This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/vZ9biZ3U2tRv6wz5Y-SkkAFolzo.roa File: vZ9biZ3U2tRv6wz5Y-SkkAFolzo.roa (raw, json) Hash identifier: 21jHChNoDK3qxfeLr4qOaAbRTR/to9DRO343vs5y4QE= Subject key identifier: BD:9F:5B:89:9D:D4:DA:D4:6F:EB:0C:F9:63:E4:A4:90:01:68:97:3A Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Certificate serial: 019BE53EB3ADD035D25ED390F16095EAFED3 Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/vZ9biZ3U2tRv6wz5Y-SkkAFolzo.roa Signing time: Thu 22 Jan 2026 10:27:30 +0000 ROA not before: Thu 22 Jan 2026 10:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 95.214.96.0/22 maxlen: 22 95.214.96.0/24 maxlen: 24 95.214.97.0/24 maxlen: 24 95.214.98.0/24 maxlen: 24 95.214.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:3e:b3:ad:d0:35:d2:5e:d3:90:f1:60:95:ea:fe:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d Validity Not Before: Jan 22 10:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd9f5b899dd4dad46feb0cf963e4a4900168973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:b5:39:47:c8:38:ec:83:b6:ea:a2:73:1e: 6f:62:3d:f0:08:52:5d:9c:53:ab:5d:62:03:ec:95: f7:5a:c9:f4:37:3e:56:14:22:93:fe:e8:f9:a2:9a: a4:ae:4d:e4:40:d4:a0:a8:45:55:5f:db:9d:e0:fe: 6b:9e:b7:f3:7e:16:11:c7:82:3f:e2:7f:db:05:36: 77:1a:bb:ff:de:ee:88:fb:0c:4b:64:e6:f3:0f:29: ac:8b:b3:43:7b:1b:a8:69:fc:9a:ed:a6:17:79:2e: cd:91:6d:d1:ed:31:7f:bf:b3:0d:c2:b5:74:30:cf: 44:bb:5e:1d:8f:6f:49:68:ae:28:1f:84:85:3c:87: 74:4a:4c:19:85:0c:53:56:3c:c0:45:13:9e:46:93: 07:45:88:ea:bd:4e:45:6c:d2:29:64:ae:c1:a2:9d: 92:f7:ce:5e:ef:90:45:b6:19:3b:6e:9c:83:20:3e: c4:7a:7b:2a:29:97:a3:7f:9b:91:d0:df:de:0a:c1: 91:76:f9:2e:4c:34:1b:22:56:38:59:6c:46:7c:75: 43:27:44:92:59:ba:18:77:a1:f8:87:85:28:93:86: d4:65:f8:35:5d:6f:2d:32:09:70:e8:5f:63:88:b9: b5:3c:dd:9f:26:23:a8:0d:5b:78:4d:52:24:31:eb: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9F:5B:89:9D:D4:DA:D4:6F:EB:0C:F9:63:E4:A4:90:01:68:97:3A X509v3 Authority Key Identifier: keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/vZ9biZ3U2tRv6wz5Y-SkkAFolzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.96.0/22 Signature Algorithm: sha256WithRSAEncryption 48:e5:06:d0:3b:48:79:f2:cd:a2:66:43:45:ed:00:1c:af:10: bc:74:4f:f6:db:5e:ac:03:ae:9c:00:3e:3c:ca:84:cb:55:27: d2:06:3f:d9:42:12:4e:df:b8:99:26:9c:3a:8f:ea:3e:e2:07: ba:d4:ee:d3:d7:b7:a6:50:d5:4e:5a:bd:4d:f9:1c:3f:7a:f6: 78:de:fd:a5:e1:76:f6:e1:b4:7d:50:24:b5:8c:6b:4e:43:df: 71:b5:ce:cf:73:90:54:f4:8f:18:e8:47:fd:98:71:32:87:00: 7e:8e:dd:9a:08:df:12:e8:fc:41:c2:3b:0f:87:dd:da:f0:02: 38:ff:97:ce:cb:80:af:0d:12:2c:11:ce:3c:ea:c9:85:ce:2d: f8:4a:68:ca:f0:44:4c:b7:40:93:d1:5a:8b:e3:5c:b3:3c:ab: 77:b1:92:de:ab:12:3c:26:49:21:6d:38:5b:1d:05:55:a1:8f: 2a:f5:79:d5:ff:79:d3:9d:f1:ce:7e:d8:3c:bb:11:dc:cd:26: 44:fc:33:ab:b3:eb:1d:4e:84:3a:55:73:9e:09:97:99:c2:71: fb:de:9d:02:65:08:7e:8b:97:5c:3d:2e:a9:2d:84:6f:ac:56: 11:f7:e4:d9:98:66:d0:86:19:96:fc:2b:ee:b8:11:b5:4c:2f: 4e:47:a5:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvlPrOt0DXSXtOQ8WCV6v7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy MzFlNWQwHhcNMjYwMTIyMTAyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDlmNWI4OTlkZDRkYWQ0NmZlYjBjZjk2M2U0YTQ5MDAxNjg5NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fy1OUfIOOyDtuqicx5vYj3wCFJd nFOrXWID7JX3Wsn0Nz5WFCKT/uj5opqkrk3kQNSgqEVVX9ud4P5rnrfzfhYRx4I/ 4n/bBTZ3Grv/3u6I+wxLZObzDymsi7NDexuoafya7aYXeS7NkW3R7TF/v7MNwrV0 MM9Eu14dj29JaK4oH4SFPId0SkwZhQxTVjzARROeRpMHRYjqvU5FbNIpZK7Bop2S 985e75BFthk7bpyDID7EensqKZejf5uR0N/eCsGRdvkuTDQbIlY4WWxGfHVDJ0SS WboYd6H4h4Uok4bUZfg1XW8tMglw6F9jiLm1PN2fJiOoDVt4TVIkMetOfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL2fW4md1NrUb+sM+WPkpJABaJc6MB8GA1UdIwQY MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt ZjEwZDI2ZTNjM2RmLzEvdlo5YmlaM1UydFJ2Nnd6NVktU2trQUZvbHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9ZgMA0G CSqGSIb3DQEBCwUAA4IBAQBI5QbQO0h58s2iZkNF7QAcrxC8dE/2216sA66cAD48 yoTLVSfSBj/ZQhJO37iZJpw6j+o+4ge61O7T17emUNVOWr1N+Rw/evZ43v2l4Xb2 4bR9UCS1jGtOQ99xtc7Pc5BU9I8Y6Ef9mHEyhwB+jt2aCN8S6PxBwjsPh93a8AI4 /5fOy4CvDRIsEc486smFzi34SmjK8ERMt0CT0VqL41yzPKt3sZLeqxI8JkkhbThb HQVVoY8q9XnV/3nTnfHOftg8uxHczSZE/DOrs+sdToQ6VXOeCZeZwnH73p0CZQh+ i5dcPS6pLYRvrFYR9+TZmGbQhhmW/CvuuBG1TC9OR6V+ -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:16 2026 by rpki-client