This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/vHsVg6hD3ixc7vhavhFacUnxI2c.roa File: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (raw, json) Hash identifier: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk= Subject key identifier: BC:7B:15:83:A8:43:DE:2C:5C:EE:F8:5A:BE:11:5A:71:49:F1:23:67 Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c Certificate serial: 019B7E3776249DC0FF7E5872153A883A8B4E Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/vHsVg6hD3ixc7vhavhFacUnxI2c.roa Signing time: Fri 02 Jan 2026 10:18:42 +0000 ROA not before: Fri 02 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211878 IP address blocks: 45.152.88.0/22 maxlen: 24 2a0f:5100::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:76:24:9d:c0:ff:7e:58:72:15:3a:88:3a:8b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c Validity Not Before: Jan 2 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc7b1583a843de2c5ceef85abe115a7149f12367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:f2:d1:80:4e:3b:e1:bf:b0:c4:43:45:17: 37:a1:85:72:d3:f8:da:b0:7b:5e:6a:91:0e:5f:45: 75:15:41:35:00:b1:8a:8a:7c:dd:12:5a:20:d7:43: c3:38:ec:ce:25:4d:64:2d:e2:ce:f7:ca:d0:67:ae: e3:8d:d2:28:96:75:a5:03:6f:fa:98:31:cf:3b:f1: 23:3f:64:d3:3a:3d:87:c4:36:ea:f1:e5:09:23:33: 4e:6f:31:b4:96:9e:4a:ff:bd:b0:31:2e:50:89:94: 55:49:1e:6e:c6:13:79:ad:44:b4:a9:3d:fa:b0:fd: a7:26:39:27:cc:c9:5a:b4:e3:d1:57:cd:39:50:32: 0c:80:09:6a:b1:ce:89:cf:c5:8e:b2:bb:c2:a2:37: 75:6f:f9:48:aa:0a:4e:19:02:fb:93:8c:35:89:17: 56:b7:89:e4:9b:0e:6a:f8:65:85:1a:6a:c7:85:a9: bd:db:93:d2:a5:30:ac:76:70:d2:fa:27:35:0e:cd: 4d:a3:39:e7:e4:f4:07:46:c8:a5:63:d7:c2:ad:1e: 02:24:f2:66:ea:5f:ff:cf:8b:58:0c:ae:51:cb:e8: 31:c2:ca:a4:93:57:fc:e8:7f:19:20:23:66:20:b4: f0:ed:67:77:17:95:fc:ee:d7:9d:bc:0a:d7:43:98: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:15:83:A8:43:DE:2C:5C:EE:F8:5A:BE:11:5A:71:49:F1:23:67 X509v3 Authority Key Identifier: keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/vHsVg6hD3ixc7vhavhFacUnxI2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.88.0/22 IPv6: 2a0f:5100::/29 Signature Algorithm: sha256WithRSAEncryption 8a:d6:f4:bd:9e:95:95:c3:3b:98:76:73:94:bb:2d:9c:4d:48: de:75:22:6d:e6:fb:6b:7d:37:76:a9:50:2a:94:14:06:6e:9b: 7f:73:ae:ef:e1:8f:5c:ae:b2:87:30:00:9a:aa:44:41:9c:be: 68:70:3c:e2:4d:3e:7d:ed:45:d3:1c:1b:7e:3e:53:a1:0f:17: 52:7d:06:c0:71:72:5f:3a:ca:3f:4c:4a:d5:89:56:ee:55:ce: 13:fd:5a:ae:fa:3c:3d:90:5e:40:d7:eb:eb:33:b9:6c:56:ec: f6:80:c3:b8:d8:16:60:85:80:20:6b:6b:cf:5e:58:3e:76:8e: af:85:04:ab:80:3e:23:70:ce:53:4e:1a:1e:f7:f3:ff:0f:73: 1b:9b:8b:9f:a9:9b:21:52:00:db:63:a9:9e:cd:cc:69:80:f6: 1f:13:96:11:43:0e:ea:aa:3a:69:35:bd:86:0e:28:78:f7:e3: 17:26:31:9c:fa:f7:3a:8a:15:d5:5c:a6:4d:48:3a:6b:ad:85: 17:de:06:a5:e7:c8:f2:29:f5:c6:a4:f9:52:eb:46:d2:ce:11: 67:66:1c:1d:32:d8:7b:5f:24:2d:f5:98:19:c7:c5:0d:ea:fa: d6:e6:2a:63:32:0d:15:88:f4:47:0e:a1:f3:7d:b6:9b:84:12: 4e:a0:9e:07 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N3YkncD/flhyFTqIOotOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDMyYmRiMTI4Yzg2ZTAwYjIxYzc3OTU5YTgwMTFjNDBk MDY1MGMwHhcNMjYwMTAyMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzdiMTU4M2E4NDNkZTJjNWNlZWY4NWFiZTExNWE3MTQ5ZjEyMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL7y0YBOO+G/sMRDRRc3oYVy0/ja sHteapEOX0V1FUE1ALGKinzdElog10PDOOzOJU1kLeLO98rQZ67jjdIolnWlA2/6 mDHPO/EjP2TTOj2HxDbq8eUJIzNObzG0lp5K/72wMS5QiZRVSR5uxhN5rUS0qT36 sP2nJjknzMlatOPRV805UDIMgAlqsc6Jz8WOsrvCojd1b/lIqgpOGQL7k4w1iRdW t4nkmw5q+GWFGmrHham925PSpTCsdnDS+ic1Ds1Noznn5PQHRsilY9fCrR4CJPJm 6l//z4tYDK5Ry+gxwsqkk1f86H8ZICNmILTw7Wd3F5X87tedvArXQ5ga8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLx7FYOoQ94sXO74Wr4RWnFJ8SNnMB8GA1UdIwQY MBaAFLkDK9sSjIbgCyHHeVmoARxA0GUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYt ZmU4NDZmNzVkMTcwLzEvdkhzVmc2aEQzaXhjN3ZoYXZoRmFjVW54STJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYtZmU4NDZmNzVkMTcw LzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZhYMA0E AgACMAcDBQMqD1EAMA0GCSqGSIb3DQEBCwUAA4IBAQCK1vS9npWVwzuYdnOUuy2c TUjedSJt5vtrfTd2qVAqlBQGbpt/c67v4Y9crrKHMACaqkRBnL5ocDziTT597UXT HBt+PlOhDxdSfQbAcXJfOso/TErViVbuVc4T/Vqu+jw9kF5A1+vrM7lsVuz2gMO4 2BZghYAga2vPXlg+do6vhQSrgD4jcM5TThoe9/P/D3Mbm4ufqZshUgDbY6mezcxp gPYfE5YRQw7qqjppNb2GDih49+MXJjGc+vc6ihXVXKZNSDprrYUX3gal58jyKfXG pPlS60bSzhFnZhwdMth7XyQt9ZgZx8UN6vrW5ipjMg0ViPRHDqHzfbabhBJOoJ4H -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:36 2026 by rpki-client