This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/tEnzcmF181z_Fz4dFzQyfZ882o4.roa File: tEnzcmF181z_Fz4dFzQyfZ882o4.roa (raw, json) Hash identifier: RBYNG12SzCTfXGwx/F5qbQVTQCBmyDYwNw6MWUM/ecc= Subject key identifier: B4:49:F3:72:61:75:F3:5C:FF:17:3E:1D:17:34:32:7D:9F:3C:DA:8E Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F4CC5F8ABDCC24B71B43D3D2FCC2 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/tEnzcmF181z_Fz4dFzQyfZ882o4.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51264 IP address blocks: 95.164.90.0/24 maxlen: 24 95.164.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f4:cc:5f:8a:bd:cc:24:b7:1b:43:d3:d2:fc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b449f3726175f35cff173e1d1734327d9f3cda8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:cb:07:81:2b:e0:d9:ba:14:30:ef:b6:bc: db:b3:37:04:2e:d1:38:5d:66:d5:cb:91:c2:dc:80: 41:e7:fc:99:41:d1:29:26:49:af:24:27:41:5d:3a: 10:7d:69:0f:4c:e8:05:7d:40:ca:a1:bf:83:e7:18: 13:9a:0e:ba:66:50:83:04:6a:57:29:20:58:af:2f: f8:5c:07:d0:27:43:a9:71:cb:c8:5c:03:ed:29:2f: 99:c6:e4:69:03:2f:03:df:50:1a:53:b0:a4:e5:b8: 45:f2:f6:8a:f6:78:fc:24:11:15:be:ef:22:fd:ff: a3:59:29:de:8f:79:b9:d6:bc:c0:9d:dd:d5:17:4a: 2f:b0:30:27:89:69:cb:8d:40:3b:be:1b:16:62:93: 84:a1:06:28:9d:81:08:b3:2d:a7:cd:12:c3:34:67: 8a:d1:1b:50:fd:ec:ca:a9:5e:6b:56:ff:9c:65:ab: a7:5b:33:7a:62:7d:82:64:5a:f6:ba:29:b2:0a:bb: a9:0a:22:1e:76:84:12:8e:15:bc:d9:f8:be:fc:31: 37:80:91:d7:ca:62:cf:cc:6b:67:20:06:75:36:2a: 9d:1f:e1:37:f8:a4:bb:40:09:ad:36:36:51:20:2f: 58:93:95:1b:90:4f:f4:24:a4:5e:ba:2b:ec:a2:ae: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:49:F3:72:61:75:F3:5C:FF:17:3E:1D:17:34:32:7D:9F:3C:DA:8E X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/tEnzcmF181z_Fz4dFzQyfZ882o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.90.0/24 95.164.92.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:bb:c9:64:b3:aa:1b:34:21:36:b8:00:c3:3f:62:90:e6:5b: d8:d0:d5:bb:26:de:99:9c:14:55:b3:13:a3:89:18:61:30:7f: 10:3f:63:f8:c6:c3:44:73:e8:c0:4e:75:fd:c7:47:cd:8a:c0: c0:de:2a:f9:44:29:c0:c5:90:56:9a:f7:f9:dd:be:2e:cc:b5: 66:c1:1f:da:f0:b9:fc:ee:4d:17:c5:fa:92:36:af:5b:8c:7a: 36:bb:e5:95:d4:f9:ff:4d:e5:e2:a3:97:82:ec:b5:56:71:e7: 25:46:ad:83:11:a4:8d:80:93:6c:dd:c1:57:72:b3:6a:2c:60: 23:6c:3e:b0:65:ea:dc:d8:8b:60:f0:5c:24:a2:0e:fb:c9:66: d4:05:21:79:82:aa:b5:a4:f2:c8:49:53:0f:8d:36:dc:71:df: b5:94:2e:c1:6d:5a:70:3e:ad:17:cf:12:96:56:d4:2f:36:37: b3:bf:c1:fd:e6:4d:db:78:87:d2:f3:a5:29:5b:30:b4:30:e1: ba:eb:4e:8f:b6:e6:50:0b:ab:77:1d:37:44:ff:f0:c6:82:e1: 60:d3:73:29:8d:c9:39:1d:e6:32:fa:c9:7b:da:81:47:c8:2f: 5e:e1:8e:dd:4d:13:16:6f:8d:bf:36:54:26:83:5c:99:9d:b1: 6b:a8:38:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvTMX4q9zCS3G0PT0vzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ5ZjM3MjYxNzVmMzVjZmYxNzNlMWQxNzM0MzI3ZDlmM2NkYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lbLB4Er4Nm6FDDvtrzbszcELtE4 XWbVy5HC3IBB5/yZQdEpJkmvJCdBXToQfWkPTOgFfUDKob+D5xgTmg66ZlCDBGpX KSBYry/4XAfQJ0OpccvIXAPtKS+ZxuRpAy8D31AaU7Ck5bhF8vaK9nj8JBEVvu8i /f+jWSnej3m51rzAnd3VF0ovsDAniWnLjUA7vhsWYpOEoQYonYEIsy2nzRLDNGeK 0RtQ/ezKqV5rVv+cZaunWzN6Yn2CZFr2uimyCrupCiIedoQSjhW82fi+/DE3gJHX ymLPzGtnIAZ1NiqdH+E3+KS7QAmtNjZRIC9Yk5UbkE/0JKReuivsoq7y3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLRJ83JhdfNc/xc+HRc0Mn2fPNqOMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvdEVuemNtRjE4MXpfRno0ZEZ6UXlmWjg4Mm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX6RaAwQB X6RcMA0GCSqGSIb3DQEBCwUAA4IBAQCfu8lks6obNCE2uADDP2KQ5lvY0NW7Jt6Z nBRVsxOjiRhhMH8QP2P4xsNEc+jATnX9x0fNisDA3ir5RCnAxZBWmvf53b4uzLVm wR/a8Ln87k0XxfqSNq9bjHo2u+WV1Pn/TeXio5eC7LVWceclRq2DEaSNgJNs3cFX crNqLGAjbD6wZerc2Itg8Fwkog77yWbUBSF5gqq1pPLISVMPjTbccd+1lC7BbVpw Pq0XzxKWVtQvNjezv8H95k3beIfS86UpWzC0MOG6606PtuZQC6t3HTdE//DGguFg 03Mpjck5HeYy+sl72oFHyC9e4Y7dTRMWb42/NlQmg1yZnbFrqDh9 -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:32 2026 by rpki-client