This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa File: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (raw, json) Hash identifier: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU= Subject key identifier: 17:75:7A:34:70:62:14:B1:D8:1F:D9:02:78:9F:DC:A6:12:3A:56:E2 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C8039199F0B9A9D518AA6809EA89E00 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215703 IP address blocks: 95.155.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:39:19:9f:0b:9a:9d:51:8a:a6:80:9e:a8:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17757a34706214b1d81fd902789fdca6123a56e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:30:06:1a:82:16:22:65:8b:e1:c4:9a:48: d7:40:71:a4:ac:e0:21:aa:c1:aa:c8:4e:c5:c3:49: fa:d4:7e:69:85:21:7d:74:ca:cc:c7:98:31:de:b3: 6d:e6:28:31:ed:e9:4a:ea:70:53:6c:db:66:b0:a8: 17:31:a2:d3:b9:b1:da:47:b2:46:ae:7e:2f:e0:29: 09:fe:5b:13:0a:37:fc:a7:5d:21:60:cd:0d:10:53: 88:25:ed:02:b7:9f:46:b2:88:a2:d2:63:49:50:c8: ba:6f:1f:2c:b2:37:89:d6:78:bd:49:2d:ec:b8:32: eb:46:d4:39:20:04:c3:6d:c8:b5:d3:5b:63:92:78: 4d:da:3c:87:76:ad:33:71:68:88:18:df:a7:89:fa: 30:c8:f3:5e:22:5a:60:b4:8b:67:c8:77:d1:01:05: 88:c0:59:99:4f:dd:f1:a3:68:b6:cf:5d:a9:3c:5d: 40:31:f6:c8:78:ab:f6:77:f9:46:e5:d0:6a:b5:d4: 46:40:24:98:02:dd:a6:b0:14:11:9b:c5:c6:3b:3d: b6:c9:df:f2:88:46:d6:a4:45:f7:99:e3:9b:7e:c3: 13:ed:7a:c2:57:7f:57:ba:bc:dc:51:ab:59:b7:18: 26:3e:96:ba:bd:e3:bd:80:36:e1:fb:81:e9:e7:51: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:7A:34:70:62:14:B1:D8:1F:D9:02:78:9F:DC:A6:12:3A:56:E2 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.158.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:63:bc:72:79:1d:64:87:19:00:85:22:57:1b:6d:d6:67:29: 15:91:48:dc:2b:40:fc:43:70:25:e7:b5:c6:65:82:7c:38:22: 32:b0:29:c5:e5:72:38:27:5c:99:c2:73:3b:ba:9c:15:8e:84: f8:80:32:ce:56:79:c2:4a:5c:72:4d:dd:b1:72:c1:ee:ff:be: 82:0a:b3:9a:7a:7f:8c:b7:a8:da:bd:c2:2f:6a:93:2d:2d:53: e9:d8:31:8a:ab:7a:5c:55:81:06:d3:f7:1e:43:0b:38:5c:35: cf:e2:e3:b5:be:89:e5:e8:02:5c:ef:43:4c:5a:2b:63:b4:f0: 6d:bb:33:a5:bf:7c:8a:3b:c5:e0:42:42:0e:e1:1f:04:d1:8a: 62:b3:cd:66:fd:58:a4:82:71:77:60:87:94:aa:2e:24:f0:a2: 0d:6c:60:8c:b9:41:7f:03:80:92:b2:37:f8:78:ea:58:4c:58: dc:6e:af:f2:33:f6:52:74:1e:86:13:2b:4e:ca:c2:75:c6:ab: 8e:32:3e:5c:a1:e2:bb:56:e1:dd:cc:2c:37:5b:0d:51:64:53: d9:95:1f:8e:54:9c:22:7c:3d:f3:80:f8:70:8a:35:b7:5c:fe: ad:a5:55:a3:35:5f:06:07:c3:bf:1f:6c:27:a2:94:fc:3a:2c: 8e:e8:4a:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDkZnwuanVGKpoCeqJ4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzc1N2EzNDcwNjIxNGIxZDgxZmQ5MDI3ODlmZGNhNjEyM2E1NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogwwBhqCFiJli+HEmkjXQHGkrOAh qsGqyE7Fw0n61H5phSF9dMrMx5gx3rNt5igx7elK6nBTbNtmsKgXMaLTubHaR7JG rn4v4CkJ/lsTCjf8p10hYM0NEFOIJe0Ct59Gsoii0mNJUMi6bx8ssjeJ1ni9SS3s uDLrRtQ5IATDbci101tjknhN2jyHdq0zcWiIGN+nifowyPNeIlpgtItnyHfRAQWI wFmZT93xo2i2z12pPF1AMfbIeKv2d/lG5dBqtdRGQCSYAt2msBQRm8XGOz22yd/y iEbWpEX3meObfsMT7XrCV39XurzcUatZtxgmPpa6veO9gDbh+4Hp51FHNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBd1ejRwYhSx2B/ZAnif3KYSOlbiMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvRjNWNk5IQmlGTEhZSDlrQ2VKX2NwaEk2VnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5ueMA0G CSqGSIb3DQEBCwUAA4IBAQB6Y7xyeR1khxkAhSJXG23WZykVkUjcK0D8Q3Al57XG ZYJ8OCIysCnF5XI4J1yZwnM7upwVjoT4gDLOVnnCSlxyTd2xcsHu/76CCrOaen+M t6javcIvapMtLVPp2DGKq3pcVYEG0/ceQws4XDXP4uO1vonl6AJc70NMWitjtPBt uzOlv3yKO8XgQkIO4R8E0Ypis81m/VikgnF3YIeUqi4k8KINbGCMuUF/A4CSsjf4 eOpYTFjcbq/yM/ZSdB6GEytOysJ1xquOMj5coeK7VuHdzCw3Ww1RZFPZlR+OVJwi fD3zgPhwijW3XP6tpVWjNV8GB8O/H2wnopT8OiyO6ErI -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:46 2026 by rpki-client