This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa File: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (raw, json) Hash identifier: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic= Subject key identifier: BF:87:34:B0:79:B1:03:04:CA:7E:F6:C8:D1:C7:BF:75:99:06:66:A7 Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3 Certificate serial: 019B7CEE53218A985BF64831CBB93FC4F86D Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8775 IP address blocks: 195.69.156.0/22 maxlen: 22 195.69.156.0/24 maxlen: 24 195.69.157.0/24 maxlen: 24 195.69.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:21:8a:98:5b:f6:48:31:cb:b9:3f:c4:f8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf8734b079b10304ca7ef6c8d1c7bf75990666a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:8d:00:64:c3:b7:37:e8:c3:95:f3:f3:7a: ad:6a:4b:ea:24:2c:59:d1:d9:3f:e9:f9:56:0c:87: e3:b5:32:12:77:d7:18:fb:fc:d5:1d:1e:03:14:c8: 73:f6:9f:64:ad:00:55:81:c5:76:e2:6a:6b:00:a2: 7f:09:92:81:ce:05:ec:fd:a9:d8:72:c2:27:93:ab: 3c:f2:0f:1e:fd:ec:89:56:e0:2f:e4:a9:d4:46:d3: 6d:19:a0:27:f3:7d:7e:ae:13:87:42:9b:31:a5:4a: e0:f7:cc:05:cb:36:b0:70:27:ae:ca:6a:49:e1:3c: 35:75:a5:0c:b7:dc:82:da:a7:91:45:c5:b1:ac:89: bb:84:95:f1:91:31:8a:ee:8a:56:3f:15:61:ef:f0: cc:94:96:e6:60:f5:e7:0f:d6:0e:dd:00:bd:80:70: 9e:6c:2c:74:57:73:af:e6:a6:e9:2e:63:00:5c:f3: 37:7c:d8:eb:76:82:91:75:56:15:a4:09:b9:81:71: 75:cf:9d:d9:e1:0a:7b:20:ca:5e:90:3c:26:29:34: fe:1b:8f:90:6a:b2:df:cd:7e:b0:74:91:52:db:07: 35:1d:30:7d:b8:c9:12:9d:ca:a4:96:c5:89:e6:5c: a0:29:11:4a:5c:a7:ee:57:4c:97:04:d0:a5:37:8f: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:34:B0:79:B1:03:04:CA:7E:F6:C8:D1:C7:BF:75:99:06:66:A7 X509v3 Authority Key Identifier: keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.156.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:bf:d3:c1:5a:6d:bc:d8:68:62:d3:cd:75:dd:2e:0e:ee:80: c4:1f:74:7b:e1:65:dd:00:d0:84:ae:f6:38:bb:69:7f:4f:d5: 3e:73:f0:3e:8a:ab:68:7e:43:b0:91:03:c0:e5:e0:22:fe:14: d9:d0:aa:9c:1f:b5:2f:01:86:19:3a:40:16:0d:96:66:2d:c8: 37:d4:20:0e:2a:f7:fb:de:ad:61:d8:07:36:46:b5:17:6c:c5: 12:5b:b9:d7:88:76:0e:f8:37:ff:5d:fe:9a:aa:f0:67:16:46: 69:3a:25:e4:c5:0c:38:37:8d:44:b4:83:22:84:c5:08:23:40: 29:fb:29:18:f7:77:62:c8:3a:39:e1:7d:f2:f8:de:0f:3d:99: 73:e7:11:d4:dd:fc:63:22:c7:72:bc:25:f7:d1:a3:de:86:56: 37:7d:ae:d9:08:50:1f:92:b9:fe:02:30:92:cd:af:ef:02:35: 9e:6c:4a:ce:1e:18:aa:a8:44:ff:20:98:00:28:d9:4e:f3:f4: 44:2e:15:cb:a6:8a:db:fc:88:86:88:a8:cd:13:af:05:07:58: 4e:81:8e:72:b1:4f:39:0d:1a:47:a3:b4:f7:72:b7:ec:8b:80: 92:e8:46:2b:87:af:c5:62:a4:38:c9:f5:4a:19:24:34:c7:2b: 06:7b:ce:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lMhiphb9kgxy7k/xPhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTdiMWUxM2QzMmVkM2E2NGE3YzM1MjI3NTE2MjNlZWZh YmU1ZjMwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjg3MzRiMDc5YjEwMzA0Y2E3ZWY2YzhkMWM3YmY3NTk5MDY2NmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MaNAGTDtzfow5Xz83qtakvqJCxZ 0dk/6flWDIfjtTISd9cY+/zVHR4DFMhz9p9krQBVgcV24mprAKJ/CZKBzgXs/anY csInk6s88g8e/eyJVuAv5KnURtNtGaAn831+rhOHQpsxpUrg98wFyzawcCeuympJ 4Tw1daUMt9yC2qeRRcWxrIm7hJXxkTGK7opWPxVh7/DMlJbmYPXnD9YO3QC9gHCe bCx0V3Ov5qbpLmMAXPM3fNjrdoKRdVYVpAm5gXF1z53Z4Qp7IMpekDwmKTT+G4+Q arLfzX6wdJFS2wc1HTB9uMkSncqklsWJ5lygKRFKXKfuV0yXBNClN4/dXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+HNLB5sQMEyn72yNHHv3WZBmanMB8GA1UdIwQY MBaAFGQXseE9Mu06ZKfDUidRYj7vq+XzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjkt OGZmZGRiNWUzYzI2LzEvdjRjMHNIbXhBd1RLZnZiSTBjZV9kWmtHWnFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjktOGZmZGRiNWUzYzI2 LzEvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0WcMA0G CSqGSIb3DQEBCwUAA4IBAQBcv9PBWm282Ghi08113S4O7oDEH3R74WXdANCErvY4 u2l/T9U+c/A+iqtofkOwkQPA5eAi/hTZ0KqcH7UvAYYZOkAWDZZmLcg31CAOKvf7 3q1h2Ac2RrUXbMUSW7nXiHYO+Df/Xf6aqvBnFkZpOiXkxQw4N41EtIMihMUII0Ap +ykY93diyDo54X3y+N4PPZlz5xHU3fxjIsdyvCX30aPehlY3fa7ZCFAfkrn+AjCS za/vAjWebErOHhiqqET/IJgAKNlO8/RELhXLporb/IiGiKjNE68FB1hOgY5ysU85 DRpHo7T3crfsi4CS6EYrh6/FYqQ4yfVKGSQ0xysGe84n -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:54 2026 by rpki-client