This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/NEmVNkbXZYrffbAhPL-Xg7g1_vs.roa File: NEmVNkbXZYrffbAhPL-Xg7g1_vs.roa (raw, json) Hash identifier: Uf0bzb/NFK4azjx8QKPNpOoYIdPXAHv9ZC+GseFVOFQ= Subject key identifier: 34:49:95:36:46:D7:65:8A:DF:7D:B0:21:3C:BF:97:83:B8:35:FE:FB Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310 Certificate serial: 019C237D752A5759BE04455B202AB47CD041 Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/NEmVNkbXZYrffbAhPL-Xg7g1_vs.roa Signing time: Tue 03 Feb 2026 12:32:30 +0000 ROA not before: Tue 03 Feb 2026 12:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51661 IP address blocks: 185.160.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:7d:75:2a:57:59:be:04:45:5b:20:2a:b4:7c:d0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310 Validity Not Before: Feb 3 12:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3449953646d7658adf7db0213cbf9783b835fefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:31:ed:de:c1:ae:4e:9e:57:6c:3c:af:54: d6:2e:66:3d:94:e0:46:eb:d1:a0:c2:d8:b5:15:e8: d1:01:03:1f:3b:0c:22:c4:14:81:1b:36:a4:10:a9: 59:5e:fc:f7:ae:45:bd:6a:d7:0e:41:73:28:b2:f4: f8:98:1f:c3:5f:a4:8c:be:90:16:91:2a:3c:d3:45: 08:ad:ba:99:c2:b0:a5:6a:8c:87:32:52:b0:b8:a4: ed:24:df:5c:93:62:ae:0b:16:0d:8b:f9:6f:a6:50: 23:d2:e1:26:4a:43:0d:90:10:ca:78:8b:d8:46:57: cf:9e:64:c2:ad:f0:29:6b:5a:7d:e4:cf:98:7e:06: d9:62:8a:16:64:b2:85:62:a4:d9:ff:31:80:3f:74: 7e:9b:b6:dd:ea:26:cb:bd:a4:6c:af:16:cc:06:55: 46:43:33:56:5b:e6:63:c0:39:81:ab:90:84:20:3a: 48:06:14:0e:f2:75:56:2d:81:89:d8:59:41:3a:27: 21:19:8e:d8:09:05:a5:26:ed:52:fc:e9:7a:96:81: d8:5e:7e:58:b5:0a:ef:1a:75:54:7d:4c:85:c6:83: 28:2a:4c:12:7b:ac:7b:28:8e:1a:20:6f:bf:49:18: 54:63:ac:fa:ee:16:32:d8:8a:f3:89:ba:83:0a:70: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:95:36:46:D7:65:8A:DF:7D:B0:21:3C:BF:97:83:B8:35:FE:FB X509v3 Authority Key Identifier: keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/NEmVNkbXZYrffbAhPL-Xg7g1_vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.20.0/22 Signature Algorithm: sha256WithRSAEncryption a4:18:c8:ef:92:74:d9:4b:14:bc:92:30:fd:7f:91:02:e0:5a: 36:71:6f:f3:f4:b7:8c:9f:a4:52:a5:76:78:9a:3d:c9:ba:b2: 66:94:6f:82:4d:22:42:e0:00:b4:36:e9:39:d6:40:ed:ae:d0: f8:ef:10:4c:c0:27:c4:59:d2:78:8e:a1:a4:89:5e:f0:95:fd: 8e:b6:a7:fa:33:34:37:10:33:75:fe:ca:1d:95:03:05:e4:d0: 5b:32:b7:60:72:6b:9e:19:0c:67:da:ad:57:59:42:91:c7:bf: 2c:04:f3:54:f2:50:46:17:e9:f1:a6:dd:75:64:d6:53:b6:ee: c7:51:1c:25:9e:d1:70:fb:74:20:f4:82:e9:20:eb:67:40:9b: 99:88:b4:91:bf:7d:d6:9e:e2:b1:2b:7a:fb:c3:65:cc:81:7a: f1:38:5b:38:b1:35:fd:48:cb:9b:00:e7:2c:0a:7f:6a:02:7b: e8:f5:31:47:f9:23:6a:f0:de:6a:0e:41:99:83:94:fa:50:ec: a8:c1:10:ba:9d:8d:00:cc:b7:a6:46:92:42:c5:df:b6:8f:ea: 4d:ac:03:11:42:41:94:90:c2:cb:da:08:a4:00:68:01:2e:8e: c9:ee:5a:61:c1:57:e6:f4:06:45:95:b7:92:2b:94:fa:42:20: c8:09:60:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwjfXUqV1m+BEVbICq0fNBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmFlNmUzZWQ3NjZkZTQ3YWJhNjY5M2JiNWFmOGE2NDg5 NzQzMTAwHhcNMjYwMjAzMTIzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQ5OTUzNjQ2ZDc2NThhZGY3ZGIwMjEzY2JmOTc4M2I4MzVmZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqYx7d7Brk6eV2w8r1TWLmY9lOBG 69Ggwti1FejRAQMfOwwixBSBGzakEKlZXvz3rkW9atcOQXMosvT4mB/DX6SMvpAW kSo800UIrbqZwrClaoyHMlKwuKTtJN9ck2KuCxYNi/lvplAj0uEmSkMNkBDKeIvY RlfPnmTCrfApa1p95M+YfgbZYooWZLKFYqTZ/zGAP3R+m7bd6ibLvaRsrxbMBlVG QzNWW+ZjwDmBq5CEIDpIBhQO8nVWLYGJ2FlBOichGY7YCQWlJu1S/Ol6loHYXn5Y tQrvGnVUfUyFxoMoKkwSe6x7KI4aIG+/SRhUY6z67hYy2IrzibqDCnDrkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRJlTZG12WK332wITy/l4O4Nf77MB8GA1UdIwQY MBaAFJu65uPtdm3kerpmk7ta+KZIl0MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdybTQtMTJiZVI2dW1hVHUxcjRwa2lYUXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMzk1M2ItYjk0Mi00Yjc1LTljOWQt OTg1YzY0ZmUyN2VlLzEvTkVtVk5rYlhaWXJmZmJBaFBMLVhnN2cxX3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kMzk1M2ItYjk0Mi00Yjc1LTljOWQtOTg1YzY0ZmUyN2Vl LzEvbTdybTQtMTJiZVI2dW1hVHUxcjRwa2lYUXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaAUMA0G CSqGSIb3DQEBCwUAA4IBAQCkGMjvknTZSxS8kjD9f5EC4Fo2cW/z9LeMn6RSpXZ4 mj3JurJmlG+CTSJC4AC0Nuk51kDtrtD47xBMwCfEWdJ4jqGkiV7wlf2Otqf6MzQ3 EDN1/sodlQMF5NBbMrdgcmueGQxn2q1XWUKRx78sBPNU8lBGF+nxpt11ZNZTtu7H URwlntFw+3Qg9ILpIOtnQJuZiLSRv33WnuKxK3r7w2XMgXrxOFs4sTX9SMubAOcs Cn9qAnvo9TFH+SNq8N5qDkGZg5T6UOyowRC6nY0AzLemRpJCxd+2j+pNrAMRQkGU kMLL2gikAGgBLo7J7lphwVfm9AZFlbeSK5T6QiDICWAd -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:21 2026 by rpki-client