This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/vF0Ba58Vjf6MQi2xfFA2VRGbWDA.roa File: vF0Ba58Vjf6MQi2xfFA2VRGbWDA.roa (raw, json) Hash identifier: UP/P5O1v0/b2/0tqvP3zAcq5nuDMZ+lgRc9j8wTq7CY= Subject key identifier: BC:5D:01:6B:9F:15:8D:FE:8C:42:2D:B1:7C:50:36:55:11:9B:58:30 Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Certificate serial: 019B7EA508B574C180ABC666087A5C0332DC Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/vF0Ba58Vjf6MQi2xfFA2VRGbWDA.roa Signing time: Fri 02 Jan 2026 12:18:23 +0000 ROA not before: Fri 02 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51979 IP address blocks: 91.222.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:08:b5:74:c1:80:ab:c6:66:08:7a:5c:03:32:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847 Validity Not Before: Jan 2 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc5d016b9f158dfe8c422db17c503655119b5830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:c0:dd:f0:dc:db:e0:d5:e6:43:c9:51:37: 3d:5f:97:96:1f:0b:b8:58:29:21:f2:ec:65:27:d0: 41:e3:48:95:56:e4:f0:cb:46:a1:e0:25:27:02:8f: 97:cf:25:aa:6f:26:69:74:1e:13:c1:37:9c:a3:87: 99:a8:cb:0a:95:cf:b7:da:96:af:df:73:94:ae:4c: d8:5e:b8:02:54:f1:81:51:13:e8:c3:ac:a1:92:c0: a4:8b:43:42:24:a9:20:3a:e6:39:1e:19:29:b7:b7: d6:cd:27:b3:b3:2d:87:a4:31:f2:cd:78:0b:7d:eb: 1b:ec:48:95:d1:a4:81:b3:ca:09:aa:dd:53:f7:87: 44:36:23:4a:ae:34:a9:33:b5:2d:cc:9c:2e:af:3d: c4:d8:96:07:2d:bd:02:70:93:4a:bb:b1:92:c7:2a: 9a:cb:b7:00:9a:a9:c9:bf:12:e7:2c:f3:b5:ef:01: 11:52:19:23:8b:0e:06:d7:aa:8f:68:c2:a8:a8:f6: db:fd:56:52:3e:34:c3:ae:40:a5:10:6f:72:0c:a5: 0a:b2:4d:5a:ae:3d:5d:67:af:35:36:81:49:f6:f8: e7:c3:f3:f6:34:fa:4c:e4:40:15:b8:78:35:30:ea: 19:d5:c5:70:b3:08:f9:eb:66:19:ef:22:3d:09:ff: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5D:01:6B:9F:15:8D:FE:8C:42:2D:B1:7C:50:36:55:11:9B:58:30 X509v3 Authority Key Identifier: keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/vF0Ba58Vjf6MQi2xfFA2VRGbWDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.88.0/22 Signature Algorithm: sha256WithRSAEncryption 42:2d:ae:36:9d:ec:f9:b2:71:be:2e:7a:27:62:b0:b6:d2:5f: 3a:b0:b1:75:cb:94:1c:dd:58:e8:f4:a2:da:1e:e2:e4:02:ae: 6f:09:63:c4:33:27:c6:13:f0:83:f8:69:d9:a4:98:4b:aa:8d: a0:e4:dc:eb:fc:5e:28:c6:f6:b1:82:7b:a2:23:2a:6b:10:d4: 12:51:62:8e:12:c2:18:b5:53:4c:55:aa:73:d1:eb:76:e9:fb: a6:6c:35:83:b6:a1:de:c3:70:31:11:8c:cd:4d:1d:fb:52:41: cc:0a:1e:15:af:4c:a7:73:ee:df:84:36:e6:3e:bc:1d:07:25: 21:5d:c6:5e:8f:6a:c9:8c:9d:58:e2:3d:b1:2d:8e:19:32:60: cf:7f:45:7f:91:16:7e:9b:be:28:75:fe:bc:4f:1f:dc:cc:a5: 59:cf:31:07:bb:a9:5e:da:f0:7a:cd:bf:eb:41:90:86:62:84: 0c:f6:0c:ee:9b:6d:09:02:3c:83:8e:43:1d:dc:94:0b:74:69: 1d:65:8f:48:43:09:97:65:61:4f:0e:8b:ab:55:95:5d:c6:76: d4:8d:e1:ab:28:e1:a4:cf:86:70:ff:66:dc:a2:cd:c2:b0:7b: 63:30:b5:f2:c1:1f:0c:b1:33:50:65:58:48:5c:50:50:33:7e: 78:f6:5b:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQi1dMGAq8ZmCHpcAzLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YzE4N2JjN2E5ZTg4NTMzNWE3ZWI5YjBhNDM4ZmU4MTFj MDM4NDcwHhcNMjYwMTAyMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzVkMDE2YjlmMTU4ZGZlOGM0MjJkYjE3YzUwMzY1NTExOWI1ODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKHA3fDc2+DV5kPJUTc9X5eWHwu4 WCkh8uxlJ9BB40iVVuTwy0ah4CUnAo+XzyWqbyZpdB4TwTeco4eZqMsKlc+32pav 33OUrkzYXrgCVPGBURPow6yhksCki0NCJKkgOuY5Hhkpt7fWzSezsy2HpDHyzXgL fesb7EiV0aSBs8oJqt1T94dENiNKrjSpM7UtzJwurz3E2JYHLb0CcJNKu7GSxyqa y7cAmqnJvxLnLPO17wERUhkjiw4G16qPaMKoqPbb/VZSPjTDrkClEG9yDKUKsk1a rj1dZ681NoFJ9vjnw/P2NPpM5EAVuHg1MOoZ1cVwswj562YZ7yI9Cf9CXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxdAWufFY3+jEItsXxQNlURm1gwMB8GA1UdIwQY MBaAFKnBh7x6nohTNafrmwpDj+gRwDhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDIt MzcwZDFmZDQyNTRiLzEvdkYwQmE1OFZqZjZNUWkyeGZGQTJWUkdiV0RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYjgxNGEtZDM4OC00YzY0LTgzMDItMzcwZDFmZDQyNTRi LzEvcWNHSHZIcWVpRk0xcC11YkNrT1A2QkhBT0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW95YMA0G CSqGSIb3DQEBCwUAA4IBAQBCLa42nez5snG+LnonYrC20l86sLF1y5Qc3Vjo9KLa HuLkAq5vCWPEMyfGE/CD+GnZpJhLqo2g5Nzr/F4oxvaxgnuiIyprENQSUWKOEsIY tVNMVapz0et26fumbDWDtqHew3AxEYzNTR37UkHMCh4Vr0ync+7fhDbmPrwdByUh XcZej2rJjJ1Y4j2xLY4ZMmDPf0V/kRZ+m74odf68Tx/czKVZzzEHu6le2vB6zb/r QZCGYoQM9gzum20JAjyDjkMd3JQLdGkdZY9IQwmXZWFPDourVZVdxnbUjeGrKOGk z4Zw/2bcos3CsHtjMLXywR8MsTNQZVhIXFBQM3549luC -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:20 2026 by rpki-client