This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa File: vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa (raw, json) Hash identifier: FU6gWknx4r9SNx85ldpTBO/Ox8NOWmKPGxQLrSXC4Ec= Subject key identifier: BF:2F:FC:54:3C:0B:0D:DB:E0:A8:E9:AD:44:29:84:23:56:E7:F1:F3 Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051 Certificate serial: 019B78A2143C65DECE022A9D5419CE4BBA2F Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35368 IP address blocks: 185.36.136.0/22 maxlen: 22 185.36.138.0/24 maxlen: 24 2a04:6440::/29 maxlen: 29 2a04:6447:910::/48 maxlen: 48 2a04:6447:911::/48 maxlen: 48 2a04:6447:912::/48 maxlen: 48 2a04:6447:913::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:14:3c:65:de:ce:02:2a:9d:54:19:ce:4b:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf2ffc543c0b0ddbe0a8e9ad4429842356e7f1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:19:f9:11:f9:86:d7:ca:d8:57:dd:20:4b: 47:25:90:df:42:e7:e8:e5:a5:0c:65:78:d2:47:89: 1e:39:0d:40:9b:58:96:fc:e2:44:ef:87:be:30:90: 06:ef:7a:c3:f8:ba:8a:6a:f4:b0:4e:1d:06:20:30: 40:2b:f6:c6:83:32:43:74:74:5c:dc:89:f7:09:31: 91:21:c3:cc:53:06:3e:72:6e:74:f5:ef:f6:1a:85: 7a:08:14:8e:69:f4:c2:86:19:ff:60:95:83:03:56: 2c:34:0f:03:ca:ee:64:d9:94:7b:b2:43:e4:24:ce: 12:dc:30:ab:f9:2f:5b:81:74:38:80:8c:0a:9a:10: 08:d2:d8:4b:d0:a2:11:9a:ff:55:30:50:1d:21:4e: 07:b5:eb:04:08:7b:80:3d:18:b7:b9:17:27:ea:81: 47:db:cd:39:24:2f:eb:90:9c:95:b4:15:a1:e3:70: a6:dd:a4:18:78:37:68:ef:41:ba:88:4d:d9:d0:69: a9:d3:c7:d1:47:40:04:79:6b:ab:7a:68:97:97:22: 2f:69:bc:6a:f3:43:f0:ee:95:92:1a:35:cb:23:a1: 62:96:0d:29:87:25:44:54:8b:98:e3:12:03:71:c4: 19:b2:8b:41:be:b4:8a:9e:73:c3:2c:ab:2d:e9:24: 85:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2F:FC:54:3C:0B:0D:DB:E0:A8:E9:AD:44:29:84:23:56:E7:F1:F3 X509v3 Authority Key Identifier: keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/vy_8VDwLDdvgqOmtRCmEI1bn8fM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.136.0/22 IPv6: 2a04:6440::/29 Signature Algorithm: sha256WithRSAEncryption 85:c8:36:8f:e0:7c:7c:b0:1a:8e:7f:b5:25:02:29:fc:a4:a8: c4:b4:14:d2:fa:c3:79:d2:8e:98:e9:8c:65:2a:03:3a:5e:21: c0:73:ea:69:94:86:63:45:2a:5c:7c:e6:07:a4:6a:db:8e:b2: ae:11:4e:8c:40:6a:4c:52:5e:d9:34:e2:36:27:ad:f2:8a:d4: f3:a4:d6:f6:30:fd:c2:ad:b7:ac:61:c7:bd:a5:4e:f4:ff:4c: e8:9a:16:94:ed:ef:9f:2c:62:2d:7c:3d:ff:cb:6b:82:5e:03: 4f:b4:83:80:d6:fe:25:f6:f4:79:42:8a:f7:b3:d7:b6:6f:5f: 68:9d:7a:41:0a:a3:0c:4a:a9:66:2c:42:1d:43:88:b1:97:f6: 6c:86:2d:ac:6a:d3:23:bf:e6:a2:ea:e2:75:75:e0:46:52:e9: 6e:e8:70:4b:2c:40:d7:1e:17:f1:6d:77:d2:e6:bc:da:ea:54: 67:f5:0e:fc:b5:d5:86:2a:8a:43:18:55:82:37:45:10:1f:dd: da:04:90:ae:53:4e:0b:2d:9a:56:73:8f:b9:e0:1e:9f:4b:a3: 51:80:86:18:0a:af:3c:bd:38:d0:d6:9d:a4:4c:21:a3:c6:73: ab:7b:34:07:1b:0c:bf:82:52:1a:7a:1f:25:fd:9e:61:a5:20: 67:3b:d5:5a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ohQ8Zd7OAiqdVBnOS7ovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNGJjN2U2ZmRmYmY3MzhkMjNmYzVlZTVlNWFjYjUyYmVm YmMwNTEwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjJmZmM1NDNjMGIwZGRiZTBhOGU5YWQ0NDI5ODQyMzU2ZTdmMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMoZ+RH5htfK2FfdIEtHJZDfQufo 5aUMZXjSR4keOQ1Am1iW/OJE74e+MJAG73rD+LqKavSwTh0GIDBAK/bGgzJDdHRc 3In3CTGRIcPMUwY+cm509e/2GoV6CBSOafTChhn/YJWDA1YsNA8Dyu5k2ZR7skPk JM4S3DCr+S9bgXQ4gIwKmhAI0thL0KIRmv9VMFAdIU4HtesECHuAPRi3uRcn6oFH 2805JC/rkJyVtBWh43Cm3aQYeDdo70G6iE3Z0Gmp08fRR0AEeWuremiXlyIvabxq 80Pw7pWSGjXLI6Filg0phyVEVIuY4xIDccQZsotBvrSKnnPDLKst6SSFiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL8v/FQ8Cw3b4KjprUQphCNW5/HzMB8GA1UdIwQY MBaAFBNLx+b9+/c40j/F7l5ay1K++8BRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTB2SDV2Mzc5empTUDhYdVhsckxVcjc3d0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MDIwZDgtMDY4NC00NGY2LTg0ZDEt ZDFkMGY5NmNhZDFlLzEvdnlfOFZEd0xEZHZncU9tdFJDbUVJMWJuOGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MDIwZDgtMDY4NC00NGY2LTg0ZDEtZDFkMGY5NmNhZDFl LzEvRTB2SDV2Mzc5empTUDhYdVhsckxVcjc3d0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSSIMA0E AgACMAcDBQMqBGRAMA0GCSqGSIb3DQEBCwUAA4IBAQCFyDaP4Hx8sBqOf7UlAin8 pKjEtBTS+sN50o6Y6YxlKgM6XiHAc+pplIZjRSpcfOYHpGrbjrKuEU6MQGpMUl7Z NOI2J63yitTzpNb2MP3CrbesYce9pU70/0zomhaU7e+fLGItfD3/y2uCXgNPtIOA 1v4l9vR5Qor3s9e2b19onXpBCqMMSqlmLEIdQ4ixl/Zshi2satMjv+ai6uJ1deBG Uulu6HBLLEDXHhfxbXfS5rza6lRn9Q78tdWGKopDGFWCN0UQH93aBJCuU04LLZpW c4+54B6fS6NRgIYYCq88vTjQ1p2kTCGjxnOrezQHGwy/glIaeh8l/Z5hpSBnO9Va -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:49 2026 by rpki-client