This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa File: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (raw, json) Hash identifier: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI= Subject key identifier: 54:14:6F:16:3D:44:39:2F:32:C2:D0:C3:2C:0C:F5:02:E2:7E:17:73 Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb Certificate serial: 019B7F858564DB48D3C5608DB32EAB5E1027 Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa Signing time: Fri 02 Jan 2026 16:23:35 +0000 ROA not before: Fri 02 Jan 2026 16:23:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 195.234.204.0/24 maxlen: 24 195.234.205.0/24 maxlen: 24 195.234.206.0/24 maxlen: 24 195.234.207.0/24 maxlen: 24 2001:67c:2620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:85:64:db:48:d3:c5:60:8d:b3:2e:ab:5e:10:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54146f163d44392f32c2d0c32c0cf502e27e1773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:e5:19:27:ba:2d:14:d2:89:4f:96:3b:c5: 16:fc:31:c7:b2:c1:83:23:97:01:45:7e:e3:03:c8: d2:20:b6:b9:0c:85:35:71:b3:29:f6:28:81:89:42: cd:38:e7:d0:c2:51:1c:9b:2d:96:c5:1d:9e:dd:18: 2b:5e:c8:0c:83:aa:e4:c8:c9:0b:f8:1a:07:77:f7: 06:e2:af:5f:b2:04:f4:5a:4d:33:de:b3:fa:60:53: fb:4a:7c:51:26:d2:c2:87:03:0d:3e:dd:82:48:ae: 04:ca:04:95:b7:f8:3b:0d:a4:f9:62:d3:e7:e6:bd: 05:80:07:57:e4:03:b6:67:cc:ea:50:89:51:97:5a: 71:a6:1b:b4:de:4c:3c:b0:33:f9:0e:49:bc:fb:db: fb:16:55:c7:4b:ca:54:ab:41:23:bb:09:62:0d:cb: 5e:97:a0:e9:8f:0a:88:f5:08:f6:5d:de:d4:30:ba: 7f:d4:80:91:e1:32:c6:71:e4:7a:9c:62:e7:a9:1e: e1:e0:fb:1e:24:fd:ba:d1:1b:70:16:43:75:52:a2: 87:c5:08:73:f1:85:3c:05:64:53:68:fe:e0:55:90: f1:f0:b6:4e:7a:12:6c:5f:b8:2c:9c:55:4a:05:82: c8:0c:89:a3:9b:f2:cd:6f:f6:0a:0c:2c:5d:dc:10: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:6F:16:3D:44:39:2F:32:C2:D0:C3:2C:0C:F5:02:E2:7E:17:73 X509v3 Authority Key Identifier: keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.204.0/22 IPv6: 2001:67c:2620::/48 Signature Algorithm: sha256WithRSAEncryption 6f:8b:81:28:aa:84:e3:55:ab:03:c2:b6:7a:43:aa:56:87:f0: 4a:dd:45:81:bb:f0:0d:2c:dd:9e:8a:82:c6:b3:b7:25:27:3d: e8:21:c5:b4:0e:0c:83:e7:76:42:07:b4:fc:f4:9a:cc:30:df: 06:f9:0a:e1:b8:1d:fb:b0:17:66:e2:97:46:16:a9:f8:c1:0b: 34:1b:ca:3a:7c:f3:44:7a:91:22:d3:56:b8:65:eb:24:4d:e6: 52:b7:60:b0:c9:fc:fe:7b:d3:07:08:6c:d2:6d:4f:3d:62:cc: e3:25:2f:9e:e7:be:b0:32:ee:3d:da:39:e9:8b:18:4e:9f:2a: df:36:c1:ab:d3:20:b5:6d:4f:b6:db:ed:60:ad:ca:64:73:3b: 92:dc:fa:d7:91:d1:ba:13:0d:4b:cb:a8:bc:ab:12:09:29:0e: fd:f9:1b:2b:28:da:e9:8c:3b:bf:d0:a5:1f:ba:53:bd:30:2d: fb:1f:e2:24:ce:24:72:cb:aa:4d:90:42:4e:82:1d:5e:ef:8d: 2b:7f:40:e1:ae:ef:d2:15:d9:19:f0:16:e9:0d:92:2f:e4:0e: cb:79:2b:c1:2c:58:d1:c3:a6:86:b5:0b:f1:7f:db:1b:a9:93: fe:a3:c8:25:71:df:3e:aa:b5:2d:8e:44:84:bf:af:fe:57:92: 04:7a:09:c7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hYVk20jTxWCNsy6rXhAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw MTUwZWIwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDE0NmYxNjNkNDQzOTJmMzJjMmQwYzMyYzBjZjUwMmUyN2UxNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYHlGSe6LRTSiU+WO8UW/DHHssGD I5cBRX7jA8jSILa5DIU1cbMp9iiBiULNOOfQwlEcmy2WxR2e3RgrXsgMg6rkyMkL +BoHd/cG4q9fsgT0Wk0z3rP6YFP7SnxRJtLChwMNPt2CSK4EygSVt/g7DaT5YtPn 5r0FgAdX5AO2Z8zqUIlRl1pxphu03kw8sDP5Dkm8+9v7FlXHS8pUq0EjuwliDcte l6DpjwqI9Qj2Xd7UMLp/1ICR4TLGceR6nGLnqR7h4PseJP260RtwFkN1UqKHxQhz 8YU8BWRTaP7gVZDx8LZOehJsX7gsnFVKBYLIDImjm/LNb/YKDCxd3BD+0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFQUbxY9RDkvMsLQwywM9QLifhdzMB8GA1UdIwQY MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt YWU5MWU0NjYyZDkzLzEvVkJSdkZqMUVPUzh5d3RERExBejFBdUotRjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCw+rMMA8E AgACMAkDBwAgAQZ8JiAwDQYJKoZIhvcNAQELBQADggEBAG+LgSiqhONVqwPCtnpD qlaH8ErdRYG78A0s3Z6KgsaztyUnPeghxbQODIPndkIHtPz0msww3wb5CuG4Hfuw F2bil0YWqfjBCzQbyjp880R6kSLTVrhl6yRN5lK3YLDJ/P570wcIbNJtTz1izOMl L57nvrAy7j3aOemLGE6fKt82wavTILVtT7bb7WCtymRzO5Lc+teR0boTDUvLqLyr EgkpDv35Gyso2umMO7/QpR+6U70wLfsf4iTOJHLLqk2QQk6CHV7vjSt/QOGu79IV 2RnwFukNki/kDst5K8EsWNHDpoa1C/F/2xupk/6jyCVx3z6qtS2ORIS/r/5XkgR6 Ccc= -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client