This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/j6F5nKl7VxhTCPP7Z6aypppg1qg.roa File: j6F5nKl7VxhTCPP7Z6aypppg1qg.roa (raw, json) Hash identifier: b/KmdMBh7vGAQW3XZYIqLqb1iW1YZRpjzYx/XN6MR5Y= Subject key identifier: 8F:A1:79:9C:A9:7B:57:18:53:08:F3:FB:67:A6:B2:A6:9A:60:D6:A8 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F6110D858D4FE088E231EA258D51 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/j6F5nKl7VxhTCPP7Z6aypppg1qg.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59682 IP address blocks: 95.164.54.0/24 maxlen: 24 95.164.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f6:11:0d:85:8d:4f:e0:88:e2:31:ea:25:8d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fa1799ca97b57185308f3fb67a6b2a69a60d6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:f2:5b:71:5e:af:01:46:78:fb:af:a2:52: 80:fd:fb:f2:85:6f:41:a4:b4:b9:03:fd:49:6c:ba: 3e:6b:37:63:f3:a8:5b:4e:53:97:f3:b4:e2:d9:92: 2f:9b:0d:8a:2d:31:1a:12:29:78:5f:49:71:c4:92: f7:82:b7:50:70:5e:fc:48:4a:f8:c5:94:85:20:b5: cc:59:b0:d2:c5:f2:df:d6:08:a8:15:a2:7e:8a:6c: ca:7e:3c:5c:8c:2c:4d:47:4f:e9:98:2f:fc:42:b0: d4:42:a0:20:e2:b0:71:13:0b:b3:e5:87:c7:d0:6b: c2:5a:92:2e:73:82:f0:13:f9:79:f4:e5:78:09:7c: 74:4b:38:fc:b0:73:2a:13:b1:f8:12:9b:7e:05:c3: ae:a3:5f:56:62:fd:5f:62:7a:2a:88:79:76:1a:4d: 62:d4:d0:00:d9:96:80:99:02:da:a5:ec:26:b4:25: b1:3c:ef:7a:fa:52:ef:e1:96:21:df:89:5b:87:e9: f0:02:af:e3:a5:13:77:e8:fe:25:40:c2:e4:eb:23: 46:b0:4b:a8:09:8f:5f:5c:fe:eb:ee:d9:cd:5c:9c: fb:53:ee:c5:de:a9:87:98:20:4f:5a:5b:1b:07:f3: 4f:d4:e2:13:41:b3:bd:68:f2:ee:78:07:47:b6:5f: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A1:79:9C:A9:7B:57:18:53:08:F3:FB:67:A6:B2:A6:9A:60:D6:A8 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/j6F5nKl7VxhTCPP7Z6aypppg1qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.54.0/24 95.164.95.0/24 Signature Algorithm: sha256WithRSAEncryption 08:66:0a:e7:2b:0a:25:9d:8c:15:f4:3a:6d:64:a9:fd:99:a6: 04:ef:11:ce:c5:8d:3b:ad:e8:43:4c:21:0e:c1:e2:de:d9:4f: e3:3f:73:6c:ce:b9:bc:ea:06:6d:c7:1f:eb:a6:46:13:34:ee: 29:b2:c8:f4:90:f3:48:35:ee:89:21:2b:6e:58:bb:9e:47:c7: 61:21:cb:bc:ce:d1:b8:65:7e:17:3b:3d:d9:63:79:4c:c0:c4: 25:aa:88:06:ce:a8:e6:8d:24:75:98:07:71:1d:aa:f9:f0:01: 18:50:8c:bc:ab:df:26:45:ca:a1:4b:65:fe:72:82:39:fb:bd: 08:0d:33:92:95:cf:5a:d5:9e:0a:97:a4:5d:09:fd:37:4f:79: 17:9a:c6:9c:4f:38:79:b3:0e:38:86:6b:78:8d:1e:15:eb:95: cb:41:36:6f:ac:22:70:70:fe:87:1d:d1:32:de:d1:ee:cb:87: 57:b5:6d:ce:5c:a0:33:7d:0e:bd:00:59:f0:e5:b5:8c:2f:38: 6a:06:93:2a:3a:3d:54:3e:fc:e9:f1:5a:4a:bb:43:ac:b7:98: db:0a:d5:83:45:e8:d8:61:33:ae:c5:34:9d:8d:ec:21:89:0a: 4d:8e:4f:0e:74:3f:02:f2:29:54:58:44:41:53:d9:d2:a6:2b: 56:48:45:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvYRDYWNT+CI4jHqJY1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmExNzk5Y2E5N2I1NzE4NTMwOGYzZmI2N2E2YjJhNjlhNjBkNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuzyW3FerwFGePuvolKA/fvyhW9B pLS5A/1JbLo+azdj86hbTlOX87Ti2ZIvmw2KLTEaEil4X0lxxJL3grdQcF78SEr4 xZSFILXMWbDSxfLf1gioFaJ+imzKfjxcjCxNR0/pmC/8QrDUQqAg4rBxEwuz5YfH 0GvCWpIuc4LwE/l59OV4CXx0Szj8sHMqE7H4Ept+BcOuo19WYv1fYnoqiHl2Gk1i 1NAA2ZaAmQLapewmtCWxPO96+lLv4ZYh34lbh+nwAq/jpRN36P4lQMLk6yNGsEuo CY9fXP7r7tnNXJz7U+7F3qmHmCBPWlsbB/NP1OITQbO9aPLueAdHtl+1DwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+heZype1cYUwjz+2emsqaaYNaoMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvajZGNW5LbDdWeGhUQ1BQN1o2YXlwcHBnMXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX6Q2AwQA X6RfMA0GCSqGSIb3DQEBCwUAA4IBAQAIZgrnKwolnYwV9DptZKn9maYE7xHOxY07 rehDTCEOweLe2U/jP3Nszrm86gZtxx/rpkYTNO4pssj0kPNINe6JIStuWLueR8dh Icu8ztG4ZX4XOz3ZY3lMwMQlqogGzqjmjSR1mAdxHar58AEYUIy8q98mRcqhS2X+ coI5+70IDTOSlc9a1Z4Kl6RdCf03T3kXmsacTzh5sw44hmt4jR4V65XLQTZvrCJw cP6HHdEy3tHuy4dXtW3OXKAzfQ69AFnw5bWMLzhqBpMqOj1UPvzp8VpKu0Ost5jb CtWDRejYYTOuxTSdjewhiQpNjk8OdD8C8ilUWERBU9nSpitWSEWX -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:39 2026 by rpki-client