This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa File: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (raw, json) Hash identifier: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc= Subject key identifier: D1:53:81:3B:19:2F:E7:06:74:B0:03:8A:23:C5:1D:F6:57:CF:0C:2D Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2 Certificate serial: 019B7EA7432D3466E47222025154538C8068 Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39308 IP address blocks: 89.144.128.0/18 maxlen: 24 89.144.130.0/24 maxlen: 24 109.109.32.0/19 maxlen: 19 109.109.48.0/24 maxlen: 24 159.20.96.0/20 maxlen: 20 185.56.96.0/22 maxlen: 24 2a00:1570::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:43:2d:34:66:e4:72:22:02:51:54:53:8c:80:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2 Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d153813b192fe70674b0038a23c51df657cf0c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:1b:cb:38:4d:96:94:d0:3d:e9:f7:bb:c3: 24:02:6f:67:7b:9c:14:8b:3e:ca:d6:26:8f:65:df: d8:62:cd:9a:8f:68:bc:d9:8e:60:e2:df:0f:25:91: ac:dc:1b:7c:7b:fe:42:84:33:1f:3f:ba:34:fd:64: ef:76:83:67:55:9b:d9:a7:24:12:c1:30:97:2f:a7: d1:7a:2e:ec:c6:a7:9f:53:0d:33:96:59:26:89:38: 8b:68:bc:39:ed:9e:c2:2b:bf:3f:9e:14:1d:ec:ad: 41:01:fa:5d:84:b4:af:a5:50:70:d1:07:41:2c:62: a8:67:c7:85:ca:a8:64:a3:20:88:6f:ae:93:af:eb: 61:06:82:6d:e3:26:41:69:cf:f5:92:22:80:01:83: 37:2e:e8:7a:b5:8c:d2:e4:67:78:7d:82:9f:a8:85: a6:66:7c:04:1b:6b:e4:36:b7:22:d6:0e:c9:c2:a4: 2d:ff:aa:d4:c9:e3:40:cf:93:7e:ee:c3:cf:73:55: cb:dd:3b:a6:f4:e6:26:32:4b:b6:60:62:c5:2b:c4: 23:e5:ba:47:c3:94:19:72:4b:e9:69:93:4f:2e:d7: 6c:24:09:d4:05:24:a1:cf:a9:42:b2:1d:25:e3:0b: 45:87:06:da:cc:a2:31:17:4a:d4:25:72:59:cf:4f: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:53:81:3B:19:2F:E7:06:74:B0:03:8A:23:C5:1D:F6:57:CF:0C:2D X509v3 Authority Key Identifier: keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.128.0/18 109.109.32.0/19 159.20.96.0/20 185.56.96.0/22 IPv6: 2a00:1570::/32 Signature Algorithm: sha256WithRSAEncryption 1b:74:c8:2a:01:87:ea:8c:47:09:d4:af:55:f4:30:2c:93:a9: 3b:e1:a2:32:b4:de:5d:7d:1d:4f:bb:89:46:5d:43:bc:d9:65: 43:14:9e:8a:bb:c6:4c:8f:20:90:76:08:f8:6c:42:fa:d0:7b: 3e:2e:ed:78:2a:a1:dd:33:f9:e3:90:6d:7a:2d:37:61:e1:03: fc:a2:20:e0:ec:7e:d1:4d:50:ed:32:96:36:ba:15:ac:e1:48: f2:0d:ae:b5:cb:fd:f6:97:38:37:c4:d2:a9:56:d5:ab:27:5c: d9:8f:6f:c1:22:67:51:ad:55:03:33:c2:18:0e:ad:fd:53:f8: 81:cc:d4:9b:45:bd:03:d0:23:f5:ca:ef:52:9d:41:d3:78:cc: 55:68:52:34:69:e7:d5:a4:7a:90:07:54:96:54:6e:bf:c6:ab: 54:90:06:64:9f:1c:9b:7e:1c:20:8d:e8:28:2b:ea:3c:47:08: 63:be:52:39:a8:51:bd:63:41:68:0d:b2:70:47:0a:16:c9:30: 11:5b:6b:af:3d:af:59:4c:fc:2d:b4:d5:40:7c:46:b4:2e:1a: 01:c0:64:64:3e:52:79:ee:30:9b:01:8a:9a:a8:a8:22:44:57: 90:35:62:c0:ad:b5:8a:82:b2:c8:08:18:d1:63:b2:c6:2e:6a: c6:3a:25:4e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+p0MtNGbkciICUVRTjIBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4 NWFmYzIwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTUzODEzYjE5MmZlNzA2NzRiMDAzOGEyM2M1MWRmNjU3Y2YwYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvREbyzhNlpTQPen3u8MkAm9ne5wU iz7K1iaPZd/YYs2aj2i82Y5g4t8PJZGs3Bt8e/5ChDMfP7o0/WTvdoNnVZvZpyQS wTCXL6fRei7sxqefUw0zllkmiTiLaLw57Z7CK78/nhQd7K1BAfpdhLSvpVBw0QdB LGKoZ8eFyqhkoyCIb66Tr+thBoJt4yZBac/1kiKAAYM3Luh6tYzS5Gd4fYKfqIWm ZnwEG2vkNrci1g7JwqQt/6rUyeNAz5N+7sPPc1XL3Tum9OYmMku2YGLFK8Qj5bpH w5QZckvpaZNPLtdsJAnUBSShz6lCsh0l4wtFhwbazKIxF0rUJXJZz0/s8QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNFTgTsZL+cGdLADiiPFHfZXzwwtMB8GA1UdIwQY MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt NTMzNGU2YjhjNWZlLzEvMFZPQk94a3Y1d1owc0FPS0k4VWQ5bGZQREMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGWZCAAwQF bW0gAwQEnxRgAwQCuThgMA0EAgACMAcDBQAqABVwMA0GCSqGSIb3DQEBCwUAA4IB AQAbdMgqAYfqjEcJ1K9V9DAsk6k74aIytN5dfR1Pu4lGXUO82WVDFJ6Ku8ZMjyCQ dgj4bEL60Hs+Lu14KqHdM/njkG16LTdh4QP8oiDg7H7RTVDtMpY2uhWs4UjyDa61 y/32lzg3xNKpVtWrJ1zZj2/BImdRrVUDM8IYDq39U/iBzNSbRb0D0CP1yu9SnUHT eMxVaFI0aefVpHqQB1SWVG6/xqtUkAZknxybfhwgjegoK+o8RwhjvlI5qFG9Y0Fo DbJwRwoWyTARW2uvPa9ZTPwttNVAfEa0LhoBwGRkPlJ57jCbAYqaqKgiRFeQNWLA rbWKgrLICBjRY7LGLmrGOiVO -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:26 2026 by rpki-client