This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/AY73K8BjgucKcIiSw1Ymh-f9-uA.roa File: AY73K8BjgucKcIiSw1Ymh-f9-uA.roa (raw, json) Hash identifier: GfyzSi9jEFb5dCWkfH8FQLNesIPqq71/mBvRM69GgJs= Subject key identifier: 01:8E:F7:2B:C0:63:82:E7:0A:70:88:92:C3:56:26:87:E7:FD:FA:E0 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019C2D0B7CA59681D5962006A2628662C88F Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/AY73K8BjgucKcIiSw1Ymh-f9-uA.roa Signing time: Thu 05 Feb 2026 09:04:13 +0000 ROA not before: Thu 05 Feb 2026 09:04:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 95.155.129.0/24 maxlen: 24 95.155.133.0/24 maxlen: 24 95.155.146.0/24 maxlen: 24 95.155.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 09:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:0b:7c:a5:96:81:d5:96:20:06:a2:62:86:62:c8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Feb 5 09:04:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=018ef72bc06382e70a708892c3562687e7fdfae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:0b:6d:00:db:7c:f5:70:47:33:ad:ea:4e: 54:64:27:92:f8:6c:b3:82:72:21:15:50:fe:ad:93: 7f:0d:fa:8f:d5:20:ef:7d:b9:3e:a8:55:43:13:34: 0d:26:9f:85:d3:a4:66:d5:27:a7:da:3f:a3:32:83: 3c:97:b6:cc:4f:6a:98:c3:dd:ec:1a:96:82:04:60: 83:c8:07:aa:5b:4d:2e:57:39:b5:9b:73:3c:b0:f7: a7:a6:25:bd:eb:d2:51:a6:85:c0:9b:52:b5:8c:a1: ed:b3:bb:72:eb:96:95:72:75:8a:12:f6:79:db:55: 3d:0e:4d:ee:79:e4:c2:b7:81:08:85:53:84:c0:2b: 6f:1f:0f:0c:b5:36:39:51:76:7b:e1:0d:4c:fc:06: 9d:e8:87:59:6e:12:73:37:5a:b6:62:44:4d:9e:2a: 91:1d:24:2e:26:62:9c:41:2a:d6:30:c8:ef:de:06: 9a:84:7e:a6:e1:44:8c:4b:14:2b:8f:ba:74:79:53: c2:89:82:43:28:0a:87:b2:f6:8b:63:06:1f:9b:01: 32:65:2e:bd:a0:78:fa:3c:f9:a1:58:3a:87:63:17: 7a:dc:55:14:89:d7:ff:e7:fb:d3:32:42:ad:ce:a8: aa:db:e3:67:c6:ab:29:61:a7:f7:b4:64:af:9b:55: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:F7:2B:C0:63:82:E7:0A:70:88:92:C3:56:26:87:E7:FD:FA:E0 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/AY73K8BjgucKcIiSw1Ymh-f9-uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.129.0/24 95.155.133.0/24 95.155.146.0/23 Signature Algorithm: sha256WithRSAEncryption 29:e9:2e:05:02:aa:c7:82:96:b2:ef:c7:f8:1c:0a:bf:7b:7b: db:0e:5b:f7:3a:fe:3b:ac:ac:7f:2f:08:0d:26:3c:ee:f8:44: 12:7d:bc:fd:dd:a1:15:57:4c:df:f1:d9:2a:1d:98:b2:0f:60: d0:f3:9a:7a:ed:f6:21:82:88:0f:3f:ae:02:88:80:13:82:2b: 81:46:0c:b4:ff:a8:dc:0d:2c:45:1d:6e:fe:ca:bd:c9:62:b3: 7f:4c:3a:6a:25:5f:57:c6:1a:f6:8b:20:be:e7:9c:c0:37:52: c6:8e:5f:5a:e4:f4:b5:ab:0c:4e:34:dc:d4:16:24:69:1a:f6: 3f:a6:f0:da:03:99:0a:5f:41:e6:6d:6a:7d:07:48:19:20:65: e5:67:a3:bb:7b:29:2f:d9:36:e1:86:3b:e8:e0:43:bf:92:f9: 8f:7e:ab:a7:51:28:1a:fb:b3:18:52:55:ff:a0:35:8f:52:fa: e7:5d:19:fc:41:55:39:8a:4c:32:ff:c0:fd:7f:02:7b:28:ba: c1:5f:da:9c:3a:2e:29:85:e3:54:4a:49:8a:c2:e8:06:6c:d3: 70:ad:41:aa:d4:6b:c3:1f:06:77:f1:ca:fb:9b:40:7d:e6:9c: d0:d6:30:f0:67:ad:b9:9e:f3:c7:2c:d1:6f:c1:ce:63:4c:d7: 8a:2f:de:aa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwtC3ylloHVliAGomKGYsiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMjA1MDkwNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMThlZjcyYmMwNjM4MmU3MGE3MDg4OTJjMzU2MjY4N2U3ZmRmYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGoLbQDbfPVwRzOt6k5UZCeS+Gyz gnIhFVD+rZN/DfqP1SDvfbk+qFVDEzQNJp+F06Rm1Sen2j+jMoM8l7bMT2qYw93s GpaCBGCDyAeqW00uVzm1m3M8sPenpiW969JRpoXAm1K1jKHts7ty65aVcnWKEvZ5 21U9Dk3ueeTCt4EIhVOEwCtvHw8MtTY5UXZ74Q1M/Aad6IdZbhJzN1q2YkRNniqR HSQuJmKcQSrWMMjv3gaahH6m4USMSxQrj7p0eVPCiYJDKAqHsvaLYwYfmwEyZS69 oHj6PPmhWDqHYxd63FUUidf/5/vTMkKtzqiq2+NnxqspYaf3tGSvm1XI1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAGO9yvAY4LnCnCIksNWJofn/frgMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvQVk3M0s4QmpndWNLY0lpU3cxWW1oLWY5LXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX5uBAwQA X5uFAwQBX5uSMA0GCSqGSIb3DQEBCwUAA4IBAQAp6S4FAqrHgpay78f4HAq/e3vb Dlv3Ov47rKx/LwgNJjzu+EQSfbz93aEVV0zf8dkqHZiyD2DQ85p67fYhgogPP64C iIATgiuBRgy0/6jcDSxFHW7+yr3JYrN/TDpqJV9Xxhr2iyC+55zAN1LGjl9a5PS1 qwxONNzUFiRpGvY/pvDaA5kKX0HmbWp9B0gZIGXlZ6O7eykv2Tbhhjvo4EO/kvmP fqunUSga+7MYUlX/oDWPUvrnXRn8QVU5ikwy/8D9fwJ7KLrBX9qcOi4pheNUSkmK wugGbNNwrUGq1GvDHwZ38cr7m0B95pzQ1jDwZ625nvPHLNFvwc5jTNeKL96q -----END CERTIFICATE-----Generated at Thu Feb 5 16:28:31 2026 by rpki-client