This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa File: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (raw, json) Hash identifier: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys= Subject key identifier: 67:5E:84:3A:E2:2F:09:27:05:1A:C5:7F:A7:55:76:45:6C:F1:D5:90 Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21 Certificate serial: 019B7C12AFFF53E21048B2531099782E846B Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49680 IP address blocks: 95.142.224.0/24 maxlen: 24 95.142.225.0/24 maxlen: 24 95.142.226.0/24 maxlen: 24 95.142.227.0/24 maxlen: 24 95.142.228.0/24 maxlen: 24 95.142.229.0/24 maxlen: 24 95.142.230.0/24 maxlen: 24 95.142.233.0/24 maxlen: 24 95.142.234.0/24 maxlen: 24 95.142.235.0/24 maxlen: 24 95.142.236.0/24 maxlen: 24 95.142.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:af:ff:53:e2:10:48:b2:53:10:99:78:2e:84:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=675e843ae22f0927051ac57fa75576456cf1d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:e3:b3:c6:43:7a:f2:86:72:4e:6b:57:64: 24:8b:72:88:a4:9b:81:59:f2:da:fd:7e:82:3e:d2: 4d:b0:65:4c:83:c8:f5:54:7d:95:b7:07:3c:97:57: ac:0c:48:72:4d:6e:c0:cb:1a:94:eb:57:72:4f:a2: 75:6c:3c:c0:e9:a6:f7:72:52:17:c6:3f:8e:01:f9: 37:6c:68:4e:dc:b0:9e:6f:7d:db:a2:9d:cd:ab:48: 83:59:42:52:2b:6e:eb:de:c7:7e:8f:58:74:47:a4: f6:0f:ae:24:76:0f:4a:c7:7d:39:e9:23:54:28:53: a2:ba:77:64:c4:0a:96:f5:89:3c:75:87:5f:a0:3a: ec:29:b0:bc:7b:e4:93:e4:dd:a5:87:22:16:63:49: 69:e2:39:84:04:8c:1c:f6:74:65:64:c7:72:d9:c9: 31:9e:12:2b:eb:c1:30:0a:16:ec:a4:3b:56:a3:2b: 8d:c1:f8:46:48:59:1a:42:aa:30:d0:e2:06:4b:50: b0:34:c6:ab:1b:a4:3c:09:10:a8:f9:56:b7:69:20: a3:ea:9e:3b:46:41:ed:04:3c:19:56:73:41:39:9b: 6f:d5:14:ee:06:c8:8c:cc:49:7e:97:f1:99:dd:55: 0c:b5:c8:92:18:7e:46:6f:8d:2b:ae:71:3b:91:b3: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:84:3A:E2:2F:09:27:05:1A:C5:7F:A7:55:76:45:6C:F1:D5:90 X509v3 Authority Key Identifier: keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.224.0-95.142.230.255 95.142.233.0-95.142.237.255 Signature Algorithm: sha256WithRSAEncryption 23:3d:69:4a:f8:d0:36:22:61:8d:d4:73:ab:8a:bd:27:84:cd: d9:e2:67:48:f8:5c:3b:38:75:2a:30:7f:8e:6d:ab:33:0e:14: 65:a5:6a:07:92:b2:f6:49:f9:7d:20:04:ab:a8:bd:27:50:2b: 26:4e:09:a1:da:e9:d8:99:a5:a1:cf:58:c9:72:63:da:d5:22: b5:ce:23:6b:21:11:80:5a:bb:8a:57:85:2f:3b:2d:b3:9e:75: 4c:04:3e:66:09:85:58:3a:51:69:4e:3a:29:93:fb:59:02:cb: 9f:12:e4:8f:b8:18:37:82:bb:98:a2:95:53:4c:8e:11:c7:0f: a4:b2:48:25:13:13:bf:00:89:e5:d7:8a:30:d7:a0:a4:f8:4f: 74:48:83:f3:a1:e1:7f:01:26:87:43:17:5d:a4:0d:d3:16:90: 17:65:cc:bd:9c:d2:95:2f:3c:15:86:6c:2a:f5:69:4b:90:6b: f2:fe:0b:e0:9f:c7:ab:f3:8b:0b:97:dc:66:b4:59:62:25:d0: 56:0c:57:12:47:70:c5:5c:a1:83:e6:20:39:f4:ea:fb:05:1e: 77:d0:b8:ce:cb:67:94:f3:be:42:3d:a4:fb:79:92:14:3f:94: 76:42:6c:af:e4:10:73:2d:a6:be:5b:b6:7d:6d:56:82:af:47: a6:53:3b:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8Eq//U+IQSLJTEJl4LoRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OWNlYjEyNDA4NDRjZGU4YTE2ODg5N2U0N2MxZGY1ZDZl Y2JmMjEwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzVlODQzYWUyMmYwOTI3MDUxYWM1N2ZhNzU1NzY0NTZjZjFkNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTnjs8ZDevKGck5rV2Qki3KIpJuB WfLa/X6CPtJNsGVMg8j1VH2Vtwc8l1esDEhyTW7AyxqU61dyT6J1bDzA6ab3clIX xj+OAfk3bGhO3LCeb33bop3Nq0iDWUJSK27r3sd+j1h0R6T2D64kdg9Kx3056SNU KFOiundkxAqW9Yk8dYdfoDrsKbC8e+ST5N2lhyIWY0lp4jmEBIwc9nRlZMdy2ckx nhIr68EwChbspDtWoyuNwfhGSFkaQqow0OIGS1CwNMarG6Q8CRCo+Va3aSCj6p47 RkHtBDwZVnNBOZtv1RTuBsiMzEl+l/GZ3VUMtciSGH5Gb40rrnE7kbP09wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFGdehDriLwknBRrFf6dVdkVs8dWQMB8GA1UdIwQY MBaAFMac6xJAhEzeihaIl+R8HfXW7L8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMt OGJlOTU3MWViMTBkLzEvWjE2RU91SXZDU2NGR3NWX3AxVjJSV3p4MVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMtOGJlOTU3MWViMTBk LzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAVfjuAD BABfjuYwDAMEAF+O6QMEAV+O7DANBgkqhkiG9w0BAQsFAAOCAQEAIz1pSvjQNiJh jdRzq4q9J4TN2eJnSPhcOzh1KjB/jm2rMw4UZaVqB5Ky9kn5fSAEq6i9J1ArJk4J odrp2Jmloc9YyXJj2tUitc4jayERgFq7ileFLzsts551TAQ+ZgmFWDpRaU46KZP7 WQLLnxLkj7gYN4K7mKKVU0yOEccPpLJIJRMTvwCJ5deKMNegpPhPdEiD86HhfwEm h0MXXaQN0xaQF2XMvZzSlS88FYZsKvVpS5Br8v4L4J/Hq/OLC5fcZrRZYiXQVgxX EkdwxVyhg+YgOfTq+wUed9C4zstnlPO+Qj2k+3mSFD+UdkJsr+QQcy2mvlu2fW1W gq9HplM78A== -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:41 2026 by rpki-client