This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/14VladBUxqaqZ-NNE8ER_uSwfHc.roa File: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (raw, json) Hash identifier: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM= Subject key identifier: D7:85:65:69:D0:54:C6:A6:AA:67:E3:4D:13:C1:11:FE:E4:B0:7C:77 Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790 Certificate serial: 019B7D5CF40C404202360D240658C69BAA68 Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/14VladBUxqaqZ-NNE8ER_uSwfHc.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 188.94.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f4:0c:40:42:02:36:0d:24:06:58:c6:9b:aa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7856569d054c6a6aa67e34d13c111fee4b07c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:f7:c4:98:37:c8:bf:fe:af:3b:98:ef:ce: ae:be:96:09:22:8b:ba:ae:d2:52:e6:6e:c1:73:fe: 03:f2:f3:cd:00:28:79:b5:f3:be:5b:e8:af:a4:d3: 31:de:37:fb:66:25:2b:0b:c7:c9:9b:97:07:e0:9d: 16:69:ef:02:81:99:7e:df:39:eb:b0:dd:17:b3:7f: 44:67:2e:fc:b7:97:71:7f:5b:ce:79:e4:00:44:98: 69:ab:d7:ab:ee:4b:af:82:70:f8:9f:30:6e:bc:75: 95:89:82:6e:9b:15:f2:16:74:c2:2e:3e:de:e7:e6: 1d:68:dc:fb:10:a9:7d:99:40:77:00:0f:db:80:b2: 1d:05:9f:ab:a7:90:9f:96:57:be:2a:8a:ac:14:5b: dc:18:57:5a:a5:b1:e0:2b:59:e1:6e:9e:67:a0:d5: 8c:60:c9:43:f7:94:15:b3:7d:6f:dd:57:83:fb:e0: 9e:13:dd:aa:2b:00:47:ec:31:3e:d5:7b:a5:21:04: c1:cc:ec:df:7b:ca:2b:88:4c:a1:48:68:96:4c:9c: 76:07:b8:59:02:32:6b:e7:46:47:7b:2c:fb:e5:05: 7b:65:0f:09:0c:3d:79:66:99:ab:be:13:c4:72:90: a5:83:d4:a3:18:da:69:79:31:99:4f:93:9c:a7:b7: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:65:69:D0:54:C6:A6:AA:67:E3:4D:13:C1:11:FE:E4:B0:7C:77 X509v3 Authority Key Identifier: keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/14VladBUxqaqZ-NNE8ER_uSwfHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.94.190.0/24 Signature Algorithm: sha256WithRSAEncryption a0:4c:2b:66:a1:d7:72:a4:9d:b0:d5:20:44:4b:ea:2d:44:45: 07:6d:9e:5e:7e:21:08:d2:01:fc:dc:19:e8:d4:a3:a7:df:36: ca:09:c1:b5:40:b2:fb:b9:63:ae:69:1a:fa:98:cd:4b:2f:5b: bc:06:68:00:66:49:48:57:dc:44:9c:50:3b:0f:42:6b:b5:dd: dc:34:06:8a:4c:af:14:41:c2:dd:88:13:18:cc:ca:1c:c6:3d: 25:f2:28:f7:dc:f5:d2:a5:84:02:f6:f8:4e:c9:a7:35:e3:5b: e2:b1:4a:72:3f:f8:ff:a6:f1:8c:89:3c:e8:6d:e3:6d:b9:4b: e8:80:c4:b8:61:1a:13:ae:e7:16:26:6b:43:40:02:70:c7:f5: a4:2f:f4:af:8a:ba:bd:d9:8c:32:27:db:8d:41:7c:63:cd:ba: bf:e9:cb:f5:3a:59:b5:fe:d7:b1:39:08:1a:7a:1e:89:8a:be: b4:3c:c9:9d:66:8b:07:fa:ee:89:b4:24:0a:c4:50:6a:a8:de: 1a:50:55:d3:4c:58:ed:dc:85:db:64:2c:a3:c4:7e:0e:b4:52: 50:d8:ae:49:49:45:38:09:12:35:27:5d:fd:e3:b7:02:ab:43: db:49:b8:86:b4:d3:f3:33:a1:dc:2a:0f:35:f7:51:8d:50:9c: 96:64:1c:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPQMQEICNg0kBljGm6poMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDc4NmIyNGI0YjMwMjc1YmNjOGQ1MjQ0ZTM0ZWUwMDQ4 MWQ3OTAwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzg1NjU2OWQwNTRjNmE2YWE2N2UzNGQxM2MxMTFmZWU0YjA3Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm33xJg3yL/+rzuY786uvpYJIou6 rtJS5m7Bc/4D8vPNACh5tfO+W+ivpNMx3jf7ZiUrC8fJm5cH4J0Wae8CgZl+3znr sN0Xs39EZy78t5dxf1vOeeQARJhpq9er7kuvgnD4nzBuvHWViYJumxXyFnTCLj7e 5+YdaNz7EKl9mUB3AA/bgLIdBZ+rp5Cflle+KoqsFFvcGFdapbHgK1nhbp5noNWM YMlD95QVs31v3VeD++CeE92qKwBH7DE+1XulIQTBzOzfe8oriEyhSGiWTJx2B7hZ AjJr50ZHeyz75QV7ZQ8JDD15ZpmrvhPEcpClg9SjGNppeTGZT5Ocp7fUEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeFZWnQVMamqmfjTRPBEf7ksHx3MB8GA1UdIwQY MBaAFL/XhrJLSzAnW8yNUkTjTuAEgdeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5Yjct MWExZjkzNjQ1NGVjLzEvMTRWbGFkQlV4cWFxWi1OTkU4RVJfdVN3ZkhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5YjctMWExZjkzNjQ1NGVj LzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF6+MA0G CSqGSIb3DQEBCwUAA4IBAQCgTCtmoddypJ2w1SBES+otREUHbZ5efiEI0gH83Bno 1KOn3zbKCcG1QLL7uWOuaRr6mM1LL1u8BmgAZklIV9xEnFA7D0Jrtd3cNAaKTK8U QcLdiBMYzMocxj0l8ij33PXSpYQC9vhOyac141visUpyP/j/pvGMiTzobeNtuUvo gMS4YRoTrucWJmtDQAJwx/WkL/Svirq92YwyJ9uNQXxjzbq/6cv1Olm1/texOQga eh6Jir60PMmdZosH+u6JtCQKxFBqqN4aUFXTTFjt3IXbZCyjxH4OtFJQ2K5JSUU4 CRI1J13947cCq0PbSbiGtNPzM6HcKg8191GNUJyWZBwT -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:47 2026 by rpki-client