This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa File: v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa (raw, json) Hash identifier: liANJtLZlExcLcM+/+8RAHwNizw5D6GQaPEdxWVRWPQ= Subject key identifier: BF:E4:E6:1F:08:F1:51:6A:4E:FB:86:54:8F:11:6B:E7:25:C0:F3:68 Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17 Certificate serial: 019B7DCB38363E4566AAAC929F86CA69F613 Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa Signing time: Fri 02 Jan 2026 08:20:28 +0000 ROA not before: Fri 02 Jan 2026 08:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29236 IP address blocks: 194.55.159.0/24 maxlen: 24 2001:67c:2d28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:38:36:3e:45:66:aa:ac:92:9f:86:ca:69:f6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfe4e61f08f1516a4efb86548f116be725c0f368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:fc:2c:e6:67:06:b0:03:da:05:99:cf:83: 13:04:95:27:d7:4a:0f:d5:09:cc:2a:3d:25:04:98: b6:b3:00:ec:f1:7a:d7:1f:d8:30:3b:1c:0c:97:26: 86:1d:1a:ba:ca:8b:bc:39:8f:ae:4a:b0:88:2d:20: 9d:ca:8b:ab:18:47:65:e2:1b:c2:91:06:7f:b5:04: df:56:94:9c:3d:5b:3e:10:3c:f8:14:26:91:10:63: 37:27:ed:bb:68:f0:30:5e:6a:ba:00:50:7a:54:bd: 21:63:6b:ce:a8:27:38:8a:d7:0c:79:f6:ea:a9:4b: a8:9a:6f:9a:5d:d2:c2:8e:5a:09:d9:4f:f2:82:c5: e6:a2:93:eb:bf:1d:39:f9:e4:9c:b3:7d:c6:30:86: b8:89:a2:c4:8a:8f:28:c5:d2:7a:ca:88:6c:8b:6d: 7e:cb:30:34:dd:00:24:34:40:b8:e0:f9:2c:ba:6d: e4:54:a7:4a:39:39:84:57:d2:4e:a7:43:66:49:46: 10:ac:d7:49:83:ec:36:93:fa:91:fd:04:7b:76:c4: 92:2b:b7:09:fa:17:c8:97:8d:7c:8f:40:23:78:f4: 60:4e:f6:13:92:88:83:fe:97:52:2a:97:85:ee:09: 04:ea:0d:a3:a7:64:ab:08:49:ec:2c:f8:2c:76:e2: 27:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E4:E6:1F:08:F1:51:6A:4E:FB:86:54:8F:11:6B:E7:25:C0:F3:68 X509v3 Authority Key Identifier: keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.159.0/24 IPv6: 2001:67c:2d28::/48 Signature Algorithm: sha256WithRSAEncryption a3:bd:34:db:ff:c0:3e:99:a6:80:85:4a:52:41:00:a7:42:b2: 17:71:09:7c:b2:ce:24:b6:ba:d5:3b:56:fa:6a:6f:7d:e7:92: f5:7e:11:17:1d:16:c7:22:f1:7d:56:ed:23:91:ff:83:ee:6a: 9d:5a:f8:dc:39:8b:7c:b3:68:e9:72:42:1f:e1:a1:b6:66:db: 45:61:ab:6f:b9:dc:5e:8e:d8:f5:07:61:86:c8:f0:0f:04:14: 16:e6:4a:b9:8e:0d:e9:e9:9e:13:1e:3f:3e:63:2d:86:9d:b5: 11:64:2e:17:98:ea:f7:a1:e4:a0:b4:ec:f0:0e:4b:05:6a:35: 97:85:e8:46:b4:79:1b:93:66:52:a4:80:9f:6a:17:5e:7f:7f: 3a:cb:d1:94:5d:c6:01:02:61:a7:71:c5:2f:b7:76:36:12:09: 59:4e:ac:9f:4d:56:9c:cc:c0:57:43:b8:1c:b3:61:ca:0e:dc: d6:9c:5d:1b:b4:8c:2e:55:07:9b:5f:ed:2e:7a:87:b6:77:37: 42:3e:39:47:2a:1f:13:bc:12:3c:d0:b3:90:69:c3:ff:7c:6f: 51:20:e7:76:91:b6:96:98:5b:0f:bc:d0:f9:b4:4b:1d:48:c7: 40:6b:4b:b2:68:f5:84:1d:5f:0f:af:01:f4:ea:e7:ee:db:46: 44:fd:43:63 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yzg2PkVmqqySn4bKafYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTMxODhlYmZjZTIwZTViYzUzZjNhY2Y1N2Y0MDdkOWU1 N2FjMTcwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmU0ZTYxZjA4ZjE1MTZhNGVmYjg2NTQ4ZjExNmJlNzI1YzBmMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIz8LOZnBrAD2gWZz4MTBJUn10oP 1QnMKj0lBJi2swDs8XrXH9gwOxwMlyaGHRq6you8OY+uSrCILSCdyourGEdl4hvC kQZ/tQTfVpScPVs+EDz4FCaREGM3J+27aPAwXmq6AFB6VL0hY2vOqCc4itcMefbq qUuomm+aXdLCjloJ2U/ygsXmopPrvx05+eScs33GMIa4iaLEio8oxdJ6yohsi21+ yzA03QAkNEC44Pksum3kVKdKOTmEV9JOp0NmSUYQrNdJg+w2k/qR/QR7dsSSK7cJ +hfIl418j0AjePRgTvYTkoiD/pdSKpeF7gkE6g2jp2SrCEnsLPgsduInZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL/k5h8I8VFqTvuGVI8Ra+clwPNoMB8GA1UdIwQY MBaAFGiTGI6/ziDlvFPzrPV/QH2eV6wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2Yt MmQyYjRmNzBjM2EzLzEvdi1UbUh3anhVV3BPLTRaVWp4RnI1eVhBODJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2YtMmQyYjRmNzBjM2Ez LzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjefMA8E AgACMAkDBwAgAQZ8LSgwDQYJKoZIhvcNAQELBQADggEBAKO9NNv/wD6ZpoCFSlJB AKdCshdxCXyyziS2utU7Vvpqb33nkvV+ERcdFsci8X1W7SOR/4Puap1a+Nw5i3yz aOlyQh/hobZm20Vhq2+53F6O2PUHYYbI8A8EFBbmSrmODenpnhMePz5jLYadtRFk LheY6veh5KC07PAOSwVqNZeF6Ea0eRuTZlKkgJ9qF15/fzrL0ZRdxgECYadxxS+3 djYSCVlOrJ9NVpzMwFdDuByzYcoO3NacXRu0jC5VB5tf7S56h7Z3N0I+OUcqHxO8 EjzQs5Bpw/98b1Eg53aRtpaYWw+80Pm0Sx1Ix0BrS7Jo9YQdXw+vAfTq5+7bRkT9 Q2M= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:18 2026 by rpki-client