This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/vbJFubKoe57vVKHqUA-HZghNpIw.roa File: vbJFubKoe57vVKHqUA-HZghNpIw.roa (raw, json) Hash identifier: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04= Subject key identifier: BD:B2:45:B9:B2:A8:7B:9E:EF:54:A1:EA:50:0F:87:66:08:4D:A4:8C Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Certificate serial: 019B7A5ABC458AAD7EACBD8872D3663F4A22 Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/vbJFubKoe57vVKHqUA-HZghNpIw.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 109.71.240.0/24 maxlen: 24 109.71.241.0/24 maxlen: 24 109.71.244.0/24 maxlen: 24 109.71.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bc:45:8a:ad:7e:ac:bd:88:72:d3:66:3f:4a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdb245b9b2a87b9eef54a1ea500f8766084da48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:2c:9a:78:ff:69:4a:15:15:2e:af:bf:c9: af:1d:c1:b8:e9:63:5a:08:d2:cd:06:99:f4:2a:d7: 8b:c0:a8:34:d3:2d:cf:cd:7a:5e:33:bc:6a:a5:b4: 33:08:5b:f5:4f:2b:af:cb:e0:9d:4b:f1:d2:e7:aa: ac:a3:d6:39:87:9e:83:51:dd:6f:20:6a:0c:00:e0: 68:e2:dc:34:48:c0:72:48:93:f6:fe:b5:05:26:1c: 95:8d:ea:d2:84:e9:15:66:f7:b1:96:72:ed:9a:82: f9:25:59:1f:b1:03:57:f1:c6:d2:7a:ca:45:e1:3b: 59:c0:63:86:fc:ca:83:5c:9d:fd:eb:cb:fb:a6:03: 6b:61:63:eb:ab:d8:78:f5:a5:44:7c:09:28:7a:bc: 8a:3f:e0:19:aa:49:2d:23:16:17:fa:9c:64:fc:17: f2:55:bb:f7:8e:7c:ff:4b:1e:71:bc:92:a8:80:aa: 11:0f:cb:14:d8:7c:2c:b7:6b:5d:b6:b8:bc:fe:85: 9c:9d:82:a4:5d:e5:3e:36:06:ff:6f:f8:55:a3:de: 6b:f6:1a:c7:91:23:52:83:38:63:b9:5a:c7:38:b5: 06:31:f2:f5:76:fc:15:56:07:40:97:45:5b:e2:57: 95:64:42:d1:e5:a1:27:a2:20:12:a2:84:e5:24:f1: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B2:45:B9:B2:A8:7B:9E:EF:54:A1:EA:50:0F:87:66:08:4D:A4:8C X509v3 Authority Key Identifier: keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/vbJFubKoe57vVKHqUA-HZghNpIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.240.0/23 109.71.244.0/24 109.71.246.0/24 Signature Algorithm: sha256WithRSAEncryption 08:0f:5f:b5:54:61:55:81:85:36:fa:c4:ad:e7:ee:2b:b1:1f: 46:1d:fa:a3:d4:17:42:42:1f:69:79:1a:23:ad:7a:16:5e:5e: 2c:e1:0c:43:b0:d1:ad:bf:10:4c:ba:ef:97:27:2e:32:71:c2: 87:80:88:2e:7f:e1:b5:f7:ee:04:40:46:96:f5:6f:6e:0f:4a: e1:5f:9b:57:a1:69:fe:ed:15:2d:31:5e:90:51:41:3b:6c:a6: 1a:22:f7:49:36:cd:b0:1b:66:59:b2:e4:06:4f:ae:17:e8:cf: 85:43:49:f1:d6:7e:d0:8b:8e:04:04:aa:d9:74:23:58:09:a5: 68:c4:f8:de:62:c8:97:e5:01:21:49:b1:cd:55:ef:96:f7:15: 8f:5e:59:32:3d:31:6b:1e:4d:99:fb:f1:f7:19:c2:e2:44:b9: 77:cd:80:95:3d:1d:bc:c9:17:3b:90:f1:3f:d2:3d:aa:86:a2: 73:c8:a2:1a:57:8d:f4:59:bb:88:20:0c:3e:cd:87:7b:78:56: 1d:ed:50:32:58:18:85:98:94:ff:f0:d1:9f:69:68:d8:81:e4: a7:f7:0d:13:bf:34:81:ed:f4:ec:cb:6d:c1:e2:b7:d7:f8:af: 67:55:86:90:80:4f:10:db:2b:0c:b4:7d:0f:a3:15:3b:ad:e1: 0e:69:38:59 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WrxFiq1+rL2IctNmP0oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw YWNjNDEwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGIyNDViOWIyYTg3YjllZWY1NGExZWE1MDBmODc2NjA4NGRhNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8ssmnj/aUoVFS6vv8mvHcG46WNa CNLNBpn0KteLwKg00y3PzXpeM7xqpbQzCFv1Tyuvy+CdS/HS56qso9Y5h56DUd1v IGoMAOBo4tw0SMBySJP2/rUFJhyVjerShOkVZvexlnLtmoL5JVkfsQNX8cbSespF 4TtZwGOG/MqDXJ3968v7pgNrYWPrq9h49aVEfAkoeryKP+AZqkktIxYX+pxk/Bfy Vbv3jnz/Sx5xvJKogKoRD8sU2Hwst2tdtri8/oWcnYKkXeU+Ngb/b/hVo95r9hrH kSNSgzhjuVrHOLUGMfL1dvwVVgdAl0Vb4leVZELR5aEnoiASooTlJPH6MwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL2yRbmyqHue71Sh6lAPh2YITaSMMB8GA1UdIwQY MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt M2JlOTk1ZDJiYmRhLzEvdmJKRnViS29lNTd2VktIcVVBLUhaZ2hOcEl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbUfwAwQA bUf0AwQAbUf2MA0GCSqGSIb3DQEBCwUAA4IBAQAID1+1VGFVgYU2+sSt5+4rsR9G Hfqj1BdCQh9peRojrXoWXl4s4QxDsNGtvxBMuu+XJy4yccKHgIguf+G19+4EQEaW 9W9uD0rhX5tXoWn+7RUtMV6QUUE7bKYaIvdJNs2wG2ZZsuQGT64X6M+FQ0nx1n7Q i44EBKrZdCNYCaVoxPjeYsiX5QEhSbHNVe+W9xWPXlkyPTFrHk2Z+/H3GcLiRLl3 zYCVPR28yRc7kPE/0j2qhqJzyKIaV430WbuIIAw+zYd7eFYd7VAyWBiFmJT/8NGf aWjYgeSn9w0TvzSB7fTsy23B4rfX+K9nVYaQgE8Q2ysMtH0PoxU7reEOaThZ -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:50 2026 by rpki-client