This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/vT00UMTKIHLp4hINXZvd81w31H4.roa File: vT00UMTKIHLp4hINXZvd81w31H4.roa (raw, json) Hash identifier: QI91nZrYvdKW6PkjSidpqTabE42DmbX4YNbp5QsN850= Subject key identifier: BD:3D:34:50:C4:CA:20:72:E9:E2:12:0D:5D:9B:DD:F3:5C:37:D4:7E Certificate issuer: /CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672 Certificate serial: 019B7A5B54BA61FC356A70B35709D0F2ED16 Authority key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/vT00UMTKIHLp4hINXZvd81w31H4.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.197.213.0/24 maxlen: 24 185.197.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:54:ba:61:fc:35:6a:70:b3:57:09:d0:f2:ed:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd3d3450c4ca2072e9e2120d5d9bddf35c37d47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:82:e8:58:fb:f7:4d:af:9c:22:bd:a3:cc:c1: b9:d7:a3:0d:dc:51:66:17:50:a8:c2:0c:5c:ad:eb: 00:33:e7:db:92:42:45:e5:be:57:45:f5:67:19:1c: a6:19:13:f0:86:7d:e6:46:43:6f:90:a7:7c:ee:21: b7:da:57:35:64:1c:91:a7:e1:56:51:4b:ec:b9:33: 86:0e:dd:6a:e4:f1:aa:dc:b1:69:ec:05:c8:d3:16: ab:a7:1f:99:8b:e5:4a:eb:25:64:f0:fb:1e:3a:54: 1b:47:f6:87:e7:5d:8f:73:08:df:83:34:e2:27:25: 69:88:a9:02:40:e2:3d:f4:b6:c0:b1:5f:80:e0:de: 3f:bd:4a:33:9e:51:b3:20:28:d2:30:1e:34:0f:59: d6:71:b2:12:f4:74:51:48:cb:9a:70:91:cd:e1:94: 1d:ac:ae:3d:75:60:7d:ca:88:ec:9b:76:ae:39:8c: b1:c7:83:95:1c:04:56:13:11:ad:61:2e:10:b6:18: 63:b4:ef:21:28:82:05:cc:fb:a3:8d:47:26:fe:6b: c2:29:84:fc:47:44:15:3d:95:33:e8:eb:6c:53:26: d4:44:15:49:e6:7c:59:d9:75:30:7e:1a:d5:31:b3: 61:65:36:58:f9:9b:35:50:3b:74:20:19:6c:cb:b3: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:34:50:C4:CA:20:72:E9:E2:12:0D:5D:9B:DD:F3:5C:37:D4:7E X509v3 Authority Key Identifier: keyid:87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/vT00UMTKIHLp4hINXZvd81w31H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.213.0/24 185.197.215.0/24 Signature Algorithm: sha256WithRSAEncryption 48:de:9e:8c:b2:8e:a0:94:02:4b:61:b1:ac:15:fd:d5:16:06: 30:68:05:90:2a:5d:bb:08:cb:ec:00:67:1c:58:29:c8:e6:f8: d8:c0:c3:9c:d0:2c:ed:34:3b:fd:f8:7b:80:8a:38:33:72:60: bb:b4:1d:4a:f5:bc:be:18:af:be:7b:28:11:f9:5d:31:84:0c: 0a:7f:c9:ae:b5:33:ed:eb:da:f7:38:b2:af:0d:e2:52:31:b8: 82:c2:f4:ab:97:d8:4d:25:84:8a:07:b2:52:6f:d2:8c:8a:a9: 5c:3f:7c:c6:99:71:fc:d1:9d:79:72:f0:e1:4c:99:3f:98:6b: ca:6f:77:50:bc:8a:ed:e7:e9:ac:74:ef:42:31:b3:bf:e0:e3: 82:3b:a4:37:52:49:7c:38:dd:27:bf:7d:81:cc:40:40:dd:58: bd:3c:57:1a:1b:4e:aa:37:a0:ee:05:18:6d:46:df:7a:68:d3: c9:af:07:0e:a3:c8:ce:ad:3b:1c:85:fc:3a:8a:87:a0:ef:e2: 81:5f:43:e2:e0:b2:97:6f:29:45:2e:44:65:7c:34:1d:06:63: 2f:18:88:a9:7d:81:59:f8:ce:15:16:98:87:45:3f:5b:25:91: 02:1a:1a:6e:2c:d2:ab:f3:76:df:cd:21:de:48:2a:db:8b:90: 61:f9:6d:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W1S6Yfw1anCzVwnQ8u0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZWQ5Y2I4MzQwYWMyMDk1YTRjYjA1MjhlNWVhMmY3Mzhj ZWE2NzIwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDNkMzQ1MGM0Y2EyMDcyZTllMjEyMGQ1ZDliZGRmMzVjMzdkNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64LoWPv3Ta+cIr2jzMG516MN3FFm F1CowgxcresAM+fbkkJF5b5XRfVnGRymGRPwhn3mRkNvkKd87iG32lc1ZByRp+FW UUvsuTOGDt1q5PGq3LFp7AXI0xarpx+Zi+VK6yVk8PseOlQbR/aH512PcwjfgzTi JyVpiKkCQOI99LbAsV+A4N4/vUoznlGzICjSMB40D1nWcbIS9HRRSMuacJHN4ZQd rK49dWB9yojsm3auOYyxx4OVHARWExGtYS4QthhjtO8hKIIFzPujjUcm/mvCKYT8 R0QVPZUz6OtsUybURBVJ5nxZ2XUwfhrVMbNhZTZY+Zs1UDt0IBlsy7O0MwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL09NFDEyiBy6eISDV2b3fNcN9R+MB8GA1UdIwQY MBaAFIftnLg0CsIJWkywUo5eovc4zqZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MzgxZDMtNWQwMS00YWJjLWJlZDct N2IyMWJmMzAzY2NjLzEvdlQwMFVNVEtJSExwNGhJTlhadmQ4MXczMUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82MzgxZDMtNWQwMS00YWJjLWJlZDctN2IyMWJmMzAzY2Nj LzEvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucXVAwQA ucXXMA0GCSqGSIb3DQEBCwUAA4IBAQBI3p6Mso6glAJLYbGsFf3VFgYwaAWQKl27 CMvsAGccWCnI5vjYwMOc0CztNDv9+HuAijgzcmC7tB1K9by+GK++eygR+V0xhAwK f8mutTPt69r3OLKvDeJSMbiCwvSrl9hNJYSKB7JSb9KMiqlcP3zGmXH80Z15cvDh TJk/mGvKb3dQvIrt5+msdO9CMbO/4OOCO6Q3Ukl8ON0nv32BzEBA3Vi9PFcaG06q N6DuBRhtRt96aNPJrwcOo8jOrTschfw6ioeg7+KBX0Pi4LKXbylFLkRlfDQdBmMv GIipfYFZ+M4VFpiHRT9bJZECGhpuLNKr83bfzSHeSCrbi5Bh+W1Q -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:46 2026 by rpki-client