This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xeps7KtiZhzf59kfjhvEQnvgyTY.roa File: xeps7KtiZhzf59kfjhvEQnvgyTY.roa (raw, json) Hash identifier: bsoU7P8DUjvgMSXkQUHf28VaCooB694C6Tt36kOlAm8= Subject key identifier: C5:EA:6C:EC:AB:62:66:1C:DF:E7:D9:1F:8E:1B:C4:42:7B:E0:C9:36 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019BCBE331798613002972ED50CE9BD4AD60 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xeps7KtiZhzf59kfjhvEQnvgyTY.roa Signing time: Sat 17 Jan 2026 12:17:02 +0000 ROA not before: Sat 17 Jan 2026 12:17:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 95.155.147.0/24 maxlen: 24 152.89.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:e3:31:79:86:13:00:29:72:ed:50:ce:9b:d4:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 17 12:17:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ea6cecab62661cdfe7d91f8e1bc4427be0c936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:50:fa:2c:bb:01:2e:7f:85:02:fa:b0:f4: e2:ec:01:76:84:bd:32:66:e1:8e:6e:1e:9f:b1:87: 50:15:0d:52:b0:27:57:73:dc:a6:8f:73:63:12:c8: 68:6d:89:9f:bb:70:ea:57:34:b5:58:d7:52:6f:5b: 19:f3:f9:f7:42:94:3d:be:8d:4e:bf:88:73:71:26: 57:d9:f4:12:09:35:40:ba:70:b1:4a:75:f0:87:0b: 14:29:9e:a4:2e:5d:1f:31:53:c7:d2:70:49:ea:5f: f4:47:ca:e5:ea:80:a1:ee:77:84:f9:f6:02:fb:38: 43:2b:2d:37:82:81:76:4f:43:da:ae:da:d3:74:f3: 55:4e:19:02:cc:59:42:ca:16:10:20:0f:bd:e4:9f: 6e:27:31:dc:b6:38:8a:92:5f:b2:c2:1d:c0:66:31: 22:ba:58:98:7d:95:86:6d:69:eb:c7:3f:8e:99:8b: 7e:48:5d:99:e1:d1:02:32:f0:53:3c:e8:0d:ba:ee: c4:11:9a:1c:29:a5:93:3c:29:44:09:43:e8:59:27: e8:8b:32:bc:23:dd:16:f9:d3:a8:f5:25:21:d9:f7: ae:7c:48:b8:55:2b:41:40:42:44:9a:50:d7:a0:4b: 53:c6:1a:81:dd:71:7b:17:74:25:5f:cf:f0:00:af: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:6C:EC:AB:62:66:1C:DF:E7:D9:1F:8E:1B:C4:42:7B:E0:C9:36 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xeps7KtiZhzf59kfjhvEQnvgyTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.147.0/24 152.89.87.0/24 Signature Algorithm: sha256WithRSAEncryption 19:8f:de:4a:e2:97:a8:66:d7:75:32:3e:cc:16:84:b7:5f:80: 7b:4b:9d:be:75:37:a0:da:2d:fb:b1:97:a1:97:07:29:0b:fa: 25:96:4f:a5:42:fe:0c:39:dc:39:bd:65:c0:4e:48:23:55:94: b6:ec:d6:ce:14:db:c7:4a:73:ac:6c:78:33:b8:b1:9e:c1:c3: 2a:cf:47:9e:e2:25:ff:b1:e9:d9:6a:d8:e6:9d:fa:a6:61:16: ee:b7:26:23:57:51:69:30:ac:cb:19:8f:64:e1:a4:a0:03:10: 3e:c1:91:c2:ab:6b:78:80:d1:ef:2e:1e:a0:54:f1:0d:96:72: 71:83:ef:44:bd:b8:aa:7f:b4:f1:05:8f:fb:a3:fe:71:70:07: 21:9b:6a:ac:93:a7:5f:21:e9:84:15:e9:27:6b:17:61:84:50: b8:5e:3b:ab:a9:75:f0:d2:6c:7f:7f:a7:36:c3:d2:c9:9d:8a: 2c:4c:d5:cb:5f:1d:e2:fa:ef:d5:fb:29:da:1b:63:ad:b9:0f: 0b:12:f2:6c:12:08:20:25:1e:b9:93:d5:7b:47:89:a3:1c:0a: be:48:e7:55:0c:69:16:d2:43:12:1c:e6:02:6c:c7:12:68:82: 34:c2:94:a8:da:7d:7f:1f:83:f8:19:e1:7f:2b:e6:a1:51:42: cd:d6:7b:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvL4zF5hhMAKXLtUM6b1K1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTE3MTIxNzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVhNmNlY2FiNjI2NjFjZGZlN2Q5MWY4ZTFiYzQ0MjdiZTBjOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ZQ+iy7AS5/hQL6sPTi7AF2hL0y ZuGObh6fsYdQFQ1SsCdXc9ymj3NjEshobYmfu3DqVzS1WNdSb1sZ8/n3QpQ9vo1O v4hzcSZX2fQSCTVAunCxSnXwhwsUKZ6kLl0fMVPH0nBJ6l/0R8rl6oCh7neE+fYC +zhDKy03goF2T0PartrTdPNVThkCzFlCyhYQIA+95J9uJzHctjiKkl+ywh3AZjEi uliYfZWGbWnrxz+OmYt+SF2Z4dECMvBTPOgNuu7EEZocKaWTPClECUPoWSfoizK8 I90W+dOo9SUh2feufEi4VStBQEJEmlDXoEtTxhqB3XF7F3QlX8/wAK+zSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMXqbOyrYmYc3+fZH44bxEJ74Mk2MB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveGVwczdLdGlaaHpmNTlrZmpodkVRbnZneVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX5uTAwQA mFlXMA0GCSqGSIb3DQEBCwUAA4IBAQAZj95K4peoZtd1Mj7MFoS3X4B7S52+dTeg 2i37sZehlwcpC/ollk+lQv4MOdw5vWXATkgjVZS27NbOFNvHSnOsbHgzuLGewcMq z0ee4iX/senZatjmnfqmYRbutyYjV1FpMKzLGY9k4aSgAxA+wZHCq2t4gNHvLh6g VPENlnJxg+9Evbiqf7TxBY/7o/5xcAchm2qsk6dfIemEFeknaxdhhFC4XjurqXXw 0mx/f6c2w9LJnYosTNXLXx3i+u/V+ynaG2OtuQ8LEvJsEgggJR65k9V7R4mjHAq+ SOdVDGkW0kMSHOYCbMcSaII0wpSo2n1/H4P4GeF/K+ahUULN1ns2 -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:18 2026 by rpki-client