This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/V_mkvcjVjS1-u9rT2y0dgg79_kc.roa File: V_mkvcjVjS1-u9rT2y0dgg79_kc.roa (raw, json) Hash identifier: rMLTGatwFgUj/JsrB7K3p4u1VzSPILlwRtAyB+ELLeA= Subject key identifier: 57:F9:A4:BD:C8:D5:8D:2D:7E:BB:DA:D3:DB:2D:1D:82:0E:FD:FE:47 Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b Certificate serial: 019B76EAFE9ABBFC0A904C3EFFF973D3744F Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/V_mkvcjVjS1-u9rT2y0dgg79_kc.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198622 IP address blocks: 185.167.164.0/22 maxlen: 24 2a0b:7e00::/36 maxlen: 48 2a0b:7e00:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fe:9a:bb:fc:0a:90:4c:3e:ff:f9:73:d3:74:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57f9a4bdc8d58d2d7ebbdad3db2d1d820efdfe47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:c3:7f:a3:2c:3d:92:13:10:b1:a0:ad:c6: 7c:53:e7:65:25:5c:28:f1:9e:37:5e:87:30:26:e5: 85:ff:a5:30:1b:2b:aa:1a:6f:69:48:c0:74:a6:12: 91:31:26:d8:c1:a6:e5:76:e3:bd:0c:d2:70:7d:82: ad:4c:67:e2:51:5c:24:38:c5:a0:2e:28:20:95:a0: 85:39:f3:1a:5c:e2:b5:7a:19:32:c7:31:62:de:73: df:25:2c:c2:e9:d7:aa:05:59:3b:21:9c:71:cc:04: 77:58:7f:ff:36:39:ea:9b:93:85:73:68:84:ef:32: 1c:23:18:6b:84:6a:91:94:ff:d0:41:a0:8f:a2:35: 20:ac:30:1f:d4:39:c7:44:e3:f4:68:40:fe:c8:73: 33:9f:ed:d2:60:29:13:9c:76:c4:fb:4a:fc:6b:3f: b1:1c:de:08:9f:d3:fd:56:f9:4b:18:62:5e:39:41: 6a:36:9d:e3:00:ff:ad:f4:d8:d2:17:d9:65:ff:5e: 9a:d5:f4:85:72:59:a4:1f:a5:55:11:2d:e3:33:25: b3:f3:2f:c9:0b:97:1a:7e:7e:36:0a:b7:81:77:54: a8:88:ab:92:43:d7:f2:b5:45:cb:de:b2:a2:0b:db: 28:a9:44:38:e4:c0:c3:79:27:a9:8c:9d:6f:99:92: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F9:A4:BD:C8:D5:8D:2D:7E:BB:DA:D3:DB:2D:1D:82:0E:FD:FE:47 X509v3 Authority Key Identifier: keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/V_mkvcjVjS1-u9rT2y0dgg79_kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.164.0/22 IPv6: 2a0b:7e00::/35 Signature Algorithm: sha256WithRSAEncryption 4a:ba:81:62:6a:4e:16:6b:15:e9:6d:9f:9e:b5:88:0a:28:b9: dd:64:fd:1b:dd:7f:c8:61:79:77:a2:e9:0a:52:2d:7e:bb:28: a5:41:1b:19:e5:dc:ad:99:29:1d:09:94:1c:43:4a:f9:94:8e: dc:e0:18:fc:43:77:e3:89:ac:48:95:6c:38:f4:7d:e7:bb:88: db:30:ac:67:12:09:d9:d5:7e:63:f7:2a:16:03:b8:15:a5:69: 50:66:ac:3b:08:76:7e:5b:d3:3a:95:df:1d:c8:38:1f:a2:ea: 65:56:9f:c3:57:bf:05:21:c6:06:9a:f9:b4:e4:0c:9f:80:e5: 83:41:7c:c2:80:84:99:8e:59:31:db:9a:7a:1a:25:bb:6d:2e: 1d:f1:24:34:7c:70:78:ea:33:2e:c1:fb:6d:7b:7f:27:67:38: 56:e6:a8:2d:16:15:2e:e3:98:8a:6a:07:32:b1:96:89:35:37: 4b:d6:58:12:0c:e0:0e:be:a2:70:f7:8e:33:7b:6b:f8:38:14: 85:9a:65:37:a5:01:a3:71:73:48:8f:ed:5b:03:dc:84:5f:fb: a2:15:e4:c8:e0:66:0e:1b:da:5c:18:7a:c5:d8:6f:f1:8c:85: 95:55:bc:17:01:cd:11:2e:d2:f8:93:c7:2b:9b:03:8f:68:7e: 59:86:e7:1b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt26v6au/wKkEw+//lz03RPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWM3ODBlYjIwNDJjOGM1NzAwMWI2NWVmMTU2ZTZmNTkz MTIzOWIwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2Y5YTRiZGM4ZDU4ZDJkN2ViYmRhZDNkYjJkMWQ4MjBlZmRmZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse3Df6MsPZITELGgrcZ8U+dlJVwo 8Z43XocwJuWF/6UwGyuqGm9pSMB0phKRMSbYwablduO9DNJwfYKtTGfiUVwkOMWg LigglaCFOfMaXOK1ehkyxzFi3nPfJSzC6deqBVk7IZxxzAR3WH//Njnqm5OFc2iE 7zIcIxhrhGqRlP/QQaCPojUgrDAf1DnHROP0aED+yHMzn+3SYCkTnHbE+0r8az+x HN4In9P9VvlLGGJeOUFqNp3jAP+t9NjSF9ll/16a1fSFclmkH6VVES3jMyWz8y/J C5cafn42CreBd1SoiKuSQ9fytUXL3rKiC9soqUQ45MDDeSepjJ1vmZJWQwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFf5pL3I1Y0tfrva09stHYIO/f5HMB8GA1UdIwQY MBaAFLeseA6yBCyMVwAbZe8Vbm9ZMSObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xOTBkNDctNjhkYS00NGQyLTk1MGUt Mzc2NjRkNzViMjU0LzEvVl9ta3ZjalZqUzEtdTlyVDJ5MGRnZzc5X2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xOTBkNDctNjhkYS00NGQyLTk1MGUtMzc2NjRkNzViMjU0 LzEvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuaekMA4E AgACMAgDBgUqC34AADANBgkqhkiG9w0BAQsFAAOCAQEASrqBYmpOFmsV6W2fnrWI Cii53WT9G91/yGF5d6LpClItfrsopUEbGeXcrZkpHQmUHENK+ZSO3OAY/EN344ms SJVsOPR957uI2zCsZxIJ2dV+Y/cqFgO4FaVpUGasOwh2flvTOpXfHcg4H6LqZVaf w1e/BSHGBpr5tOQMn4Dlg0F8woCEmY5ZMduaeholu20uHfEkNHxweOozLsH7bXt/ J2c4VuaoLRYVLuOYimoHMrGWiTU3S9ZYEgzgDr6icPeOM3tr+DgUhZplN6UBo3Fz SI/tWwPchF/7ohXkyOBmDhvaXBh6xdhv8YyFlVW8FwHNES7S+JPHK5sDj2h+WYbn Gw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:50 2026 by rpki-client