This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/v7ov36hfvtk8wkcEWj0LQvv50EQ.roa File: v7ov36hfvtk8wkcEWj0LQvv50EQ.roa (raw, json) Hash identifier: z6k20v/tfXJDwNdPG7+trPkkzDOlvFnCMcAGQoe5GKs= Subject key identifier: BF:BA:2F:DF:A8:5F:BE:D9:3C:C2:47:04:5A:3D:0B:42:FB:F9:D0:44 Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65 Certificate serial: 019B7AC946BDAC68EEF5ADD6470844C38E38 Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/v7ov36hfvtk8wkcEWj0LQvv50EQ.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216282 IP address blocks: 185.98.161.0/24 maxlen: 24 195.184.234.0/24 maxlen: 24 2a13:e1c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:46:bd:ac:68:ee:f5:ad:d6:47:08:44:c3:8e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfba2fdfa85fbed93cc247045a3d0b42fbf9d044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:97:2d:85:ab:36:88:5e:b4:23:65:e0:94: 65:18:e6:34:a9:81:46:36:42:41:af:79:92:eb:39: 94:70:58:8b:1d:f1:b8:d8:76:40:fb:1b:61:99:f4: 18:06:be:b7:f1:ff:8d:92:ad:38:a1:6b:aa:01:65: dc:aa:a8:83:94:af:8c:18:1e:6c:de:5c:40:ec:c6: f0:1c:b0:38:45:ec:59:26:59:d5:a8:cc:1a:ef:8c: d6:8e:0e:17:1a:ef:16:d5:0e:5a:b7:39:5f:91:6b: 6e:6b:b4:4c:35:a0:fc:ae:f7:3e:dd:02:84:10:6e: 47:c4:28:7a:e8:5b:9f:a6:41:af:7a:73:f5:01:9e: b0:c5:f7:e7:2e:5e:a4:67:e1:7b:a6:8a:52:69:38: ae:ed:4e:cd:c0:f0:eb:64:48:c9:23:2a:d7:b4:3a: b6:cc:0c:ea:5c:f1:07:9a:2f:de:38:ad:da:09:8c: b3:d2:bf:a8:31:df:80:aa:28:94:23:bb:9b:51:85: 2e:b9:f8:e9:3a:48:fd:72:21:d7:15:ce:b3:0f:e2: 4f:0e:90:d3:fc:10:dd:40:5b:3a:d9:e9:cc:69:01: 22:73:ff:d8:36:27:61:be:80:09:0f:bf:32:29:c5: b6:03:27:54:3e:0a:83:cf:9f:9a:55:a7:f4:3e:44: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:2F:DF:A8:5F:BE:D9:3C:C2:47:04:5A:3D:0B:42:FB:F9:D0:44 X509v3 Authority Key Identifier: keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/v7ov36hfvtk8wkcEWj0LQvv50EQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.161.0/24 195.184.234.0/24 IPv6: 2a13:e1c0::/29 Signature Algorithm: sha256WithRSAEncryption 61:7c:2d:92:69:3d:e8:40:7a:78:b3:85:b5:59:02:d9:ab:27: 70:a5:3e:bf:91:3c:75:93:80:4f:df:66:8c:11:82:76:24:b9: 2c:14:7c:8d:c5:4d:c4:25:6a:85:ee:33:14:79:0a:6a:fd:aa: b5:f1:92:33:24:86:c2:44:f7:72:f2:3e:50:a2:77:a7:a7:8d: 1d:56:d8:15:2b:25:1e:0b:b6:d3:c4:14:d0:9d:3e:9a:98:93: 7e:68:eb:93:6f:15:b7:e6:a8:a9:96:fb:bd:fa:73:e4:2d:bd: 39:f5:f5:4a:f7:3b:00:c7:44:18:1b:05:85:03:79:91:8f:1c: f1:f7:c4:f3:47:a6:de:9c:ee:78:b9:c3:b3:ad:c8:5d:b6:00: b7:2a:1b:2a:bb:28:61:f3:04:a1:cc:b3:9c:f1:d0:07:db:a9: 4d:eb:c6:53:e8:09:32:d3:1e:59:46:f1:67:d9:4a:46:43:24: 81:37:4e:f5:4d:b0:7f:a3:f3:40:69:5f:c6:09:2f:ad:a4:a7: a1:a3:b9:a1:9f:30:88:63:56:6a:df:80:74:d9:eb:9f:e1:96: cf:e0:8d:d3:20:6d:2c:70:bd:2c:3d:ff:71:06:12:7f:3e:ff: 4f:b7:d2:04:6c:fb:f8:b0:5c:b8:71:e8:0b:82:e9:9d:0b:63: 8e:cc:10:c9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yUa9rGju9a3WRwhEw444MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YmJkMWJmY2EyZjhhMTU3OGZhYWI1YjEwYzBmYzM1NTU2 MWNjNjUwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmJhMmZkZmE4NWZiZWQ5M2NjMjQ3MDQ1YTNkMGI0MmZiZjlkMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D+XLYWrNohetCNl4JRlGOY0qYFG NkJBr3mS6zmUcFiLHfG42HZA+xthmfQYBr638f+Nkq04oWuqAWXcqqiDlK+MGB5s 3lxA7MbwHLA4RexZJlnVqMwa74zWjg4XGu8W1Q5atzlfkWtua7RMNaD8rvc+3QKE EG5HxCh66FufpkGvenP1AZ6wxffnLl6kZ+F7popSaTiu7U7NwPDrZEjJIyrXtDq2 zAzqXPEHmi/eOK3aCYyz0r+oMd+AqiiUI7ubUYUuufjpOkj9ciHXFc6zD+JPDpDT /BDdQFs62enMaQEic//YNidhvoAJD78yKcW2AydUPgqDz5+aVaf0PkRfwQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL+6L9+oX77ZPMJHBFo9C0L7+dBEMB8GA1UdIwQY MBaAFJa70b/KL4oVePqrWxDA/DVVYcxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83M2Y1YjUtMjkzZC00MDM1LTkyYWMt YTg3ZTI4NzJhZDhhLzEvdjdvdjM2aGZ2dGs4d2tjRVdqMExRdnY1MEVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83M2Y1YjUtMjkzZC00MDM1LTkyYWMtYTg3ZTI4NzJhZDhh LzEvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuWKhAwQA w7jqMA0EAgACMAcDBQMqE+HAMA0GCSqGSIb3DQEBCwUAA4IBAQBhfC2SaT3oQHp4 s4W1WQLZqydwpT6/kTx1k4BP32aMEYJ2JLksFHyNxU3EJWqF7jMUeQpq/aq18ZIz JIbCRPdy8j5Qonenp40dVtgVKyUeC7bTxBTQnT6amJN+aOuTbxW35qiplvu9+nPk Lb059fVK9zsAx0QYGwWFA3mRjxzx98TzR6benO54ucOzrchdtgC3Khsquyhh8wSh zLOc8dAH26lN68ZT6Aky0x5ZRvFn2UpGQySBN071TbB/o/NAaV/GCS+tpKeho7mh nzCIY1Zq34B02euf4ZbP4I3TIG0scL0sPf9xBhJ/Pv9Pt9IEbPv4sFy4cegLgumd C2OOzBDJ -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:47 2026 by rpki-client