This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/_vECo6V0OqVHvuSazkWJ0dvewy0.roa File: _vECo6V0OqVHvuSazkWJ0dvewy0.roa (raw, json) Hash identifier: sG5pX1vWAXrVaFYMr9ZTJOYbhxs6iotv8DZ3G9v31xc= Subject key identifier: FE:F1:02:A3:A5:74:3A:A5:47:BE:E4:9A:CE:45:89:D1:DB:DE:C3:2D Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A32E99F69B1BAFC40618C60B5E149A Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/_vECo6V0OqVHvuSazkWJ0dvewy0.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33387 IP address blocks: 147.189.142.0/24 maxlen: 24 185.127.93.0/24 maxlen: 24 185.127.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:99:f6:9b:1b:af:c4:06:18:c6:0b:5e:14:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef102a3a5743aa547bee49ace4589d1dbdec32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:19:0a:ce:50:2b:31:5f:97:d3:7f:00:ad: 79:d9:c8:9b:d5:d9:c4:d1:68:50:d7:cb:ad:30:ba: e7:90:01:c8:1d:ba:db:d5:af:65:f4:65:07:ce:72: 38:ed:b3:6e:c8:5e:cb:34:39:cd:53:56:37:e3:0d: 54:ed:84:95:90:89:c8:de:e5:75:83:2f:51:b1:e6: f9:76:26:1e:1a:44:e9:83:1a:b4:0c:23:6a:6c:9a: d1:9d:85:f4:2d:85:98:bd:08:9e:7a:8e:d9:96:8d: f2:cb:9e:bb:95:04:1d:83:9c:0e:c4:e6:08:b9:16: 31:63:73:db:21:80:18:1a:41:27:ec:a6:0c:23:ca: eb:73:eb:3c:16:31:ee:ac:6c:ac:98:91:a0:36:ef: aa:19:8a:17:b6:f0:e9:6a:44:9c:0d:05:d9:be:30: b0:4f:d1:12:74:b4:3e:8f:37:43:15:26:75:ea:15: fb:0e:9b:d1:11:4e:17:47:68:2d:7a:dc:bb:07:69: 87:44:63:e4:f8:74:3e:a5:eb:57:5c:b9:9e:d0:21: dc:fe:c8:c8:70:d8:f4:03:96:1f:c6:5c:e3:f6:cb: 46:a8:cd:cf:3a:e5:a9:ab:78:4a:cc:04:d3:67:8c: c3:54:42:44:7b:7d:49:f3:6f:3a:00:d0:24:54:af: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:02:A3:A5:74:3A:A5:47:BE:E4:9A:CE:45:89:D1:DB:DE:C3:2D X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/_vECo6V0OqVHvuSazkWJ0dvewy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.142.0/24 185.127.93.0-185.127.94.255 Signature Algorithm: sha256WithRSAEncryption 21:6b:80:f7:60:9d:4d:c1:84:8c:e5:a7:81:8b:cd:3d:03:81: ae:2c:74:3b:47:b1:8d:6f:65:42:43:2e:db:ec:d0:ed:29:bb: c3:80:41:f0:87:45:ae:26:97:b4:e7:7f:4d:ef:64:60:b1:2f: c8:9f:27:85:b0:56:39:74:a5:c4:dd:47:05:b0:3a:c0:a2:6a: 83:07:5b:45:d8:ad:ec:50:20:e8:38:84:7a:c3:54:c4:89:cb: 42:f8:e0:e9:2c:0e:c6:ff:a5:51:ba:e7:46:72:2d:f0:c4:ed: 40:c5:47:3d:6f:18:68:4b:f3:9c:f2:d2:6c:ce:2d:55:aa:d7: 64:62:82:de:09:92:3f:6e:d6:8f:60:6d:e6:62:ce:7f:f8:1f: 18:c3:73:ca:58:6c:3b:47:95:93:30:bf:66:1c:e5:17:b1:70: e4:ff:91:13:fe:42:ee:5f:52:37:8e:07:45:23:48:6f:9c:18: 0d:d0:79:40:06:de:b2:a1:cf:35:3f:7d:9e:a4:b4:f3:5f:c4: de:94:c6:50:54:df:23:9c:96:5c:e7:89:7c:70:ae:6c:56:d9: 06:b3:6f:68:a6:80:95:d8:59:92:58:e8:69:6d:8d:8c:fb:65: cc:8e:8f:2f:6c:dc:0d:f1:7d:14:10:c6:c4:96:0f:8c:42:45: fb:c2:a7:af -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4oy6Z9psbr8QGGMYLXhSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWYxMDJhM2E1NzQzYWE1NDdiZWU0OWFjZTQ1ODlkMWRiZGVjMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2oZCs5QKzFfl9N/AK152cib1dnE 0WhQ18utMLrnkAHIHbrb1a9l9GUHznI47bNuyF7LNDnNU1Y34w1U7YSVkInI3uV1 gy9Rseb5diYeGkTpgxq0DCNqbJrRnYX0LYWYvQieeo7Zlo3yy567lQQdg5wOxOYI uRYxY3PbIYAYGkEn7KYMI8rrc+s8FjHurGysmJGgNu+qGYoXtvDpakScDQXZvjCw T9ESdLQ+jzdDFSZ16hX7DpvREU4XR2gtety7B2mHRGPk+HQ+petXXLme0CHc/sjI cNj0A5Yfxlzj9stGqM3POuWpq3hKzATTZ4zDVEJEe31J8286ANAkVK/kXQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFP7xAqOldDqlR77kms5FidHb3sMtMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL192RUNvNlYwT3FWSHZ1U2F6a1dKMGR2ZXd5MC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQDBACTvY4w DAMEALl/XQMEALl/XjANBgkqhkiG9w0BAQsFAAOCAQEAIWuA92CdTcGEjOWngYvN PQOBrix0O0exjW9lQkMu2+zQ7Sm7w4BB8IdFriaXtOd/Te9kYLEvyJ8nhbBWOXSl xN1HBbA6wKJqgwdbRdit7FAg6DiEesNUxInLQvjg6SwOxv+lUbrnRnIt8MTtQMVH PW8YaEvznPLSbM4tVarXZGKC3gmSP27Wj2Bt5mLOf/gfGMNzylhsO0eVkzC/Zhzl F7Fw5P+RE/5C7l9SN44HRSNIb5wYDdB5QAbesqHPNT99nqS081/E3pTGUFTfI5yW XOeJfHCubFbZBrNvaKaAldhZkljoaW2NjPtlzI6PL2zcDfF9FBDGxJYPjEJF+8Kn rw== -----END CERTIFICATE-----Generated at Sun Jan 11 12:33:52 2026 by rpki-client