0B:20:E3:B1:42:FB:1D:99:F9:55:F9:A0 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/cDdMTjngtYsLIOOxQvsdmflV-aA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.0.0/21 95.164.9.0-95.164.11.255 95.164.16.0/22 95.164.21.0-95.164.23.255 95.164.32.0/24 95.164.34.0-95.164.37.255 95.164.44.0/22 95.164.61.0-95.164.63.255 95.164.68.0/23 95.164.85.0-95.164.89.255 95.164.112.0-95.164.117.255 95.164.119.0/24 Signature Algorithm: sha256WithRSAEncryption c0:a0:2c:6d:04:25:38:a7:7f:aa:e9:37:86:36:d6:fc:fd:a0: ca:c6:51:75:9b:af:0b:f6:eb:ce:a0:ae:3e:66:98:27:b3:41: 4e:1b:ce:5e:d3:e6:ac:87:c8:93:33:ca:1d:aa:ed:77:87:44: 8c:7e:96:d9:01:af:92:13:0c:a4:fd:1e:7b:0f:12:21:45:55: 1a:64:ee:b9:13:be:1a:5f:57:dc:cf:f2:49:05:86:86:5e:9a: 70:92:92:b5:46:ab:07:52:fe:71:c2:bc:98:92:85:bd:88:20: fb:36:11:8a:85:95:ae:9a:6b:88:d2:d9:95:68:6c:d6:6d:59: 78:0f:3d:32:95:9a:a0:fb:49:71:12:0b:02:df:e3:f5:06:ae: d7:1e:9f:8a:62:9d:82:b7:20:cf:4b:e4:d4:14:bc:2d:ee:b9: 93:73:70:7a:6f:c7:e3:95:04:cf:0e:d2:b9:13:14:56:0d:97: 50:91:a0:a5:9a:8c:41:1b:0f:fc:2b:c7:7a:02:76:84:89:9e: 0e:27:bd:e1:40:1b:a7:2c:17:47:0f:3e:8d:87:1c:a6:b1:84: 01:2a:b6:bd:45:e0:0f:d0:48:a3:1f:70:d4:c4:9e:46:d3:2c: a2:9d:12:d3:3a:6c:16:a8:0e:bb:d2:1b:a9:80:18:71:fc:ce: ce:a2:39:c8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt3xvlF0+eAI+TAcP2KwqRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDM3NGM0ZTM5ZTBiNThiMGIyMGUzYjE0MmZiMWQ5OWY5NTVmOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJVTVRwl1YzzTeNe+wULyz9lI8t/ j8bNgvqYRB3BrUmp5lLg1D0tau4G8mmLQOU3ik3ipx9GixBHyJ2szwEYdfkhJ2h+ 04HtDaPWrw7BKGOIrihPy4DuWW+C11tmeQw+NcP8Ly2ffps0hcFPRbvSh2PLtLH9 0cPD4UxSSxjo4NHy0Q0DQjFsFiwgWBc4Sa5NSivuiPVzo3KTBuZigHtGIYvxQZgo wfu+0VzzBTmmfzBTpj5ldYQ/yJN0/vapBqisizvMPJrLgApCR9QcAUyFrIY5t+XT KC7/xvR/roKZzeQO9yR99T5xvhNH4+hkH09H0JVXkXpnhb+lVv9iBj8pHwIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFHA3TE454LWLCyDjsUL7HZn5VfmgMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvY0RkTVRqbmd0WXNMSU9PeFF2c2RtZmxWLWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQDX6QA MAwDBABfpAkDBAJfpAgDBAJfpBAwDAMEAF+kFQMEA1+kEAMEAF+kIDAMAwQBX6Qi AwQBX6QkAwQCX6QsMAwDBABfpD0DBAZfpAADBAFfpEQwDAMEAF+kVQMEAV+kWDAM AwQEX6RwAwQBX6R0AwQAX6R3MA0GCSqGSIb3DQEBCwUAA4IBAQDAoCxtBCU4p3+q 6TeGNtb8/aDKxlF1m68L9uvOoK4+Zpgns0FOG85e0+ash8iTM8odqu13h0SMfpbZ Aa+SEwyk/R57DxIhRVUaZO65E74aX1fcz/JJBYaGXppwkpK1RqsHUv5xwryYkoW9 iCD7NhGKhZWummuI0tmVaGzWbVl4Dz0ylZqg+0lxEgsC3+P1Bq7XHp+KYp2CtyDP S+TUFLwt7rmTc3B6b8fjlQTPDtK5ExRWDZdQkaClmoxBGw/8K8d6AnaEiZ4OJ73h QBunLBdHDz6NhxymsYQBKra9ReAP0EijH3DUxJ5G0yyinRLTOmwWqA670hupgBhx /M7OojnI -----END CERTIFICATE-----Generated at Wed Jan 21 09:55:55 2026 by rpki-client