This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/pokgFqJKL71LmNxe3GzJiwe-aEQ.roa File: pokgFqJKL71LmNxe3GzJiwe-aEQ.roa (raw, json) Hash identifier: 4d7U8FPET89WS+qjV1l1ylBDZNCuK7o7cXPZNcAfBQo= Subject key identifier: A6:89:20:16:A2:4A:2F:BD:4B:98:DC:5E:DC:6C:C9:8B:07:BE:68:44 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019BCBE330C89F369B57AE8F7FD4F12A9844 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/pokgFqJKL71LmNxe3GzJiwe-aEQ.roa Signing time: Sat 17 Jan 2026 12:17:02 +0000 ROA not before: Sat 17 Jan 2026 12:17:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 95.155.130.0/24 maxlen: 24 152.89.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:e3:30:c8:9f:36:9b:57:ae:8f:7f:d4:f1:2a:98:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 17 12:17:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6892016a24a2fbd4b98dc5edc6cc98b07be6844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:b6:6a:a4:02:ed:cd:90:e7:43:4f:4d:c8: c1:73:90:ae:61:36:5c:6f:84:03:d9:fc:b4:72:15: de:25:4f:07:2c:9b:3e:09:24:2d:64:f3:93:67:31: b8:f6:85:95:6c:34:4e:e9:33:7a:d7:4d:c6:52:68: cc:00:48:4d:60:82:b7:3d:60:97:fb:03:79:88:70: c2:d6:f9:d0:64:b7:dd:15:0e:8b:c8:66:e5:8e:c4: 95:03:0b:3c:c6:ed:8a:c6:46:11:ac:2f:3f:b4:bc: 88:d9:c3:9e:40:75:40:f0:20:74:a4:cb:99:c8:8a: 90:4c:69:55:0c:0f:18:b8:df:c9:fc:b2:71:00:b2: 50:28:4a:4b:83:b0:ea:1d:e2:4e:fa:d0:2e:40:dd: 41:f1:84:4c:c9:67:d0:c4:00:32:5a:0d:af:d8:d3: bd:2a:1e:9e:68:47:ef:91:f7:89:88:3d:1b:6c:39: f5:47:65:4c:14:d2:02:5d:cd:f8:db:c3:e4:c6:66: e6:1d:e2:38:05:50:e4:aa:35:90:a2:b0:b2:59:95: 1a:d5:eb:07:1e:58:9f:72:44:96:27:c7:12:93:dd: 33:72:8b:17:90:49:99:b4:64:d8:79:bb:8a:65:e1: dc:39:f9:ba:ee:58:68:a9:6a:78:80:64:f7:98:75: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:20:16:A2:4A:2F:BD:4B:98:DC:5E:DC:6C:C9:8B:07:BE:68:44 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/pokgFqJKL71LmNxe3GzJiwe-aEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.130.0/24 152.89.87.0/24 Signature Algorithm: sha256WithRSAEncryption 98:6e:ae:0a:7d:9b:84:c8:f9:4f:d6:2c:37:4b:4c:b7:ca:33: 0b:d3:03:32:7b:df:a3:8a:b9:56:13:5c:4c:ac:c1:56:24:b9: 10:4c:b2:63:5f:b9:07:2e:a0:03:16:84:c2:f8:cf:e1:9f:30: d5:50:21:28:fe:5f:f7:c9:9b:a5:b4:0d:af:44:e2:cd:55:e2: 5b:60:7f:36:58:f7:6e:68:72:e3:db:1f:43:5f:1c:37:26:21: da:c0:f9:21:c5:08:49:bd:06:0f:1f:e8:5a:54:85:d4:74:54: 58:e9:c0:e0:aa:88:65:a0:7f:0e:75:80:0d:3b:9d:dd:bf:18: 15:3a:04:4b:74:23:72:66:ac:5f:e7:72:4f:84:47:a9:b1:e2: 19:2f:5e:c9:43:c7:c2:1e:ae:e8:bf:f1:5c:32:67:9d:6a:32: a4:fb:ee:7d:cb:29:4d:3b:3e:8f:5d:50:47:1c:4f:f4:3f:90: 46:d3:fb:87:d5:1b:fe:7d:c0:f9:e3:b1:87:84:8e:9f:9b:d7: bb:59:3d:c4:8a:81:6e:79:3d:11:70:67:51:4a:04:86:ad:b4: 65:b5:f8:ca:a2:d6:78:cb:94:69:f2:e9:9d:14:33:76:64:df: 7a:97:2b:f4:f9:8e:e1:86:49:db:ae:61:fd:15:b8:8f:98:5c: 6f:db:00:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvL4zDInzabV66Pf9TxKphEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTE3MTIxNzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjg5MjAxNmEyNGEyZmJkNGI5OGRjNWVkYzZjYzk4YjA3YmU2ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFq2aqQC7c2Q50NPTcjBc5CuYTZc b4QD2fy0chXeJU8HLJs+CSQtZPOTZzG49oWVbDRO6TN6103GUmjMAEhNYIK3PWCX +wN5iHDC1vnQZLfdFQ6LyGbljsSVAws8xu2KxkYRrC8/tLyI2cOeQHVA8CB0pMuZ yIqQTGlVDA8YuN/J/LJxALJQKEpLg7DqHeJO+tAuQN1B8YRMyWfQxAAyWg2v2NO9 Kh6eaEfvkfeJiD0bbDn1R2VMFNICXc3428PkxmbmHeI4BVDkqjWQorCyWZUa1esH HlifckSWJ8cSk90zcosXkEmZtGTYebuKZeHcOfm67lhoqWp4gGT3mHW6awIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKaJIBaiSi+9S5jcXtxsyYsHvmhEMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvcG9rZ0ZxSktMNzFMbU54ZTNHekppd2UtYUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX5uCAwQA mFlXMA0GCSqGSIb3DQEBCwUAA4IBAQCYbq4KfZuEyPlP1iw3S0y3yjML0wMye9+j irlWE1xMrMFWJLkQTLJjX7kHLqADFoTC+M/hnzDVUCEo/l/3yZultA2vROLNVeJb YH82WPduaHLj2x9DXxw3JiHawPkhxQhJvQYPH+haVIXUdFRY6cDgqohloH8OdYAN O53dvxgVOgRLdCNyZqxf53JPhEepseIZL17JQ8fCHq7ov/FcMmedajKk++59yylN Oz6PXVBHHE/0P5BG0/uH1Rv+fcD547GHhI6fm9e7WT3EioFueT0RcGdRSgSGrbRl tfjKotZ4y5Rp8umdFDN2ZN96lyv0+Y7hhknbrmH9FbiPmFxv2wA2 -----END CERTIFICATE-----Generated at Sun Jan 18 04:28:57 2026 by rpki-client