This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa File: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (raw, json) Hash identifier: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo= Subject key identifier: 3E:75:7A:31:1A:C2:6C:40:DB:52:06:4E:59:99:30:D0:5F:B9:7D:3C Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e Certificate serial: 019B7D5C4D1148E75A3C28C149E7CE2B16E4 Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200818 IP address blocks: 185.95.52.0/22 maxlen: 22 185.95.52.0/24 maxlen: 24 185.95.53.0/24 maxlen: 24 185.95.54.0/24 maxlen: 24 185.95.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4d:11:48:e7:5a:3c:28:c1:49:e7:ce:2b:16:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e757a311ac26c40db52064e599930d05fb97d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:43:42:c4:b4:b0:f3:f4:41:8f:43:c7:00: 4a:dd:24:d0:51:e9:a7:97:59:2f:c5:c2:9f:9a:98: dd:df:ff:77:d2:0d:c7:ca:96:8f:c5:82:76:67:f9: 8b:9b:62:31:6f:6c:51:bd:54:ff:3d:c1:91:11:5f: 6a:bc:11:32:13:8b:53:ab:86:b6:fa:69:7d:32:47: 6a:02:1a:8a:38:70:43:5e:c8:07:e9:93:b5:8b:45: 1f:2a:14:70:5a:67:8b:31:dd:b0:01:06:ba:7c:c1: a0:ba:a5:45:1a:8e:31:4b:69:99:5d:1c:aa:61:61: fb:4d:dc:4a:a9:8b:8a:ff:21:37:e1:14:0d:2d:f5: fe:77:4b:9e:7e:a6:b8:c5:93:dc:30:22:86:ab:83: b6:c8:c6:24:b3:67:4e:10:f6:24:a0:8b:53:fd:40: 2f:04:0f:b0:e3:a4:b9:ff:f3:2f:62:4b:7a:de:07: 0e:a3:60:29:d4:0f:5f:97:8e:ec:20:ff:cd:a5:49: d6:18:9c:f5:d3:1d:68:6b:98:00:42:67:e6:f8:53: 31:3b:a2:af:7c:5f:95:aa:e3:23:69:0a:b0:74:ac: 6c:14:b4:dd:4e:7f:f9:0a:fb:86:bc:fb:e6:2d:a7: f0:51:2d:fd:a7:39:fb:18:3e:82:60:6d:39:19:d9: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:7A:31:1A:C2:6C:40:DB:52:06:4E:59:99:30:D0:5F:B9:7D:3C X509v3 Authority Key Identifier: keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.52.0/22 Signature Algorithm: sha256WithRSAEncryption a9:ee:e9:28:c9:20:78:4d:3e:8b:3a:02:05:d2:d1:e2:9d:12: 60:d2:92:8b:12:6f:00:3c:c3:ab:c3:78:99:b5:ff:78:d7:51: e5:cc:7e:23:c1:fa:68:12:2c:62:75:54:de:8c:16:3e:c9:20: a4:0b:b4:fe:e3:16:69:a5:f3:07:c6:42:16:f9:fd:51:8a:ef: 83:bb:c9:34:12:4d:1f:6e:b3:d7:4a:58:99:99:63:aa:95:9b: f2:8d:8c:59:08:ad:af:75:a9:98:bd:59:88:18:1e:33:f5:43: c9:d2:32:0f:9f:af:f5:ac:1e:9a:7b:91:3f:99:da:04:6e:8d: a0:ab:ab:7a:6b:7b:39:28:bc:e3:34:af:b5:64:fd:0a:76:3a: 72:7c:06:d2:54:04:c6:4e:f8:10:4a:73:67:4c:c1:d2:88:96: 77:91:20:d3:7b:e0:e3:53:9d:f6:e9:00:42:b4:fc:50:c7:aa: 7b:9b:5e:51:a3:1d:3c:63:95:e3:38:9e:cc:85:c7:f0:db:84: 13:5c:f0:37:51:f5:33:11:b5:dc:04:05:37:dd:d6:a9:d1:2b: e0:53:11:a9:78:ac:8f:00:b2:19:36:91:04:4f:2a:87:3b:8b: ff:d8:a4:69:8c:3a:1a:05:7a:cb:71:c0:3c:4a:f6:bd:c9:f8: 4c:16:f5:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XE0RSOdaPCjBSefOKxbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjk1M2RiNDg0MDRiMGM2NmExNWYwZGE2ZWZhN2ZhYzBh OTM2OWUwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTc1N2EzMTFhYzI2YzQwZGI1MjA2NGU1OTk5MzBkMDVmYjk3ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK1DQsS0sPP0QY9DxwBK3STQUemn l1kvxcKfmpjd3/930g3HypaPxYJ2Z/mLm2Ixb2xRvVT/PcGREV9qvBEyE4tTq4a2 +ml9MkdqAhqKOHBDXsgH6ZO1i0UfKhRwWmeLMd2wAQa6fMGguqVFGo4xS2mZXRyq YWH7TdxKqYuK/yE34RQNLfX+d0uefqa4xZPcMCKGq4O2yMYks2dOEPYkoItT/UAv BA+w46S5//MvYkt63gcOo2Ap1A9fl47sIP/NpUnWGJz10x1oa5gAQmfm+FMxO6Kv fF+VquMjaQqwdKxsFLTdTn/5CvuGvPvmLafwUS39pzn7GD6CYG05GdnUvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD51ejEawmxA21IGTlmZMNBfuX08MB8GA1UdIwQY MBaAFF1pU9tIQEsMZqFfDabvp/rAqTaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQt ZmEyZmI5NGRhMWEyLzEvUG5WNk1SckNiRURiVWdaT1daa3cwRi01ZlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQtZmEyZmI5NGRhMWEy LzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV80MA0G CSqGSIb3DQEBCwUAA4IBAQCp7ukoySB4TT6LOgIF0tHinRJg0pKLEm8APMOrw3iZ tf9411HlzH4jwfpoEixidVTejBY+ySCkC7T+4xZppfMHxkIW+f1Riu+Du8k0Ek0f brPXSliZmWOqlZvyjYxZCK2vdamYvVmIGB4z9UPJ0jIPn6/1rB6ae5E/mdoEbo2g q6t6a3s5KLzjNK+1ZP0KdjpyfAbSVATGTvgQSnNnTMHSiJZ3kSDTe+DjU5326QBC tPxQx6p7m15Rox08Y5XjOJ7Mhcfw24QTXPA3UfUzEbXcBAU33dap0SvgUxGpeKyP ALIZNpEETyqHO4v/2KRpjDoaBXrLccA8Sva9yfhMFvWs -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:20 2026 by rpki-client