This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0tvIEbuOsedHi0UvXkMlWQ7rxl0.roa File: 0tvIEbuOsedHi0UvXkMlWQ7rxl0.roa (raw, json) Hash identifier: f6nwV9HYaNEXUFHVJes5YnU3UTwA9x8RGuv0+E1acSc= Subject key identifier: D2:DB:C8:11:BB:8E:B1:E7:47:8B:45:2F:5E:43:25:59:0E:EB:C6:5D Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A2BAE7E7A6EF19E7BABE58E09193 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0tvIEbuOsedHi0UvXkMlWQ7rxl0.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 37457 IP address blocks: 2.21.160.0/22 maxlen: 22 2.21.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a2:ba:e7:e7:a6:ef:19:e7:ba:be:58:e0:91:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2dbc811bb8eb1e7478b452f5e4325590eebc65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:2a:e1:b5:58:99:6e:72:15:22:f7:a1:c4: a9:29:f1:7f:cd:f7:37:c3:86:e6:20:5d:e1:7f:8b: 61:ca:73:cc:d4:fd:f2:06:b7:aa:c2:c4:13:a3:66: 3e:48:65:65:95:e8:14:85:0b:52:e9:63:10:7a:64: d5:9f:86:2d:06:05:78:c8:5f:88:7d:50:cb:e4:06: 43:58:37:6e:50:5f:44:e6:bf:da:95:29:f8:da:c9: 77:e2:fa:31:99:d2:01:65:e5:c6:dc:a2:88:c2:f3: e8:d3:ab:e5:63:97:c0:e0:f4:aa:4d:54:c9:46:15: 7a:e3:f8:71:15:83:23:49:d6:be:01:86:6e:2c:5e: 11:82:ee:0b:5b:97:96:09:b6:4b:87:a9:c6:70:3b: 8a:7f:d6:f7:4d:5a:4d:66:d5:b1:4c:3e:7d:28:4c: 6f:5f:4f:9d:b7:ac:ee:f0:6c:cc:0e:c1:ef:fa:fb: 67:b0:b2:ca:c6:64:33:8c:8f:e0:9b:9b:c2:34:ff: 75:ad:91:3b:00:06:82:ff:7d:0c:ab:ab:1e:63:56: f2:29:2b:fe:df:4e:b4:96:66:f7:0e:69:7d:e6:30: 7b:8e:ad:50:62:04:56:41:8e:ee:1a:c7:3f:8a:ca: 09:68:f3:e9:12:0f:36:17:f9:8e:ea:9e:9d:63:af: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:C8:11:BB:8E:B1:E7:47:8B:45:2F:5E:43:25:59:0E:EB:C6:5D X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0tvIEbuOsedHi0UvXkMlWQ7rxl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.21.160.0/22 2.21.232.0/22 Signature Algorithm: sha256WithRSAEncryption 40:7f:ae:e3:11:15:03:a2:cf:a9:a5:81:fc:a5:0b:f3:7e:35: e9:29:9d:7d:c3:49:fe:d0:e1:e1:cc:6f:69:b4:ad:5a:55:f9: 36:79:e9:b1:c1:de:38:e6:15:b9:ab:b8:29:4d:e3:8d:b0:97: 04:11:8b:54:62:dc:ea:92:2e:f0:d7:a9:56:58:fd:2c:ba:81: 9e:13:be:e2:71:64:09:0a:d0:30:eb:56:a3:1c:55:33:3d:8a: b9:d0:c6:f9:05:d3:b3:5e:41:00:59:d5:d4:57:8e:8a:b4:5f: bf:75:7a:5f:7f:ae:9f:95:a7:bf:7d:b2:30:c9:6e:9d:3a:dc: 69:32:f2:78:b9:b0:3e:70:53:5f:4b:48:0a:2b:3f:47:1e:a5: 79:bc:c3:cc:1e:27:69:c4:90:80:bb:17:34:3b:fe:5a:e9:1c: aa:a0:47:60:70:19:43:fb:84:61:8e:b7:68:a5:9c:ad:d4:f9: 49:6f:0d:95:ef:e9:79:aa:0e:d8:ec:df:40:70:17:d7:cf:b0: 2c:11:ff:f7:cf:3f:f9:ec:32:45:ec:eb:0f:f4:5b:e4:48:f7: 66:3a:ec:3c:21:d5:f4:2c:c7:a2:63:3a:41:a7:7f:7f:a9:75: 61:fc:b3:58:1b:33:17:ef:49:ca:a5:c7:94:14:1b:c5:6d:fc: 2d:80:d5:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FaK65+em7xnnur5Y4JGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmRiYzgxMWJiOGViMWU3NDc4YjQ1MmY1ZTQzMjU1OTBlZWJjNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC4q4bVYmW5yFSL3ocSpKfF/zfc3 w4bmIF3hf4thynPM1P3yBreqwsQTo2Y+SGVllegUhQtS6WMQemTVn4YtBgV4yF+I fVDL5AZDWDduUF9E5r/alSn42sl34voxmdIBZeXG3KKIwvPo06vlY5fA4PSqTVTJ RhV64/hxFYMjSda+AYZuLF4Rgu4LW5eWCbZLh6nGcDuKf9b3TVpNZtWxTD59KExv X0+dt6zu8GzMDsHv+vtnsLLKxmQzjI/gm5vCNP91rZE7AAaC/30Mq6seY1byKSv+ 3060lmb3Dml95jB7jq1QYgRWQY7uGsc/isoJaPPpEg82F/mO6p6dY68m8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNLbyBG7jrHnR4tFL15DJVkO68ZdMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvMHR2SUVidU9zZWRIaTBVdlhrTWxXUTdyeGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCAhWgAwQC AhXoMA0GCSqGSIb3DQEBCwUAA4IBAQBAf67jERUDos+ppYH8pQvzfjXpKZ19w0n+ 0OHhzG9ptK1aVfk2eemxwd445hW5q7gpTeONsJcEEYtUYtzqki7w16lWWP0suoGe E77icWQJCtAw61ajHFUzPYq50Mb5BdOzXkEAWdXUV46KtF+/dXpff66flae/fbIw yW6dOtxpMvJ4ubA+cFNfS0gKKz9HHqV5vMPMHidpxJCAuxc0O/5a6RyqoEdgcBlD +4RhjrdopZyt1PlJbw2V7+l5qg7Y7N9AcBfXz7AsEf/3zz/57DJF7OsP9FvkSPdm Ouw8IdX0LMeiYzpBp39/qXVh/LNYGzMX70nKpceUFBvFbfwtgNXa -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:17 2026 by rpki-client