This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/a95lTc6SyYotVQ4RVCtdQF5CTXI.roa File: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (raw, json) Hash identifier: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk= Subject key identifier: 6B:DE:65:4D:CE:92:C9:8A:2D:55:0E:11:54:2B:5D:40:5E:42:4D:72 Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Certificate serial: 019B7F85224CA288C4ECBE60065B3A86971F Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/a95lTc6SyYotVQ4RVCtdQF5CTXI.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50590 IP address blocks: 46.175.168.0/21 maxlen: 23 46.175.172.0/23 maxlen: 23 46.175.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:22:4c:a2:88:c4:ec:be:60:06:5b:3a:86:97:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bde654dce92c98a2d550e11542b5d405e424d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:ca:9a:53:32:50:1f:19:bc:43:3e:fe:8d: 4b:63:67:22:5c:3c:fb:75:22:ee:cb:a8:5e:90:b1: 64:df:c7:75:b7:3e:8c:44:e3:59:d3:21:bd:bb:58: 99:71:9c:70:5e:71:27:a7:c5:78:16:62:83:60:99: 6a:f8:7f:90:b7:0c:67:72:89:97:7e:a4:bc:72:3f: 21:c7:28:d3:63:49:2d:ba:e0:60:31:78:f7:22:c4: d1:2c:a6:b3:ce:2b:f1:fe:1e:4e:20:65:9d:14:b4: 7a:cd:5c:f7:4d:15:68:26:65:47:ff:ca:c6:18:84: 00:9f:8e:c2:74:25:12:71:ef:1f:17:c0:f6:6a:c2: fc:35:c4:de:8f:a8:d3:7d:4b:03:8a:e3:a0:0f:a6: c2:b4:56:a9:24:43:9a:ad:54:a5:10:10:e3:59:ce: 0d:1f:41:0f:87:7e:23:35:f6:56:5c:e8:fd:e1:e2: 6c:47:d4:42:37:0e:97:12:13:c7:a2:b5:25:d6:54: 6a:f3:8c:f8:ae:1a:67:08:4f:5d:f3:ee:7b:1b:4d: e9:cf:8e:a8:14:33:6e:c3:36:0e:f3:fd:ce:8e:a6: 4a:20:7e:b3:b3:32:2b:83:99:0a:29:93:13:c6:06: be:82:5f:59:2f:e3:92:02:74:13:ed:40:e4:76:f4: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DE:65:4D:CE:92:C9:8A:2D:55:0E:11:54:2B:5D:40:5E:42:4D:72 X509v3 Authority Key Identifier: keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/a95lTc6SyYotVQ4RVCtdQF5CTXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.168.0/21 Signature Algorithm: sha256WithRSAEncryption 59:ef:e0:94:a5:fd:42:69:9c:18:27:f5:3f:53:cb:f4:34:ac: 4f:fc:57:22:99:af:a1:c4:18:ae:88:eb:8c:7f:a0:cf:f7:b1: 4f:bb:a1:2f:2b:2f:ed:7e:0c:f8:d3:b8:ef:ad:81:78:1d:ee: d1:5c:d5:c0:42:7d:13:64:c9:27:99:38:ca:2c:b6:d5:87:9e: 98:de:4a:b4:2c:3f:81:31:9e:ff:62:05:d0:d0:fd:28:f7:79: 18:1a:a2:ea:dd:ef:5b:45:2e:18:6f:61:88:ee:7e:e2:b0:4d: 7c:b6:99:c6:b4:4c:9d:e2:fa:d9:31:56:35:89:7e:8a:7f:2d: 6e:40:aa:52:ab:63:9a:ef:ca:e4:04:ac:64:51:64:6c:59:fe: 44:1a:9a:96:47:a8:e5:29:14:cc:d9:15:56:15:39:82:05:e0: b9:2b:71:75:b6:d1:47:3a:fd:d1:e8:be:5d:b3:25:4f:7e:d2: 16:39:4d:09:69:4d:7a:b2:91:bf:9d:81:6d:12:f0:35:6e:78: 9b:cc:9f:d1:4a:49:ef:5c:b1:4e:9b:47:79:e8:11:b4:15:15: a0:32:37:72:ce:bf:5c:4c:ab:ee:fc:5d:45:0b:02:3c:32:bc: a5:61:71:e5:fc:6d:26:6f:d3:0a:37:f6:55:d1:d9:fb:3d:10: 8f:b7:b5:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hSJMoojE7L5gBls6hpcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk OGNhMzUwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmRlNjU0ZGNlOTJjOThhMmQ1NTBlMTE1NDJiNWQ0MDVlNDI0ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypDKmlMyUB8ZvEM+/o1LY2ciXDz7 dSLuy6hekLFk38d1tz6MRONZ0yG9u1iZcZxwXnEnp8V4FmKDYJlq+H+QtwxncomX fqS8cj8hxyjTY0ktuuBgMXj3IsTRLKazzivx/h5OIGWdFLR6zVz3TRVoJmVH/8rG GIQAn47CdCUSce8fF8D2asL8NcTej6jTfUsDiuOgD6bCtFapJEOarVSlEBDjWc4N H0EPh34jNfZWXOj94eJsR9RCNw6XEhPHorUl1lRq84z4rhpnCE9d8+57G03pz46o FDNuwzYO8/3OjqZKIH6zszIrg5kKKZMTxga+gl9ZL+OSAnQT7UDkdvTG1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGveZU3OksmKLVUOEVQrXUBeQk1yMB8GA1UdIwQY MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt N2FjOWUyY2U0ZTMzLzEvYTk1bFRjNlN5WW90VlE0UlZDdGRRRjVDVFhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq+oMA0G CSqGSIb3DQEBCwUAA4IBAQBZ7+CUpf1CaZwYJ/U/U8v0NKxP/Fcima+hxBiuiOuM f6DP97FPu6EvKy/tfgz407jvrYF4He7RXNXAQn0TZMknmTjKLLbVh56Y3kq0LD+B MZ7/YgXQ0P0o93kYGqLq3e9bRS4Yb2GI7n7isE18tpnGtEyd4vrZMVY1iX6Kfy1u QKpSq2Oa78rkBKxkUWRsWf5EGpqWR6jlKRTM2RVWFTmCBeC5K3F1ttFHOv3R6L5d syVPftIWOU0JaU16spG/nYFtEvA1bnibzJ/RSknvXLFOm0d56BG0FRWgMjdyzr9c TKvu/F1FCwI8MrylYXHl/G0mb9MKN/ZV0dn7PRCPt7Xs -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:05 2026 by rpki-client