This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/bVJlw0CMypGukwFnB0_d8pzU81M.roa File: bVJlw0CMypGukwFnB0_d8pzU81M.roa (raw, json) Hash identifier: zEEdGRlk3MMs1DhwBYziS+veVXdQap9w54v8T/tTm2M= Subject key identifier: 6D:52:65:C3:40:8C:CA:91:AE:93:01:67:07:4F:DD:F2:9C:D4:F3:53 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8460D0EC6FD76E70114143A72185EA Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/bVJlw0CMypGukwFnB0_d8pzU81M.roa Signing time: Fri 02 Jan 2026 16:22:20 +0000 ROA not before: Fri 02 Jan 2026 16:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35367 IP address blocks: 176.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:60:d0:ec:6f:d7:6e:70:11:41:43:a7:21:85:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d5265c3408cca91ae930167074fddf29cd4f353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:92:1d:73:9c:a1:f6:d5:56:29:62:7e:ed:bb: 71:4c:89:45:ae:ed:35:02:2a:0d:89:f6:06:2f:bb: b7:0c:c4:37:f0:0b:c3:08:aa:a9:70:dc:68:50:2a: e1:7a:6c:49:e2:e2:cc:36:15:8d:cf:1a:5b:40:65: 81:f7:81:d9:63:84:53:99:4e:26:69:1c:6d:ff:e8: 60:ea:6a:94:2d:a5:f0:65:bd:a8:d1:c5:1d:10:1b: 07:47:75:d4:ab:2f:c0:98:f8:41:2b:19:77:2e:d0: a5:27:66:e2:2c:e1:f4:22:a9:6e:7b:db:60:69:c0: 73:68:98:2f:14:f5:c1:8b:80:90:97:30:9d:a3:5f: 83:25:47:d2:a4:14:a7:ef:5e:c6:b0:01:ee:c3:90: f8:40:04:2b:d4:b2:a2:da:84:5a:63:0b:f3:09:8d: ae:70:f8:78:eb:da:ee:c3:5b:74:17:97:d8:d4:4e: d2:6f:ea:9f:7b:77:e9:63:28:bb:51:04:b2:d6:4c: 3f:06:6c:62:a9:6a:34:af:88:81:c9:df:bc:63:40: 0a:e2:76:00:79:c8:21:b4:d7:50:58:ba:dc:f4:d7: 82:61:33:81:62:a3:f6:ac:5b:50:04:b3:3d:89:ff: d3:93:8d:a2:15:ed:62:e2:d1:8c:93:e2:c7:f3:e7: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:65:C3:40:8C:CA:91:AE:93:01:67:07:4F:DD:F2:9C:D4:F3:53 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/bVJlw0CMypGukwFnB0_d8pzU81M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.236.247.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c6:74:c4:99:cd:81:9f:f9:43:b6:77:da:cb:07:1e:d8:e8: 3b:08:df:ad:7f:ff:ad:a6:15:93:08:64:08:76:4c:42:a8:cc: 00:0b:74:4c:9c:6d:13:23:1a:6e:56:8a:f7:eb:87:27:3f:92: 19:b9:60:24:b9:06:4f:0a:4e:f7:d2:7f:bb:47:b5:24:02:ba: 75:3c:a0:63:a4:13:ce:db:2b:65:28:52:79:a4:61:af:36:31: 42:aa:e7:7f:f1:d3:9e:93:46:82:99:6c:dd:0c:50:a5:f7:11: 9b:47:43:f3:ff:f2:b1:39:c2:eb:7a:85:b6:5d:6b:eb:7d:45: e3:3b:a9:b4:87:b7:48:08:c1:94:45:d6:1f:a1:5b:ed:2b:26: 52:50:aa:3b:c4:5f:49:8c:18:bd:5e:90:45:99:78:ce:a1:98: f4:bc:e3:4c:05:76:87:cc:c2:0c:1f:e7:f6:f8:fa:04:93:26: d7:a7:65:28:c4:28:8c:a1:8d:e2:28:2d:9b:15:85:d5:bc:f6: a9:eb:72:6d:b5:63:b5:a0:c8:e1:b2:96:05:4e:46:79:b0:5b: 36:98:b5:3a:b7:f8:30:dc:cf:4d:42:64:0e:18:63:d7:3d:4b: b6:b3:f8:9e:e2:23:28:6b:41:af:2f:3d:8c:0f:37:ed:5a:34: 04:6c:22:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGDQ7G/XbnARQUOnIYXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDUyNjVjMzQwOGNjYTkxYWU5MzAxNjcwNzRmZGRmMjljZDRmMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pIdc5yh9tVWKWJ+7btxTIlFru01 AioNifYGL7u3DMQ38AvDCKqpcNxoUCrhemxJ4uLMNhWNzxpbQGWB94HZY4RTmU4m aRxt/+hg6mqULaXwZb2o0cUdEBsHR3XUqy/AmPhBKxl3LtClJ2biLOH0Iqlue9tg acBzaJgvFPXBi4CQlzCdo1+DJUfSpBSn717GsAHuw5D4QAQr1LKi2oRaYwvzCY2u cPh469ruw1t0F5fY1E7Sb+qfe3fpYyi7UQSy1kw/BmxiqWo0r4iByd+8Y0AK4nYA ecghtNdQWLrc9NeCYTOBYqP2rFtQBLM9if/Tk42iFe1i4tGMk+LH8+dT+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1SZcNAjMqRrpMBZwdP3fKc1PNTMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvYlZKbHcwQ015cEd1a3dGbkIwX2Q4cHpVODFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsOz3MA0G CSqGSIb3DQEBCwUAA4IBAQByxnTEmc2Bn/lDtnfaywce2Og7CN+tf/+tphWTCGQI dkxCqMwAC3RMnG0TIxpuVor364cnP5IZuWAkuQZPCk730n+7R7UkArp1PKBjpBPO 2ytlKFJ5pGGvNjFCqud/8dOek0aCmWzdDFCl9xGbR0Pz//KxOcLreoW2XWvrfUXj O6m0h7dICMGURdYfoVvtKyZSUKo7xF9JjBi9XpBFmXjOoZj0vONMBXaHzMIMH+f2 +PoEkybXp2UoxCiMoY3iKC2bFYXVvPap63JttWO1oMjhspYFTkZ5sFs2mLU6t/gw 3M9NQmQOGGPXPUu2s/ie4iMoa0GvLz2MDzftWjQEbCKq -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:46 2026 by rpki-client