This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/vdJpIWF3qd5NxhXgl5k-UUxznf0.roa File: vdJpIWF3qd5NxhXgl5k-UUxznf0.roa (raw, json) Hash identifier: eqH+U1r4sgSGA1eeeV2z9kxbviVmq9SrnjfLcDQawd4= Subject key identifier: BD:D2:69:21:61:77:A9:DE:4D:C6:15:E0:97:99:3E:51:4C:73:9D:FD Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F84746C5715C15B0D18982F26CC38B2 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/vdJpIWF3qd5NxhXgl5k-UUxznf0.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206595 IP address blocks: 176.235.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:74:6c:57:15:c1:5b:0d:18:98:2f:26:cc:38:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd269216177a9de4dc615e097993e514c739dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:dc:e2:0e:a0:b0:dd:94:81:ed:68:8f:61: 2c:ba:e8:00:91:61:7e:2f:e5:42:b3:c8:68:73:37: 9b:c1:9c:ec:97:59:ff:32:d1:fd:90:f2:56:be:6b: 0f:d3:82:54:da:64:17:22:15:a3:0b:76:fe:f1:14: 5d:ea:c4:7f:04:9c:5b:22:71:40:b1:d3:09:12:cc: 4c:6c:bb:cc:0c:2f:e7:ff:da:20:f3:b9:ea:03:6a: 2f:37:78:9d:52:d4:00:dd:ef:0d:1a:2c:cf:0e:00: 1a:3b:59:e6:06:db:8e:7f:aa:96:c3:45:56:3d:ec: 96:e3:21:72:14:9c:d4:d5:ec:4f:26:9c:0c:b4:a5: 6c:58:7e:99:af:b7:9c:f5:a1:98:4b:0e:77:61:c0: 80:72:b2:60:74:1e:2b:bb:9a:2a:aa:e6:22:d3:87: d4:48:b8:5e:fb:d4:7c:27:4a:cb:9d:04:cb:85:7f: 63:cd:b1:c7:b5:71:56:e4:2f:cc:9a:17:2c:a3:b1: 48:9c:e6:16:8e:9d:3c:1b:9f:1d:bc:d4:ee:0e:39: 1e:20:aa:53:7a:89:c0:f5:f3:c6:a1:9f:f8:bb:36: f6:93:2b:01:08:62:ca:ff:36:c6:66:2c:fb:10:3f: c1:fa:99:96:a5:3e:4a:8e:bf:db:a8:a4:a9:0c:44: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:69:21:61:77:A9:DE:4D:C6:15:E0:97:99:3E:51:4C:73:9D:FD X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/vdJpIWF3qd5NxhXgl5k-UUxznf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.235.96.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:0d:ba:93:8e:5e:c1:59:86:a5:9f:4d:b2:fb:35:c8:7b:a3: 5f:35:3b:3a:54:1a:b3:b5:13:0c:5a:42:25:83:54:75:76:2d: 56:e9:98:0c:f2:8e:a3:a3:63:78:a8:fc:78:dc:c9:20:50:03: 0a:b2:f1:c8:fa:92:c6:99:10:04:ae:69:5f:9a:d5:12:66:31: 59:89:53:85:89:c8:14:2b:12:8f:88:2a:5d:33:e4:f5:ae:f2: c5:04:94:b5:15:33:30:35:4b:0f:aa:a4:35:a7:e9:aa:74:73: 76:63:b0:13:f0:92:55:b2:5a:42:93:d0:93:05:bf:02:a6:e6: 70:62:d0:fe:70:7d:5a:90:0c:d2:bd:15:43:e6:5b:aa:52:e5: d1:ac:7f:b2:9b:eb:5f:50:e9:00:d8:b2:bd:a7:a4:05:67:32: eb:12:63:6b:69:99:92:2c:8d:1f:de:42:ae:58:c2:66:6b:57: 1b:69:e8:e4:f2:be:21:5c:48:3e:81:fe:d1:f8:e8:63:94:df: 66:07:c9:8d:10:47:3b:f0:d1:24:5d:a3:30:0b:e2:4b:a2:45: 61:59:18:65:69:f4:42:8d:62:4a:3a:48:23:60:95:43:91:7b: f7:c9:87:f7:10:53:8c:e4:1f:3a:50:37:a3:1b:18:a2:b7:58: 60:54:96:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHRsVxXBWw0YmC8mzDiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQyNjkyMTYxNzdhOWRlNGRjNjE1ZTA5Nzk5M2U1MTRjNzM5ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZLc4g6gsN2Uge1oj2EsuugAkWF+ L+VCs8hoczebwZzsl1n/MtH9kPJWvmsP04JU2mQXIhWjC3b+8RRd6sR/BJxbInFA sdMJEsxMbLvMDC/n/9og87nqA2ovN3idUtQA3e8NGizPDgAaO1nmBtuOf6qWw0VW PeyW4yFyFJzU1exPJpwMtKVsWH6Zr7ec9aGYSw53YcCAcrJgdB4ru5oqquYi04fU SLhe+9R8J0rLnQTLhX9jzbHHtXFW5C/Mmhcso7FInOYWjp08G58dvNTuDjkeIKpT eonA9fPGoZ/4uzb2kysBCGLK/zbGZiz7ED/B+pmWpT5Kjr/bqKSpDERcfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3SaSFhd6neTcYV4JeZPlFMc539MB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvdmRKcElXRjNxZDVOeGhYZ2w1ay1VVXh6bmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsOtgMA0G CSqGSIb3DQEBCwUAA4IBAQAODbqTjl7BWYaln02y+zXIe6NfNTs6VBqztRMMWkIl g1R1di1W6ZgM8o6jo2N4qPx43MkgUAMKsvHI+pLGmRAErmlfmtUSZjFZiVOFicgU KxKPiCpdM+T1rvLFBJS1FTMwNUsPqqQ1p+mqdHN2Y7AT8JJVslpCk9CTBb8CpuZw YtD+cH1akAzSvRVD5luqUuXRrH+ym+tfUOkA2LK9p6QFZzLrEmNraZmSLI0f3kKu WMJma1cbaejk8r4hXEg+gf7R+OhjlN9mB8mNEEc78NEkXaMwC+JLokVhWRhlafRC jWJKOkgjYJVDkXv3yYf3EFOM5B86UDejGxiit1hgVJYf -----END CERTIFICATE-----Generated at Mon Jan 26 11:34:32 2026 by rpki-client