This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/enYE37jQOciNrH4vp2_3FdUT0io.roa File: enYE37jQOciNrH4vp2_3FdUT0io.roa (raw, json) Hash identifier: PoAlpwtftho9gluuF95P6FYOuD1hDRKv7R9Nta21XGo= Subject key identifier: 7A:76:04:DF:B8:D0:39:C8:8D:AC:7E:2F:A7:6F:F7:15:D5:13:D2:2A Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6FDB695256E288C4345ECA4FC3574 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/enYE37jQOciNrH4vp2_3FdUT0io.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394814 IP address blocks: 95.164.144.0/20 maxlen: 20 95.164.200.0/22 maxlen: 22 95.164.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fd:b6:95:25:6e:28:8c:43:45:ec:a4:fc:35:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a7604dfb8d039c88dac7e2fa76ff715d513d22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:27:f6:73:0b:26:81:ee:7d:02:0f:db:56: cc:1c:f8:6a:7c:c9:7e:95:a0:8b:50:7b:73:1a:09: 61:96:5a:d2:a4:aa:c5:26:f1:a7:73:06:25:5b:da: f7:0e:83:71:46:c7:c4:eb:db:9a:fa:78:d1:85:e6: 4c:14:2d:ad:91:3a:03:cd:a1:18:76:e1:ab:0c:b5: 7c:9a:39:fc:c1:7d:fc:02:70:d9:af:fb:89:22:96: 8f:d6:5a:c4:e1:4f:83:61:7d:37:b0:58:f7:03:80: 82:42:d5:5a:47:e6:68:19:8a:d2:0c:1b:ae:04:7b: 91:4e:44:55:1c:4b:fd:28:7e:17:01:dd:e3:62:3d: 70:5f:1f:38:cf:9c:13:53:e6:b6:aa:25:d1:5b:54: 2f:28:af:95:27:26:6b:b0:0e:e2:af:18:95:ab:bc: fe:44:fe:3e:16:49:3f:ba:34:7f:23:49:6a:df:cb: a9:cf:7f:ca:2b:5a:cf:9f:eb:e4:93:d2:65:73:5e: 81:59:04:2a:a6:69:8b:53:a0:5a:7a:ac:4b:79:02: d0:1f:15:9c:f5:5a:d1:ee:ca:08:cb:46:b5:e7:3e: c2:51:c9:f1:43:d5:00:45:8e:13:23:17:14:1b:34: b6:a8:c5:7a:0b:ee:7c:2b:1f:ff:2c:13:94:b6:9f: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:76:04:DF:B8:D0:39:C8:8D:AC:7E:2F:A7:6F:F7:15:D5:13:D2:2A X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/enYE37jQOciNrH4vp2_3FdUT0io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.144.0/20 95.164.200.0/21 Signature Algorithm: sha256WithRSAEncryption 26:39:d2:b9:9f:c1:41:9a:80:a8:46:6b:5c:69:7c:30:c8:6b: 9f:9b:be:f1:04:56:a5:2b:d0:a1:cf:93:c1:64:53:70:28:fa: 04:53:9e:48:3b:78:07:0b:23:1d:38:3f:b8:f0:91:0c:f6:db: 4a:d2:6e:4f:05:43:c1:9b:63:b5:34:38:7b:13:5b:77:f3:14: e6:25:8f:47:09:a6:ab:12:e4:bc:26:2a:b7:9b:f8:eb:99:85: ca:6e:1a:42:84:b9:12:96:6d:a0:bc:18:88:ba:66:79:38:c4: 4e:db:fc:df:0d:01:54:d8:29:91:2d:8a:4b:ec:73:09:eb:d1: fc:1f:ca:92:62:29:e6:d1:b7:5b:af:af:0e:d7:57:6b:6c:23: 11:12:00:c4:3e:c6:8e:05:81:96:bc:3f:a1:07:e4:a9:7e:6f: 8a:c5:f9:e1:ea:4f:af:85:c2:d7:26:95:50:e0:36:b6:c5:a1: 41:5b:5a:28:f1:b5:2d:40:ff:2d:e0:73:3b:e4:58:5c:41:a3: c4:15:d7:c3:aa:af:14:4b:3c:c3:19:d5:6e:10:5e:9f:6c:39: 4d:09:fe:84:de:a1:55:1b:46:c9:25:3a:d8:e4:3b:23:94:89: 44:3d:a1:6b:3f:5a:0f:f3:00:56:7e:ec:10:5a:6a:e9:82:5f: 24:90:44:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xv22lSVuKIxDReyk/DV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc2MDRkZmI4ZDAzOWM4OGRhYzdlMmZhNzZmZjcxNWQ1MTNkMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rwn9nMLJoHufQIP21bMHPhqfMl+ laCLUHtzGglhllrSpKrFJvGncwYlW9r3DoNxRsfE69ua+njRheZMFC2tkToDzaEY duGrDLV8mjn8wX38AnDZr/uJIpaP1lrE4U+DYX03sFj3A4CCQtVaR+ZoGYrSDBuu BHuRTkRVHEv9KH4XAd3jYj1wXx84z5wTU+a2qiXRW1QvKK+VJyZrsA7irxiVq7z+ RP4+Fkk/ujR/I0lq38upz3/KK1rPn+vkk9Jlc16BWQQqpmmLU6BaeqxLeQLQHxWc 9VrR7soIy0a15z7CUcnxQ9UARY4TIxcUGzS2qMV6C+58Kx//LBOUtp8CTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHp2BN+40DnIjax+L6dv9xXVE9IqMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvZW5ZRTM3alFPY2lOckg0dnAyXzNGZFVUMGlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEX6SQAwQD X6TIMA0GCSqGSIb3DQEBCwUAA4IBAQAmOdK5n8FBmoCoRmtcaXwwyGufm77xBFal K9Chz5PBZFNwKPoEU55IO3gHCyMdOD+48JEM9ttK0m5PBUPBm2O1NDh7E1t38xTm JY9HCaarEuS8Jiq3m/jrmYXKbhpChLkSlm2gvBiIumZ5OMRO2/zfDQFU2CmRLYpL 7HMJ69H8H8qSYinm0bdbr68O11drbCMREgDEPsaOBYGWvD+hB+Spfm+Kxfnh6k+v hcLXJpVQ4Da2xaFBW1oo8bUtQP8t4HM75FhcQaPEFdfDqq8USzzDGdVuEF6fbDlN Cf6E3qFVG0bJJTrY5DsjlIlEPaFrP1oP8wBWfuwQWmrpgl8kkERb -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:38 2026 by rpki-client