This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/Rv-jwelP5qAOVsTY2O3lL6StCzI.roa File: Rv-jwelP5qAOVsTY2O3lL6StCzI.roa (raw, json) Hash identifier: 3p4Tm23LFUYRqfwgQDQDi43EjAXLyoXTDot/c2J7+7Y= Subject key identifier: 46:FF:A3:C1:E9:4F:E6:A0:0E:56:C4:D8:D8:ED:E5:2F:A4:AD:0B:32 Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401 Certificate serial: 019B7E38C16874D4F664BF090913B06B695B Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/Rv-jwelP5qAOVsTY2O3lL6StCzI.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203676 IP address blocks: 185.126.172.0/22 maxlen: 24 2a06:ca40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c1:68:74:d4:f6:64:bf:09:09:13:b0:6b:69:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46ffa3c1e94fe6a00e56c4d8d8ede52fa4ad0b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:9d:5f:65:88:7d:da:56:cf:b8:6e:0f:ef: 17:1d:78:12:35:8a:23:08:55:c2:8e:f2:01:82:e6: cf:93:a0:0c:ba:43:d1:fc:fb:ee:28:32:5c:dd:2d: 62:58:1b:7d:0b:4c:42:f3:dd:6e:4d:ee:6e:59:f4: dd:a9:03:7a:07:6b:46:71:b0:38:eb:15:0c:fd:98: 3f:75:64:28:19:f4:dc:aa:41:76:01:45:cd:69:9f: 18:1d:52:20:ab:51:64:31:56:8a:2e:d5:59:b4:3e: 1a:2d:40:50:83:5d:07:be:44:e4:99:6e:f5:45:d0: ee:ff:ed:6c:95:d8:10:e3:ee:05:b4:82:e3:fe:2f: 31:80:15:5e:9d:7d:2d:0c:3b:78:63:76:58:7f:d3: 00:81:36:5c:97:89:18:b9:1b:fc:e8:c7:19:08:df: 18:7e:cc:b1:fc:fc:32:4e:79:7b:19:25:f3:1b:91: 7f:f1:5b:da:c3:c6:dd:54:8b:fb:8c:2f:8d:8c:7e: 34:d9:81:d8:84:8d:eb:1a:5d:f9:f4:5c:cf:ad:d5: 8f:8e:2e:6b:66:32:b4:a2:40:d8:5e:ea:30:c1:1b: 39:32:1f:a1:e0:a3:25:73:6a:50:35:42:7f:6a:2d: 45:80:c2:47:a7:27:c6:d5:f9:02:42:65:bf:09:a2: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FF:A3:C1:E9:4F:E6:A0:0E:56:C4:D8:D8:ED:E5:2F:A4:AD:0B:32 X509v3 Authority Key Identifier: keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/Rv-jwelP5qAOVsTY2O3lL6StCzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.172.0/22 IPv6: 2a06:ca40::/29 Signature Algorithm: sha256WithRSAEncryption 2e:38:b5:d9:10:d3:46:65:1d:fb:e4:ca:ab:3e:72:cc:3f:21: 65:2d:d5:f5:28:d1:69:ee:29:5d:ed:09:55:ae:01:81:8d:0f: 3b:61:03:b9:6a:77:d5:f1:79:69:e0:7e:8f:4e:84:85:8c:fb: 15:fc:13:72:16:9e:9a:55:19:af:6d:f2:98:7b:8d:11:89:7f: cb:ea:18:32:13:45:95:87:25:7d:7b:22:77:5c:05:ba:77:5b: 09:cf:8e:9e:64:6d:25:97:ed:63:de:42:f7:ac:66:b2:f1:15: 88:e9:c6:9b:fa:5b:c8:49:73:84:93:73:f1:a0:1d:e5:43:eb: 46:6d:54:f3:09:1c:bc:de:fa:82:2e:df:21:98:6a:9e:96:08: 9a:b6:ef:69:97:cb:9f:84:8b:39:16:ae:b6:02:0c:50:75:99: 1c:cf:65:4f:1a:e8:f1:d4:7e:bd:75:10:73:67:1a:0f:72:ee: eb:6e:68:1e:d7:45:ec:eb:ed:25:80:62:97:b2:b9:66:ce:74: 4b:2c:2d:f7:53:46:da:40:87:24:73:c9:f0:95:41:2b:05:70: 43:fe:38:8d:59:12:9b:6c:4c:c8:2d:ca:3b:e2:e7:3f:37:ed: a1:9f:73:65:f7:05:95:93:71:7e:5d:27:fe:e1:00:d2:9a:46: a6:61:42:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OMFodNT2ZL8JCROwa2lbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NDdhMzZkNzc2OGE3YjMwYTRlZWNiYjY5NjRjOGMyMzdk NzQ0MDEwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmZmYTNjMWU5NGZlNmEwMGU1NmM0ZDhkOGVkZTUyZmE0YWQwYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzWdX2WIfdpWz7huD+8XHXgSNYoj CFXCjvIBgubPk6AMukPR/PvuKDJc3S1iWBt9C0xC891uTe5uWfTdqQN6B2tGcbA4 6xUM/Zg/dWQoGfTcqkF2AUXNaZ8YHVIgq1FkMVaKLtVZtD4aLUBQg10HvkTkmW71 RdDu/+1sldgQ4+4FtILj/i8xgBVenX0tDDt4Y3ZYf9MAgTZcl4kYuRv86McZCN8Y fsyx/PwyTnl7GSXzG5F/8Vvaw8bdVIv7jC+NjH402YHYhI3rGl359FzPrdWPji5r ZjK0okDYXuowwRs5Mh+h4KMlc2pQNUJ/ai1FgMJHpyfG1fkCQmW/CaKx3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEb/o8HpT+agDlbE2Njt5S+krQsyMB8GA1UdIwQY MBaAFAdHo213aKezCk7su2lkyMI310QBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEt YWFiYWRkMDcxOWJhLzEvUnYtandlbFA1cUFPVnNUWTJPM2xMNlN0Q3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEtYWFiYWRkMDcxOWJh LzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX6sMA0E AgACMAcDBQMqBspAMA0GCSqGSIb3DQEBCwUAA4IBAQAuOLXZENNGZR375MqrPnLM PyFlLdX1KNFp7ild7QlVrgGBjQ87YQO5anfV8Xlp4H6PToSFjPsV/BNyFp6aVRmv bfKYe40RiX/L6hgyE0WVhyV9eyJ3XAW6d1sJz46eZG0ll+1j3kL3rGay8RWI6cab +lvISXOEk3PxoB3lQ+tGbVTzCRy83vqCLt8hmGqelgiatu9pl8ufhIs5Fq62AgxQ dZkcz2VPGujx1H69dRBzZxoPcu7rbmge10Xs6+0lgGKXsrlmznRLLC33U0baQIck c8nwlUErBXBD/jiNWRKbbEzILco74uc/N+2hn3Nl9wWVk3F+XSf+4QDSmkamYUK4 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:57 2026 by rpki-client