This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa File: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (raw, json) Hash identifier: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY= Subject key identifier: 85:56:68:6A:2F:04:AD:77:94:AB:9F:44:56:E2:76:37:38:78:C3:28 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80BFC2CE00342F33071F3DDDB245FA Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49188 IP address blocks: 95.169.197.0/24 maxlen: 24 95.169.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bf:c2:ce:00:34:2f:33:07:1f:3d:dd:b2:45:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8556686a2f04ad7794ab9f4456e276373878c328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:99:08:f0:be:9d:aa:21:95:ea:32:c6:94: 53:44:32:ea:ad:c9:36:bf:ab:38:39:c9:94:fd:1d: 0f:6b:39:c9:65:04:1e:91:07:b7:37:35:3b:01:b8: e9:3f:d4:9c:c7:ba:d0:d9:55:30:6d:86:84:ee:58: 8a:d5:91:15:51:cb:12:e0:2a:87:43:55:57:db:b1: a2:37:38:56:e1:5a:fa:10:c7:49:78:b9:62:b6:44: 57:fc:1c:d1:30:86:80:6d:4a:d6:f2:be:46:37:d3: 47:ce:ac:95:e1:52:23:f7:0f:59:dd:56:e8:e8:b7: 15:ff:4c:2c:80:9a:8d:94:78:55:22:54:72:0c:5c: a5:5f:ec:b1:75:7a:58:f8:7b:87:15:b5:5d:d7:dd: 5c:22:31:74:a7:bd:45:4d:41:5a:90:51:8f:83:62: fa:3b:2f:2e:72:f3:0a:7b:45:08:1c:ee:9d:1e:ba: 9e:9d:74:f4:8c:24:83:a0:da:b9:3e:18:76:fd:6b: 9d:83:64:a3:0a:e4:ba:c4:4a:3b:41:59:3d:86:fc: 37:dd:ac:ed:03:6d:3a:53:9e:df:e8:01:29:46:f7: 31:cd:73:6c:a9:99:61:67:de:e4:26:fe:f0:1a:ea: 8b:39:6d:eb:19:be:38:86:86:08:70:6d:44:3e:d2: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:68:6A:2F:04:AD:77:94:AB:9F:44:56:E2:76:37:38:78:C3:28 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.197.0-95.169.198.255 Signature Algorithm: sha256WithRSAEncryption 70:26:12:b3:67:0f:c4:f4:20:00:81:1a:f8:24:7c:27:4d:1e: 7d:cd:51:c8:46:99:ac:dd:25:c7:ac:12:f4:ae:d5:73:58:55: 69:69:89:53:0f:ea:bf:2c:e3:56:1e:03:c0:01:6b:2a:14:f1: 14:39:91:cd:96:bd:fa:72:8e:d8:5a:ac:e2:65:9c:5e:e4:f4: b9:e2:33:0b:0c:6b:82:7c:91:a7:cb:b0:6d:92:04:4c:68:a9: 44:1c:82:12:2a:83:d6:e8:3c:7f:2b:e5:d0:1d:f1:3b:75:84: 2b:e3:67:5b:7d:09:8a:bb:f1:15:3b:a1:92:86:ec:58:c7:ed: 14:0f:38:b0:78:7a:b5:5a:a9:86:b5:0f:7b:d7:74:ca:d0:d4: 42:86:27:dd:30:e0:fa:7b:0c:3e:0f:4b:16:d4:89:bd:fc:5e: 2b:c3:ed:b5:22:fe:76:b5:8d:c4:50:d6:95:7d:68:1d:23:ec: 45:0f:43:4f:06:00:a5:4a:75:b8:97:42:9d:b0:8f:27:e0:68: 41:b7:83:e5:73:88:23:a4:8c:0b:b5:34:d1:4f:21:90:71:83: 47:ea:c9:54:47:5c:3f:59:71:a7:ea:31:91:ee:a4:d5:f1:89: 31:78:31:2d:59:90:52:13:63:89:4c:0c:14:11:8c:a2:f3:14: 71:24:32:6a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gL/CzgA0LzMHHz3dskX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTU2Njg2YTJmMDRhZDc3OTRhYjlmNDQ1NmUyNzYzNzM4NzhjMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QyZCPC+naohleoyxpRTRDLqrck2 v6s4OcmU/R0PaznJZQQekQe3NzU7AbjpP9Scx7rQ2VUwbYaE7liK1ZEVUcsS4CqH Q1VX27GiNzhW4Vr6EMdJeLlitkRX/BzRMIaAbUrW8r5GN9NHzqyV4VIj9w9Z3Vbo 6LcV/0wsgJqNlHhVIlRyDFylX+yxdXpY+HuHFbVd191cIjF0p71FTUFakFGPg2L6 Oy8ucvMKe0UIHO6dHrqenXT0jCSDoNq5Phh2/Wudg2SjCuS6xEo7QVk9hvw33azt A206U57f6AEpRvcxzXNsqZlhZ97kJv7wGuqLOW3rGb44hoYIcG1EPtLEZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIVWaGovBK13lKufRFbidjc4eMMoMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvaFZab2FpOEVyWGVVcTU5RVZ1SjJOemg0d3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABfqcUD BABfqcYwDQYJKoZIhvcNAQELBQADggEBAHAmErNnD8T0IACBGvgkfCdNHn3NUchG mazdJcesEvSu1XNYVWlpiVMP6r8s41YeA8ABayoU8RQ5kc2WvfpyjtharOJlnF7k 9LniMwsMa4J8kafLsG2SBExoqUQcghIqg9boPH8r5dAd8Tt1hCvjZ1t9CYq78RU7 oZKG7FjH7RQPOLB4erVaqYa1D3vXdMrQ1EKGJ90w4Pp7DD4PSxbUib38XivD7bUi /na1jcRQ1pV9aB0j7EUPQ08GAKVKdbiXQp2wjyfgaEG3g+VziCOkjAu1NNFPIZBx g0fqyVRHXD9ZcafqMZHupNXxiTF4MS1ZkFITY4lMDBQRjKLzFHEkMmo= -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:25 2026 by rpki-client