This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/rvf0hbFsWVEpBXykcpuVRP8DxR4.roa File: rvf0hbFsWVEpBXykcpuVRP8DxR4.roa (raw, json) Hash identifier: GCo9KByc6i3SxxBxNly9glVqB6hv/1pXfge2kLwR0es= Subject key identifier: AE:F7:F4:85:B1:6C:59:51:29:05:7C:A4:72:9B:95:44:FF:03:C5:1E Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d Certificate serial: 019B7E38F88967C3210F95EDE85C6116A834 Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/rvf0hbFsWVEpBXykcpuVRP8DxR4.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213627 IP address blocks: 195.8.202.0/24 maxlen: 24 2a0e:db40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f8:89:67:c3:21:0f:95:ed:e8:5c:61:16:a8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aef7f485b16c595129057ca4729b9544ff03c51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:84:46:a9:b4:2d:85:0f:41:0f:a5:44:94: c8:90:9e:08:fb:01:aa:58:5d:a1:ff:61:3f:90:92: a1:d3:72:69:67:1f:4e:05:ce:b7:42:c6:cd:ce:24: b6:b9:1e:cb:35:30:44:c8:1e:aa:9e:42:9a:a1:69: ec:fb:d7:d5:22:bf:0f:be:8e:d1:b0:50:2a:3d:7a: 1a:7e:85:95:9c:2d:42:5b:dc:13:7e:e8:fb:46:5c: 38:3d:68:a8:54:d6:7b:71:fc:c6:39:71:ec:a7:cb: 39:72:37:58:2b:79:ce:5e:9c:5f:ed:b7:39:f0:6a: 7b:f3:a3:74:2e:1f:59:12:92:1a:e6:65:0c:d3:33: 0b:1e:93:c6:7b:a2:ef:9a:3d:d8:55:4b:d0:8e:b2: c7:84:08:04:a5:51:7c:ba:54:2c:9e:c6:cb:1b:8d: 7d:3d:fa:ef:c5:89:13:1f:d3:b0:bd:17:89:e6:c6: 95:c9:7c:bb:2e:34:90:1b:44:02:c9:69:d9:f9:67: 4b:ca:53:52:50:e9:e6:d0:68:25:68:c7:0a:a4:02: 06:40:30:ea:be:7b:ec:0b:08:4d:78:97:ea:98:cd: e3:b2:88:3d:5c:4f:84:06:67:76:17:7a:9d:c3:46: fc:ae:8f:c0:27:06:e4:a5:88:a9:2e:3f:fe:3e:12: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:F4:85:B1:6C:59:51:29:05:7C:A4:72:9B:95:44:FF:03:C5:1E X509v3 Authority Key Identifier: keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/rvf0hbFsWVEpBXykcpuVRP8DxR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.202.0/24 IPv6: 2a0e:db40::/29 Signature Algorithm: sha256WithRSAEncryption b2:33:43:9b:a3:11:fb:03:08:9d:59:44:b0:c8:c8:66:a7:8d: 0a:7b:6f:e9:88:7d:50:c3:7f:21:3e:04:1a:4a:61:b7:f5:a7: 3e:96:38:20:f7:84:47:82:da:8d:c6:1a:f8:ae:36:90:96:f8: 36:15:f0:e1:01:1e:2f:df:34:f0:fb:42:c1:98:29:2d:f3:d5: a1:07:9f:e6:64:38:5a:a1:94:6d:50:95:c5:00:64:0f:3f:17: 6b:b2:91:79:e3:13:84:68:87:0b:a6:e0:eb:45:6a:52:c6:fd: be:47:b7:99:78:ce:75:82:38:47:6f:b9:ce:21:d2:af:33:fe: 81:d9:47:3c:ac:41:af:1a:dc:ee:3c:07:76:3a:21:22:17:cc: 5b:51:7d:64:be:82:07:c2:03:4b:70:b9:38:d9:45:0a:2d:46: d6:c8:6c:e3:d0:7a:dc:e6:cd:fe:da:a7:91:a1:1c:68:01:5e: 8c:b2:70:4f:98:9f:0d:d2:c2:57:cf:7d:ce:43:c1:30:6c:c5: a2:c9:b2:a4:90:e6:d0:da:f9:93:f5:6c:d7:39:7b:5a:fd:86: 06:73:b4:2a:dd:ed:9c:ce:56:c5:a0:7f:13:0f:4a:d2:7f:68: 94:3d:01:05:f0:11:06:dd:1b:8a:f3:fe:38:be:0d:48:fd:09: 3f:15:b0:9b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OPiJZ8MhD5Xt6FxhFqg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYzIzYjBlNzgyMGJjM2VjZDRmODcwOGU3Yjk5MGVkZDY5 MjBkNWQwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWY3ZjQ4NWIxNmM1OTUxMjkwNTdjYTQ3MjliOTU0NGZmMDNjNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+OERqm0LYUPQQ+lRJTIkJ4I+wGq WF2h/2E/kJKh03JpZx9OBc63QsbNziS2uR7LNTBEyB6qnkKaoWns+9fVIr8Pvo7R sFAqPXoafoWVnC1CW9wTfuj7Rlw4PWioVNZ7cfzGOXHsp8s5cjdYK3nOXpxf7bc5 8Gp786N0Lh9ZEpIa5mUM0zMLHpPGe6Lvmj3YVUvQjrLHhAgEpVF8ulQsnsbLG419 PfrvxYkTH9OwvReJ5saVyXy7LjSQG0QCyWnZ+WdLylNSUOnm0GglaMcKpAIGQDDq vnvsCwhNeJfqmM3jsog9XE+EBmd2F3qdw0b8ro/AJwbkpYipLj/+PhKt2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK739IWxbFlRKQV8pHKblUT/A8UeMB8GA1UdIwQY MBaAFO7COw54ILw+zU+HCOe5kO3Wkg1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWFhNDgtM2VkNi00YjcyLWFhNzYt OGNlYmM1ZDE2NDg5LzEvcnZmMGhiRnNXVkVwQlh5a2NwdVZSUDhEeFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNWFhNDgtM2VkNi00YjcyLWFhNzYtOGNlYmM1ZDE2NDg5 LzEvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwwjKMA0E AgACMAcDBQMqDttAMA0GCSqGSIb3DQEBCwUAA4IBAQCyM0OboxH7AwidWUSwyMhm p40Ke2/piH1Qw38hPgQaSmG39ac+ljgg94RHgtqNxhr4rjaQlvg2FfDhAR4v3zTw +0LBmCkt89WhB5/mZDhaoZRtUJXFAGQPPxdrspF54xOEaIcLpuDrRWpSxv2+R7eZ eM51gjhHb7nOIdKvM/6B2Uc8rEGvGtzuPAd2OiEiF8xbUX1kvoIHwgNLcLk42UUK LUbWyGzj0Hrc5s3+2qeRoRxoAV6MsnBPmJ8N0sJXz33OQ8EwbMWiybKkkObQ2vmT 9WzXOXta/YYGc7Qq3e2czlbFoH8TD0rSf2iUPQEF8BEG3RuK8/44vg1I/Qk/FbCb -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:04 2026 by rpki-client