This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa File: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (raw, json) Hash identifier: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw= Subject key identifier: 6C:28:3B:B4:48:0A:B0:60:65:86:F7:D7:43:FA:7B:7C:08:A7:0E:DE Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F8245A765D29A0B41FEDC3B56786C1F Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa Signing time: Fri 02 Jan 2026 16:20:02 +0000 ROA not before: Fri 02 Jan 2026 16:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21734 IP address blocks: 95.172.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:45:a7:65:d2:9a:0b:41:fe:dc:3b:56:78:6c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c283bb4480ab0606586f7d743fa7b7c08a70ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:59:56:ed:11:cc:dc:a1:00:6a:d5:c0:a9: a1:05:a3:ce:ae:fa:3a:d2:a3:02:1e:67:8a:ff:79: 93:09:ed:a2:ca:cf:04:7f:3d:0d:24:71:a0:46:76: a6:af:2a:d6:e0:87:17:47:c0:0f:84:ef:4e:5d:91: da:fc:0a:eb:fe:0f:97:e5:8d:ea:da:ea:da:9e:69: 43:e2:81:86:7e:46:48:ce:f9:73:17:c2:a5:32:80: 99:ed:4b:f2:f9:77:6b:82:aa:57:b0:e6:02:26:dc: a3:fa:2b:6f:80:87:ec:d1:db:ae:ac:e6:df:87:bf: 81:45:7b:26:b4:1d:1a:f9:e4:6f:07:8a:64:65:4c: 2a:38:01:b9:a3:fd:13:9a:40:52:51:7c:99:de:b9: c4:55:73:bf:25:88:52:9d:55:6b:5e:04:be:a6:e8: 86:a6:06:b1:7a:8b:c7:f8:ef:7f:08:e0:63:19:48: 12:87:5c:e4:5b:85:c5:c6:e4:2d:15:39:ab:0c:74: 4c:05:03:03:31:f4:28:e9:65:cf:87:5e:2a:78:9b: 60:45:04:cd:2b:c0:c6:4a:e9:20:2c:bd:49:a2:d1: 06:e9:32:97:a1:a2:c7:ba:00:0d:3e:21:5b:a5:da: 31:6e:6b:30:ec:4f:86:30:53:5d:24:3e:6f:aa:04: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:3B:B4:48:0A:B0:60:65:86:F7:D7:43:FA:7B:7C:08:A7:0E:DE X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.172.76.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:c0:68:86:0c:47:c5:94:d6:94:57:64:82:84:80:f0:e6:ed: 2a:cc:4e:66:a5:60:f5:df:d4:6c:35:c2:64:3e:32:89:ed:f5: d2:7e:5b:2c:9c:0f:f2:17:47:c6:ac:e1:17:1c:7e:e1:68:fc: 85:1f:20:4a:50:f8:d1:a4:41:75:34:80:8f:92:2a:da:a8:be: ab:bc:0b:01:e1:be:3a:60:a4:f6:9e:59:e2:de:6d:c2:de:05: 6f:36:a1:11:ad:02:90:eb:8d:53:1f:6d:74:8c:cb:02:38:d9: a6:98:45:c9:c6:2c:b9:23:b2:69:f6:09:d4:35:b2:c4:06:da: 96:f6:bd:3b:83:ac:17:08:16:77:6e:f3:49:e5:f5:e7:38:5c: 31:82:31:b2:84:4b:bb:ae:15:2a:c5:1c:df:84:0d:23:d4:e2: 2c:af:78:b8:c2:39:25:85:c3:4a:56:94:db:07:78:45:54:95: 61:ba:50:81:c2:7b:77:4d:da:fb:61:7e:09:9d:00:4a:c5:be: f4:55:84:c8:a6:78:42:56:98:dd:84:a8:1e:d1:90:fe:21:ca: a3:82:fd:78:3f:5c:a5:0d:80:58:8f:57:86:76:ba:31:d1:9d: b6:f6:00:28:a4:89:96:35:81:3d:5f:4a:fe:36:a8:f5:37:14: 73:e4:78:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkWnZdKaC0H+3DtWeGwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzI4M2JiNDQ4MGFiMDYwNjU4NmY3ZDc0M2ZhN2I3YzA4YTcwZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuilZVu0RzNyhAGrVwKmhBaPOrvo6 0qMCHmeK/3mTCe2iys8Efz0NJHGgRnamryrW4IcXR8APhO9OXZHa/Arr/g+X5Y3q 2uranmlD4oGGfkZIzvlzF8KlMoCZ7Uvy+XdrgqpXsOYCJtyj+itvgIfs0duurObf h7+BRXsmtB0a+eRvB4pkZUwqOAG5o/0TmkBSUXyZ3rnEVXO/JYhSnVVrXgS+puiG pgaxeovH+O9/COBjGUgSh1zkW4XFxuQtFTmrDHRMBQMDMfQo6WXPh14qeJtgRQTN K8DGSukgLL1JotEG6TKXoaLHugANPiFbpdoxbmsw7E+GMFNdJD5vqgTIGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwoO7RICrBgZYb310P6e3wIpw7eMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvYkNnN3RFZ0tzR0JsaHZmWFFfcDdmQWluRHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6xMMA0G CSqGSIb3DQEBCwUAA4IBAQCNwGiGDEfFlNaUV2SChIDw5u0qzE5mpWD139RsNcJk PjKJ7fXSflssnA/yF0fGrOEXHH7haPyFHyBKUPjRpEF1NICPkiraqL6rvAsB4b46 YKT2nlni3m3C3gVvNqERrQKQ641TH210jMsCONmmmEXJxiy5I7Jp9gnUNbLEBtqW 9r07g6wXCBZ3bvNJ5fXnOFwxgjGyhEu7rhUqxRzfhA0j1OIsr3i4wjklhcNKVpTb B3hFVJVhulCBwnt3Tdr7YX4JnQBKxb70VYTIpnhCVpjdhKge0ZD+Icqjgv14P1yl DYBYj1eGdrox0Z229gAopImWNYE9X0r+Nqj1NxRz5Hjf -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:43 2026 by rpki-client