This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/8xW6dotWOxBryiPnauuCXj7XuSI.roa File: 8xW6dotWOxBryiPnauuCXj7XuSI.roa (raw, json) Hash identifier: zASgDwULaWpUbCGZvnjqbpSShkEykQFL5DbnV3AjxvA= Subject key identifier: F3:15:BA:76:8B:56:3B:10:6B:CA:23:E7:6A:EB:82:5E:3E:D7:B9:22 Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175 Certificate serial: 019B7BA5042DC6A46D6CF8DEC5EA4C0FEAE2 Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/8xW6dotWOxBryiPnauuCXj7XuSI.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50556 IP address blocks: 95.66.175.0/24 maxlen: 24 95.66.178.0/24 maxlen: 24 95.66.179.0/24 maxlen: 24 95.66.232.0/22 maxlen: 22 95.66.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:04:2d:c6:a4:6d:6c:f8:de:c5:ea:4c:0f:ea:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f315ba768b563b106bca23e76aeb825e3ed7b922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:f9:33:42:4f:38:b9:bf:29:9c:b3:3e:36: 75:70:45:43:15:5a:8f:4a:5e:83:81:e6:0e:2c:d6: 83:5f:11:73:71:4a:9f:48:df:c6:55:81:70:80:9a: cb:d0:ba:2f:38:a3:1a:c1:c5:6e:58:2c:e0:89:a7: 1a:66:91:17:93:77:86:b3:e2:4b:b9:0f:b3:c0:13: 18:2a:e9:f1:05:f3:0c:3c:be:9d:a6:ef:d0:b0:2e: ff:03:3b:02:d8:96:1c:ed:38:cb:51:2e:96:65:d2: ab:ed:44:f3:88:cb:06:48:c6:ed:7f:1a:cd:a2:25: 12:3a:f4:44:0d:7b:49:23:02:1b:4c:cc:48:d3:0a: e7:63:ec:fc:40:34:0e:40:98:c2:c1:6d:2a:b3:1c: c7:f6:d4:62:98:a6:ab:9d:9e:88:20:78:eb:8e:7e: cd:e2:7d:d8:1c:a9:7d:5c:4d:27:61:df:b9:29:74: 6d:9d:40:39:32:62:6b:02:4b:ca:92:9c:93:6c:9c: 1c:8d:32:5d:d0:bf:2f:95:5c:94:91:8e:22:c6:fe: e3:1a:8e:5d:1b:d5:c6:7a:11:e1:6b:10:cd:01:72: c5:02:29:34:ee:a4:c6:88:09:b5:a9:1a:77:14:bc: ff:ab:b0:02:78:85:01:f1:f4:42:a3:ad:e7:37:48: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:15:BA:76:8B:56:3B:10:6B:CA:23:E7:6A:EB:82:5E:3E:D7:B9:22 X509v3 Authority Key Identifier: keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/8xW6dotWOxBryiPnauuCXj7XuSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.66.175.0/24 95.66.178.0/23 95.66.232.0-95.66.236.255 Signature Algorithm: sha256WithRSAEncryption a6:e9:8c:5c:88:8d:93:94:a9:38:f7:65:4b:a8:cc:6d:64:8e: 47:5a:51:7e:39:25:3a:da:dc:4c:5d:39:a6:16:41:33:e5:1c: 6c:27:e3:38:7e:b2:b8:1d:84:2a:8b:e2:79:84:5e:60:74:38: 71:a9:de:c0:b1:fb:7b:b5:63:13:14:c3:bf:7d:69:b7:70:5c: cf:58:0a:30:19:db:e0:79:70:43:38:b1:10:61:11:fe:89:4a: 26:9c:e8:45:1a:e7:e1:69:0b:a4:2f:e0:31:43:a3:6e:5e:ef: e4:31:90:48:fe:4e:c2:42:20:ff:df:d8:15:31:09:12:50:ae: de:42:a2:d4:36:49:12:3b:8b:52:2d:79:d9:4b:64:a2:59:30: ae:a7:22:e6:48:dd:81:a7:bf:c7:34:2d:30:ac:b4:8b:fa:32: cb:1b:f2:bc:39:32:13:1e:70:fe:8c:8f:1d:db:d3:54:c6:f7: b1:06:e6:4d:84:27:8d:4c:9e:ca:cd:5d:08:8f:c6:f3:e2:52: bb:ee:1c:b0:6c:65:63:30:db:9d:24:35:71:a3:b0:e4:23:b1: 11:70:12:b9:90:15:64:e7:ec:c9:72:d2:f0:58:2e:07:97:b8: 48:84:dd:28:61:6f:76:48:c1:73:16:64:24:a8:2b:da:d0:fc: f9:65:1b:56 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pQQtxqRtbPjexepMD+riMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz MDUxNzUwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE1YmE3NjhiNTYzYjEwNmJjYTIzZTc2YWViODI1ZTNlZDdiOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzz5M0JPOLm/KZyzPjZ1cEVDFVqP Sl6DgeYOLNaDXxFzcUqfSN/GVYFwgJrL0LovOKMawcVuWCzgiacaZpEXk3eGs+JL uQ+zwBMYKunxBfMMPL6dpu/QsC7/AzsC2JYc7TjLUS6WZdKr7UTziMsGSMbtfxrN oiUSOvREDXtJIwIbTMxI0wrnY+z8QDQOQJjCwW0qsxzH9tRimKarnZ6IIHjrjn7N 4n3YHKl9XE0nYd+5KXRtnUA5MmJrAkvKkpyTbJwcjTJd0L8vlVyUkY4ixv7jGo5d G9XGehHhaxDNAXLFAik07qTGiAm1qRp3FLz/q7ACeIUB8fRCo63nN0jOFQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPMVunaLVjsQa8oj52rrgl4+17kiMB8GA1UdIwQY MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt MTI3OGE0MmUwOTJhLzEvOHhXNmRvdFdPeEJyeWlQbmF1dUNYajdYdVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAX0KvAwQB X0KyMAwDBANfQugDBABfQuwwDQYJKoZIhvcNAQELBQADggEBAKbpjFyIjZOUqTj3 ZUuozG1kjkdaUX45JTra3ExdOaYWQTPlHGwn4zh+srgdhCqL4nmEXmB0OHGp3sCx +3u1YxMUw799abdwXM9YCjAZ2+B5cEM4sRBhEf6JSiac6EUa5+FpC6Qv4DFDo25e 7+QxkEj+TsJCIP/f2BUxCRJQrt5CotQ2SRI7i1ItedlLZKJZMK6nIuZI3YGnv8c0 LTCstIv6Mssb8rw5MhMecP6Mjx3b01TG97EG5k2EJ41MnsrNXQiPxvPiUrvuHLBs ZWMw250kNXGjsOQjsRFwErmQFWTn7Mly0vBYLgeXuEiE3Shhb3ZIwXMWZCSoK9rQ /PllG1Y= -----END CERTIFICATE-----Generated at Mon Jan 26 06:32:31 2026 by rpki-client