This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/drikzNt5D9jwedYli_IhOY-bx94.roa File: drikzNt5D9jwedYli_IhOY-bx94.roa (raw, json) Hash identifier: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg= Subject key identifier: 76:B8:A4:CC:DB:79:0F:D8:F0:79:D6:25:8B:F2:21:39:8F:9B:C7:DE Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Certificate serial: 019B7834706EE27A89B8ADE86EF6F50718B5 Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/drikzNt5D9jwedYli_IhOY-bx94.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6894 IP address blocks: 95.131.152.0/21 maxlen: 21 195.14.64.0/19 maxlen: 19 195.14.65.0/24 maxlen: 24 2a02:b78::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:70:6e:e2:7a:89:b8:ad:e8:6e:f6:f5:07:18:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76b8a4ccdb790fd8f079d6258bf221398f9bc7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:a3:f7:32:e6:9b:dd:ae:ed:78:91:29:f4: 2e:85:c0:b1:ce:80:e1:61:af:90:24:4b:74:35:5c: 2d:c7:a1:20:3e:d7:d1:43:d6:d6:5e:ba:c2:7e:4a: d8:28:44:aa:03:d4:3a:e0:5b:dc:e5:e6:89:a8:f2: a3:6a:99:f5:c3:0e:9b:6a:bd:6b:17:0e:d8:a0:53: 2b:80:db:e4:e6:1d:da:21:c9:c6:aa:3f:ec:db:f6: 01:33:57:36:0d:68:73:23:2c:ca:12:15:f2:3c:d1: f4:a7:ba:67:e4:e3:41:d6:65:35:a2:1e:fe:93:7b: 0b:0b:c7:4c:86:11:83:66:1c:f2:77:4d:91:1f:13: a2:fc:28:92:02:96:22:93:ef:6f:89:a8:aa:69:f1: 37:de:86:76:98:6e:17:87:02:f8:b2:1f:e2:8c:d1: c9:06:9d:98:1c:2f:eb:98:c9:f1:d8:39:ec:8e:4d: e1:32:c7:38:f2:9f:e7:b6:dd:2e:69:fc:06:46:8c: 79:b6:1f:82:d4:4a:ea:01:23:66:fb:38:b6:de:34: fd:c6:8d:47:f4:35:2a:41:42:3f:d7:be:71:50:49: c1:51:85:39:87:90:84:b7:47:d9:10:e2:39:dd:d1: 1d:9f:3d:7f:01:e8:63:9b:b1:b3:03:92:4e:81:90: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B8:A4:CC:DB:79:0F:D8:F0:79:D6:25:8B:F2:21:39:8F:9B:C7:DE X509v3 Authority Key Identifier: keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/drikzNt5D9jwedYli_IhOY-bx94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.152.0/21 195.14.64.0/19 IPv6: 2a02:b78::/32 Signature Algorithm: sha256WithRSAEncryption 4d:f6:ef:9c:3e:b2:7c:5a:f0:7d:c2:97:c1:27:7a:f8:ea:90: 06:7e:af:b8:17:93:f0:99:1f:f6:b8:91:c9:16:86:7a:78:fb: 0c:29:cc:d2:7f:e5:03:ae:ac:4f:33:73:a2:dd:50:28:05:bd: f3:ee:f8:4c:24:30:ed:f7:0b:1a:13:fc:4a:76:9f:48:1e:52: 06:46:12:be:d4:52:94:75:7a:bb:fa:b3:6a:3f:38:eb:14:a0: a5:27:e3:87:ff:5d:7c:84:22:5e:86:ef:42:60:bf:c7:e9:23: 00:17:92:28:cc:14:40:09:cc:6c:69:2b:fe:d3:34:a2:8c:df: 64:c6:db:91:bc:19:fc:8e:f4:9b:b4:d2:b6:9d:8f:e5:67:74: 23:f2:be:01:73:3c:01:2f:bc:d3:11:7b:04:05:1c:b0:34:60: 4f:75:ac:77:62:01:f5:aa:3d:a8:a4:a8:d0:b5:98:54:bd:d4: 33:d8:8e:5e:95:ab:c5:2a:a1:6a:c7:7c:cd:ac:ed:b5:99:87: f2:77:7e:93:39:cb:a9:f4:cc:23:18:55:39:91:be:ab:d1:c4: 49:de:95:1e:16:a8:a4:9d:2d:1a:fd:2c:fc:6c:fa:08:f9:96: de:b8:55:bc:e6:9a:05:28:c8:c0:67:2d:23:82:e2:ad:be:ff: 5a:7c:a3:07 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NHBu4nqJuK3obvb1Bxi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy ODRiYzQwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmI4YTRjY2RiNzkwZmQ4ZjA3OWQ2MjU4YmYyMjEzOThmOWJjN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLej9zLmm92u7XiRKfQuhcCxzoDh Ya+QJEt0NVwtx6EgPtfRQ9bWXrrCfkrYKESqA9Q64Fvc5eaJqPKjapn1ww6bar1r Fw7YoFMrgNvk5h3aIcnGqj/s2/YBM1c2DWhzIyzKEhXyPNH0p7pn5ONB1mU1oh7+ k3sLC8dMhhGDZhzyd02RHxOi/CiSApYik+9viaiqafE33oZ2mG4XhwL4sh/ijNHJ Bp2YHC/rmMnx2Dnsjk3hMsc48p/ntt0uafwGRox5th+C1ErqASNm+zi23jT9xo1H 9DUqQUI/175xUEnBUYU5h5CEt0fZEOI53dEdnz1/Aehjm7GzA5JOgZBGDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHa4pMzbeQ/Y8HnWJYvyITmPm8feMB8GA1UdIwQY MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt NmFjZDIxZDRiYWY4LzEvZHJpa3pOdDVEOWp3ZWRZbGlfSWhPWS1ieDk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4 LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4OYAwQF ww5AMA0EAgACMAcDBQAqAgt4MA0GCSqGSIb3DQEBCwUAA4IBAQBN9u+cPrJ8WvB9 wpfBJ3r46pAGfq+4F5PwmR/2uJHJFoZ6ePsMKczSf+UDrqxPM3Oi3VAoBb3z7vhM JDDt9wsaE/xKdp9IHlIGRhK+1FKUdXq7+rNqPzjrFKClJ+OH/118hCJehu9CYL/H 6SMAF5IozBRACcxsaSv+0zSijN9kxtuRvBn8jvSbtNK2nY/lZ3Qj8r4BczwBL7zT EXsEBRywNGBPdax3YgH1qj2opKjQtZhUvdQz2I5elavFKqFqx3zNrO21mYfyd36T Ocup9MwjGFU5kb6r0cRJ3pUeFqiknS0a/Sz8bPoI+ZbeuFW85poFKMjAZy0jguKt vv9afKMH -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:41 2026 by rpki-client