This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/vXCOT851V_mdcAOBXynaw0qbF0A.roa File: vXCOT851V_mdcAOBXynaw0qbF0A.roa (raw, json) Hash identifier: xipcMEBACcnE6kLKqqqsxHgtzvuyNgEwwot322xjT24= Subject key identifier: BD:70:8E:4F:CE:75:57:F9:9D:70:03:81:5F:29:DA:C3:4A:9B:17:40 Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd Certificate serial: 019B797E0FD3065DE83EE37AF31EE66E874D Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/vXCOT851V_mdcAOBXynaw0qbF0A.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44621 IP address blocks: 213.168.157.0/24 maxlen: 24 213.168.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0f:d3:06:5d:e8:3e:e3:7a:f3:1e:e6:6e:87:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd708e4fce7557f99d7003815f29dac34a9b1740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:0e:e8:65:dd:b0:8d:ad:12:df:d4:38:9c: 98:17:17:45:61:c0:40:23:43:10:45:91:14:96:54: a0:56:b5:24:d8:d7:99:d5:0f:cb:b8:14:3b:fc:b4: 85:ad:60:eb:6c:f6:04:43:6e:f3:27:81:6d:9e:17: 9e:8a:b6:ab:d9:07:7d:68:6a:ce:73:79:da:dc:46: bf:24:88:9c:14:7b:59:5e:61:12:d4:c0:09:45:f2: f1:01:02:92:1f:66:e5:95:c5:f9:9b:1e:eb:6a:2f: 33:12:76:78:15:0b:a6:05:08:ad:79:56:ed:1f:74: fd:1a:ab:f3:6c:bc:96:4a:a8:00:2e:7e:2e:54:74: e1:95:b9:47:c2:22:ea:87:06:49:98:b7:e3:d4:fa: 5d:18:99:49:93:9f:2f:31:45:70:7a:39:85:2a:92: 86:1b:b1:82:c4:b3:91:9a:2b:84:6e:d9:d6:e2:ae: 29:62:66:3a:d6:e4:9f:0a:9a:11:7f:bd:a9:d7:c3: ef:d9:bd:d5:01:9c:92:0c:ed:a3:7d:cc:8e:1a:65: db:38:8f:39:ee:9c:ba:11:b6:5c:2b:31:b4:db:69: 66:fb:b5:16:09:7e:77:5e:d3:60:60:8f:3a:7f:3a: 43:be:22:f7:6c:6d:c5:78:74:9a:57:33:d8:cf:fd: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:8E:4F:CE:75:57:F9:9D:70:03:81:5F:29:DA:C3:4A:9B:17:40 X509v3 Authority Key Identifier: keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/vXCOT851V_mdcAOBXynaw0qbF0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.168.157.0-213.168.158.255 Signature Algorithm: sha256WithRSAEncryption 02:c4:5b:5e:05:d7:f8:b9:32:68:7a:e1:d9:08:4c:91:54:33: ae:32:7e:ae:a2:e1:65:01:83:6a:7c:76:8b:d1:37:68:db:c9: c0:55:d0:80:a1:51:70:4b:d2:c8:03:06:71:b7:bd:5a:4a:b0: 54:57:25:e0:f1:79:fd:61:8b:18:63:7d:84:3d:a9:49:4c:5c: 8d:dc:a1:57:4c:ab:36:a3:95:dc:22:7c:38:7e:8b:40:e0:33: fc:fe:50:2c:01:89:b2:1f:2f:42:f8:77:6d:fb:19:ba:56:51: b4:58:dc:d1:77:79:e5:80:f3:cc:78:4e:0b:f1:24:56:a4:ab: bc:80:7f:fc:31:63:ad:b1:80:f6:8f:92:f8:22:f0:62:86:a6: e6:e6:b5:d7:cb:ca:58:cf:2d:e9:fb:c3:04:12:73:d1:71:cd: 23:ea:c0:b0:54:2b:e2:65:ac:47:8d:15:1d:0a:f8:cd:22:2c: 75:a7:78:4d:5a:99:2c:19:da:24:b3:9a:7c:23:f1:ce:51:d1: e3:e5:27:48:08:2f:62:b3:26:fe:c4:28:56:96:59:7c:7f:2e: 4f:f1:cd:4b:08:56:22:34:85:42:fa:1f:5b:ec:2e:93:b6:e4: 59:5d:c6:2b:01:59:b5:99:71:e8:46:00:a7:c4:5c:0f:4f:5c: d5:06:ef:2e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fg/TBl3oPuN68x7mbodNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx ODk0ZmQwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDcwOGU0ZmNlNzU1N2Y5OWQ3MDAzODE1ZjI5ZGFjMzRhOWIxNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ycO6GXdsI2tEt/UOJyYFxdFYcBA I0MQRZEUllSgVrUk2NeZ1Q/LuBQ7/LSFrWDrbPYEQ27zJ4Ftnheeirar2Qd9aGrO c3na3Ea/JIicFHtZXmES1MAJRfLxAQKSH2bllcX5mx7rai8zEnZ4FQumBQiteVbt H3T9GqvzbLyWSqgALn4uVHThlblHwiLqhwZJmLfj1PpdGJlJk58vMUVwejmFKpKG G7GCxLORmiuEbtnW4q4pYmY61uSfCpoRf72p18Pv2b3VAZySDO2jfcyOGmXbOI85 7py6EbZcKzG022lm+7UWCX53XtNgYI86fzpDviL3bG3FeHSaVzPYz/0q4QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL1wjk/OdVf5nXADgV8p2sNKmxdAMB8GA1UdIwQY MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt MGJjZTgwZDRkZmY5LzEvdlhDT1Q4NTFWX21kY0FPQlh5bmF3MHFiRjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5 LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADVqJ0D BADVqJ4wDQYJKoZIhvcNAQELBQADggEBAALEW14F1/i5Mmh64dkITJFUM64yfq6i 4WUBg2p8dovRN2jbycBV0IChUXBL0sgDBnG3vVpKsFRXJeDxef1hixhjfYQ9qUlM XI3coVdMqzajldwifDh+i0DgM/z+UCwBibIfL0L4d237GbpWUbRY3NF3eeWA88x4 TgvxJFakq7yAf/wxY62xgPaPkvgi8GKGpubmtdfLyljPLen7wwQSc9FxzSPqwLBU K+JlrEeNFR0K+M0iLHWneE1amSwZ2iSzmnwj8c5R0ePlJ0gIL2KzJv7EKFaWWXx/ Lk/xzUsIViI0hUL6H1vsLpO25FldxisBWbWZcehGAKfEXA9PXNUG7y4= -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:28 2026 by rpki-client