This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/viORdHUyF0zVxNz0mvDIvz7yXPg.roa File: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (raw, json) Hash identifier: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg= Subject key identifier: BE:23:91:74:75:32:17:4C:D5:C4:DC:F4:9A:F0:C8:BF:3E:F2:5C:F8 Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14 Certificate serial: 019B76EB7B88532C87A8C5B5A1A097F89599 Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/viORdHUyF0zVxNz0mvDIvz7yXPg.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35805 IP address blocks: 92.241.64.0/19 maxlen: 24 109.238.224.0/20 maxlen: 24 185.51.16.0/22 maxlen: 24 213.131.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:88:53:2c:87:a8:c5:b5:a1:a0:97:f8:95:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be2391747532174cd5c4dcf49af0c8bf3ef25cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:02:4a:4c:d9:aa:21:d9:17:01:6d:9a:1f: 50:93:87:e5:7f:ad:e3:04:0d:9a:cd:6a:ba:2d:bf: 72:09:48:5b:95:dc:4a:a5:9f:5f:0d:ee:04:a9:20: 32:6d:4f:9b:de:c3:fa:31:34:9a:5d:62:b3:f6:05: 86:9a:2b:9b:f0:53:a3:21:34:71:68:81:d9:4c:32: 09:05:e3:e6:f2:de:de:7e:9b:f7:45:02:95:57:9e: f8:f9:18:06:ea:94:54:bf:ce:ca:d1:68:f8:ef:c2: 3c:c6:8c:8b:4f:d1:45:e9:28:2a:f1:74:ec:c3:1f: 92:ec:02:c0:49:ac:0b:a7:53:94:da:f0:14:b1:a6: ca:9b:57:63:e8:74:bf:e6:d7:73:d9:a3:48:12:b6: ee:37:f4:04:a2:bf:3f:33:7d:87:46:71:fe:ff:77: 8d:76:e3:e9:cc:46:a5:96:49:82:ed:da:77:7e:d7: c5:7b:9f:10:de:fa:8b:b1:be:8a:a7:fa:34:8b:8c: 3f:10:e2:fd:1f:79:53:72:03:20:58:93:63:47:bf: 51:0e:c6:ae:c8:26:c7:74:8e:63:c9:85:50:7b:b7: 7d:3a:b8:08:8b:cb:1f:76:1b:2f:16:f0:35:b5:85: 97:e0:bb:47:92:ea:ed:02:97:45:6f:37:7a:c8:5c: a9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:23:91:74:75:32:17:4C:D5:C4:DC:F4:9A:F0:C8:BF:3E:F2:5C:F8 X509v3 Authority Key Identifier: keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/viORdHUyF0zVxNz0mvDIvz7yXPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.241.64.0/19 109.238.224.0/20 185.51.16.0/22 213.131.32.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:9f:57:cb:d4:da:58:b8:04:4c:50:0c:62:c6:92:09:b8:ba: 80:44:71:7a:2d:76:9d:af:51:b4:ff:d7:13:b3:98:df:d9:47: 38:70:e9:9f:c7:45:97:64:16:44:d4:73:a1:bc:dc:23:97:23: ea:01:09:20:a2:4e:66:9c:bf:5e:3c:19:9d:23:89:41:bc:e7: 5c:a9:4d:a2:a5:1a:69:01:71:25:49:f1:84:2d:9d:c1:f5:25: ba:27:0b:b5:74:61:ff:3a:21:f4:35:a8:cc:f9:79:da:ee:69: 1b:c8:1f:b3:82:62:5c:7e:17:bd:2a:fa:0c:e6:84:0b:c0:ff: 91:8d:f1:31:a5:86:0c:f5:cb:e1:1a:2b:40:68:a5:d0:40:50: aa:de:10:b8:a3:a7:4c:b8:b7:ed:ab:dc:57:71:40:2e:48:89: 8e:87:3a:9f:1a:e2:54:09:47:ce:9f:22:2f:58:b1:23:22:23: 0e:e5:9d:32:56:0b:2a:9d:58:16:e2:25:40:d0:17:01:15:53: f9:4d:e8:2a:fc:b3:df:48:e4:ed:d3:c1:1a:14:ee:b7:95:8d: 3c:f5:59:0e:b0:33:73:f5:b2:d4:c7:00:a0:02:7b:5b:c1:54: e9:7f:d6:6f:9c:3e:33:25:2a:bb:0a:75:9b:d9:4f:12:12:7f: 8e:44:47:10 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt263uIUyyHqMW1oaCX+JWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh ZDhmMTQwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTIzOTE3NDc1MzIxNzRjZDVjNGRjZjQ5YWYwYzhiZjNlZjI1Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslwCSkzZqiHZFwFtmh9Qk4flf63j BA2azWq6Lb9yCUhbldxKpZ9fDe4EqSAybU+b3sP6MTSaXWKz9gWGmiub8FOjITRx aIHZTDIJBePm8t7efpv3RQKVV574+RgG6pRUv87K0Wj478I8xoyLT9FF6Sgq8XTs wx+S7ALASawLp1OU2vAUsabKm1dj6HS/5tdz2aNIErbuN/QEor8/M32HRnH+/3eN duPpzEallkmC7dp3ftfFe58Q3vqLsb6Kp/o0i4w/EOL9H3lTcgMgWJNjR79RDsau yCbHdI5jyYVQe7d9OrgIi8sfdhsvFvA1tYWX4LtHkurtApdFbzd6yFypzQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFL4jkXR1MhdM1cTc9JrwyL8+8lz4MB8GA1UdIwQY MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt Mzc0MGIwOTQxZGI4LzEvdmlPUmRIVXlGMHpWeE56MG12REl2ejd5WFBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4 LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFXPFAAwQE be7gAwQCuTMQAwQF1YMgMA0GCSqGSIb3DQEBCwUAA4IBAQBqn1fL1NpYuARMUAxi xpIJuLqARHF6LXadr1G0/9cTs5jf2Uc4cOmfx0WXZBZE1HOhvNwjlyPqAQkgok5m nL9ePBmdI4lBvOdcqU2ipRppAXElSfGELZ3B9SW6Jwu1dGH/OiH0NajM+Xna7mkb yB+zgmJcfhe9KvoM5oQLwP+RjfExpYYM9cvhGitAaKXQQFCq3hC4o6dMuLftq9xX cUAuSImOhzqfGuJUCUfOnyIvWLEjIiMO5Z0yVgsqnVgW4iVA0BcBFVP5Tegq/LPf SOTt08EaFO63lY089VkOsDNz9bLUxwCgAntbwVTpf9ZvnD4zJSq7CnWb2U8SEn+O REcQ -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:46 2026 by rpki-client