This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/vRd4lkbID2XP7GTV89IAJrPGpPk.roa File: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (raw, json) Hash identifier: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I= Subject key identifier: BD:17:78:96:46:C8:0F:65:CF:EC:64:D5:F3:D2:00:26:B3:C6:A4:F9 Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Certificate serial: 019B7CECE96E79414413E1E3961F894A8DC9 Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/vRd4lkbID2XP7GTV89IAJrPGpPk.roa Signing time: Fri 02 Jan 2026 04:17:39 +0000 ROA not before: Fri 02 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 192.41.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e9:6e:79:41:44:13:e1:e3:96:1f:89:4a:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd17789646c80f65cfec64d5f3d20026b3c6a4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:f4:5c:14:e4:bc:8d:d7:ac:6d:73:46:e3: e3:81:71:13:1d:1c:bc:65:d2:7c:3c:03:c8:65:8f: f8:da:9f:f4:87:b6:8b:6c:50:25:22:e3:c0:ef:88: 20:11:f4:b5:45:06:3f:49:be:2a:cb:e6:09:5b:75: 39:b8:5d:d5:b0:e0:1e:f4:47:78:c1:0d:5c:62:da: d4:45:ca:ff:39:6f:ce:ff:f8:46:16:3a:e6:b8:ee: 82:a8:ad:3f:b1:0b:be:e7:14:6e:37:6d:85:16:c2: d4:35:46:79:9c:d0:34:e9:db:77:84:df:69:1f:35: 56:f9:ca:df:2a:f1:bf:fc:50:5b:e1:08:d5:43:52: 59:3f:3c:11:20:36:fa:b4:96:b9:9c:f1:e0:fb:f4: aa:4b:1b:d1:84:47:ff:53:56:51:26:69:e1:d0:3e: 79:e0:7c:87:9c:47:fe:77:9d:48:d1:9c:e2:c4:12: 75:cb:34:e7:f7:9f:f3:76:d1:4c:75:a7:ef:b7:d0: d5:dc:52:c7:b0:fa:83:21:7b:22:ad:42:3c:17:10: 76:9d:70:32:39:30:c8:d1:e9:33:ca:6d:d6:6d:f8: d7:86:d0:b6:16:64:f0:a6:9d:54:82:13:b9:ba:37: 7a:3d:42:ec:92:c5:49:41:6b:9a:c4:2d:67:ba:de: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:17:78:96:46:C8:0F:65:CF:EC:64:D5:F3:D2:00:26:B3:C6:A4:F9 X509v3 Authority Key Identifier: keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/vRd4lkbID2XP7GTV89IAJrPGpPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.41.218.0/24 Signature Algorithm: sha256WithRSAEncryption 14:cb:1b:43:4e:b1:22:cf:21:ca:04:71:5f:9b:1c:bb:59:6f: 78:25:98:6d:f9:5f:31:3a:11:32:6d:8b:c8:10:20:70:4d:ec: 88:95:df:90:dd:f6:8f:ce:9d:e7:50:a7:6c:58:6a:bd:2a:66: 1d:9f:52:44:7d:68:31:50:f8:12:7d:5f:d4:39:9f:e9:3b:1d: c8:b2:27:3b:0b:e8:27:2a:f4:87:89:4b:8f:b2:8f:78:ff:74: 7e:63:4e:2f:d2:dc:4b:3b:e1:df:ff:2b:ac:aa:c9:89:71:15: 29:9b:4b:ab:cf:78:2f:4c:80:65:d3:d6:3f:8d:fe:7e:e6:6e: 70:9c:c2:fc:ac:b2:7c:9d:e5:1b:75:3c:c6:51:10:0e:9a:70: 81:3a:4b:52:ad:84:f4:20:98:9b:5f:91:ef:fd:24:3d:ef:ef: 5c:4b:0a:ed:95:1a:4a:e8:ba:f4:54:88:d0:6c:3b:df:aa:52: 54:7d:2c:ca:51:75:90:e1:3b:9d:22:31:70:47:bb:e5:95:92: 00:48:b0:f9:aa:21:7c:1c:b0:93:ed:c7:9d:0c:39:9c:25:20: 8d:95:5d:04:48:03:8a:5c:87:c4:27:3a:99:5b:a6:89:90:f8: 1c:0a:3d:ce:a6:7f:28:87:c8:05:ad:ee:55:f5:6d:0b:f8:95: a3:34:f5:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OlueUFEE+Hjlh+JSo3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy NWQ5MWEwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDE3Nzg5NjQ2YzgwZjY1Y2ZlYzY0ZDVmM2QyMDAyNmIzYzZhNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/D0XBTkvI3XrG1zRuPjgXETHRy8 ZdJ8PAPIZY/42p/0h7aLbFAlIuPA74ggEfS1RQY/Sb4qy+YJW3U5uF3VsOAe9Ed4 wQ1cYtrURcr/OW/O//hGFjrmuO6CqK0/sQu+5xRuN22FFsLUNUZ5nNA06dt3hN9p HzVW+crfKvG//FBb4QjVQ1JZPzwRIDb6tJa5nPHg+/SqSxvRhEf/U1ZRJmnh0D55 4HyHnEf+d51I0ZzixBJ1yzTn95/zdtFMdafvt9DV3FLHsPqDIXsirUI8FxB2nXAy OTDI0ekzym3WbfjXhtC2FmTwpp1UghO5ujd6PULsksVJQWuaxC1nut6wWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL0XeJZGyA9lz+xk1fPSACazxqT5MB8GA1UdIwQY MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt ZTcxYzMxN2EzZmE4LzEvdlJkNGxrYklEMlhQN0dUVjg5SUFKclBHcFBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4 LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnaMA0G CSqGSIb3DQEBCwUAA4IBAQAUyxtDTrEizyHKBHFfmxy7WW94JZht+V8xOhEybYvI ECBwTeyIld+Q3faPzp3nUKdsWGq9KmYdn1JEfWgxUPgSfV/UOZ/pOx3Isic7C+gn KvSHiUuPso94/3R+Y04v0txLO+Hf/yusqsmJcRUpm0urz3gvTIBl09Y/jf5+5m5w nML8rLJ8neUbdTzGURAOmnCBOktSrYT0IJibX5Hv/SQ97+9cSwrtlRpK6Lr0VIjQ bDvfqlJUfSzKUXWQ4TudIjFwR7vllZIASLD5qiF8HLCT7cedDDmcJSCNlV0ESAOK XIfEJzqZW6aJkPgcCj3Opn8oh8gFre5V9W0L+JWjNPXW -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:31 2026 by rpki-client