This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xB8G2Wpa-bPT0379AYe1B0JaZCA.roa File: xB8G2Wpa-bPT0379AYe1B0JaZCA.roa (raw, json) Hash identifier: XnvuBDsm7nE5D21D99HgDtqbUAjTfFnm+Hp6IwSPINI= Subject key identifier: C4:1F:06:D9:6A:5A:F9:B3:D3:D3:7E:FD:01:87:B5:07:42:5A:64:20 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C803240CD55AB1875A8A52F7EA923D8 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xB8G2Wpa-bPT0379AYe1B0JaZCA.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 95.155.132.0/24 maxlen: 24 95.155.144.0/24 maxlen: 24 95.155.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:40:cd:55:ab:18:75:a8:a5:2f:7e:a9:23:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c41f06d96a5af9b3d3d37efd0187b507425a6420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:b4:5a:05:55:49:85:ad:d6:96:14:15:39: cc:c6:16:ce:d7:de:70:4b:12:a5:bc:51:ac:c4:c5: 2b:b1:3e:2c:4b:dd:bb:89:aa:d9:90:d7:0e:85:ac: c6:83:2b:31:0c:1a:7a:a0:a1:8c:e4:cb:fc:29:25: 57:10:ee:43:63:50:2a:0d:43:42:80:51:2f:d6:d0: b0:e6:25:f4:b8:2e:07:07:a8:ba:32:0b:e0:ab:ea: f4:c0:1f:24:27:ca:ab:54:6b:ee:e2:b7:83:7d:37: 3c:66:2d:1d:2d:60:5a:0a:e8:6a:7d:f3:78:28:0f: e0:3c:58:63:38:71:18:ae:0c:d6:9e:16:0b:7d:c0: 91:94:eb:b5:be:b1:34:1d:42:29:80:f9:1c:25:50: 98:a6:a5:48:50:03:53:17:48:db:a1:e0:82:49:e4: 87:5a:36:5f:c5:82:30:7b:88:b1:64:7c:81:3f:dd: 32:05:f9:7d:05:7f:cc:80:f9:f1:53:5c:3b:13:55: 50:b8:56:56:aa:75:3d:b0:bd:d6:91:f7:36:83:c7: 44:fe:f5:fc:e4:87:4e:76:94:05:cb:2f:fa:56:01: 5f:e4:fe:d8:9b:61:e0:cb:cf:80:22:fa:51:07:1b: 48:73:b5:ea:62:60:5b:88:f3:d8:76:4b:b6:cb:a1: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1F:06:D9:6A:5A:F9:B3:D3:D3:7E:FD:01:87:B5:07:42:5A:64:20 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xB8G2Wpa-bPT0379AYe1B0JaZCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.132.0/24 95.155.144.0/24 95.155.151.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e3:80:f8:0b:82:d6:cf:b1:69:1a:d3:cb:e4:46:b1:8e:19: 1b:37:3a:d4:24:9f:9c:5f:51:38:cc:8f:bc:ca:ba:ec:b3:ee: 4a:4d:51:2b:a4:45:b9:cf:52:ae:86:59:4c:ec:c5:1a:05:b2: 86:84:e0:16:a2:64:80:96:8a:d2:1c:75:b7:a6:d7:87:c3:a2: 45:d2:11:9b:ac:b3:bb:f5:68:71:61:92:87:4c:21:00:9c:cb: f1:d4:bb:0d:b5:59:f7:c0:d2:94:f8:12:ae:38:a5:bf:5f:62: 0d:7a:06:86:91:7d:cc:6e:dd:74:29:1b:e8:44:30:19:d8:14: e2:6f:8d:49:bd:2e:2c:5b:e6:bd:c8:66:27:d1:77:5c:18:cc: ce:db:fb:63:bd:01:c9:fc:31:b6:87:6e:ee:05:ce:b4:11:ee: 98:11:3a:05:b0:94:22:56:9d:9d:23:d0:4e:79:91:68:11:27: 40:59:5d:a0:9e:8c:11:0f:ef:9f:4a:18:36:65:eb:36:ef:8f: f7:23:5d:0d:62:4d:18:4c:84:c9:d0:88:4d:f7:88:d9:18:86: 99:4b:9f:48:b9:66:7c:3d:60:62:e3:26:67:e6:5d:77:5c:69: 4d:d8:98:a5:9b:d6:b4:f1:56:04:56:23:a5:92:57:15:9a:96: 6b:22:47:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDJAzVWrGHWopS9+qSPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDFmMDZkOTZhNWFmOWIzZDNkMzdlZmQwMTg3YjUwNzQyNWE2NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicK0WgVVSYWt1pYUFTnMxhbO195w SxKlvFGsxMUrsT4sS927iarZkNcOhazGgysxDBp6oKGM5Mv8KSVXEO5DY1AqDUNC gFEv1tCw5iX0uC4HB6i6Mgvgq+r0wB8kJ8qrVGvu4reDfTc8Zi0dLWBaCuhqffN4 KA/gPFhjOHEYrgzWnhYLfcCRlOu1vrE0HUIpgPkcJVCYpqVIUANTF0jboeCCSeSH WjZfxYIwe4ixZHyBP90yBfl9BX/MgPnxU1w7E1VQuFZWqnU9sL3Wkfc2g8dE/vX8 5IdOdpQFyy/6VgFf5P7Ym2Hgy8+AIvpRBxtIc7XqYmBbiPPYdku2y6HGVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMQfBtlqWvmz09N+/QGHtQdCWmQgMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveEI4RzJXcGEtYlBUMDM3OUFZZTFCMEphWkNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX5uEAwQA X5uQAwQAX5uXMA0GCSqGSIb3DQEBCwUAA4IBAQB744D4C4LWz7FpGtPL5Eaxjhkb NzrUJJ+cX1E4zI+8yrrss+5KTVErpEW5z1KuhllM7MUaBbKGhOAWomSAlorSHHW3 pteHw6JF0hGbrLO79WhxYZKHTCEAnMvx1LsNtVn3wNKU+BKuOKW/X2INegaGkX3M bt10KRvoRDAZ2BTib41JvS4sW+a9yGYn0XdcGMzO2/tjvQHJ/DG2h27uBc60Ee6Y EToFsJQiVp2dI9BOeZFoESdAWV2gnowRD++fShg2Zes274/3I10NYk0YTITJ0IhN 94jZGIaZS59IuWZ8PWBi4yZn5l13XGlN2Jilm9a08VYEViOlklcVmpZrIkfh -----END CERTIFICATE-----Generated at Tue Jan 20 12:50:33 2026 by rpki-client