This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/vDpdZCcvfdJi26yR4LIHXfYfDgo.roa File: vDpdZCcvfdJi26yR4LIHXfYfDgo.roa (raw, json) Hash identifier: jU09xubxQGTLaA53DPFxDDjlhlI9Ph4C2iltfc6p9xs= Subject key identifier: BC:3A:5D:64:27:2F:7D:D2:62:DB:AC:91:E0:B2:07:5D:F6:1F:0E:0A Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155 Certificate serial: 019B79ECE8FE6E6017EBADBE14A2968FF2D8 Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/vDpdZCcvfdJi26yR4LIHXfYfDgo.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43341 IP address blocks: 194.113.144.0/22 maxlen: 22 2a07:e300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e8:fe:6e:60:17:eb:ad:be:14:a2:96:8f:f2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340551ace81314829351a27e399aeddb33246155 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc3a5d64272f7dd262dbac91e0b2075df61f0e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5d:f2:6f:20:02:b7:9d:dd:23:e2:e7:24:58: 85:a9:7a:9d:f2:59:2a:24:41:77:40:39:36:b5:6b: c0:8c:74:d1:ff:79:e2:44:35:f9:c7:94:33:b3:26: 87:ad:72:80:27:bf:9f:93:06:b1:9d:54:55:db:94: 28:39:08:d6:32:fc:66:4a:52:01:f0:1e:90:61:df: 70:63:0a:33:1c:1f:29:cd:72:eb:c0:cf:e2:89:d5: 9a:66:d3:a2:48:59:37:d6:66:a2:ff:93:18:a4:84: f9:9e:80:9b:a6:d3:f8:e4:39:a5:87:ef:3a:41:7c: 7d:a8:6c:e8:61:d7:ea:40:2b:67:dc:f1:ac:c7:9f: 06:df:79:05:93:2f:7f:0a:e1:12:bd:da:f1:4d:10: 51:e7:b2:93:4b:89:a9:32:77:d0:db:58:5c:68:02: f8:95:99:fa:b8:2c:e4:04:bc:ce:88:4d:35:d7:b7: 52:59:a6:81:dc:b1:f5:67:5c:60:dd:cb:af:32:2d: 56:52:c5:a5:70:56:30:7d:64:e5:f4:b4:cf:08:df: ef:a8:3c:5b:d7:ff:c9:f8:eb:e3:94:c9:e7:1a:3e: dc:fd:97:07:65:4f:6b:86:eb:f3:1b:dc:db:e9:dd: 5f:34:3d:27:69:02:ef:9a:a5:6f:90:ab:1f:99:30: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3A:5D:64:27:2F:7D:D2:62:DB:AC:91:E0:B2:07:5D:F6:1F:0E:0A X509v3 Authority Key Identifier: keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/vDpdZCcvfdJi26yR4LIHXfYfDgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.144.0/22 IPv6: 2a07:e300::/29 Signature Algorithm: sha256WithRSAEncryption 02:4a:a7:73:ca:fb:c7:bc:50:93:d7:fe:7b:85:e8:ab:89:6f: 15:04:06:6f:8a:5d:42:f0:fa:ac:fe:02:02:dd:38:6b:a9:ec: e0:0b:1c:99:6a:40:06:87:3a:98:1a:d3:2b:6f:89:24:59:0f: e5:78:41:18:36:62:d6:91:c4:2b:ac:9f:de:85:18:c1:18:b1: d8:b4:43:9f:c8:d9:43:b9:c0:3d:71:88:47:46:3b:44:d3:a3: 50:ba:c8:81:a5:98:68:40:de:7b:fe:29:98:01:c1:c3:80:f0: b6:ed:0e:50:7c:4f:e0:79:4d:06:06:74:f5:3a:eb:08:c5:93: 94:4e:98:a9:32:60:b2:91:30:eb:45:ae:2e:44:a0:c0:26:c1: e7:dd:ea:85:3b:31:15:7a:cc:13:1c:03:6c:77:8a:d2:53:73: 39:f8:35:21:97:55:e6:af:0b:b2:7f:2e:b5:28:d5:cf:9f:c0: 5c:57:49:51:ae:f1:54:11:cf:2a:df:45:11:20:09:95:a3:e0: b8:39:f0:01:49:63:0b:7e:7d:60:98:9c:b4:6f:d1:c1:83:e3: f8:aa:96:eb:23:4a:16:6a:e8:58:08:72:b7:1b:73:62:95:23: b6:0b:ab:51:15:9e:26:5a:8b:29:cd:d0:6f:b5:63:7b:07:a0: 6b:d3:13:af -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Oj+bmAX662+FKKWj/LYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy NDYxNTUwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzNhNWQ2NDI3MmY3ZGQyNjJkYmFjOTFlMGIyMDc1ZGY2MWYwZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V3ybyACt53dI+LnJFiFqXqd8lkq JEF3QDk2tWvAjHTR/3niRDX5x5QzsyaHrXKAJ7+fkwaxnVRV25QoOQjWMvxmSlIB 8B6QYd9wYwozHB8pzXLrwM/iidWaZtOiSFk31mai/5MYpIT5noCbptP45Dmlh+86 QXx9qGzoYdfqQCtn3PGsx58G33kFky9/CuESvdrxTRBR57KTS4mpMnfQ21hcaAL4 lZn6uCzkBLzOiE0117dSWaaB3LH1Z1xg3cuvMi1WUsWlcFYwfWTl9LTPCN/vqDxb 1//J+OvjlMnnGj7c/ZcHZU9rhuvzG9zb6d1fND0naQLvmqVvkKsfmTAZ7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLw6XWQnL33SYtuskeCyB132Hw4KMB8GA1UdIwQY MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It MTNlYTU2ZDFmNjNhLzEvdkRwZFpDY3ZmZEppMjZ5UjRMSUhYZllmRGdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwnGQMA0E AgACMAcDBQMqB+MAMA0GCSqGSIb3DQEBCwUAA4IBAQACSqdzyvvHvFCT1/57heir iW8VBAZvil1C8Pqs/gIC3ThrqezgCxyZakAGhzqYGtMrb4kkWQ/leEEYNmLWkcQr rJ/ehRjBGLHYtEOfyNlDucA9cYhHRjtE06NQusiBpZhoQN57/imYAcHDgPC27Q5Q fE/geU0GBnT1OusIxZOUTpipMmCykTDrRa4uRKDAJsHn3eqFOzEVeswTHANsd4rS U3M5+DUhl1Xmrwuyfy61KNXPn8BcV0lRrvFUEc8q30URIAmVo+C4OfABSWMLfn1g mJy0b9HBg+P4qpbrI0oWauhYCHK3G3NilSO2C6tRFZ4mWospzdBvtWN7B6Br0xOv -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:53 2026 by rpki-client