This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/DtHmL0rokL7c-p02LOHjQTrN7kg.roa File: DtHmL0rokL7c-p02LOHjQTrN7kg.roa (raw, json) Hash identifier: gPbfcqQYpn62UlyXYqjLBcG/M0G99TZSgQIuqpuaZVI= Subject key identifier: 0E:D1:E6:2F:4A:E8:90:BE:DC:FA:9D:36:2C:E1:E3:41:3A:CD:EE:48 Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab Certificate serial: 019B7910AFDB1899B32703A43E174BB68FBC Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/DtHmL0rokL7c-p02LOHjQTrN7kg.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34689 IP address blocks: 95.131.202.0/24 maxlen: 24 185.75.242.0/24 maxlen: 24 185.75.243.0/24 maxlen: 24 2a05:5502::/32 maxlen: 32 2a13:9400::/32 maxlen: 32 2a13:9401::/32 maxlen: 32 2a13:9402::/32 maxlen: 32 2a13:9403::/32 maxlen: 32 2a13:9404::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:af:db:18:99:b3:27:03:a4:3e:17:4b:b6:8f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed1e62f4ae890bedcfa9d362ce1e3413acdee48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:72:1f:59:f1:91:05:d2:44:dc:70:e9:20: 03:a7:f8:db:be:27:1b:c0:a0:97:60:42:7d:be:13: fb:f5:f7:ba:ca:6a:11:45:7f:a8:12:a5:d6:14:11: f4:3d:26:7d:4a:bf:95:0d:ba:8d:40:f0:a9:d2:3a: b1:f0:0d:9f:a3:2b:68:92:33:46:01:5b:21:f9:d6: 6d:de:6c:56:9b:05:35:5f:cc:07:4b:e3:9a:6c:eb: 1a:86:c6:e6:6d:53:ae:70:cc:a5:da:c6:0f:a3:8f: ee:96:d2:7a:e3:64:a1:93:e9:3b:e9:f2:e6:53:96: 94:39:8a:70:6e:f2:e7:e6:0a:3c:48:c7:df:ab:6d: 8b:a6:55:e6:ec:82:f0:22:51:a6:df:5c:a8:09:91: 3e:06:bd:f8:cd:74:62:58:17:6d:6b:11:cd:c9:83: cd:a3:34:b2:79:a7:b2:0b:f3:e4:d1:af:62:af:5b: 29:99:b8:62:33:bb:31:44:1f:5e:fb:55:fc:67:02: 01:ac:3b:60:6a:97:5b:89:e6:fb:0b:1a:1b:b8:3b: db:dd:e3:c0:93:ac:dc:9d:f0:a1:d7:29:72:b6:c0: b7:91:9b:75:5b:8a:82:0f:8a:a6:12:66:92:82:bc: 45:4e:fc:d9:f5:70:dd:9c:29:f6:72:c2:17:af:cd: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D1:E6:2F:4A:E8:90:BE:DC:FA:9D:36:2C:E1:E3:41:3A:CD:EE:48 X509v3 Authority Key Identifier: keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/DtHmL0rokL7c-p02LOHjQTrN7kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.202.0/24 185.75.242.0/23 IPv6: 2a05:5502::/32 2a13:9400::-2a13:9404:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 41:16:09:68:27:10:85:bf:9b:b7:76:95:b7:12:1a:fc:2d:84: bb:69:4b:d9:93:f5:8d:9a:40:8a:7f:9a:4c:2e:89:ef:ad:b7: 11:0c:00:0a:52:d8:07:6e:79:0f:0f:69:fa:48:84:43:3e:3a: 06:dd:28:da:27:4c:20:e3:12:23:96:40:69:75:60:06:f6:51: 9c:5d:d1:f7:45:3f:cc:b2:8c:ca:c0:8c:a7:da:39:25:0b:d0: 5b:86:d2:55:fd:7d:54:ee:18:58:ab:12:3b:31:d1:e7:b5:37: 46:5f:03:05:90:60:7d:1a:56:75:79:68:3d:a1:70:96:85:1b: e4:42:36:d6:6c:67:02:d2:3e:e0:20:13:6f:c3:e1:60:68:c9: bd:bf:f1:0c:a4:bc:21:66:2a:4b:24:71:3b:9f:22:4d:74:d5: ee:c1:4d:8d:68:a3:86:4e:6f:43:93:c8:f1:68:2c:c9:ba:19: 41:1d:25:6f:ae:76:3b:12:dd:a8:40:b5:f9:fc:72:25:21:4f: d2:1c:ae:79:3f:15:43:5b:7d:a1:f1:b7:86:7b:93:57:0b:0f: 6c:5c:1d:7c:dd:fd:f0:a9:60:7c:91:98:1c:71:31:78:ad:28: 40:c7:e9:b7:40:10:b5:1f:85:50:b3:57:c0:d2:94:b6:a6:c9: 7e:39:01:9f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt5EK/bGJmzJwOkPhdLto+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll NDE3YWIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQxZTYyZjRhZTg5MGJlZGNmYTlkMzYyY2UxZTM0MTNhY2RlZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w5yH1nxkQXSRNxw6SADp/jbvicb wKCXYEJ9vhP79fe6ymoRRX+oEqXWFBH0PSZ9Sr+VDbqNQPCp0jqx8A2foytokjNG AVsh+dZt3mxWmwU1X8wHS+OabOsahsbmbVOucMyl2sYPo4/ultJ642Shk+k76fLm U5aUOYpwbvLn5go8SMffq22LplXm7ILwIlGm31yoCZE+Br34zXRiWBdtaxHNyYPN ozSyeaeyC/Pk0a9ir1spmbhiM7sxRB9e+1X8ZwIBrDtgapdbieb7CxobuDvb3ePA k6zcnfCh1ylytsC3kZt1W4qCD4qmEmaSgrxFTvzZ9XDdnCn2csIXr80gHwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFA7R5i9K6JC+3PqdNizh40E6ze5IMB8GA1UdIwQY MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt N2M3ZGIyMTIzMGEzLzEvRHRIbUwwcm9rTDdjLXAwMkxPSGpRVHJON2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjASBAIAATAMAwQAX4PKAwQB uUvyMBwEAgACMBYDBQAqBVUCMA0DBAIqE5QDBQAqE5QEMA0GCSqGSIb3DQEBCwUA A4IBAQBBFgloJxCFv5u3dpW3Ehr8LYS7aUvZk/WNmkCKf5pMLonvrbcRDAAKUtgH bnkPD2n6SIRDPjoG3SjaJ0wg4xIjlkBpdWAG9lGcXdH3RT/MsozKwIyn2jklC9Bb htJV/X1U7hhYqxI7MdHntTdGXwMFkGB9GlZ1eWg9oXCWhRvkQjbWbGcC0j7gIBNv w+FgaMm9v/EMpLwhZipLJHE7nyJNdNXuwU2NaKOGTm9Dk8jxaCzJuhlBHSVvrnY7 Et2oQLX5/HIlIU/SHK55PxVDW32h8beGe5NXCw9sXB183f3wqWB8kZgccTF4rShA x+m3QBC1H4VQs1fA0pS2psl+OQGf -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:11 2026 by rpki-client