This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/v-7IGItX2vWlgw_6szj3vzKNbn4.roa File: v-7IGItX2vWlgw_6szj3vzKNbn4.roa (raw, json) Hash identifier: ziLYn2+2odOsQ2gscP24iW1EJ2eDq8mEnY99Q2B6Rfo= Subject key identifier: BF:EE:C8:18:8B:57:DA:F5:A5:83:0F:FA:B3:38:F7:BF:32:8D:6E:7E Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae Certificate serial: 019B7AC8CE52F3862D8847DD08469A863546 Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/v-7IGItX2vWlgw_6szj3vzKNbn4.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39257 IP address blocks: 194.48.242.0/24 maxlen: 24 2a13:d500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ce:52:f3:86:2d:88:47:dd:08:46:9a:86:35:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfeec8188b57daf5a5830ffab338f7bf328d6e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:68:f8:ab:3d:10:40:97:e6:70:b0:f1:4f: 4e:9d:f1:bb:f9:23:54:d8:6b:a8:4d:a3:98:91:4d: da:42:8b:30:da:9f:8e:4b:3e:66:88:9c:a7:7b:b1: 05:58:88:b8:8b:9c:76:21:33:49:dc:4a:e8:46:20: b8:f6:55:bc:6e:8d:a4:be:79:4e:55:35:bf:eb:bd: af:45:16:52:c5:eb:a0:98:45:de:c0:9c:0c:71:d5: 30:ed:1d:5c:fc:c2:f1:f9:e0:6b:24:99:aa:4e:d9: 25:03:35:12:15:0a:63:83:60:86:b0:29:2d:d9:e8: 6c:bf:6a:22:6b:7d:a3:cc:8e:9e:5c:a7:48:a2:2f: 81:0c:0b:8c:11:df:0a:01:ef:c8:32:87:03:7d:bc: b0:82:6b:4f:3d:43:f6:f2:06:7a:f1:9a:3b:a8:76: 07:34:63:5a:8c:44:04:d1:52:74:2b:7d:a1:52:c7: a1:32:12:77:99:f7:72:cb:a1:9e:bc:0d:2c:25:c6: 6d:9b:93:b2:c4:5a:81:0f:54:3a:d8:c2:37:dd:71: 93:57:8f:7e:c8:05:b2:04:64:55:99:06:68:65:22: ad:ce:3f:2e:43:c0:6b:e0:4d:09:45:2c:91:70:4d: e7:70:f5:0a:ee:18:42:f8:71:b3:4d:f8:12:47:fe: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EE:C8:18:8B:57:DA:F5:A5:83:0F:FA:B3:38:F7:BF:32:8D:6E:7E X509v3 Authority Key Identifier: keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/v-7IGItX2vWlgw_6szj3vzKNbn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.242.0/24 IPv6: 2a13:d500::/32 Signature Algorithm: sha256WithRSAEncryption 32:58:ea:0c:ce:91:0d:54:6b:3d:81:73:46:30:13:61:36:3f: 91:8d:51:70:13:2f:f4:91:b0:6b:7b:cb:d9:90:f5:5f:54:4e: 04:a4:f0:d5:11:bb:d1:dd:c3:10:77:2d:e7:1e:e1:4c:0a:4d: 07:6f:85:49:3b:72:49:7c:25:2d:d9:79:93:80:68:72:f1:3d: b6:d0:d3:ed:b3:9b:1a:34:25:b8:f6:80:a5:92:93:0c:f5:2c: c9:85:99:08:52:08:57:d5:3a:22:a0:37:81:c8:45:a6:d0:08: 77:10:71:b4:4f:14:db:02:f0:b6:3b:cd:03:32:64:98:43:25: 33:24:94:fe:2d:94:94:db:0c:2c:c5:4d:ab:d4:f8:8a:08:ec: 25:34:17:55:b2:1f:7a:bd:ee:ab:9b:f4:ce:07:b0:24:00:90: 0a:96:4c:7e:41:92:8f:60:83:bd:af:8a:8d:1e:18:64:79:be: 3e:77:77:5e:db:44:0c:44:89:62:f7:40:b7:ea:73:47:d3:aa: cc:cf:98:dd:61:48:06:9a:f7:9a:e2:28:b5:d6:c9:d6:77:5b: 54:2b:8d:93:1a:d7:df:2b:92:03:a4:23:1f:70:82:b4:92:97: f6:ab:ab:80:d8:ae:fc:a5:2c:88:7e:6a:c7:e9:fa:2d:d5:bc: 59:1b:9a:f5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yM5S84YtiEfdCEaahjVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmNiNjQ0MWQ3MGQyZWIxMGQ3NjMzZGE3MzE5YTNkM2Zm OTc3YWUwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmVlYzgxODhiNTdkYWY1YTU4MzBmZmFiMzM4ZjdiZjMyOGQ2ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTdo+Ks9EECX5nCw8U9OnfG7+SNU 2GuoTaOYkU3aQosw2p+OSz5miJyne7EFWIi4i5x2ITNJ3EroRiC49lW8bo2kvnlO VTW/672vRRZSxeugmEXewJwMcdUw7R1c/MLx+eBrJJmqTtklAzUSFQpjg2CGsCkt 2ehsv2oia32jzI6eXKdIoi+BDAuMEd8KAe/IMocDfbywgmtPPUP28gZ68Zo7qHYH NGNajEQE0VJ0K32hUsehMhJ3mfdyy6GevA0sJcZtm5OyxFqBD1Q62MI33XGTV49+ yAWyBGRVmQZoZSKtzj8uQ8Br4E0JRSyRcE3ncPUK7hhC+HGzTfgSR/7bswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL/uyBiLV9r1pYMP+rM4978yjW5+MB8GA1UdIwQY MBaAFK78tkQdcNLrENdjPacxmj0/+XeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zM2FkNDQtNzg2Yy00NjQzLTlkZTIt MzRmNzIyYjA4ZGVmLzEvdi03SUdJdFgydldsZ3dfNnN6ajN2ektOYm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8zM2FkNDQtNzg2Yy00NjQzLTlkZTItMzRmNzIyYjA4ZGVm LzEvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwjDyMA0E AgACMAcDBQAqE9UAMA0GCSqGSIb3DQEBCwUAA4IBAQAyWOoMzpENVGs9gXNGMBNh Nj+RjVFwEy/0kbBre8vZkPVfVE4EpPDVEbvR3cMQdy3nHuFMCk0Hb4VJO3JJfCUt 2XmTgGhy8T220NPts5saNCW49oClkpMM9SzJhZkIUghX1ToioDeByEWm0Ah3EHG0 TxTbAvC2O80DMmSYQyUzJJT+LZSU2wwsxU2r1PiKCOwlNBdVsh96ve6rm/TOB7Ak AJAKlkx+QZKPYIO9r4qNHhhkeb4+d3de20QMRIli90C36nNH06rMz5jdYUgGmvea 4ii11snWd1tUK42TGtffK5IDpCMfcIK0kpf2q6uA2K78pSyIfmrH6fot1bxZG5r1 -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:32 2026 by rpki-client