This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/j6h2wYXBGU0po-975zEbDRhXVP8.roa File: j6h2wYXBGU0po-975zEbDRhXVP8.roa (raw, json) Hash identifier: VuTt2+GtidZibv9WAUHaogEOazxD2GyG76InT6TAm6k= Subject key identifier: 8F:A8:76:C1:85:C1:19:4D:29:A3:EF:7B:E7:31:1B:0D:18:57:54:FF Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6EF03AF219A77DCB7A02D90D29600 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/j6h2wYXBGU0po-975zEbDRhXVP8.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 95.164.70.0/24 maxlen: 24 95.164.128.0/20 maxlen: 20 95.164.168.0/23 maxlen: 23 95.164.192.0/22 maxlen: 22 95.164.200.0/21 maxlen: 21 95.164.240.0/21 maxlen: 21 95.164.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ef:03:af:21:9a:77:dc:b7:a0:2d:90:d2:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fa876c185c1194d29a3ef7be7311b0d185754ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:dc:f7:c1:2e:de:2c:00:d7:c9:e0:b4:67: d3:08:7f:76:a2:e8:6d:fd:9e:4b:e2:5d:a6:6f:fc: 2a:04:c1:b0:86:ef:cc:2e:bc:e4:49:83:76:bb:46: 4b:14:35:8d:ae:47:4e:37:db:fe:5f:65:aa:e2:2a: 1e:f9:bd:9b:b6:71:74:ec:05:0a:ce:dc:09:e5:a5: 1f:11:65:f1:c6:75:9b:e2:04:f0:33:24:00:fb:8f: d8:e1:1d:53:af:b4:0b:03:f8:d1:21:d9:ae:ff:64: 15:bb:a1:de:94:4b:30:f1:b2:a3:2e:68:77:c3:09: ed:96:33:3c:36:ef:d5:ed:09:2b:06:bd:e1:6b:07: 4b:70:a0:5e:03:d3:07:ce:64:b7:9c:0f:4d:73:11: 17:8f:67:d8:05:dd:40:75:f9:11:b8:b7:98:4e:25: 39:2b:cd:30:b5:1e:84:40:aa:20:ce:b0:3d:54:ca: 50:20:fe:a0:01:bc:4c:e4:c1:1e:4b:8c:e4:1e:83: bc:71:22:bf:5b:98:56:bb:9a:20:50:c7:bf:6c:54: eb:70:5d:e5:d2:33:cd:fc:7f:b4:1e:86:96:72:18: a0:74:a7:d6:bc:48:99:1c:2f:47:40:62:0d:81:43: 9a:5b:4b:05:bc:9b:a1:1c:45:ef:af:6e:85:ae:d8: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:76:C1:85:C1:19:4D:29:A3:EF:7B:E7:31:1B:0D:18:57:54:FF X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/j6h2wYXBGU0po-975zEbDRhXVP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.70.0/24 95.164.128.0/20 95.164.168.0/23 95.164.192.0/22 95.164.200.0/21 95.164.240.0/21 95.164.252.0/22 Signature Algorithm: sha256WithRSAEncryption b6:72:2c:ac:af:be:dc:0f:f9:e7:5d:67:69:f5:7e:df:4f:74: ef:6d:92:7f:f9:78:13:c0:fb:cd:64:3d:68:03:54:bb:ff:27: 4c:9d:06:e3:e0:6f:f9:7c:66:94:21:c3:de:a2:33:8c:d6:1a: ad:e8:e5:7b:bc:19:ad:66:95:08:21:5e:c1:44:40:5b:2f:08: 81:9b:d5:55:6c:7b:e3:35:ff:bf:30:fa:2d:07:00:5a:a1:35: c7:0b:99:ec:24:7a:50:76:37:5e:c8:cb:d6:05:68:b9:11:af: 57:36:1b:2b:20:95:bd:01:47:75:1e:83:20:f4:72:4d:63:a1: b2:5f:8d:d9:29:2c:90:e7:0c:23:12:cd:44:67:e6:6d:36:84: d1:30:1b:ea:dd:e1:df:56:a7:a0:c3:40:f2:98:64:19:65:bb: 1a:2b:14:5f:85:9e:09:ab:9c:b4:16:48:fb:a2:e2:f8:0f:c2: 86:38:66:51:fa:6c:89:47:77:a3:d1:50:70:10:53:cf:dd:b0: bc:3d:46:de:3a:cd:38:8b:f6:dd:74:22:df:d3:bc:96:1c:ee: 5c:be:b6:d9:16:3c:4b:39:11:98:e1:10:fb:a3:f2:b7:ed:0b: 66:0a:6f:87:53:23:67:fd:1f:71:f3:ca:e0:ef:94:55:33:f3: 64:3c:d5:fd -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt3xu8DryGad9y3oC2Q0pYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmE4NzZjMTg1YzExOTRkMjlhM2VmN2JlNzMxMWIwZDE4NTc1NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp/c98Eu3iwA18ngtGfTCH92ouht /Z5L4l2mb/wqBMGwhu/MLrzkSYN2u0ZLFDWNrkdON9v+X2Wq4ioe+b2btnF07AUK ztwJ5aUfEWXxxnWb4gTwMyQA+4/Y4R1Tr7QLA/jRIdmu/2QVu6HelEsw8bKjLmh3 wwntljM8Nu/V7QkrBr3hawdLcKBeA9MHzmS3nA9NcxEXj2fYBd1AdfkRuLeYTiU5 K80wtR6EQKogzrA9VMpQIP6gAbxM5MEeS4zkHoO8cSK/W5hWu5ogUMe/bFTrcF3l 0jPN/H+0HoaWchigdKfWvEiZHC9HQGINgUOaW0sFvJuhHEXvr26Frti4+wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFI+odsGFwRlNKaPve+cxGw0YV1T/MB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvajZoMndZWEJHVTBwby05NzV6RWJEUmhYVlA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAX6RGAwQE X6SAAwQBX6SoAwQCX6TAAwQDX6TIAwQDX6TwAwQCX6T8MA0GCSqGSIb3DQEBCwUA A4IBAQC2ciysr77cD/nnXWdp9X7fT3TvbZJ/+XgTwPvNZD1oA1S7/ydMnQbj4G/5 fGaUIcPeojOM1hqt6OV7vBmtZpUIIV7BREBbLwiBm9VVbHvjNf+/MPotBwBaoTXH C5nsJHpQdjdeyMvWBWi5Ea9XNhsrIJW9AUd1HoMg9HJNY6GyX43ZKSyQ5wwjEs1E Z+ZtNoTRMBvq3eHfVqegw0DymGQZZbsaKxRfhZ4Jq5y0Fkj7ouL4D8KGOGZR+myJ R3ej0VBwEFPP3bC8PUbeOs04i/bddCLf07yWHO5cvrbZFjxLORGY4RD7o/K37Qtm Cm+HUyNn/R9x88rg75RVM/NkPNX9 -----END CERTIFICATE-----Generated at Fri Jan 2 16:27:40 2026 by rpki-client