This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/vPfcpvhTzwgHZxkn9QHqISGa93s.roa File: vPfcpvhTzwgHZxkn9QHqISGa93s.roa (raw, json) Hash identifier: tACs5TPIEpB3nwqH0vyYX3d8zy0v3YaCIyLPccgrw84= Subject key identifier: BC:F7:DC:A6:F8:53:CF:08:07:67:19:27:F5:01:EA:21:21:9A:F7:7B Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73 Certificate serial: 019B7C12A9E56043487FE98F0244499997A7 Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/vPfcpvhTzwgHZxkn9QHqISGa93s.roa Signing time: Fri 02 Jan 2026 00:19:16 +0000 ROA not before: Fri 02 Jan 2026 00:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21459 IP address blocks: 185.203.60.0/22 maxlen: 24 217.68.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a9:e5:60:43:48:7f:e9:8f:02:44:49:99:97:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcf7dca6f853cf0807671927f501ea21219af77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:70:6f:e1:a9:1a:19:9b:0b:8f:4e:21:fd: 65:62:7c:5f:18:53:37:54:a4:9d:6c:e5:6f:ec:ac: c0:26:f6:a5:56:e7:20:4c:3b:c9:38:82:7a:87:3f: 2a:28:e3:77:72:f1:d0:b0:2b:c5:bd:81:92:c5:4b: d8:59:f2:7e:60:e1:9b:41:a6:c5:8e:42:cd:bd:05: 95:bc:d8:d6:ba:2f:83:36:09:1e:26:f7:8b:fb:28: b3:73:6d:d4:d6:72:de:69:59:40:34:4b:20:9f:9a: 7f:da:32:35:7b:32:c8:48:e4:a9:fb:38:35:61:37: f2:04:02:52:5c:32:c6:af:8a:11:65:7b:f7:67:14: 77:ae:a5:24:e3:5f:42:b6:f3:74:14:f5:ae:b5:32: 64:5e:54:db:67:d2:e3:a0:b6:fc:19:87:29:3f:d3: dc:57:09:b0:cb:a3:ad:0c:54:c1:df:6f:8f:e2:1a: 1f:d9:32:b1:f2:ae:32:ea:b1:6d:37:69:c1:62:37: 5e:a0:0d:71:4b:f1:b7:60:15:ce:d8:21:ee:2e:ab: 6b:37:b3:7d:c5:57:94:94:a0:3b:6d:ca:c4:83:5e: 09:6b:6c:1e:42:a1:da:1a:f5:cf:19:cb:69:70:fe: 50:7f:ae:2d:e2:2f:8b:75:80:20:01:22:72:c3:5a: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:DC:A6:F8:53:CF:08:07:67:19:27:F5:01:EA:21:21:9A:F7:7B X509v3 Authority Key Identifier: keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/vPfcpvhTzwgHZxkn9QHqISGa93s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.60.0/22 217.68.64.0/20 Signature Algorithm: sha256WithRSAEncryption 25:c8:3f:2c:19:ee:09:5e:27:21:23:2c:42:bc:d8:8f:8e:de: 4c:8b:e7:da:23:02:29:16:df:34:c0:af:e1:fe:cc:a8:ea:f5: f0:ac:e2:e2:5d:55:7c:3f:bc:10:2b:cc:1c:99:cc:85:28:77: f8:f6:6b:1c:27:4d:7f:6d:eb:e0:6c:07:5d:e9:7d:42:05:06: 15:7a:28:2e:0c:7d:97:48:02:ce:f0:01:5e:30:46:86:e8:d2: a8:45:a1:c5:65:bd:d9:b4:22:f1:2d:3a:db:52:42:4f:2e:cb: 08:f3:41:01:fc:43:da:d6:ed:2f:cd:97:fd:bf:a0:c3:cb:15: ba:27:78:38:1d:09:13:8a:aa:65:3b:28:14:58:94:c1:34:a0: 25:a4:9f:ad:dd:e4:14:0e:09:81:de:37:f6:c9:4f:42:a6:48: 5f:14:a5:ab:5a:1f:cb:ba:95:52:86:3b:d6:9e:04:c9:cf:9d: eb:87:fa:bf:12:7e:ef:6a:3f:c1:41:cd:a3:22:7c:fe:63:86: eb:b9:bb:1a:e2:d2:5b:38:bf:00:d8:b6:c0:34:6e:e8:52:5e: 46:d8:4a:de:d9:4c:03:bd:91:42:6a:4f:42:a7:c2:ff:bb:95: 39:9c:15:e2:8d:5d:a8:28:e9:b7:d3:39:4f:b9:2b:af:03:e5: 2e:6b:bb:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EqnlYENIf+mPAkRJmZenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTA0ZWUwNGIxMjgyM2U4NTNmZjI0M2QzNjU1MWU0Y2U2 ODNhNzMwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2Y3ZGNhNmY4NTNjZjA4MDc2NzE5MjdmNTAxZWEyMTIxOWFmNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRNwb+GpGhmbC49OIf1lYnxfGFM3 VKSdbOVv7KzAJvalVucgTDvJOIJ6hz8qKON3cvHQsCvFvYGSxUvYWfJ+YOGbQabF jkLNvQWVvNjWui+DNgkeJveL+yizc23U1nLeaVlANEsgn5p/2jI1ezLISOSp+zg1 YTfyBAJSXDLGr4oRZXv3ZxR3rqUk419CtvN0FPWutTJkXlTbZ9LjoLb8GYcpP9Pc Vwmwy6OtDFTB32+P4hof2TKx8q4y6rFtN2nBYjdeoA1xS/G3YBXO2CHuLqtrN7N9 xVeUlKA7bcrEg14Ja2weQqHaGvXPGctpcP5Qf64t4i+LdYAgASJyw1p3OwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLz33Kb4U88IB2cZJ/UB6iEhmvd7MB8GA1UdIwQY MBaAFBagTuBLEoI+hT/yQ9NlUeTOaDpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYt NTkwZmI5NDlkMTA0LzEvdlBmY3B2aFR6d2dIWnhrbjlRSHFJU0dhOTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYtNTkwZmI5NDlkMTA0 LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCucs8AwQE 2URAMA0GCSqGSIb3DQEBCwUAA4IBAQAlyD8sGe4JXichIyxCvNiPjt5Mi+faIwIp Ft80wK/h/syo6vXwrOLiXVV8P7wQK8wcmcyFKHf49mscJ01/bevgbAdd6X1CBQYV eiguDH2XSALO8AFeMEaG6NKoRaHFZb3ZtCLxLTrbUkJPLssI80EB/EPa1u0vzZf9 v6DDyxW6J3g4HQkTiqplOygUWJTBNKAlpJ+t3eQUDgmB3jf2yU9CpkhfFKWrWh/L upVShjvWngTJz53rh/q/En7vaj/BQc2jInz+Y4brubsa4tJbOL8A2LbANG7oUl5G 2Ere2UwDvZFCak9Cp8L/u5U5nBXijV2oKOm30zlPuSuvA+Uua7s/ -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:12 2026 by rpki-client