This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/vnH2NBbn3Q3LtUPrFoU9by3eF_0.roa File: vnH2NBbn3Q3LtUPrFoU9by3eF_0.roa (raw, json) Hash identifier: UPdVY5abeB5lX+0Aslp3HBLsCZjZtVMWKp5zyq6x038= Subject key identifier: BE:71:F6:34:16:E7:DD:0D:CB:B5:43:EB:16:85:3D:6F:2D:DE:17:FD Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af Certificate serial: 019B79ED0DB1D7C677B950191090800A8865 Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/vnH2NBbn3Q3LtUPrFoU9by3eF_0.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34272 IP address blocks: 193.110.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0d:b1:d7:c6:77:b9:50:19:10:90:80:0a:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be71f63416e7dd0dcbb543eb16853d6f2dde17fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:d7:1d:19:d5:a6:f9:ec:ea:de:c9:1c:7b: e4:64:8c:5d:4d:ae:d7:6a:7d:4a:c9:17:46:ea:c6: 2b:da:6f:15:4c:da:7e:19:af:b3:18:29:59:bd:fe: 57:77:e3:f8:84:35:49:c9:00:17:03:47:25:a9:3c: eb:56:9c:ab:93:0d:7e:a7:e3:77:f7:e0:7b:bb:d7: 36:1b:4c:8f:a2:3d:1b:18:48:11:cf:12:e0:a7:14: a3:3d:0c:3c:78:40:81:20:c4:0a:b0:13:0e:de:bf: 26:64:8e:4d:36:ae:48:8a:27:01:6b:c6:86:7f:36: 3a:5e:84:bf:c1:08:e9:db:59:cb:06:81:b1:56:b2: c4:92:99:36:ff:ef:ad:3c:e3:49:11:3f:1b:4b:2a: 02:73:48:27:ca:14:4e:f0:c3:05:20:15:c8:13:90: 93:35:3a:18:91:d0:08:e5:df:f7:aa:22:8b:32:7e: 86:46:a8:2f:45:8c:d3:c6:2e:59:49:45:4c:d3:b3: ae:01:a9:f4:3a:03:4f:f0:0e:65:b9:67:a3:4a:89: d2:7b:47:7c:4a:15:58:af:13:12:3a:ab:f0:2e:e7: c5:0d:1c:40:f1:fe:f9:26:fb:ff:ab:53:64:16:30: 2b:6b:ac:f0:56:0e:57:aa:0e:15:36:21:73:60:ff: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:71:F6:34:16:E7:DD:0D:CB:B5:43:EB:16:85:3D:6F:2D:DE:17:FD X509v3 Authority Key Identifier: keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/vnH2NBbn3Q3LtUPrFoU9by3eF_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.132.0/24 Signature Algorithm: sha256WithRSAEncryption 09:6d:f4:03:73:c4:5a:24:32:4d:df:ca:41:b4:94:6e:64:9a: e1:cf:1f:1a:25:c5:c6:fa:8c:67:47:64:08:71:9a:e9:bb:4b: 99:32:04:82:74:4c:2f:ed:75:24:02:bb:78:62:d7:55:bb:b4: 35:f9:78:fe:36:c3:b0:0e:02:ee:5d:0b:9a:3e:d5:11:f9:43: 44:eb:2e:23:23:c6:ca:09:97:d7:87:22:5d:0d:1c:45:ff:50: 41:2b:63:f7:3f:c6:af:60:19:d4:9c:c5:d7:2f:27:5c:30:23: c6:60:86:12:a5:dd:d6:e7:0b:42:93:bf:e1:e4:a5:e5:27:d0: a5:48:36:86:79:d4:c7:2f:92:1a:24:cd:1a:97:3c:09:16:47: 40:7c:25:38:f6:19:f3:b2:15:68:8b:15:ca:7b:4f:17:9f:2d: f3:4d:a8:72:4a:34:d1:08:fd:bf:72:53:1c:b7:90:25:89:e6: 03:33:5c:2f:9e:31:e1:94:a3:c0:bd:df:35:44:a9:0b:23:33: 52:3c:ab:f3:ee:d8:1e:09:48:32:8e:83:53:5c:45:b2:bf:d3: da:14:62:6e:49:b3:52:91:59:8a:0d:12:39:40:d4:73:42:ef: 01:a5:4b:de:93:af:7c:62:d1:c7:b1:c0:59:30:7f:f9:a7:b9: a7:1a:7f:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Q2x18Z3uVAZEJCACohlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTQ5ZDJiZDY0ZWUxN2VmNWQ0N2Y5NjNlM2Q1ZDdhOTgy YjEyYWYwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTcxZjYzNDE2ZTdkZDBkY2JiNTQzZWIxNjg1M2Q2ZjJkZGUxN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pDXHRnVpvns6t7JHHvkZIxdTa7X an1KyRdG6sYr2m8VTNp+Ga+zGClZvf5Xd+P4hDVJyQAXA0clqTzrVpyrkw1+p+N3 9+B7u9c2G0yPoj0bGEgRzxLgpxSjPQw8eECBIMQKsBMO3r8mZI5NNq5IiicBa8aG fzY6XoS/wQjp21nLBoGxVrLEkpk2/++tPONJET8bSyoCc0gnyhRO8MMFIBXIE5CT NToYkdAI5d/3qiKLMn6GRqgvRYzTxi5ZSUVM07OuAan0OgNP8A5luWejSonSe0d8 ShVYrxMSOqvwLufFDRxA8f75Jvv/q1NkFjAra6zwVg5Xqg4VNiFzYP/uZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5x9jQW590Ny7VD6xaFPW8t3hf9MB8GA1UdIwQY MBaAFGyUnSvWTuF+9dR/lj49XXqYKxKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mODY1MWItYzEyYi00MmQ0LWFmZGEt MjMyZjQ3MDM0OTFmLzEvdm5IMk5CYm4zUTNMdFVQckZvVTlieTNlRl8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mODY1MWItYzEyYi00MmQ0LWFmZGEtMjMyZjQ3MDM0OTFm LzEvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW6EMA0G CSqGSIb3DQEBCwUAA4IBAQAJbfQDc8RaJDJN38pBtJRuZJrhzx8aJcXG+oxnR2QI cZrpu0uZMgSCdEwv7XUkArt4YtdVu7Q1+Xj+NsOwDgLuXQuaPtUR+UNE6y4jI8bK CZfXhyJdDRxF/1BBK2P3P8avYBnUnMXXLydcMCPGYIYSpd3W5wtCk7/h5KXlJ9Cl SDaGedTHL5IaJM0alzwJFkdAfCU49hnzshVoixXKe08Xny3zTahySjTRCP2/clMc t5AlieYDM1wvnjHhlKPAvd81RKkLIzNSPKvz7tgeCUgyjoNTXEWyv9PaFGJuSbNS kVmKDRI5QNRzQu8BpUvek698YtHHscBZMH/5p7mnGn/G -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:11 2026 by rpki-client