This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/v-wCFquCVU3REEeKuxPMifGq75E.roa File: v-wCFquCVU3REEeKuxPMifGq75E.roa (raw, json) Hash identifier: VExpozMOuBZjJ6RPCyBqYq82PjuTIznByXSgv//ywPE= Subject key identifier: BF:EC:02:16:AB:82:55:4D:D1:10:47:8A:BB:13:CC:89:F1:AA:EF:91 Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Certificate serial: 019B79ECAEE42070FD4266F9B5077B666F79 Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/v-wCFquCVU3REEeKuxPMifGq75E.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61013 IP address blocks: 45.143.40.0/22 maxlen: 24 194.53.160.0/22 maxlen: 24 194.53.164.0/23 maxlen: 24 2001:67c:2828::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ae:e4:20:70:fd:42:66:f9:b5:07:7b:66:6f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfec0216ab82554dd110478abb13cc89f1aaef91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:25:21:96:20:d1:a1:87:e0:e7:7b:52:d6: 62:43:e5:38:d6:ca:88:76:06:cc:2a:a5:83:21:5a: 56:a4:24:8d:48:f9:7b:bf:65:ba:ca:60:e6:4a:50: d1:81:5c:cb:5a:7e:d7:84:00:77:d5:ef:06:89:ba: ae:2f:13:cb:f3:24:a2:e6:2b:49:2c:b7:91:a5:f8: 00:82:af:a7:34:90:f5:98:9c:9e:e2:0e:03:4f:b6: 60:be:cd:25:d8:47:6a:eb:55:02:74:64:22:80:b4: 4d:ad:31:51:59:38:e4:67:81:b1:cb:99:82:15:e7: 23:55:4f:49:c5:e0:c2:0c:59:78:e5:6b:1f:9a:9b: e1:88:7e:5b:10:95:dc:5e:08:1e:56:e9:f5:8a:a7: b6:db:69:ba:75:c9:b4:b9:72:52:f7:c7:53:f7:8b: 49:4a:98:02:31:28:ea:c9:4e:8d:58:2a:9c:b8:29: 4d:ea:cc:e8:3c:01:c3:2f:09:98:e9:87:a4:94:ad: fb:a1:45:72:74:92:54:2d:9c:ad:89:70:ac:75:de: 32:5b:78:b5:46:3e:b1:b6:c2:40:1f:d8:2d:76:89: 56:a6:f1:ee:4e:58:cb:1c:72:04:8b:24:a5:29:9d: a2:94:a8:66:6b:d3:fe:7b:55:2b:93:45:67:56:11: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EC:02:16:AB:82:55:4D:D1:10:47:8A:BB:13:CC:89:F1:AA:EF:91 X509v3 Authority Key Identifier: keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/v-wCFquCVU3REEeKuxPMifGq75E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.40.0/22 194.53.160.0-194.53.165.255 IPv6: 2001:67c:2828::/48 Signature Algorithm: sha256WithRSAEncryption 94:4c:bb:f5:1c:3e:7b:5a:3d:40:6d:9b:e2:6b:bb:3b:75:de: 85:c2:26:87:dd:d5:4b:75:03:c0:bc:f8:c1:b7:48:9f:13:32: 84:6f:58:5f:ab:b5:88:71:df:17:31:b9:11:e4:6e:8c:8d:e9: bc:47:c4:24:9c:8c:6e:be:1e:70:2c:f4:18:e5:af:f0:44:ac: 1b:64:81:5c:e2:f3:44:17:92:d1:b3:fc:fd:9b:33:bc:24:65: 04:35:a5:c9:51:66:c2:16:d7:42:1d:5b:26:c5:86:75:eb:a0: 33:26:48:92:d6:83:18:1b:79:63:49:dd:c6:63:11:05:ab:a8: a7:98:9a:b8:b2:1d:03:f1:e0:d8:67:5e:ea:cc:f2:b3:64:5f: b1:dc:a0:51:b0:d6:53:07:00:d3:27:66:0e:35:a9:b7:0c:a0: e7:5f:2b:25:06:f5:22:31:24:c6:8f:66:5e:d8:d7:ba:bd:8a: c4:3b:68:3d:b1:da:27:2b:62:f3:ec:27:1b:01:93:e6:91:21: 36:12:8a:36:f5:60:d9:9c:3b:62:ef:03:ce:71:6b:f4:26:26: 6a:2e:1a:7f:63:c0:2b:9d:80:d4:2d:93:a7:60:30:eb:db:ad: 31:5c:a3:c8:1c:a2:fb:05:76:27:4a:0c:06:e1:e3:4e:a2:f1: ab:63:b5:a2 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt57K7kIHD9Qmb5tQd7Zm95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3 YTdmYzQwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmVjMDIxNmFiODI1NTRkZDExMDQ3OGFiYjEzY2M4OWYxYWFlZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLMlIZYg0aGH4Od7UtZiQ+U41sqI dgbMKqWDIVpWpCSNSPl7v2W6ymDmSlDRgVzLWn7XhAB31e8GibquLxPL8ySi5itJ LLeRpfgAgq+nNJD1mJye4g4DT7Zgvs0l2Edq61UCdGQigLRNrTFRWTjkZ4Gxy5mC FecjVU9JxeDCDFl45WsfmpvhiH5bEJXcXggeVun1iqe222m6dcm0uXJS98dT94tJ SpgCMSjqyU6NWCqcuClN6szoPAHDLwmY6YeklK37oUVydJJULZytiXCsdd4yW3i1 Rj6xtsJAH9gtdolWpvHuTljLHHIEiySlKZ2ilKhma9P+e1Urk0VnVhFjgQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFL/sAharglVN0RBHirsTzInxqu+RMB8GA1UdIwQY MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt YzA3ZmZmNzQ2OTM4LzEvdi13Q0ZxdUNWVTNSRUVlS3V4UE1pZkdxNzVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4 LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQCLY8oMAwD BAXCNaADBAHCNaQwDwQCAAIwCQMHACABBnwoKDANBgkqhkiG9w0BAQsFAAOCAQEA lEy79Rw+e1o9QG2b4mu7O3XehcImh93VS3UDwLz4wbdInxMyhG9YX6u1iHHfFzG5 EeRujI3pvEfEJJyMbr4ecCz0GOWv8ESsG2SBXOLzRBeS0bP8/ZszvCRlBDWlyVFm whbXQh1bJsWGdeugMyZIktaDGBt5Y0ndxmMRBauop5iauLIdA/Hg2Gde6szys2Rf sdygUbDWUwcA0ydmDjWptwyg518rJQb1IjEkxo9mXtjXur2KxDtoPbHaJyti8+wn GwGT5pEhNhKKNvVg2Zw7Yu8DznFr9CYmai4af2PAK52A1C2Tp2Aw69utMVyjyByi +wV2J0oMBuHjTqLxq2O1og== -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:23 2026 by rpki-client