This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/vRYrBBvJtleu8qpJHSXwyzhH9Wk.roa File: vRYrBBvJtleu8qpJHSXwyzhH9Wk.roa (raw, json) Hash identifier: KwZkN/c9OqnQtbiksE1FCHYax7PcaewWD6y+egmnZag= Subject key identifier: BD:16:2B:04:1B:C9:B6:57:AE:F2:AA:49:1D:25:F0:CB:38:47:F5:69 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019B79ECDCA6BE50F4B430931E8B0A549913 Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/vRYrBBvJtleu8qpJHSXwyzhH9Wk.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197000 IP address blocks: 193.0.8.0/23 maxlen: 23 193.0.8.0/24 maxlen: 24 193.0.9.0/24 maxlen: 24 2001:67c:e0::/48 maxlen: 48 2a13:27c0:30::/44 maxlen: 44 2a13:27c0:30::/48 maxlen: 48 2a13:27c0:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:dc:a6:be:50:f4:b4:30:93:1e:8b:0a:54:99:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd162b041bc9b657aef2aa491d25f0cb3847f569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:0f:55:47:f7:e4:ac:e3:98:df:38:f4:e1: 28:84:2b:1c:97:a5:e4:74:7e:cd:f7:76:c7:e9:bb: 7f:47:5d:0a:e8:fe:18:36:aa:e7:e0:9a:8e:57:78: 45:62:20:b3:86:9c:3d:13:8e:0e:fd:b1:9a:a6:64: b2:be:91:0b:d1:59:64:e3:74:f5:7c:c5:bc:27:f3: c9:18:63:f0:7e:df:32:de:f9:1e:45:8c:f0:f2:47: f6:ad:c5:74:88:d7:0e:77:47:99:79:71:a6:97:92: 70:11:a5:5d:01:bd:7e:95:de:30:37:e6:34:96:2e: b3:58:c8:75:e0:c4:e3:bc:35:f0:ce:99:a9:ef:7e: cc:99:ba:63:ff:e0:ac:3e:16:33:7c:d0:d6:7d:5c: cf:35:01:ff:0c:e7:8a:97:e8:32:87:3e:b4:b7:28: f8:83:96:7a:f5:06:4a:6c:2a:fb:22:f6:26:98:2f: 77:c5:52:10:9a:18:54:4c:5d:89:72:58:d1:ab:08: 5e:b2:7d:4c:bb:78:f3:6c:21:7f:05:91:06:63:44: 32:de:20:84:d5:ff:b7:17:f0:b6:30:31:37:3c:a9: fc:0d:80:68:4f:33:33:3a:5e:7a:f4:01:02:02:45: ac:84:64:88:13:f1:f7:5c:78:96:a7:e3:15:81:d2: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:16:2B:04:1B:C9:B6:57:AE:F2:AA:49:1D:25:F0:CB:38:47:F5:69 X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/vRYrBBvJtleu8qpJHSXwyzhH9Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.8.0/23 IPv6: 2001:67c:e0::/48 2a13:27c0:30::/44 Signature Algorithm: sha256WithRSAEncryption 37:b5:de:65:01:f7:e6:e1:09:d2:00:e2:6e:a0:86:a1:03:ea: 57:95:fa:e7:92:60:27:3e:a6:a9:38:21:2d:41:91:0b:dd:47: a0:cc:90:bb:21:c9:5c:49:9c:c4:bd:d6:4b:93:58:b3:36:7c: c8:ef:67:9f:62:c5:5d:c7:ef:23:f6:cc:62:24:82:cb:4b:14: eb:e7:92:2f:4d:2e:30:19:45:7b:57:ee:9f:9d:8c:f7:c9:6a: 30:d6:1e:fe:a3:dd:0c:ab:aa:68:b8:0b:6f:82:9a:d8:fd:4e: 8d:21:94:7b:72:e0:96:90:52:4d:0b:f0:9e:a0:13:53:05:0f: eb:94:fe:35:4f:f4:ee:45:e2:ac:15:8f:5a:64:30:c1:01:09: e4:72:f1:63:62:e1:5b:92:38:b3:49:e2:a5:9f:81:58:7b:be: 0c:63:e8:ed:75:bd:5d:47:54:cf:ae:57:d3:6c:14:a4:31:67: 0a:ac:59:8e:6f:16:b6:a7:0c:17:28:7f:c5:1e:0c:d3:9b:cd: 03:3d:76:d6:d5:bd:35:06:3e:39:6d:2a:d0:80:58:10:ec:c9: a7:1e:8f:24:fb:f9:4e:df:d4:6a:27:ab:67:c5:92:d2:ba:1a: 74:26:2d:18:d0:ee:b2:16:02:cf:20:38:11:bc:25:48:1b:b9: 7b:a0:ee:62 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt57NymvlD0tDCTHosKVJkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDE2MmIwNDFiYzliNjU3YWVmMmFhNDkxZDI1ZjBjYjM4NDdmNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9MPVUf35KzjmN849OEohCscl6Xk dH7N93bH6bt/R10K6P4YNqrn4JqOV3hFYiCzhpw9E44O/bGapmSyvpEL0Vlk43T1 fMW8J/PJGGPwft8y3vkeRYzw8kf2rcV0iNcOd0eZeXGml5JwEaVdAb1+ld4wN+Y0 li6zWMh14MTjvDXwzpmp737Mmbpj/+CsPhYzfNDWfVzPNQH/DOeKl+gyhz60tyj4 g5Z69QZKbCr7IvYmmC93xVIQmhhUTF2JcljRqwhesn1Mu3jzbCF/BZEGY0Qy3iCE 1f+3F/C2MDE3PKn8DYBoTzMzOl569AECAkWshGSIE/H3XHiWp+MVgdLUYQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFL0WKwQbybZXrvKqSR0l8Ms4R/VpMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvdlJZckJCdkp0bGV1OHFwSkhTWHd5emhIOVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBwQAIMBgE AgACMBIDBwAgAQZ8AOADBwQqEyfAADAwDQYJKoZIhvcNAQELBQADggEBADe13mUB 9+bhCdIA4m6ghqED6leV+ueSYCc+pqk4IS1BkQvdR6DMkLshyVxJnMS91kuTWLM2 fMjvZ59ixV3H7yP2zGIkgstLFOvnki9NLjAZRXtX7p+djPfJajDWHv6j3Qyrqmi4 C2+Cmtj9To0hlHty4JaQUk0L8J6gE1MFD+uU/jVP9O5F4qwVj1pkMMEBCeRy8WNi 4VuSOLNJ4qWfgVh7vgxj6O11vV1HVM+uV9NsFKQxZwqsWY5vFranDBcof8UeDNOb zQM9dtbVvTUGPjltKtCAWBDsyacejyT7+U7f1Gonq2fFktK6GnQmLRjQ7rIWAs8g OBG8JUgbuXug7mI= -----END CERTIFICATE-----Generated at Fri Jan 2 16:25:52 2026 by rpki-client