This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa File: rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa (raw, json) Hash identifier: tTo1sNFXQgwbOz3Qzxrcjf5177mm498Fb+OqdLzuw6s= Subject key identifier: AC:C5:59:F1:53:6B:01:B3:AB:D6:CA:66:C3:62:20:27:90:72:B5:D0 Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Certificate serial: 019B7F84BF78F70DEE93410DC80BD643E50C Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200423 IP address blocks: 185.107.220.0/22 maxlen: 24 2a06:4600::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bf:78:f7:0d:ee:93:41:0d:c8:0b:d6:43:e5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc559f1536b01b3abd6ca66c36220279072b5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:5b:ee:ba:22:9b:fb:49:65:00:6a:fa:14: 9d:5a:f9:3e:5a:fc:2c:f2:b7:a6:f4:e3:38:75:a3: 3b:54:5e:1f:5c:48:a7:15:c9:d6:f0:0d:ca:39:6f: 18:12:66:96:4e:8c:ec:ca:ae:c2:47:d8:3a:d8:d0: f0:1b:95:6f:3e:a7:17:d7:a7:8e:38:05:aa:cc:29: e1:4b:1d:82:a4:9d:83:f9:f3:56:e4:38:26:74:4c: 23:f0:ee:d9:cf:e5:d5:03:89:a7:4f:e5:55:92:bc: 18:64:e6:74:74:5d:03:d8:7d:d8:f5:4c:75:4c:2a: ec:0a:fa:13:f6:fc:de:5a:9c:74:fe:20:ec:ec:96: 0e:99:27:76:51:57:43:5c:d9:5c:1e:71:41:ee:0a: 49:5d:6b:a3:db:b8:cc:4a:ca:dd:8d:35:ce:64:70: d2:20:cb:e4:17:c9:60:be:8b:62:52:0e:d3:16:a1: d4:24:83:ec:2f:b1:fc:11:93:0b:a7:6a:f8:0a:65: 02:7e:7c:b3:a3:b3:53:c0:29:62:17:3a:1d:70:b8: d1:d9:87:a1:8d:de:03:ed:ca:1e:c7:84:2e:fe:8c: 77:e1:3e:0b:e0:fe:51:1a:ee:51:1f:a0:d2:59:9e: 6b:55:ed:f5:74:48:19:3a:fe:cb:e2:9d:93:c0:62: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:59:F1:53:6B:01:B3:AB:D6:CA:66:C3:62:20:27:90:72:B5:D0 X509v3 Authority Key Identifier: keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/rMVZ8VNrAbOr1spmw2IgJ5BytdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.220.0/22 IPv6: 2a06:4600::/29 Signature Algorithm: sha256WithRSAEncryption 8e:80:6b:90:07:b9:70:b8:c1:2b:64:cf:e6:73:a4:e6:e6:6c: 0d:7c:ea:65:e5:92:91:ea:fc:cb:66:9d:8d:52:1e:d2:96:7d: cb:b1:b5:b3:49:86:70:a9:db:6a:2a:69:80:ec:36:10:31:81: 38:e7:4e:20:e3:44:b9:03:17:6d:f5:07:c8:aa:c7:45:17:3e: 97:43:53:d9:17:1a:6b:4d:83:f3:26:2d:e0:a5:90:3d:31:d2: bb:b1:41:ac:69:b7:33:23:64:28:c9:76:7a:01:08:fc:c9:32: 2c:2c:78:8f:27:c4:d1:6d:d4:ff:b5:67:e4:7c:20:ea:76:37: 46:76:94:be:2d:e6:d0:bf:b5:73:ff:fe:bc:c9:62:10:5f:e8: 40:55:05:e8:de:4f:bd:0e:16:bb:9b:35:86:b7:c6:6e:d6:21: 3c:56:b7:c5:28:03:1c:16:ca:e5:63:90:72:d0:a6:73:f7:b3: a7:0e:ec:5b:4a:85:32:03:8d:34:7b:00:5e:fa:92:45:51:7f: 95:cc:b1:58:4f:7f:cc:e5:8e:8b:84:de:a0:f1:d2:ad:d3:f8: 83:47:cc:26:43:61:06:f9:db:e5:f3:4b:64:2f:62:0f:e9:08: 05:80:9c:11:73:28:38:88:63:0a:c3:7f:84:c1:56:b7:59:87: 8e:ba:f9:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hL949w3uk0ENyAvWQ+UMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0 ZDNjOTAwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2M1NTlmMTUzNmIwMWIzYWJkNmNhNjZjMzYyMjAyNzkwNzJiNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywlb7roim/tJZQBq+hSdWvk+Wvws 8rem9OM4daM7VF4fXEinFcnW8A3KOW8YEmaWTozsyq7CR9g62NDwG5VvPqcX16eO OAWqzCnhSx2CpJ2D+fNW5DgmdEwj8O7Zz+XVA4mnT+VVkrwYZOZ0dF0D2H3Y9Ux1 TCrsCvoT9vzeWpx0/iDs7JYOmSd2UVdDXNlcHnFB7gpJXWuj27jMSsrdjTXOZHDS IMvkF8lgvotiUg7TFqHUJIPsL7H8EZMLp2r4CmUCfnyzo7NTwCliFzodcLjR2Yeh jd4D7coex4Qu/ox34T4L4P5RGu5RH6DSWZ5rVe31dEgZOv7L4p2TwGLYLQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKzFWfFTawGzq9bKZsNiICeQcrXQMB8GA1UdIwQY MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt MmM3YTExYzFmYmFmLzEvck1WWjhWTnJBYk9yMXNwbXcySWdKNUJ5dGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWvcMA0E AgACMAcDBQMqBkYAMA0GCSqGSIb3DQEBCwUAA4IBAQCOgGuQB7lwuMErZM/mc6Tm 5mwNfOpl5ZKR6vzLZp2NUh7Sln3LsbWzSYZwqdtqKmmA7DYQMYE4504g40S5Axdt 9QfIqsdFFz6XQ1PZFxprTYPzJi3gpZA9MdK7sUGsabczI2QoyXZ6AQj8yTIsLHiP J8TRbdT/tWfkfCDqdjdGdpS+LebQv7Vz//68yWIQX+hAVQXo3k+9Dha7mzWGt8Zu 1iE8VrfFKAMcFsrlY5By0KZz97OnDuxbSoUyA400ewBe+pJFUX+VzLFYT3/M5Y6L hN6g8dKt0/iDR8wmQ2EG+dvl80tkL2IP6QgFgJwRcyg4iGMKw3+EwVa3WYeOuvml -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:44 2026 by rpki-client