This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/fVvGqH3zEVd_s4J0halsJF-eP-s.roa File: fVvGqH3zEVd_s4J0halsJF-eP-s.roa (raw, json) Hash identifier: orRehBWRsFtnD+6UipYdY3n2n1iHa23oEjEmiLrn/lU= Subject key identifier: 7D:5B:C6:A8:7D:F3:11:57:7F:B3:82:74:85:A9:6C:24:5F:9E:3F:EB Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Certificate serial: 019B79104E23EB93DCA78D8FD0D9C8B8A74E Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/fVvGqH3zEVd_s4J0halsJF-eP-s.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44763 IP address blocks: 93.93.72.0/21 maxlen: 21 176.241.232.0/21 maxlen: 24 185.79.84.0/24 maxlen: 24 185.79.85.0/24 maxlen: 24 2a00:1548::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4e:23:eb:93:dc:a7:8d:8f:d0:d9:c8:b8:a7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d5bc6a87df311577fb3827485a96c245f9e3feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:bf:0c:3d:b9:54:ce:97:1d:09:3b:38:88: de:e4:4f:ca:99:59:18:9d:ba:68:03:db:3b:b7:40: 9b:4d:05:00:3f:dc:33:3b:1c:ae:67:d2:17:a2:73: db:c1:36:97:7c:47:e7:c2:58:a1:ca:96:56:7e:84: 87:ff:7c:41:d5:73:01:a8:01:17:55:c7:c2:5f:f9: a0:27:d6:25:77:66:ec:9c:5f:72:33:7b:62:5d:77: 59:fd:5f:bc:0c:f6:2a:e3:73:88:56:14:06:69:8e: 24:b4:b1:e4:a3:9d:7e:58:27:18:1a:93:ef:cf:36: c8:0a:f7:cb:33:15:2e:28:05:0b:28:83:86:72:3d: 22:c3:08:6d:9b:43:50:87:1f:a5:57:90:bd:58:47: 1e:58:60:63:df:a4:9a:ae:82:88:c1:5c:d7:78:02: ab:7c:3f:16:29:1b:4f:e3:2b:9d:a3:34:69:cf:fb: 57:c5:3d:49:b0:3d:b5:b5:9b:96:1d:eb:06:49:bd: 42:6a:9f:c8:89:77:c8:e1:04:ab:57:a5:31:67:60: f7:33:b2:49:2d:07:56:76:da:9c:5a:9f:d0:fc:55: e2:ce:c3:9a:8f:5a:fe:c9:c3:f5:6a:f7:fb:33:c6: 68:16:95:d0:cd:fb:70:b5:72:83:3a:40:a5:8d:68: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:C6:A8:7D:F3:11:57:7F:B3:82:74:85:A9:6C:24:5F:9E:3F:EB X509v3 Authority Key Identifier: keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/fVvGqH3zEVd_s4J0halsJF-eP-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.72.0/21 176.241.232.0/21 185.79.84.0/23 IPv6: 2a00:1548::/32 Signature Algorithm: sha256WithRSAEncryption 56:5f:f9:17:ce:3f:fb:bc:0b:03:f3:6e:ed:3e:7b:00:22:8e: 62:27:cf:73:42:12:c2:b8:df:6d:1b:d6:64:a3:1b:51:63:d0: 12:39:0d:07:ef:20:da:17:f3:7a:13:90:10:35:cc:1a:7e:50: 07:90:8c:e3:b8:c0:2d:5f:c0:3f:2f:cc:7d:4f:0c:01:30:8d: 53:29:26:39:9d:f9:32:db:d1:ca:ae:fe:5b:07:fd:96:e2:c6: 15:5a:ae:c7:dc:de:1e:04:69:c3:b9:3b:0e:9b:f4:b3:27:b6: 19:d3:d6:a6:0d:24:1d:3e:ab:b0:9a:50:27:71:cf:4a:cb:cc: 80:4a:0d:20:4e:83:f5:53:da:18:c4:f2:36:c9:00:bf:d3:5b: 9f:48:78:7e:af:24:0a:d5:5a:50:2b:26:d2:b5:62:af:d2:ef: 7e:8a:19:d1:5c:46:b6:1f:7c:5c:c0:74:c7:1e:a7:5d:4b:51: 8b:f9:49:52:c2:7f:51:56:36:5a:ad:c8:dd:0d:ef:5c:e1:a6: d6:4e:73:48:32:58:93:eb:29:6e:38:c3:f4:32:d2:3d:e4:a8: 83:42:bd:b5:e6:e8:4d:41:f0:41:e9:0e:71:33:58:93:09:49: 76:ca:aa:f9:56:91:ab:2c:5d:44:24:a9:fa:ce:74:93:c0:73: e3:22:15:4c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EE4j65Pcp42P0NnIuKdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3 YThkZDIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDViYzZhODdkZjMxMTU3N2ZiMzgyNzQ4NWE5NmMyNDVmOWUzZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr+/DD25VM6XHQk7OIje5E/KmVkY nbpoA9s7t0CbTQUAP9wzOxyuZ9IXonPbwTaXfEfnwlihypZWfoSH/3xB1XMBqAEX VcfCX/mgJ9Yld2bsnF9yM3tiXXdZ/V+8DPYq43OIVhQGaY4ktLHko51+WCcYGpPv zzbICvfLMxUuKAULKIOGcj0iwwhtm0NQhx+lV5C9WEceWGBj36SaroKIwVzXeAKr fD8WKRtP4yudozRpz/tXxT1JsD21tZuWHesGSb1Cap/IiXfI4QSrV6UxZ2D3M7JJ LQdWdtqcWp/Q/FXizsOaj1r+ycP1avf7M8ZoFpXQzftwtXKDOkCljWjQOQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH1bxqh98xFXf7OCdIWpbCRfnj/rMB8GA1UdIwQY MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt NDFmNjJkYTRlZGFiLzEvZlZ2R3FIM3pFVmRfczRKMGhhbHNKRi1lUC1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV1IAwQD sPHoAwQBuU9UMA0EAgACMAcDBQAqABVIMA0GCSqGSIb3DQEBCwUAA4IBAQBWX/kX zj/7vAsD827tPnsAIo5iJ89zQhLCuN9tG9ZkoxtRY9ASOQ0H7yDaF/N6E5AQNcwa flAHkIzjuMAtX8A/L8x9TwwBMI1TKSY5nfky29HKrv5bB/2W4sYVWq7H3N4eBGnD uTsOm/SzJ7YZ09amDSQdPquwmlAncc9Ky8yASg0gToP1U9oYxPI2yQC/01ufSHh+ ryQK1VpQKybStWKv0u9+ihnRXEa2H3xcwHTHHqddS1GL+UlSwn9RVjZarcjdDe9c 4abWTnNIMliT6yluOMP0MtI95KiDQr215uhNQfBB6Q5xM1iTCUl2yqr5VpGrLF1E JKn6znSTwHPjIhVM -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:06 2026 by rpki-client