This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ve2xnNSznR3jgazHd-AYZFn-sds.roa File: ve2xnNSznR3jgazHd-AYZFn-sds.roa (raw, json) Hash identifier: 23cgt8zKs/gW5LTZzpzr40f5utV3g89KsGnqM+0cNAk= Subject key identifier: BD:ED:B1:9C:D4:B3:9D:1D:E3:81:AC:C7:77:E0:18:64:59:FE:B1:DB Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739 Certificate serial: 019B7B35ADDD9F160E469A700BD2BA40058C Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ve2xnNSznR3jgazHd-AYZFn-sds.roa Signing time: Thu 01 Jan 2026 20:17:54 +0000 ROA not before: Thu 01 Jan 2026 20:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198863 IP address blocks: 91.240.2.0/23 maxlen: 23 91.240.2.0/24 maxlen: 24 185.198.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ad:dd:9f:16:0e:46:9a:70:0b:d2:ba:40:05:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739 Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdedb19cd4b39d1de381acc777e0186459feb1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6e:22:be:8e:47:92:63:fb:67:2c:8e:77:97: 45:57:76:83:92:db:c7:01:a0:a8:a5:41:0c:99:78: 23:25:a2:70:c4:d6:75:7f:d3:17:f4:a5:4c:77:c3: 18:cd:68:72:56:78:9f:82:69:53:36:7f:3e:0a:e3: 96:35:d2:49:de:0c:7c:80:0a:13:b5:a2:78:55:e2: ff:51:fe:83:7b:d6:8c:0c:8d:22:23:61:1b:c7:d7: 2b:3d:cb:d4:43:5e:89:6f:46:86:d8:3a:24:5c:a4: 12:e9:5b:42:b9:19:6a:51:24:4b:a2:3a:28:6f:a7: 0d:cd:17:02:72:45:13:c4:31:cf:da:1b:b7:7f:bc: 81:8b:31:14:52:4f:90:7f:0b:b0:34:6f:18:cf:b3: 09:5e:09:14:55:f2:c4:a5:7a:f4:83:2f:f3:36:9b: 77:c6:a1:60:62:98:f7:bf:cb:20:03:40:f0:e1:88: 6e:71:18:1e:f8:88:0a:15:06:a3:b2:02:fc:5f:97: 79:6e:7c:58:f4:bb:86:69:68:ab:cd:f7:84:5d:ca: d1:d0:9d:e3:e6:f2:e9:65:cd:85:bc:53:01:8b:ed: fe:92:d1:d3:96:dc:4c:7a:89:12:bb:96:30:5e:e2: 82:9b:aa:1d:ed:3a:ca:7f:84:89:fe:a7:57:45:d5: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:ED:B1:9C:D4:B3:9D:1D:E3:81:AC:C7:77:E0:18:64:59:FE:B1:DB X509v3 Authority Key Identifier: keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ve2xnNSznR3jgazHd-AYZFn-sds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.2.0/23 185.198.132.0/22 Signature Algorithm: sha256WithRSAEncryption 68:22:55:0b:ca:46:e8:0f:1f:d8:f1:4d:7a:e8:f7:e0:8b:74: 50:f8:b9:08:fb:4a:83:3d:d1:19:af:44:4e:b4:f3:90:36:94: bf:1a:bf:46:d1:3a:2a:5b:d9:c2:ab:b5:ba:70:d9:70:22:db: 9b:c8:ac:51:a1:85:61:be:48:ec:70:b9:8c:9b:2f:74:6c:48: 97:5f:b7:3b:16:18:64:15:87:8a:fe:63:43:d5:40:f8:76:ce: ce:a2:e2:70:05:e4:99:f9:81:74:30:46:fa:43:05:a2:8d:7a: 01:16:e6:26:68:18:08:d8:40:fa:45:29:02:d0:5f:16:fb:44: dd:ee:9d:8a:d9:e6:f0:73:7f:89:7a:5b:96:ec:0f:3a:be:f7: aa:61:40:88:47:91:ac:a1:f6:b9:f6:1c:2b:7e:70:de:2f:b6: f2:c7:0d:fb:62:65:0b:9b:ed:0a:62:e8:e3:5f:b6:f5:85:89: 15:02:b3:61:5a:3e:23:c4:9e:1e:b5:e9:01:f9:b2:5f:d9:f4: f7:a3:ae:ff:7f:e3:4c:73:c1:51:c5:dc:9b:6b:cd:6a:87:0b: b0:f2:b1:bb:0a:e7:db:5b:3a:e9:2d:14:80:e4:d4:d8:30:ab: fe:42:27:62:e4:b2:dc:ac:bc:a8:df:60:2e:ad:f4:b0:46:ce: 90:35:2f:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Na3dnxYORppwC9K6QAWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTY3MTJjY2ZhODc3YWJiNzYwY2I3N2UyNzA0MTc3NGNi MDQ3MzkwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGVkYjE5Y2Q0YjM5ZDFkZTM4MWFjYzc3N2UwMTg2NDU5ZmViMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9m4ivo5HkmP7ZyyOd5dFV3aDktvH AaCopUEMmXgjJaJwxNZ1f9MX9KVMd8MYzWhyVnifgmlTNn8+CuOWNdJJ3gx8gAoT taJ4VeL/Uf6De9aMDI0iI2Ebx9crPcvUQ16Jb0aG2DokXKQS6VtCuRlqUSRLojoo b6cNzRcCckUTxDHP2hu3f7yBizEUUk+QfwuwNG8Yz7MJXgkUVfLEpXr0gy/zNpt3 xqFgYpj3v8sgA0Dw4YhucRge+IgKFQajsgL8X5d5bnxY9LuGaWirzfeEXcrR0J3j 5vLpZc2FvFMBi+3+ktHTltxMeokSu5YwXuKCm6od7TrKf4SJ/qdXRdWSewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL3tsZzUs50d44Gsx3fgGGRZ/rHbMB8GA1UdIwQY MBaAFFBWcSzPqHert2DLd+JwQXdMsEc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGIt Zjg0YjYwNTIxZGY1LzEvdmUyeG5OU3puUjNqZ2F6SGQtQVlaRm4tc2RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGItZjg0YjYwNTIxZGY1 LzEvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW/ACAwQC ucaEMA0GCSqGSIb3DQEBCwUAA4IBAQBoIlULykboDx/Y8U166Pfgi3RQ+LkI+0qD PdEZr0ROtPOQNpS/Gr9G0ToqW9nCq7W6cNlwItubyKxRoYVhvkjscLmMmy90bEiX X7c7FhhkFYeK/mND1UD4ds7OouJwBeSZ+YF0MEb6QwWijXoBFuYmaBgI2ED6RSkC 0F8W+0Td7p2K2ebwc3+JeluW7A86vveqYUCIR5Gsofa59hwrfnDeL7byxw37YmUL m+0KYujjX7b1hYkVArNhWj4jxJ4etekB+bJf2fT3o67/f+NMc8FRxdyba81qhwuw 8rG7CufbWzrpLRSA5NTYMKv+Qidi5LLcrLyo32AurfSwRs6QNS/J -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:20 2026 by rpki-client