This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/vGITqOM2Qr7qYaxHjQA6bgwtMHQ.roa File: vGITqOM2Qr7qYaxHjQA6bgwtMHQ.roa (raw, json) Hash identifier: oAck/TCVUq6iwApW0WsXsYIkY48wx+OrIDhclhnJfcU= Subject key identifier: BC:62:13:A8:E3:36:42:BE:EA:61:AC:47:8D:00:3A:6E:0C:2D:30:74 Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9 Certificate serial: 019B79111E4151909E6D263EB10F3A23A67C Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/vGITqOM2Qr7qYaxHjQA6bgwtMHQ.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199805 IP address blocks: 185.45.144.0/23 maxlen: 23 185.45.146.0/24 maxlen: 24 185.45.147.0/24 maxlen: 24 2a01:7e20::/32 maxlen: 32 2a01:7e21::/32 maxlen: 32 2a01:7e27::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1e:41:51:90:9e:6d:26:3e:b1:0f:3a:23:a6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6213a8e33642beea61ac478d003a6e0c2d3074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:75:49:00:57:09:e0:79:09:95:b7:98:1b: 0a:5a:57:f7:27:34:99:d4:f8:ac:51:9d:0d:3a:29: 39:30:5e:73:a3:40:a9:3a:ca:04:dd:82:3f:42:8c: f9:f6:d1:08:be:01:03:4d:8a:84:77:00:dc:da:46: a9:6e:d0:a6:f3:de:9e:d5:fa:60:7e:51:ea:e9:4e: 80:6b:25:1b:de:05:c0:f8:cd:2a:f6:38:05:84:89: 94:f2:a9:e7:90:be:76:38:ea:f2:c0:8f:5e:97:c6: 77:d7:c7:90:85:24:48:f3:70:13:db:05:db:5d:b7: 44:51:fa:17:5b:0d:94:ad:51:89:c2:e5:56:2d:30: 5c:18:1c:1d:e1:6b:e5:9e:4e:c8:47:69:65:85:8a: 58:a8:82:5c:15:cf:3d:ef:25:de:f6:03:d9:83:b3: 78:50:8c:1f:44:cb:96:fa:ba:07:5a:e5:27:3a:83: 8a:5c:09:99:cd:be:93:88:d3:e9:0f:f4:68:c3:20: e8:e4:d9:4d:6b:4b:d4:77:08:40:d4:69:0c:82:c1: f3:af:9c:b4:e2:52:78:b0:4e:5e:69:b9:4d:e8:dd: ad:a7:16:d2:df:c1:f9:a9:1e:0f:93:e5:14:a5:69: 8a:10:83:cd:cb:a5:cd:6e:77:31:c6:43:1f:7c:3e: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:13:A8:E3:36:42:BE:EA:61:AC:47:8D:00:3A:6E:0C:2D:30:74 X509v3 Authority Key Identifier: keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/vGITqOM2Qr7qYaxHjQA6bgwtMHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.144.0/22 IPv6: 2a01:7e20::/31 2a01:7e27::/32 Signature Algorithm: sha256WithRSAEncryption 36:69:85:dd:d4:67:ae:20:05:22:94:39:69:89:b6:79:ab:92: 38:ad:d1:70:8e:91:90:47:d2:bf:32:10:0c:59:79:7e:fe:2c: 92:c2:a3:a7:2b:74:11:31:bf:8f:a7:78:8a:b9:7b:b8:98:98: 54:30:41:d2:b5:0e:40:cd:cd:2d:a2:56:0c:43:80:aa:fd:b5: 5f:81:1e:be:15:81:76:9b:4d:a5:eb:ee:07:b1:f9:ac:19:ba: a8:cc:63:e0:1d:01:7c:45:3f:8a:d5:0b:58:9d:6d:5b:6b:88: 87:63:c9:43:65:b7:35:f2:30:0c:ee:ba:4d:78:3f:9a:01:26: 34:2a:4b:23:a2:d6:d5:7e:b7:de:53:88:d0:4d:f8:a0:61:35: a5:2e:32:6f:9c:2e:80:ac:69:cd:2c:76:9e:aa:4f:4f:43:63: d8:b8:31:94:09:20:f8:01:84:89:7f:ce:d5:ab:1a:bb:19:2c: db:95:bd:84:79:c4:af:53:05:87:06:ee:02:a4:64:cc:63:cb: e4:0c:1f:05:f6:c6:68:92:76:c8:76:3f:8b:d8:9a:d1:06:38: a5:e1:f8:98:2a:59:15:0e:f5:49:5f:4a:e7:89:5f:71:df:e1: 72:c5:a7:8f:f4:9e:df:ab:cc:02:d2:d3:08:16:a7:6c:95:ca: c8:ce:3f:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5ER5BUZCebSY+sQ86I6Z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmY2Y3NzEwNWY5NTA3NWNlNTg1ZDQyN2U5Nzc1NGU4ZjAw N2E4YjkwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzYyMTNhOGUzMzY0MmJlZWE2MWFjNDc4ZDAwM2E2ZTBjMmQzMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxth1SQBXCeB5CZW3mBsKWlf3JzSZ 1PisUZ0NOik5MF5zo0CpOsoE3YI/Qoz59tEIvgEDTYqEdwDc2kapbtCm896e1fpg flHq6U6AayUb3gXA+M0q9jgFhImU8qnnkL52OOrywI9el8Z318eQhSRI83AT2wXb XbdEUfoXWw2UrVGJwuVWLTBcGBwd4Wvlnk7IR2llhYpYqIJcFc897yXe9gPZg7N4 UIwfRMuW+roHWuUnOoOKXAmZzb6TiNPpD/RowyDo5NlNa0vUdwhA1GkMgsHzr5y0 4lJ4sE5eablN6N2tpxbS38H5qR4Pk+UUpWmKEIPNy6XNbncxxkMffD7WsQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFLxiE6jjNkK+6mGsR40AOm4MLTB0MB8GA1UdIwQY MBaAFE/PdxBflQdc5YXUJ+l3VOjwB6i5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMt NmY5N2RmYzEwZmU3LzEvdkdJVHFPTTJRcjdxWWF4SGpRQTZiZ3d0TUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xMzllYmQtNWFiZi00MjU0LTg5MzMtNmY5N2RmYzEwZmU3 LzEvVDg5M0VGLVZCMXpsaGRRbjZYZFU2UEFIcUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCuS2QMBQE AgACMA4DBQEqAX4gAwUAKgF+JzANBgkqhkiG9w0BAQsFAAOCAQEANmmF3dRnriAF IpQ5aYm2eauSOK3RcI6RkEfSvzIQDFl5fv4sksKjpyt0ETG/j6d4irl7uJiYVDBB 0rUOQM3NLaJWDEOAqv21X4EevhWBdptNpevuB7H5rBm6qMxj4B0BfEU/itULWJ1t W2uIh2PJQ2W3NfIwDO66TXg/mgEmNCpLI6LW1X633lOI0E34oGE1pS4yb5wugKxp zSx2nqpPT0Nj2LgxlAkg+AGEiX/O1asauxks25W9hHnEr1MFhwbuAqRkzGPL5Awf BfbGaJJ2yHY/i9ia0QY4peH4mCpZFQ71SV9K54lfcd/hcsWnj/Se36vMAtLTCBan bJXKyM4/bg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:22 2026 by rpki-client