This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/vybKFSnUUtCvuNDjBmPdlEc4moI.roa File: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (raw, json) Hash identifier: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg= Subject key identifier: BF:26:CA:15:29:D4:52:D0:AF:B8:D0:E3:06:63:DD:94:47:38:9A:82 Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Certificate serial: 019B7E3759C13C5CDA8CC3A739855C19FD98 Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/vybKFSnUUtCvuNDjBmPdlEc4moI.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50572 IP address blocks: 193.19.146.0/24 maxlen: 24 2001:67c:2530::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:59:c1:3c:5c:da:8c:c3:a7:39:85:5c:19:fd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf26ca1529d452d0afb8d0e30663dd9447389a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:27:cd:57:48:56:a2:2a:87:77:d7:7e:ae: 7b:0f:72:ff:5d:91:43:13:81:48:59:22:61:96:6a: cc:c8:db:14:05:85:f0:5d:93:09:13:99:3f:78:18: f5:b3:64:cc:6a:64:c9:88:67:b9:f4:ae:45:a9:a8: b4:16:b8:07:8a:64:1a:6a:b7:ed:89:f1:c0:4b:6d: a2:6a:9d:48:92:aa:49:fb:da:6e:ec:85:2b:0d:bd: df:ff:f6:96:7a:60:72:4e:98:1c:f6:f9:06:6f:3f: 8d:ee:55:ee:13:2b:f0:43:94:3f:86:e7:96:eb:9e: 99:a5:3e:b4:e3:2e:5f:0a:73:ca:cd:01:c7:44:b4: c2:49:ce:c8:78:da:fc:fc:2e:f0:92:3f:d0:c9:ec: 43:74:59:79:4b:23:1e:11:3c:8f:74:28:02:5f:9c: 8d:cc:08:33:a8:24:95:0f:d5:87:42:78:a4:ac:d4: 26:a9:3b:3f:41:11:e1:31:99:1c:11:89:74:62:89: c8:f3:d3:d8:a6:56:51:a7:63:d5:99:44:25:1b:e5: 59:c8:07:22:23:56:a7:61:8a:52:5d:08:e0:81:86: f7:df:b0:bb:2a:01:c0:47:e7:a3:96:d5:72:ac:3b: 8a:fa:27:91:38:18:55:95:80:fd:8e:7f:d5:de:65: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:26:CA:15:29:D4:52:D0:AF:B8:D0:E3:06:63:DD:94:47:38:9A:82 X509v3 Authority Key Identifier: keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/vybKFSnUUtCvuNDjBmPdlEc4moI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.146.0/24 IPv6: 2001:67c:2530::/48 Signature Algorithm: sha256WithRSAEncryption 81:6d:42:45:a0:09:b8:3d:36:9a:f9:10:3c:50:af:ca:be:6e: 18:b8:0b:9d:28:88:b9:57:82:c9:83:90:07:78:61:dc:4d:36: 59:64:c6:c2:59:4c:b9:78:43:84:97:64:c6:76:b3:58:53:46: 36:c1:07:dc:b3:ce:69:8f:a0:c3:16:ae:f6:62:51:6d:06:e5: b0:66:dc:dd:8d:3a:26:c0:af:ba:4a:93:8b:06:1d:07:3e:98: cc:b0:c1:68:73:f6:48:7e:36:43:84:5a:1d:46:7b:41:ba:9e: 08:6c:d4:d5:f2:72:1b:8c:ce:c9:d4:b6:88:70:bd:9b:10:c4: f9:2b:ae:0b:6f:56:22:7c:04:3f:2d:c8:c1:2c:75:82:5f:5c: 22:97:57:68:db:13:65:77:51:59:e7:2f:ab:d9:e3:e7:e0:ef: 27:27:af:eb:e8:a1:30:55:b0:30:47:a4:0a:7f:d3:b1:c2:a6: 23:17:a7:7b:a5:5d:e9:00:ec:ae:fb:a6:85:20:ef:57:7b:d6: 92:a8:30:98:dc:ae:8f:22:eb:fd:65:c6:76:34:02:8e:e9:6e: ca:8a:f7:e2:7e:d5:66:08:db:e0:54:a0:5d:76:25:2d:f3:18: e9:fe:60:27:5c:1b:b0:2a:13:79:57:1f:6c:9e:a2:81:ca:b5: f2:e5:b5:cb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N1nBPFzajMOnOYVcGf2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1 MjlmNjYwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjI2Y2ExNTI5ZDQ1MmQwYWZiOGQwZTMwNjYzZGQ5NDQ3Mzg5YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG8nzVdIVqIqh3fXfq57D3L/XZFD E4FIWSJhlmrMyNsUBYXwXZMJE5k/eBj1s2TMamTJiGe59K5Fqai0FrgHimQaarft ifHAS22iap1IkqpJ+9pu7IUrDb3f//aWemByTpgc9vkGbz+N7lXuEyvwQ5Q/hueW 656ZpT604y5fCnPKzQHHRLTCSc7IeNr8/C7wkj/QyexDdFl5SyMeETyPdCgCX5yN zAgzqCSVD9WHQnikrNQmqTs/QRHhMZkcEYl0YonI89PYplZRp2PVmUQlG+VZyAci I1anYYpSXQjggYb337C7KgHAR+ejltVyrDuK+ieROBhVlYD9jn/V3mXBwwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL8myhUp1FLQr7jQ4wZj3ZRHOJqCMB8GA1UdIwQY MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt MWI0MTdkNWUxZmJkLzEvdnliS0ZTblVVdEN2dU5EakJtUGRsRWM0bW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwROSMA8E AgACMAkDBwAgAQZ8JTAwDQYJKoZIhvcNAQELBQADggEBAIFtQkWgCbg9Npr5EDxQ r8q+bhi4C50oiLlXgsmDkAd4YdxNNllkxsJZTLl4Q4SXZMZ2s1hTRjbBB9yzzmmP oMMWrvZiUW0G5bBm3N2NOibAr7pKk4sGHQc+mMywwWhz9kh+NkOEWh1Ge0G6nghs 1NXychuMzsnUtohwvZsQxPkrrgtvViJ8BD8tyMEsdYJfXCKXV2jbE2V3UVnnL6vZ 4+fg7ycnr+vooTBVsDBHpAp/07HCpiMXp3ulXekA7K77poUg71d71pKoMJjcro8i 6/1lxnY0Ao7pbsqK9+J+1WYI2+BUoF12JS3zGOn+YCdcG7AqE3lXH2yeooHKtfLl tcs= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:22 2026 by rpki-client