This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/l7FVy9qV9r7TJi_Vr2KpMSypfts.roa File: l7FVy9qV9r7TJi_Vr2KpMSypfts.roa (raw, json) Hash identifier: BO7WgU3AlrlmLiXeaJCpacGRr3Q1uOzmvzOfD3QKH6s= Subject key identifier: 97:B1:55:CB:DA:95:F6:BE:D3:26:2F:D5:AF:62:A9:31:2C:A9:7E:DB Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F0AB5BF0481C7404EC87AFB8BE8E Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/l7FVy9qV9r7TJi_Vr2KpMSypfts.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7922 IP address blocks: 95.164.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f0:ab:5b:f0:48:1c:74:04:ec:87:af:b8:be:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97b155cbda95f6bed3262fd5af62a9312ca97edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:2f:5b:6f:eb:5e:39:9f:9e:b1:91:ab:95: 8d:76:03:81:c2:dd:3f:b4:d6:de:f9:73:6b:d3:28: a7:26:39:12:18:49:7d:e6:e3:8a:2e:6a:af:30:41: 6e:17:3e:27:60:e0:3c:9b:f5:0d:00:94:2d:8d:ab: da:9e:bc:1c:73:18:96:f0:d4:2b:6f:fc:3e:66:54: 7d:d0:6f:da:f9:d8:f5:52:fa:05:f2:c5:20:41:9a: 15:9f:a5:b5:ae:43:ef:c1:5d:1f:2c:8d:dc:17:43: 2a:45:ac:72:5d:06:41:3c:39:e4:4d:19:e0:d6:20: 04:73:bc:e6:ed:ad:27:dc:c2:48:0c:9e:ab:67:d1: cb:42:9d:d5:3c:ba:cb:4a:49:56:0a:53:a8:59:52: 9a:19:8e:c5:cb:96:87:61:0a:51:71:b1:25:aa:8f: 63:c5:2a:93:b6:63:9d:27:05:1d:ce:3f:a6:6b:24: c8:d0:ce:18:d6:31:6d:84:7c:cc:66:67:be:f8:4d: cc:04:5d:16:02:7e:17:39:12:1e:ea:c4:fc:7f:b7: 95:64:e6:9e:d8:b7:c1:fa:41:0b:94:a8:2b:96:9b: d6:e6:de:29:2a:96:27:f8:9d:a6:06:2b:12:ba:e3: c0:e4:b0:1d:36:ec:27:90:b3:35:f4:7f:f6:77:4b: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:55:CB:DA:95:F6:BE:D3:26:2F:D5:AF:62:A9:31:2C:A9:7E:DB X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/l7FVy9qV9r7TJi_Vr2KpMSypfts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.224.0/22 Signature Algorithm: sha256WithRSAEncryption 29:77:5a:3a:ad:d6:0d:14:8f:25:29:a3:08:f3:b6:11:45:63: 25:c7:10:85:03:1d:39:be:93:f9:42:28:ee:8f:77:e3:6f:10: 43:fd:4f:0f:87:4b:28:eb:e5:37:76:0f:e6:79:4b:82:eb:b4: ea:fe:6a:25:04:43:8c:f7:54:44:86:1d:1b:d2:06:6c:ea:13: 18:ed:fb:60:bb:d8:b7:70:60:43:36:78:4a:93:25:5c:7c:7b: c6:db:89:81:b8:e0:ae:bf:4d:5b:9c:af:5e:1f:dc:23:27:47: f5:e1:25:83:09:cd:f7:6e:f8:ad:dd:b9:47:bc:ea:d4:84:fd: ed:0b:a5:9a:29:30:9d:2e:35:82:e5:37:4d:90:d7:7b:79:12: 99:38:3f:72:8a:fc:62:ae:fa:98:60:83:74:6e:a4:e0:56:02: d6:6d:3e:a9:4b:91:40:e1:13:72:ce:91:18:a2:33:46:1f:a3: 50:1a:54:2c:e8:fc:d6:65:1a:db:8d:54:e9:cb:ae:b8:d2:86: 3c:4f:00:38:8b:dd:37:b9:08:a4:f2:0f:8f:94:24:a6:3a:97: 07:d9:02:ae:76:d1:1a:2d:7d:b0:94:af:34:bf:75:53:c0:4c: 61:c6:08:c0:55:8d:3d:bd:2e:b5:59:23:dd:2b:f6:d3:b7:ae: 8f:da:d8:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvCrW/BIHHQE7IevuL6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2IxNTVjYmRhOTVmNmJlZDMyNjJmZDVhZjYyYTkzMTJjYTk3ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZovW2/rXjmfnrGRq5WNdgOBwt0/ tNbe+XNr0yinJjkSGEl95uOKLmqvMEFuFz4nYOA8m/UNAJQtjavanrwccxiW8NQr b/w+ZlR90G/a+dj1UvoF8sUgQZoVn6W1rkPvwV0fLI3cF0MqRaxyXQZBPDnkTRng 1iAEc7zm7a0n3MJIDJ6rZ9HLQp3VPLrLSklWClOoWVKaGY7Fy5aHYQpRcbElqo9j xSqTtmOdJwUdzj+mayTI0M4Y1jFthHzMZme++E3MBF0WAn4XORIe6sT8f7eVZOae 2LfB+kELlKgrlpvW5t4pKpYn+J2mBisSuuPA5LAdNuwnkLM19H/2d0u9pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJexVcvalfa+0yYv1a9iqTEsqX7bMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvbDdGVnk5cVY5cjdUSmlfVnIyS3BNU3lwZnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX6TgMA0G CSqGSIb3DQEBCwUAA4IBAQApd1o6rdYNFI8lKaMI87YRRWMlxxCFAx05vpP5Qiju j3fjbxBD/U8Ph0so6+U3dg/meUuC67Tq/molBEOM91REhh0b0gZs6hMY7ftgu9i3 cGBDNnhKkyVcfHvG24mBuOCuv01bnK9eH9wjJ0f14SWDCc33bvit3blHvOrUhP3t C6WaKTCdLjWC5TdNkNd7eRKZOD9yivxirvqYYIN0bqTgVgLWbT6pS5FA4RNyzpEY ojNGH6NQGlQs6PzWZRrbjVTpy6640oY8TwA4i903uQik8g+PlCSmOpcH2QKudtEa LX2wlK80v3VTwExhxgjAVY09vS61WSPdK/bTt66P2thq -----END CERTIFICATE-----Generated at Fri Jan 9 12:03:09 2026 by rpki-client