This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/vJn1B7TkIokTRs-gxLbzZLosQRM.roa File: vJn1B7TkIokTRs-gxLbzZLosQRM.roa (raw, json) Hash identifier: Rq5c/JPbynRwbuR0dvCvYWY+PnCFLElh2VPU08vgLek= Subject key identifier: BC:99:F5:07:B4:E4:22:89:13:46:CF:A0:C4:B6:F3:64:BA:2C:41:13 Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3 Certificate serial: 019B79ED0554CDA57E4B3A64D3410526590A Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/vJn1B7TkIokTRs-gxLbzZLosQRM.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203152 IP address blocks: 185.127.136.0/22 maxlen: 24 2a13:4547::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:05:54:cd:a5:7e:4b:3a:64:d3:41:05:26:59:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc99f507b4e422891346cfa0c4b6f364ba2c4113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:0d:2f:db:a0:7d:58:ce:60:45:c2:fd:f3: 59:70:e5:9c:22:96:b3:4f:f8:4f:e6:8f:3b:d4:1a: 1e:40:9f:a1:4e:e7:cb:f0:14:10:c9:6d:f7:bd:ae: 48:8e:14:79:d1:e1:de:8a:b2:06:50:ac:a3:7e:38: 2c:5a:4f:ea:18:9a:cd:9d:85:1e:c0:d4:48:f8:87: c4:5a:22:5a:a8:d5:fc:fe:bd:b3:f9:b6:cf:a3:ce: 40:0e:96:91:77:4f:34:15:ca:f5:4a:7c:90:b0:c2: c8:89:c9:64:59:dd:f5:2d:25:be:75:80:6a:2f:da: c0:d4:08:6f:55:50:76:f2:b3:b6:30:67:32:8e:f4: 5a:17:40:88:21:e7:29:01:19:23:de:04:84:a2:f9: f3:e0:57:e9:04:df:96:05:68:62:4c:fa:19:28:67: d0:f0:e4:4e:33:39:f2:87:c0:83:3e:de:9e:9c:b6: be:85:63:53:cc:6e:c4:40:77:0f:52:ab:15:ca:8c: 5e:bd:db:00:93:0d:59:40:7f:6d:40:03:89:23:20: d2:89:a1:3a:98:83:3f:3e:47:c5:af:ed:20:de:58: 1a:a1:14:74:a9:c4:65:c6:d3:51:b1:4d:96:b2:50: 69:63:dc:79:76:e5:64:4d:f5:50:45:ae:75:4e:02: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:99:F5:07:B4:E4:22:89:13:46:CF:A0:C4:B6:F3:64:BA:2C:41:13 X509v3 Authority Key Identifier: keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/vJn1B7TkIokTRs-gxLbzZLosQRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.136.0/22 IPv6: 2a13:4547::/32 Signature Algorithm: sha256WithRSAEncryption c3:b2:6f:9e:57:7c:89:ee:8f:74:59:a2:29:fb:c0:b3:83:a5: bb:4b:e8:25:bb:1b:bd:c1:8f:b5:dc:aa:01:32:16:22:2c:af: e1:70:37:f0:64:5b:55:f6:50:13:a8:b9:06:be:6e:76:97:49: d2:1d:bb:10:85:04:c3:27:e5:39:89:c0:50:5a:4f:ca:45:b7: 67:57:75:38:f6:25:74:7e:51:cf:fc:d5:f1:88:57:40:77:08: 0f:71:43:a7:77:ed:6f:45:b4:e8:a4:40:09:45:7a:02:26:50: 06:bd:0f:a2:09:24:4b:8a:ff:ed:0e:a4:79:b0:5f:af:e2:e1: e0:25:d8:bd:ee:c9:7b:cd:89:0d:76:ab:f5:6e:55:ec:33:95: 3b:57:4d:c0:71:c9:2a:3f:05:d5:01:5e:8d:6e:f5:4f:96:65: 8f:a9:ae:3a:1b:43:a0:ce:e3:f6:55:e6:c6:c3:c7:a3:05:97: d2:a8:66:18:ac:36:44:0d:08:99:26:a4:4e:cc:50:d1:93:1e: 75:90:7d:18:8f:d2:a2:ba:7b:72:fe:ca:51:28:73:48:85:95: 86:b3:c5:48:fb:26:ca:0f:95:fe:3e:b5:ba:b3:17:69:94:ef: b3:7f:00:a7:dd:60:89:3d:61:1f:c3:d4:25:cd:c3:8d:7c:c8: 90:93:a8:e9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57QVUzaV+Szpk00EFJlkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNmJmMmI4OTU4NGVjOTYwODAwNDhkYzNmZGMyZTM5ODNj Mjc3ZjMwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzk5ZjUwN2I0ZTQyMjg5MTM0NmNmYTBjNGI2ZjM2NGJhMmM0MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNcNL9ugfVjOYEXC/fNZcOWcIpaz T/hP5o871BoeQJ+hTufL8BQQyW33va5IjhR50eHeirIGUKyjfjgsWk/qGJrNnYUe wNRI+IfEWiJaqNX8/r2z+bbPo85ADpaRd080Fcr1SnyQsMLIiclkWd31LSW+dYBq L9rA1AhvVVB28rO2MGcyjvRaF0CIIecpARkj3gSEovnz4FfpBN+WBWhiTPoZKGfQ 8OROMznyh8CDPt6enLa+hWNTzG7EQHcPUqsVyoxevdsAkw1ZQH9tQAOJIyDSiaE6 mIM/PkfFr+0g3lgaoRR0qcRlxtNRsU2WslBpY9x5duVkTfVQRa51TgK5jwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLyZ9Qe05CKJE0bPoMS282S6LEETMB8GA1UdIwQY MBaAFMtr8riVhOyWCABI3D/cLjmDwnfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2Qt MTBmZGZjZTk0NTEzLzEvdkpuMUI3VGtJb2tUUnMtZ3hMYnpaTG9zUVJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2QtMTBmZGZjZTk0NTEz LzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX+IMA0E AgACMAcDBQAqE0VHMA0GCSqGSIb3DQEBCwUAA4IBAQDDsm+eV3yJ7o90WaIp+8Cz g6W7S+gluxu9wY+13KoBMhYiLK/hcDfwZFtV9lATqLkGvm52l0nSHbsQhQTDJ+U5 icBQWk/KRbdnV3U49iV0flHP/NXxiFdAdwgPcUOnd+1vRbTopEAJRXoCJlAGvQ+i CSRLiv/tDqR5sF+v4uHgJdi97sl7zYkNdqv1blXsM5U7V03AcckqPwXVAV6NbvVP lmWPqa46G0OgzuP2VebGw8ejBZfSqGYYrDZEDQiZJqROzFDRkx51kH0Yj9Kiunty /spRKHNIhZWGs8VI+ybKD5X+PrW6sxdplO+zfwCn3WCJPWEfw9QlzcONfMiQk6jp -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:29 2026 by rpki-client