This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa File: vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa (raw, json) Hash identifier: s2e/NrFq+wqQKph1EQxPVpjpr6FbDPVVUYvD7GykSEw= Subject key identifier: BD:D4:3C:5E:8A:FD:55:E8:6D:8A:FD:01:83:FF:5C:6B:AC:1D:D7:0F Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b Certificate serial: 019B7AC7AEB8F9E2D294B384920E048385A1 Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206308 IP address blocks: 185.37.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ae:b8:f9:e2:d2:94:b3:84:92:0e:04:83:85:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd43c5e8afd55e86d8afd0183ff5c6bac1dd70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:01:29:91:79:dc:8a:c2:8b:de:b6:2a:6d: 12:6d:fe:93:e8:34:07:97:e2:8f:42:29:93:da:6d: 76:55:fc:bc:9c:17:ec:ac:cd:a8:51:fc:69:55:52: 66:85:cb:99:96:ab:cf:90:4e:fe:ac:dd:63:15:d2: 30:e1:2d:f2:8b:01:01:9c:90:ff:5d:00:e5:59:5d: 31:e2:eb:0e:6d:82:bc:50:09:81:20:98:8a:b3:41: 88:14:97:f7:d6:a7:97:e0:4b:74:0a:ce:b3:68:07: cc:95:8e:a0:bf:bf:da:9c:6a:e2:5b:c8:bf:7b:b7: 52:3b:59:34:97:fc:bc:b8:fa:b4:24:31:e6:7b:ea: 7e:11:e2:58:11:4b:6e:7c:d0:4f:ab:d5:64:cb:b2: 4c:4d:ae:a4:1a:86:52:89:8a:cb:28:e9:e9:17:3e: 5e:36:45:2e:c6:32:10:9d:49:85:8e:df:76:1d:2d: 25:e8:09:5e:99:b6:eb:9e:83:47:b1:41:87:d4:18: a8:4e:65:4f:7c:e8:cb:8c:ac:37:45:4d:32:6f:9a: a1:c3:79:e6:65:7a:f5:a2:a0:4b:d9:a8:c2:13:bf: 19:0d:20:ed:2d:84:2d:f1:a9:cb:df:00:6c:63:b6: fe:31:35:82:01:7f:0a:71:48:7d:30:58:49:e6:64: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:3C:5E:8A:FD:55:E8:6D:8A:FD:01:83:FF:5C:6B:AC:1D:D7:0F X509v3 Authority Key Identifier: keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:bf:c7:62:01:f9:cd:55:32:1b:f6:dd:d1:e9:ff:d3:20:b2: 2e:f3:0e:d0:92:e3:22:25:84:e7:00:37:6a:d0:43:04:f7:30: 4f:86:da:cb:bd:f8:7e:4f:a6:ac:fa:ed:f9:1f:8f:ee:1a:b7: a5:41:e6:48:24:1b:89:53:42:f3:e8:8d:b7:f6:5c:5e:8b:17: 72:e2:9b:ce:5f:5c:13:97:a7:de:e2:20:e0:be:e2:2b:d9:70: c8:42:7d:b4:ee:a3:d3:d7:d0:2b:11:c9:da:db:b9:8e:1a:a4: 17:1e:d6:2e:0d:d3:de:90:57:af:5a:61:f8:4a:a8:d1:35:a3: 30:0e:d4:46:ee:32:f9:2e:6e:12:6c:87:13:96:88:c3:85:2a: d9:3b:d9:d6:92:02:40:91:5b:01:9a:3f:c6:34:3b:57:89:1c: d3:6f:09:3a:38:ac:b0:2a:13:cc:83:e4:4a:63:98:b7:ad:b3: 95:78:67:75:f4:d3:36:40:6b:be:17:36:d1:c1:a2:43:57:6f: 8e:02:5a:60:d9:9a:65:78:6c:ef:9a:42:29:bb:31:86:63:64: 1d:bd:e4:e7:a1:ce:cc:28:01:cd:08:e8:6e:97:d0:4e:a2:f3: c3:26:a8:67:2e:03:cc:88:be:a7:1d:1b:de:c4:da:e7:04:b9: ba:9e:db:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x664+eLSlLOEkg4Eg4WhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTAzNTZkYzBhNTIxODk1Y2U2MWY4NTQ5NWUwNmRhZjdh MTJiM2IwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQ0M2M1ZThhZmQ1NWU4NmQ4YWZkMDE4M2ZmNWM2YmFjMWRkNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4BKZF53IrCi962Km0Sbf6T6DQH l+KPQimT2m12Vfy8nBfsrM2oUfxpVVJmhcuZlqvPkE7+rN1jFdIw4S3yiwEBnJD/ XQDlWV0x4usObYK8UAmBIJiKs0GIFJf31qeX4Et0Cs6zaAfMlY6gv7/anGriW8i/ e7dSO1k0l/y8uPq0JDHme+p+EeJYEUtufNBPq9Vky7JMTa6kGoZSiYrLKOnpFz5e NkUuxjIQnUmFjt92HS0l6AlembbrnoNHsUGH1BioTmVPfOjLjKw3RU0yb5qhw3nm ZXr1oqBL2ajCE78ZDSDtLYQt8anL3wBsY7b+MTWCAX8KcUh9MFhJ5mQv+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3UPF6K/VXobYr9AYP/XGusHdcPMB8GA1UdIwQY MBaAFKUQNW3ApSGJXOYfhUleBtr3oSs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYt MDExODJmODQwNzg5LzEvdmRROFhvcjlWZWh0aXYwQmdfOWNhNndkMXc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zYzdjN2MtNDMyNi00MTg0LTgzNTYtMDExODJmODQwNzg5 LzEvcFJBMWJjQ2xJWWxjNWgtRlNWNEcydmVoS3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSUoMA0G CSqGSIb3DQEBCwUAA4IBAQBcv8diAfnNVTIb9t3R6f/TILIu8w7QkuMiJYTnADdq 0EME9zBPhtrLvfh+T6as+u35H4/uGrelQeZIJBuJU0Lz6I239lxeixdy4pvOX1wT l6fe4iDgvuIr2XDIQn207qPT19ArEcna27mOGqQXHtYuDdPekFevWmH4SqjRNaMw DtRG7jL5Lm4SbIcTlojDhSrZO9nWkgJAkVsBmj/GNDtXiRzTbwk6OKywKhPMg+RK Y5i3rbOVeGd19NM2QGu+FzbRwaJDV2+OAlpg2ZpleGzvmkIpuzGGY2QdveTnoc7M KAHNCOhul9BOovPDJqhnLgPMiL6nHRvexNrnBLm6ntvN -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:59 2026 by rpki-client