This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/vyyOv-ascCpg6vzLP5yhXC1Yn0U.roa File: vyyOv-ascCpg6vzLP5yhXC1Yn0U.roa (raw, json) Hash identifier: QGwJqLzYBQrI7ZQVyRyoIjXKsPdPV3MLHZM6uCuAXZo= Subject key identifier: BF:2C:8E:BF:E6:AC:70:2A:60:EA:FC:CB:3F:9C:A1:5C:2D:58:9F:45 Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Certificate serial: 019B7A5A90FC6D6EC2680AAFC781C5643921 Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/vyyOv-ascCpg6vzLP5yhXC1Yn0U.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205961 IP address blocks: 185.200.20.0/24 maxlen: 24 185.200.21.0/24 maxlen: 24 185.200.22.0/24 maxlen: 24 185.200.23.0/24 maxlen: 24 2a0b:24c1::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:90:fc:6d:6e:c2:68:0a:af:c7:81:c5:64:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf2c8ebfe6ac702a60eafccb3f9ca15c2d589f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:5e:99:e5:4f:fd:dc:23:b7:5a:dc:77:16: 12:ba:a9:07:7a:ba:9c:11:43:9a:05:06:24:83:08: f3:75:1c:17:81:c8:51:5d:2d:7a:0e:9c:a2:b5:f3: c8:e9:79:13:f6:29:60:bb:84:88:69:fc:98:b8:d1: 93:1b:a7:23:9e:75:80:55:13:cb:70:8f:29:3d:98: 91:d0:f5:1e:89:b7:04:05:32:6e:6f:1e:4b:63:f5: bb:1d:7c:d3:db:47:ee:8d:57:e0:d9:78:8e:ca:6b: ce:63:24:bb:74:d9:ca:d1:30:aa:b3:bf:66:bf:eb: f5:86:18:f9:a7:69:5d:27:6f:14:bc:62:73:6b:f9: d8:1f:4c:9b:3f:18:b4:79:8a:9f:eb:37:bd:13:df: 70:bf:ee:26:3e:1c:cb:e3:c1:e0:06:d9:44:03:49: aa:40:24:33:83:0f:97:2e:23:15:a6:90:0b:e6:35: 66:65:4b:e7:55:20:f3:5a:75:04:2b:93:14:a1:63: 2a:9e:3c:05:a2:1a:1b:f5:48:3d:8e:58:40:66:a8: ec:cc:b4:a1:f1:fc:7b:0f:c9:7f:0e:85:d1:a2:51: 19:76:64:c9:49:74:08:bb:5f:67:79:ed:3f:24:fb: 34:37:dc:d2:32:50:11:8a:64:e5:75:cf:0f:06:7c: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2C:8E:BF:E6:AC:70:2A:60:EA:FC:CB:3F:9C:A1:5C:2D:58:9F:45 X509v3 Authority Key Identifier: keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/vyyOv-ascCpg6vzLP5yhXC1Yn0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.20.0/22 IPv6: 2a0b:24c1::/33 Signature Algorithm: sha256WithRSAEncryption 5c:20:ca:fa:5d:d3:a9:fa:48:83:5b:8b:9c:02:82:4e:0c:a2: 79:1d:dc:0e:39:f2:56:f9:a6:33:09:6d:ac:c6:40:3b:46:0b: cc:fb:ca:07:d8:4a:52:a8:d5:94:a2:2d:52:40:ad:33:a0:e0: 22:d3:6a:5f:5e:c1:92:5d:f8:79:1a:b1:94:2b:68:ae:83:85: 36:00:06:44:f9:96:eb:53:08:0f:08:8b:be:af:cd:ec:7c:01: 7e:9a:55:63:ba:5a:4e:9b:fe:06:f4:36:20:4a:f1:dd:9e:01: 85:66:88:9a:aa:a4:21:a9:16:2b:5b:08:70:03:b5:16:fe:20: 09:a5:b2:b8:5f:51:b6:19:77:ee:80:7f:cf:53:da:24:d1:bf: 71:0c:a9:ce:9b:ac:e2:c9:ee:d0:2e:f7:b2:91:59:b0:c0:47: 59:3b:86:01:c1:8c:5a:29:8f:42:29:7a:26:0f:ea:63:90:e9: 49:43:bc:36:6e:a0:95:73:eb:da:a3:a0:1a:c0:24:56:51:8a: 6a:07:38:2e:73:62:72:aa:c5:1e:33:1d:af:44:f7:f0:5c:05: 11:f5:d7:94:c8:b2:cd:d6:f0:86:e3:76:33:ac:75:81:53:d2: 50:6f:6a:34:1e:e8:e1:c6:3d:d7:bf:04:38:cb:af:a0:0a:a8: 84:a9:59:a7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6WpD8bW7CaAqvx4HFZDkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi YzdiYTMwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjJjOGViZmU2YWM3MDJhNjBlYWZjY2IzZjljYTE1YzJkNTg5ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy9emeVP/dwjt1rcdxYSuqkHerqc EUOaBQYkgwjzdRwXgchRXS16DpyitfPI6XkT9ilgu4SIafyYuNGTG6cjnnWAVRPL cI8pPZiR0PUeibcEBTJubx5LY/W7HXzT20fujVfg2XiOymvOYyS7dNnK0TCqs79m v+v1hhj5p2ldJ28UvGJza/nYH0ybPxi0eYqf6ze9E99wv+4mPhzL48HgBtlEA0mq QCQzgw+XLiMVppAL5jVmZUvnVSDzWnUEK5MUoWMqnjwFohob9Ug9jlhAZqjszLSh 8fx7D8l/DoXRolEZdmTJSXQIu19nee0/JPs0N9zSMlARimTldc8PBnylnwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFL8sjr/mrHAqYOr8yz+coVwtWJ9FMB8GA1UdIwQY MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt MjUxYjAxOWQ1MWE4LzEvdnl5T3YtYXNjQ3BnNnZ6TFA1eWhYQzFZbjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4 LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCucgUMA4E AgACMAgDBgcqCyTBADANBgkqhkiG9w0BAQsFAAOCAQEAXCDK+l3TqfpIg1uLnAKC TgyieR3cDjnyVvmmMwltrMZAO0YLzPvKB9hKUqjVlKItUkCtM6DgItNqX17Bkl34 eRqxlCtoroOFNgAGRPmW61MIDwiLvq/N7HwBfppVY7paTpv+BvQ2IErx3Z4BhWaI mqqkIakWK1sIcAO1Fv4gCaWyuF9Rthl37oB/z1PaJNG/cQypzpus4snu0C73spFZ sMBHWTuGAcGMWimPQil6Jg/qY5DpSUO8Nm6glXPr2qOgGsAkVlGKagc4LnNicqrF HjMdr0T38FwFEfXXlMiyzdbwhuN2M6x1gVPSUG9qNB7o4cY9178EOMuvoAqohKlZ pw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:37 2026 by rpki-client