This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa File: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (raw, json) Hash identifier: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU= Subject key identifier: BC:D7:64:79:1C:0C:E5:CB:2A:B7:65:5D:0C:27:96:5D:5E:4B:A9:C8 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8A968B7DFB4830F07B2D6E00EEAD1 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199270 IP address blocks: 141.226.249.0/24 maxlen: 24 185.23.172.0/23 maxlen: 24 185.23.172.0/24 maxlen: 24 185.23.174.0/24 maxlen: 24 2a00:66a0::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a9:68:b7:df:b4:83:0f:07:b2:d6:e0:0e:ea:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcd764791c0ce5cb2ab7655d0c27965d5e4ba9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:26:8d:b1:f3:3d:87:ef:b8:9b:05:33:05: 9b:32:02:4f:bf:ae:a5:3e:cc:53:2e:0d:3a:1d:6d: 99:fe:fb:08:89:16:59:7e:e7:eb:3b:f1:bc:50:68: ea:8c:ab:69:c2:f6:10:58:13:77:9c:f9:48:2e:0b: a9:b7:78:ae:7b:b3:8c:6d:33:bb:0e:cb:c0:7c:d4: c6:df:ec:ba:da:4a:92:04:e1:4f:8b:cd:b5:af:fd: e4:f1:74:f3:c2:88:75:e5:e9:0b:e3:af:5c:a9:b6: 6a:cc:ba:93:c1:01:c0:7e:c6:3c:ba:56:c4:c0:62: 37:af:a8:fb:6c:2d:24:5c:4d:41:9d:b1:da:4a:02: 4b:b7:31:25:0c:7f:d1:a5:34:49:d4:db:34:d7:99: 5a:0f:0d:cc:0f:89:e3:ec:9d:1a:82:8f:b4:4f:23: d0:a7:d0:bc:ec:9c:11:d6:d1:1a:fb:e8:0d:ba:20: 90:58:ab:ad:63:f5:2c:e8:73:94:bb:b4:07:42:38: 5b:da:2c:26:1f:69:60:b6:42:f8:1b:eb:57:f9:54: 8d:ac:be:3d:02:9f:0b:e8:2f:ab:7f:45:3b:ab:96: 9b:14:18:26:80:be:c1:62:94:cc:69:1e:a7:ae:60: a5:31:c5:be:8f:37:bd:37:88:3e:5a:a9:a2:6a:f5: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D7:64:79:1C:0C:E5:CB:2A:B7:65:5D:0C:27:96:5D:5E:4B:A9:C8 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.249.0/24 185.23.172.0-185.23.174.255 IPv6: 2a00:66a0::/35 Signature Algorithm: sha256WithRSAEncryption 59:9d:5c:6f:b6:a2:8f:9d:80:bb:98:10:9f:60:ca:87:54:be: 92:75:d9:bf:9c:d3:ac:f7:30:6b:fc:1a:f4:b9:41:47:92:b5: 7d:ab:2d:84:5e:96:c2:2c:7a:a6:ec:6d:bf:b4:9c:8b:35:9d: d0:23:0f:41:62:b8:c9:80:55:5a:15:e1:ab:70:60:41:3d:48: a3:65:ec:dd:ee:b9:9e:8d:a4:04:19:52:b3:20:94:19:65:41: 05:8c:b3:60:b3:75:dc:65:87:ad:88:7c:c3:02:45:94:59:e5: 6f:80:fc:04:e0:23:fe:77:b9:bf:45:7f:4a:99:92:c4:b4:17: 90:08:3b:95:b1:10:33:7c:39:79:74:c6:6d:e0:c7:68:b0:40: a6:78:69:33:12:19:32:f7:c1:3a:a6:63:c1:0e:26:78:1d:48: b3:49:27:58:94:a2:a1:d5:1e:99:fb:0e:ac:19:6c:10:c1:9e: 65:b1:75:3e:17:13:f3:d6:4b:58:fa:f4:df:fc:dc:e8:a7:96: 1e:e0:ac:e4:27:c3:55:03:f6:a4:b9:cb:56:0f:1c:8f:28:26: ec:02:37:5a:d3:c6:d2:78:36:fe:a7:ca:c1:f2:c1:4e:27:a1: 5a:55:6f:93:32:27:89:e6:98:95:0f:4c:43:5d:65:43:f3:49: 58:e2:d2:ee -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9yKlot9+0gw8HstbgDurRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2Q3NjQ3OTFjMGNlNWNiMmFiNzY1NWQwYzI3OTY1ZDVlNGJhOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqAmjbHzPYfvuJsFMwWbMgJPv66l PsxTLg06HW2Z/vsIiRZZfufrO/G8UGjqjKtpwvYQWBN3nPlILgupt3iue7OMbTO7 DsvAfNTG3+y62kqSBOFPi821r/3k8XTzwoh15ekL469cqbZqzLqTwQHAfsY8ulbE wGI3r6j7bC0kXE1BnbHaSgJLtzElDH/RpTRJ1Ns015laDw3MD4nj7J0ago+0TyPQ p9C87JwR1tEa++gNuiCQWKutY/Us6HOUu7QHQjhb2iwmH2lgtkL4G+tX+VSNrL49 Ap8L6C+rf0U7q5abFBgmgL7BYpTMaR6nrmClMcW+jze9N4g+WqmiavXEGwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLzXZHkcDOXLKrdlXQwnll1eS6nIMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvdk5ka2VSd001Y3NxdDJWZERDZVdYVjVMcWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUAwQAjeL5MAwD BAK5F6wDBAC5F64wDgQCAAIwCAMGBSoAZqAAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ nVxvtqKPnYC7mBCfYMqHVL6Sddm/nNOs9zBr/Br0uUFHkrV9qy2EXpbCLHqm7G2/ tJyLNZ3QIw9BYrjJgFVaFeGrcGBBPUijZezd7rmejaQEGVKzIJQZZUEFjLNgs3Xc ZYetiHzDAkWUWeVvgPwE4CP+d7m/RX9KmZLEtBeQCDuVsRAzfDl5dMZt4MdosECm eGkzEhky98E6pmPBDiZ4HUizSSdYlKKh1R6Z+w6sGWwQwZ5lsXU+FxPz1ktY+vTf /Nzop5Ye4KzkJ8NVA/akuctWDxyPKCbsAjda08bSeDb+p8rB8sFOJ6FaVW+TMieJ 5piVD0xDXWVD80lY4tLu -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:55 2026 by rpki-client