This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/an0Gpu9MvO5HxbMKaMMDB3vXGH4.roa File: an0Gpu9MvO5HxbMKaMMDB3vXGH4.roa (raw, json) Hash identifier: L1hE9hBMXzXjn0nVNvZTmOcQItrL+JjmXR1Zq5fow2w= Subject key identifier: 6A:7D:06:A6:EF:4C:BC:EE:47:C5:B3:0A:68:C3:03:07:7B:D7:18:7E Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Certificate serial: 019B7E3873F646D8B5BCCD74EB8733667C59 Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/an0Gpu9MvO5HxbMKaMMDB3vXGH4.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44968 IP address blocks: 195.5.165.0/24 maxlen: 24 2001:67c:149c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:73:f6:46:d8:b5:bc:cd:74:eb:87:33:66:7c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a7d06a6ef4cbcee47c5b30a68c303077bd7187e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:65:75:8a:72:83:ff:6c:46:0e:93:24:cb: f9:aa:97:9a:44:5a:d0:6e:ce:14:e2:24:b7:36:1f: 4d:35:62:63:63:ec:da:e9:ed:5f:77:ee:5a:a7:0a: a7:0e:24:b9:55:43:05:76:fe:87:63:79:d0:b0:76: e8:b1:b7:8b:4c:d0:03:f6:61:1f:23:0f:50:b5:87: 28:90:83:c9:d7:23:1c:da:3c:4e:d3:76:9e:f8:7c: 38:3a:78:ca:13:8f:1a:4c:24:eb:63:4e:ba:07:13: 20:52:ca:59:25:0a:c4:fe:bf:e8:8f:51:e3:6b:4b: e2:e2:53:3e:23:ff:48:ad:28:c2:91:24:cb:ce:d7: b0:cd:ef:59:4c:f4:49:c7:c5:bd:d0:18:98:ed:5d: 7b:51:59:fe:77:e9:bb:0c:9b:7c:01:21:66:c8:5c: 4c:aa:7a:ce:ea:eb:dd:c1:4d:f8:f7:5b:d8:59:7e: 63:72:09:62:5c:5a:19:dd:8e:3d:e6:e7:54:4c:06: ae:a2:9c:02:61:b6:9a:4b:8d:15:a7:c8:0a:59:60: e4:37:e8:c4:cd:ef:e0:2b:bb:99:c7:b8:f2:5e:cc: d3:11:2f:57:e1:48:d6:a6:9d:f1:b9:5f:3a:a2:8a: a9:e2:fb:4e:e2:01:f8:67:47:fa:7d:fb:ae:89:c8: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:06:A6:EF:4C:BC:EE:47:C5:B3:0A:68:C3:03:07:7B:D7:18:7E X509v3 Authority Key Identifier: keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/an0Gpu9MvO5HxbMKaMMDB3vXGH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.165.0/24 IPv6: 2001:67c:149c::/48 Signature Algorithm: sha256WithRSAEncryption 6d:40:d1:a2:c7:64:62:b7:01:9e:9b:79:ba:82:4c:40:f4:70: 94:2a:db:be:34:73:f3:19:54:4f:d6:91:ef:9f:73:f8:cd:10: 21:84:4a:2d:6e:7f:b7:79:78:cb:30:37:b2:a2:a4:b3:ab:9d: c4:1f:06:99:ca:a4:eb:77:d8:57:df:1a:fc:1f:86:d1:bb:0a: 65:c4:fc:0b:c1:fc:6e:22:16:84:77:73:22:b6:da:b7:89:50: a6:b8:27:4d:9b:14:95:17:5a:f1:7a:c9:2b:8b:17:53:89:19: 0a:f9:ac:27:52:48:7d:5b:6f:ba:ad:2e:a4:b9:df:24:f4:76: 59:e9:86:1f:ff:de:47:bf:16:91:34:d2:ba:50:71:a7:bd:0a: bf:ad:3a:70:17:4c:3f:81:5a:08:dc:59:14:b6:b3:d1:87:cc: ee:ef:ab:81:5b:65:93:f4:d8:55:ea:5b:53:df:63:21:3e:01: 17:9e:53:4a:32:90:17:d1:e0:f3:c7:e5:8a:58:97:cc:48:ec: 60:3a:ee:10:82:b6:37:aa:31:bc:fa:a7:a0:ff:51:b4:37:a7: 6a:5d:f5:82:c6:61:e1:73:4d:af:ae:12:fa:c4:4e:32:bb:e8: 0f:61:2f:26:e1:98:53:ed:11:66:9b:a0:25:07:64:56:11:75: 35:de:14:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OHP2Rti1vM1064czZnxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGNiM2NkMzVlZmJjODRmMmE4OWEyZjVkMmMxNjJjM2Q3 Y2UxNWIwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTdkMDZhNmVmNGNiY2VlNDdjNWIzMGE2OGMzMDMwNzdiZDcxODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LJldYpyg/9sRg6TJMv5qpeaRFrQ bs4U4iS3Nh9NNWJjY+za6e1fd+5apwqnDiS5VUMFdv6HY3nQsHbosbeLTNAD9mEf Iw9QtYcokIPJ1yMc2jxO03ae+Hw4OnjKE48aTCTrY066BxMgUspZJQrE/r/oj1Hj a0vi4lM+I/9IrSjCkSTLztewze9ZTPRJx8W90BiY7V17UVn+d+m7DJt8ASFmyFxM qnrO6uvdwU3491vYWX5jcgliXFoZ3Y495udUTAauopwCYbaaS40Vp8gKWWDkN+jE ze/gK7uZx7jyXszTES9X4UjWpp3xuV86ooqp4vtO4gH4Z0f6ffuuici+WQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGp9BqbvTLzuR8WzCmjDAwd71xh+MB8GA1UdIwQY MBaAFGtMs80177yE8qiaL10sFiw9fOFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEt NjNhZTc0YmIyMDNiLzEvYW4wR3B1OU12TzVIeGJNS2FNTURCM3ZYR0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNjk0OTMtNTI2NC00OWE0LWI0ZGEtNjNhZTc0YmIyMDNi LzEvYTB5enpUWHZ2SVR5cUpvdlhTd1dMRDE4NFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwwWlMA8E AgACMAkDBwAgAQZ8FJwwDQYJKoZIhvcNAQELBQADggEBAG1A0aLHZGK3AZ6bebqC TED0cJQq2740c/MZVE/Wke+fc/jNECGESi1uf7d5eMswN7KipLOrncQfBpnKpOt3 2FffGvwfhtG7CmXE/AvB/G4iFoR3cyK22reJUKa4J02bFJUXWvF6ySuLF1OJGQr5 rCdSSH1bb7qtLqS53yT0dlnphh//3ke/FpE00rpQcae9Cr+tOnAXTD+BWgjcWRS2 s9GHzO7vq4FbZZP02FXqW1PfYyE+AReeU0oykBfR4PPH5YpYl8xI7GA67hCCtjeq Mbz6p6D/UbQ3p2pd9YLGYeFzTa+uEvrETjK76A9hLybhmFPtEWaboCUHZFYRdTXe FNI= -----END CERTIFICATE-----Generated at Sat Jan 3 02:37:10 2026 by rpki-client