This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa File: vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa (raw, json) Hash identifier: pJtwgYaoF3xi2Mwr73dINom7FFrcw02MnipnSTRfmM8= Subject key identifier: BC:A3:98:3A:C7:82:32:6A:8D:22:33:31:46:1C:0C:50:31:24:ED:64 Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a Certificate serial: 019B76EB33DF817E060C056C2FBC673BF3D4 Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200906 IP address blocks: 185.72.4.0/24 maxlen: 24 185.72.5.0/24 maxlen: 24 185.72.6.0/24 maxlen: 24 185.72.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:33:df:81:7e:06:0c:05:6c:2f:bc:67:3b:f3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bca3983ac782326a8d223331461c0c503124ed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:6b:4d:5f:61:3f:2d:8a:d3:e6:9e:d2:0b: 39:b5:e9:27:75:9e:b8:c1:9d:eb:7c:ed:0b:e3:1e: 60:d5:7b:24:44:cb:92:07:71:c8:fb:ec:9b:60:59: e5:10:d3:0c:49:69:ed:f4:00:3f:a6:f8:7c:70:19: d3:c7:f3:26:b4:3a:aa:f7:bb:40:bc:fa:4e:a7:dd: cc:2c:0c:33:6a:94:3f:92:43:4a:46:b6:c2:2e:f1: e5:da:96:7b:35:6a:b0:02:6e:0a:6f:f4:bf:5f:6d: 2d:e7:3a:54:6c:54:41:fc:24:f9:c8:68:08:38:93: cd:81:dd:a4:c7:7c:ce:16:b9:54:95:8b:15:3e:4b: 1b:ac:74:b4:1a:5e:34:ae:51:79:61:b7:6c:ae:45: 66:4b:57:76:34:c6:fb:e6:d6:7d:98:a5:ce:52:57: c7:3b:b0:1a:52:fe:59:c2:21:12:dc:ab:ff:85:17: 22:f0:76:ab:f9:bf:30:8f:9a:1c:be:11:63:6a:eb: 44:49:47:eb:4a:9c:b9:fd:aa:b2:86:8d:8e:f2:37: 90:aa:1f:f2:98:b0:1b:06:5b:70:5d:80:73:6a:f4: ff:25:93:11:98:9b:8d:83:ee:ab:ac:6a:96:55:c9: db:d7:76:35:06:2e:84:74:8c:72:be:0f:6c:43:b4: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A3:98:3A:C7:82:32:6A:8D:22:33:31:46:1C:0C:50:31:24:ED:64 X509v3 Authority Key Identifier: keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.4.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:2f:a9:75:00:be:e5:55:24:25:88:ad:d0:43:bf:13:44:55: 9b:81:02:7c:d9:00:c9:4a:2c:69:a2:40:cb:40:9a:95:21:7d: 9a:03:91:65:cf:77:27:b9:94:f6:15:6e:c3:c6:90:1b:78:cd: 9c:2f:e7:f8:d2:fd:0e:ae:68:c7:0c:c4:a6:66:60:87:34:8c: 1a:52:ad:db:09:40:b8:80:02:6d:da:03:e6:26:d8:ba:1f:74: 34:65:45:90:1b:03:40:b1:ce:07:32:bf:25:23:fb:1c:86:56: 87:e9:fb:10:ef:de:d7:28:f3:f4:ba:bd:65:1e:9c:27:9c:2e: 17:75:ab:1f:e6:47:be:31:d5:0f:76:26:7a:cc:f7:23:49:59: c8:b6:ba:5b:72:b7:cc:41:5f:8d:15:f5:03:d8:37:3c:cb:48: 91:92:fb:22:90:32:f4:af:2b:db:5b:2f:be:ed:b0:45:1b:ec: 0f:6e:75:d9:39:99:d0:89:8d:8c:60:fc:67:6e:97:07:c6:e3: d9:62:f9:88:45:fc:76:c7:0c:a5:96:40:35:6e:7f:b8:f3:38: b5:c1:f8:bd:65:61:a6:85:b7:fa:40:97:c9:21:93:6e:b8:fb: 68:72:2e:9a:2d:9d:93:aa:9f:d4:a2:ae:e9:67:0e:9d:26:83: 5b:9f:88:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zPfgX4GDAVsL7xnO/PUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZDM1ZTBkYTQzOWJlYTY1YzQ4MzI5Y2U5ZThiMTA5M2Y3 MjMwMGEwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2EzOTgzYWM3ODIzMjZhOGQyMjMzMzE0NjFjMGM1MDMxMjRlZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMRrTV9hPy2K0+ae0gs5tekndZ64 wZ3rfO0L4x5g1XskRMuSB3HI++ybYFnlENMMSWnt9AA/pvh8cBnTx/MmtDqq97tA vPpOp93MLAwzapQ/kkNKRrbCLvHl2pZ7NWqwAm4Kb/S/X20t5zpUbFRB/CT5yGgI OJPNgd2kx3zOFrlUlYsVPksbrHS0Gl40rlF5YbdsrkVmS1d2NMb75tZ9mKXOUlfH O7AaUv5ZwiES3Kv/hRci8Har+b8wj5ocvhFjautESUfrSpy5/aqyho2O8jeQqh/y mLAbBltwXYBzavT/JZMRmJuNg+6rrGqWVcnb13Y1Bi6EdIxyvg9sQ7RTFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLyjmDrHgjJqjSIzMUYcDFAxJO1kMB8GA1UdIwQY MBaAFKzTXg2kOb6mXEgynOnosQk/cjAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYt NjViYjFhODlmMjU5LzEvdktPWU9zZUNNbXFOSWpNeFJod01VREVrN1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYtNjViYjFhODlmMjU5 LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUgEMA0G CSqGSIb3DQEBCwUAA4IBAQAeL6l1AL7lVSQliK3QQ78TRFWbgQJ82QDJSixpokDL QJqVIX2aA5Flz3cnuZT2FW7DxpAbeM2cL+f40v0OrmjHDMSmZmCHNIwaUq3bCUC4 gAJt2gPmJti6H3Q0ZUWQGwNAsc4HMr8lI/schlaH6fsQ797XKPP0ur1lHpwnnC4X dasf5ke+MdUPdiZ6zPcjSVnItrpbcrfMQV+NFfUD2Dc8y0iRkvsikDL0ryvbWy++ 7bBFG+wPbnXZOZnQiY2MYPxnbpcHxuPZYvmIRfx2xwyllkA1bn+48zi1wfi9ZWGm hbf6QJfJIZNuuPtoci6aLZ2Tqp/Uoq7pZw6dJoNbn4gs -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:57 2026 by rpki-client