This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vh3D0J4mUcGzicQL-oeLZteCPTs.roa File: vh3D0J4mUcGzicQL-oeLZteCPTs.roa (raw, json) Hash identifier: VTlsh85bUsR395MSs6BvpA4blNfvv07B+LOKJpyEl/8= Subject key identifier: BE:1D:C3:D0:9E:26:51:C1:B3:89:C4:0B:FA:87:8B:66:D7:82:3D:3B Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2628B95BD80A79A60554FEA84F458 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vh3D0J4mUcGzicQL-oeLZteCPTs.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 195.40.106.0/23 maxlen: 24 195.172.108.0/23 maxlen: 24 195.172.118.0/23 maxlen: 24 195.172.200.0/23 maxlen: 24 212.135.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:62:8b:95:bd:80:a7:9a:60:55:4f:ea:84:f4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be1dc3d09e2651c1b389c40bfa878b66d7823d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:c6:6d:ea:0a:4f:54:5e:11:a2:95:d6:cb: 04:28:82:80:aa:dc:61:26:79:d0:7d:6b:e2:93:b5: 3a:75:ad:70:32:88:2a:0f:b5:7c:d7:df:b7:1e:a1: 02:2f:d1:c5:43:e7:6c:bd:86:b7:f9:65:6e:43:3e: 3a:74:a0:ae:ac:04:1a:da:2e:3c:52:b4:03:72:8d: b5:b1:c8:d6:38:5d:de:30:0e:4e:04:e6:16:a2:dd: f2:2d:9d:da:4f:ac:38:1f:67:bc:2c:8a:d4:76:de: 73:6a:be:b7:4f:19:ce:da:6f:9a:3a:b7:45:49:a0: 14:44:11:a1:ff:47:99:26:c1:4e:17:20:06:4b:f3: 83:00:19:55:60:70:c8:15:2b:b1:1a:f2:73:20:cf: 2e:36:8f:90:0f:ee:d2:b9:3f:dc:34:c7:14:26:ab: 39:10:3b:15:b0:3b:fe:e3:50:ab:c6:a3:d9:b8:b4: ab:3c:29:38:5a:4a:01:cd:e1:c7:86:1a:dc:68:00: ef:50:ee:65:20:bd:ce:8a:62:9e:ce:a0:66:f2:e0: 9d:4e:b0:da:05:99:24:00:7f:c5:5b:2d:64:87:64: 92:b1:1a:2b:c5:69:57:8b:c4:d3:25:6c:c2:62:1f: 93:36:2e:86:ba:63:70:8b:b8:a5:16:69:91:e6:3c: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:C3:D0:9E:26:51:C1:B3:89:C4:0B:FA:87:8B:66:D7:82:3D:3B X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vh3D0J4mUcGzicQL-oeLZteCPTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.106.0/23 195.172.108.0/23 195.172.118.0/23 195.172.200.0/23 212.135.204.0/22 Signature Algorithm: sha256WithRSAEncryption 61:d8:3f:c8:ff:5f:bc:9c:42:e2:7d:63:4a:ed:68:8c:a7:9b: 44:30:24:2b:72:2c:f5:5c:2a:88:77:bf:0f:46:ec:b8:cc:49: 62:94:6f:16:ee:6d:7b:75:e1:6a:f9:90:e7:f3:97:e9:19:9d: d2:2b:b9:8c:21:57:2b:bd:1c:98:00:ec:5f:19:d9:3f:9f:27: 52:38:2c:7f:13:83:36:7c:d0:7b:ae:6e:fc:f2:6c:7b:7c:35: a9:69:b2:6f:47:2f:66:e9:53:ae:62:2e:fd:22:23:83:87:58: 1b:31:a1:b2:05:b0:07:eb:7b:57:4b:a9:8b:aa:e8:90:20:7a: f5:eb:3b:4b:b5:31:c9:2c:0d:67:49:cb:9f:ac:e2:16:f0:c5: a2:73:25:97:95:1d:e7:6f:4d:96:33:75:b0:7b:83:8e:7c:58: c5:b9:bf:ac:d4:0a:be:55:d0:67:90:38:09:99:5e:1b:4a:fb: 52:88:a7:2e:fc:55:dd:e4:ba:2d:e4:be:f4:8b:25:a8:cd:e9: e2:2f:67:c8:41:fa:b6:70:22:36:d6:c2:b3:31:c6:7a:e5:5f: 66:55:ea:b6:b9:5f:05:b8:75:7d:4d:3b:31:81:64:db:4d:f5: 86:8a:c6:81:1a:d9:76:3d:ec:fb:3a:f1:15:a2:93:d8:ad:de: 2f:5a:d7:63 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4omKLlb2Ap5pgVU/qhPRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTFkYzNkMDllMjY1MWMxYjM4OWM0MGJmYTg3OGI2NmQ3ODIzZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9/GbeoKT1ReEaKV1ssEKIKAqtxh JnnQfWvik7U6da1wMogqD7V819+3HqECL9HFQ+dsvYa3+WVuQz46dKCurAQa2i48 UrQDco21scjWOF3eMA5OBOYWot3yLZ3aT6w4H2e8LIrUdt5zar63TxnO2m+aOrdF SaAURBGh/0eZJsFOFyAGS/ODABlVYHDIFSuxGvJzIM8uNo+QD+7SuT/cNMcUJqs5 EDsVsDv+41CrxqPZuLSrPCk4WkoBzeHHhhrcaADvUO5lIL3OimKezqBm8uCdTrDa BZkkAH/FWy1kh2SSsRorxWlXi8TTJWzCYh+TNi6GumNwi7ilFmmR5jzxPQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFL4dw9CeJlHBs4nEC/qHi2bXgj07MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvdmgzRDBKNG1VY0d6aWNRTC1vZUxadGVDUFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBwyhqAwQB w6xsAwQBw6x2AwQBw6zIAwQC1IfMMA0GCSqGSIb3DQEBCwUAA4IBAQBh2D/I/1+8 nELifWNK7WiMp5tEMCQrciz1XCqId78PRuy4zElilG8W7m17deFq+ZDn85fpGZ3S K7mMIVcrvRyYAOxfGdk/nydSOCx/E4M2fNB7rm788mx7fDWpabJvRy9m6VOuYi79 IiODh1gbMaGyBbAH63tXS6mLquiQIHr16ztLtTHJLA1nScufrOIW8MWicyWXlR3n b02WM3Wwe4OOfFjFub+s1Aq+VdBnkDgJmV4bSvtSiKcu/FXd5Lot5L70iyWozeni L2fIQfq2cCI21sKzMcZ65V9mVeq2uV8FuHV9TTsxgWTbTfWGisaBGtl2Pez7OvEV opPYrd4vWtdj -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:52 2026 by rpki-client