This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/_b4OVLuaniL8RBMNln103Gpf2Gs.roa File: _b4OVLuaniL8RBMNln103Gpf2Gs.roa (raw, json) Hash identifier: SkLNRNpLl3oBYMStmCvZjB2GsxsGbobUhwLq5rMJp9k= Subject key identifier: FD:BE:0E:54:BB:9A:9E:22:FC:44:13:0D:96:7D:74:DC:6A:5F:D8:6B Certificate issuer: /CN=560eff1d23161feaa08a1994e1dd4b46a8383f20 Certificate serial: 019B79ECEACE02466EE6DA05A930F9FB3497 Authority key identifier: 56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/_b4OVLuaniL8RBMNln103Gpf2Gs.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211210 IP address blocks: 37.252.221.0/24 maxlen: 24 2a0b:96c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ea:ce:02:46:6e:e6:da:05:a9:30:f9:fb:34:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdbe0e54bb9a9e22fc44130d967d74dc6a5fd86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:77:33:04:cb:0f:93:5b:c7:9b:a8:28:41: ff:69:98:8a:c3:85:2f:97:39:22:90:df:48:a2:8c: 6b:aa:7c:dd:27:9b:90:66:fb:b7:28:90:27:a9:83: 37:b7:42:c3:f0:ff:a7:2c:5e:96:52:86:f4:37:d4: 95:92:ea:54:58:a6:9f:86:fa:eb:4d:99:0f:f5:ec: 71:ff:f4:a5:e0:73:2d:cc:37:80:f8:75:cd:3a:4b: 05:68:86:8f:9a:1e:c2:89:b0:82:0c:e1:43:89:4e: d1:a4:9b:4b:f1:36:98:4b:fd:5c:93:49:86:aa:a9: 2f:e6:96:29:ab:45:42:60:d8:12:bf:78:c2:a6:b8: 50:21:c0:cf:69:d3:a2:7e:51:dd:1b:e0:75:1b:af: 19:f0:3f:e5:10:83:de:83:ee:63:eb:bd:cd:19:26: cc:2e:df:17:6b:88:d9:6b:43:f4:7d:31:bb:c0:e1: bc:49:43:c6:3e:38:f9:88:a5:b0:93:13:b0:70:c3: 6b:f2:80:e1:8e:1f:63:dd:37:d9:e7:45:5e:38:11: b8:92:c0:ce:b5:41:7f:23:e3:b8:c6:a4:b9:1e:92: a4:87:25:af:56:b6:38:0b:32:58:a3:10:35:63:0e: 78:20:b3:01:e2:90:a1:e7:87:fc:a1:e3:20:e4:24: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BE:0E:54:BB:9A:9E:22:FC:44:13:0D:96:7D:74:DC:6A:5F:D8:6B X509v3 Authority Key Identifier: keyid:56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/_b4OVLuaniL8RBMNln103Gpf2Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.221.0/24 IPv6: 2a0b:96c0::/29 Signature Algorithm: sha256WithRSAEncryption 71:32:77:19:dc:86:ee:13:65:c0:d3:3f:6e:07:7f:e1:ed:3b: 1a:14:e1:65:36:c4:7d:0f:b8:0c:b7:ff:7f:ae:07:40:30:0e: a1:5b:67:55:0c:28:ce:bd:36:18:6b:ff:09:f6:98:f3:ad:c5: 77:bb:b7:1e:db:73:17:e2:4f:14:c4:f7:67:f1:0a:a8:5e:62: ee:b5:37:44:73:6d:7b:d1:0f:45:69:86:51:7d:b7:c3:6b:bc: 38:6b:aa:ae:ee:50:75:45:a0:44:18:ec:a0:3f:b2:02:84:47: 8d:6e:f7:1f:80:24:26:c0:ef:74:04:e0:56:1c:32:19:3d:cf: 6c:d1:28:c7:1e:2b:6d:dc:9a:ca:dc:bb:48:25:a0:28:ff:8f: 39:48:19:1d:dd:c7:13:ed:f8:01:e1:05:46:65:5a:ee:64:e4: eb:68:d6:4c:23:c2:5d:f4:9c:bc:65:ff:29:0b:d9:59:55:c9: 0f:2c:86:f2:0a:51:d4:ea:3b:4e:dc:23:b6:cf:ef:d1:e6:e4: b9:8d:92:ab:d9:84:ae:82:a0:5c:aa:72:4d:09:7c:9e:6f:fc: cf:2b:5c:35:8d:77:8c:f2:6a:a7:98:be:e4:19:78:2f:92:89: 80:e6:82:e8:21:d8:09:08:f2:69:bf:85:0b:c3:c5:56:4c:ef: 06:ba:89:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57OrOAkZu5toFqTD5+zSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MGVmZjFkMjMxNjFmZWFhMDhhMTk5NGUxZGQ0YjQ2YTgz ODNmMjAwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGJlMGU1NGJiOWE5ZTIyZmM0NDEzMGQ5NjdkNzRkYzZhNWZkODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsON3MwTLD5Nbx5uoKEH/aZiKw4Uv lzkikN9IooxrqnzdJ5uQZvu3KJAnqYM3t0LD8P+nLF6WUob0N9SVkupUWKafhvrr TZkP9exx//Sl4HMtzDeA+HXNOksFaIaPmh7CibCCDOFDiU7RpJtL8TaYS/1ck0mG qqkv5pYpq0VCYNgSv3jCprhQIcDPadOiflHdG+B1G68Z8D/lEIPeg+5j673NGSbM Lt8Xa4jZa0P0fTG7wOG8SUPGPjj5iKWwkxOwcMNr8oDhjh9j3TfZ50VeOBG4ksDO tUF/I+O4xqS5HpKkhyWvVrY4CzJYoxA1Yw54ILMB4pCh54f8oeMg5CQWbwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP2+DlS7mp4i/EQTDZZ9dNxqX9hrMB8GA1UdIwQY MBaAFFYO/x0jFh/qoIoZlOHdS0aoOD8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmc3X0hTTVdILXFnaWhtVTRkMUxScWc0UHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hOTY3MDUtMWNiNy00M2I5LTk2ZGQt NGMyZDRjNGI1ZjBhLzEvX2I0T1ZMdWFuaUw4UkJNTmxuMTAzR3BmMkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hOTY3MDUtMWNiNy00M2I5LTk2ZGQtNGMyZDRjNGI1ZjBh LzEvVmc3X0hTTVdILXFnaWhtVTRkMUxScWc0UHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAJfzdMA0E AgACMAcDBQMqC5bAMA0GCSqGSIb3DQEBCwUAA4IBAQBxMncZ3IbuE2XA0z9uB3/h 7TsaFOFlNsR9D7gMt/9/rgdAMA6hW2dVDCjOvTYYa/8J9pjzrcV3u7ce23MX4k8U xPdn8QqoXmLutTdEc2170Q9FaYZRfbfDa7w4a6qu7lB1RaBEGOygP7IChEeNbvcf gCQmwO90BOBWHDIZPc9s0SjHHitt3JrK3LtIJaAo/485SBkd3ccT7fgB4QVGZVru ZOTraNZMI8Jd9Jy8Zf8pC9lZVckPLIbyClHU6jtO3CO2z+/R5uS5jZKr2YSugqBc qnJNCXyeb/zPK1w1jXeM8mqnmL7kGXgvkomA5oLoIdgJCPJpv4ULw8VWTO8GuolU -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:21 2026 by rpki-client