This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vwnvCMITDlRWiN2hb-VEBzYpH7c.roa File: vwnvCMITDlRWiN2hb-VEBzYpH7c.roa (raw, json) Hash identifier: 8ZhhX6GJrZ28NmgQblQx5Eu5QCs/7RISBm0Uf74feSU= Subject key identifier: BF:09:EF:08:C2:13:0E:54:56:88:DD:A1:6F:E5:44:07:36:29:1F:B7 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EB9D7CD998F77F87880ECAD26B6B3 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vwnvCMITDlRWiN2hb-VEBzYpH7c.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 973 IP address blocks: 212.69.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b9:d7:cd:99:8f:77:f8:78:80:ec:ad:26:b6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf09ef08c2130e545688dda16fe5440736291fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:18:7d:3f:bf:46:d4:dd:88:a7:a6:30:40: 29:84:77:a5:39:f8:28:22:a9:de:a7:63:d2:6e:b7: 64:49:de:bd:ba:9c:ce:57:6c:1c:d9:c0:87:f4:6c: 7a:58:1e:dd:e4:20:fb:81:8f:af:f2:e4:bb:86:9a: f7:89:f3:8c:74:8f:7d:63:5f:d1:3b:85:39:34:90: d3:c4:b6:6b:52:b2:0a:9c:78:9f:6e:e9:68:f3:a6: 1b:12:d1:52:4f:66:2a:a4:db:9b:cf:8d:5d:cb:6f: b7:e6:c7:a2:f8:52:39:28:35:9c:ef:7e:0b:81:85: e1:5a:46:0e:31:27:e9:fa:1b:11:c6:a0:2a:fb:b7: 8f:36:df:3b:3b:0e:3e:b6:3f:69:ee:b3:60:d1:2e: fa:b4:c4:c5:0f:51:03:48:20:bf:14:eb:ca:a2:7d: 48:90:3f:26:0d:43:94:8f:77:1b:f9:0d:49:be:04: b8:9b:ba:28:7c:14:55:2b:39:0d:9a:27:31:06:ee: b7:8a:9b:85:cb:fe:d5:02:d2:a2:19:19:ef:64:ac: 7b:b0:ea:a4:81:8c:77:8c:38:cc:c2:b9:c4:09:36: 3a:54:8c:1b:98:9e:70:d7:aa:be:2f:d3:a1:bd:dd: db:7a:c8:0f:6c:cc:74:fa:df:eb:4a:29:1a:c4:55: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:09:EF:08:C2:13:0E:54:56:88:DD:A1:6F:E5:44:07:36:29:1F:B7 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vwnvCMITDlRWiN2hb-VEBzYpH7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.69.31.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:94:37:ba:69:b5:23:64:d1:38:78:b5:b5:2b:4d:d8:da:9e: c5:a7:9d:9b:38:08:d2:7e:e8:bb:02:56:c5:d3:ef:2c:77:ce: c0:02:89:f0:b1:0b:5a:c6:1f:d6:28:39:35:28:d6:81:19:59: bb:12:74:9b:45:65:df:17:3f:31:6c:84:ea:18:f8:6d:da:3a: 3d:f4:49:1a:a2:64:4d:44:72:a0:93:1b:84:a6:e5:c1:23:a8: 98:cf:c2:01:a3:c7:7b:17:cc:e8:15:b1:8a:5a:b5:73:c1:cb: c0:1f:5b:04:45:ae:cc:fd:65:1c:0e:f0:8f:c6:5d:ff:2d:de: 41:68:92:32:6f:32:83:06:f0:39:8d:b8:24:2c:b8:e2:b1:bc: 7b:74:0a:66:40:f7:b5:75:85:a7:3d:69:51:12:d0:79:e3:80: 5f:fd:95:86:68:bd:24:55:2d:f3:71:b6:c6:57:e5:9a:cb:57: 49:8e:f9:f5:a2:60:ff:d1:9e:9e:44:6c:6c:2b:21:b3:ea:53: 97:21:3d:b5:f7:44:84:aa:96:89:cb:31:95:ba:95:d2:ed:04: d1:da:36:18:d6:c1:be:d6:99:59:f1:0d:4c:df:ee:55:f8:5f: 8e:ed:95:e7:9d:50:8c:40:16:a8:fc:59:61:ea:04:f3:7c:d1: 8b:12:c2:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frnXzZmPd/h4gOytJrazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjA5ZWYwOGMyMTMwZTU0NTY4OGRkYTE2ZmU1NDQwNzM2MjkxZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRoYfT+/RtTdiKemMEAphHelOfgo Iqnep2PSbrdkSd69upzOV2wc2cCH9Gx6WB7d5CD7gY+v8uS7hpr3ifOMdI99Y1/R O4U5NJDTxLZrUrIKnHifbulo86YbEtFST2YqpNubz41dy2+35sei+FI5KDWc734L gYXhWkYOMSfp+hsRxqAq+7ePNt87Ow4+tj9p7rNg0S76tMTFD1EDSCC/FOvKon1I kD8mDUOUj3cb+Q1JvgS4m7oofBRVKzkNmicxBu63ipuFy/7VAtKiGRnvZKx7sOqk gYx3jDjMwrnECTY6VIwbmJ5w16q+L9Ohvd3besgPbMx0+t/rSikaxFX0BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL8J7wjCEw5UVojdoW/lRAc2KR+3MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvdndudkNNSVREbFJXaU4yaGItVkVCellwSDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUfMA0G CSqGSIb3DQEBCwUAA4IBAQAclDe6abUjZNE4eLW1K03Y2p7Fp52bOAjSfui7AlbF 0+8sd87AAonwsQtaxh/WKDk1KNaBGVm7EnSbRWXfFz8xbITqGPht2jo99EkaomRN RHKgkxuEpuXBI6iYz8IBo8d7F8zoFbGKWrVzwcvAH1sERa7M/WUcDvCPxl3/Ld5B aJIybzKDBvA5jbgkLLjisbx7dApmQPe1dYWnPWlREtB544Bf/ZWGaL0kVS3zcbbG V+Way1dJjvn1omD/0Z6eRGxsKyGz6lOXIT2190SEqpaJyzGVupXS7QTR2jYY1sG+ 1plZ8Q1M3+5V+F+O7ZXnnVCMQBao/Flh6gTzfNGLEsJ3 -----END CERTIFICATE-----Generated at Mon Jan 19 13:52:51 2026 by rpki-client