This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa File: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (raw, json) Hash identifier: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA= Subject key identifier: BC:EA:43:6F:F4:6D:0D:5C:AD:97:96:20:B3:F4:DB:FC:3E:AD:C2:0F Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D5168A550E2E976AF6CE80841696 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 91.198.200.0/24 maxlen: 24 178.212.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d5:16:8a:55:0e:2e:97:6a:f6:ce:80:84:16:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcea436ff46d0d5cad979620b3f4dbfc3eadc20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:34:f0:86:39:1d:99:72:aa:77:86:27:43: f5:e0:bf:ee:c7:47:48:4d:38:18:af:db:a5:e1:34: fc:67:3d:8d:0e:31:73:0c:2b:7e:b8:23:ce:ed:3d: de:95:09:9e:2b:b7:73:a7:af:8d:fd:3f:4a:7f:9a: 02:af:2f:60:59:b0:b5:6d:90:ba:40:5c:b8:42:95: 07:94:f2:6d:b0:3c:ca:72:50:b2:1b:2c:ed:17:91: 87:ba:22:df:4c:62:2a:91:31:55:a6:5d:0f:65:70: ad:b7:7d:98:48:ab:0b:44:f4:2c:93:d5:7f:47:48: 76:dc:0b:96:74:8d:59:20:f0:65:2e:ae:df:89:55: 3f:e2:9c:24:e4:63:f4:b8:ae:15:0d:1c:66:4b:b7: ce:81:b4:ed:a1:0e:d5:d8:26:48:53:f1:9f:55:d2: 9c:b1:e6:0d:2a:1f:44:7c:3a:6d:8a:07:85:c9:6e: db:22:65:f1:a5:10:65:80:bc:e9:17:02:63:29:67: eb:cb:51:99:ae:33:fa:0e:70:ab:32:a7:2f:1b:e8: 43:07:80:20:60:d4:6d:38:bf:87:90:1d:e2:b1:b9: 98:94:ef:c3:95:31:ed:68:32:51:53:e1:c7:4f:7c: 5f:23:2a:f9:44:28:ad:9b:14:e8:23:a1:d2:48:c6: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EA:43:6F:F4:6D:0D:5C:AD:97:96:20:B3:F4:DB:FC:3E:AD:C2:0F X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.200.0/24 178.212.224.0/24 Signature Algorithm: sha256WithRSAEncryption 52:10:47:98:27:cb:76:b5:67:6a:f5:4a:3f:5d:bc:06:e3:92: d3:3c:e9:a1:e6:fd:a1:29:2f:b1:60:17:2b:55:2c:c2:39:6c: 21:e1:c9:af:0c:50:4b:40:87:1c:d2:d6:e8:6a:8e:89:cb:a2: f9:6b:68:25:2e:9d:7b:35:dd:e8:bf:ba:99:9d:be:e8:a1:25: b1:d9:fc:10:74:84:14:88:c2:6a:a9:d6:e9:d4:f3:1d:d7:8e: 1e:a8:06:07:cf:11:2c:c3:06:b4:3a:e1:2b:14:ab:9a:3a:34: 03:ef:70:6b:96:40:61:ea:69:f5:22:d9:c1:53:0c:84:6f:78: 80:2a:3b:aa:42:84:46:e8:07:16:5d:5c:0e:75:b4:bd:4c:b5: 50:5b:9b:90:2a:98:4e:58:2f:cb:2e:11:55:6d:63:0b:d3:2c: d0:1c:4b:9f:e1:c4:2b:1d:f8:46:d0:41:b8:70:18:f5:01:09: 55:84:3f:8f:04:bf:b2:f0:a2:3c:b0:a3:fa:26:c7:20:b9:83: d2:d9:70:9a:c0:2f:2e:a0:c5:d6:ac:c3:3e:68:c1:08:96:0b: 12:a0:5b:f0:11:eb:43:99:bc:70:00:6a:46:35:8a:18:7a:63: a8:af:9a:ae:7c:1b:a1:03:8e:0c:bd:47:c6:de:79:76:e2:df: f7:89:00:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ONUWilUOLpdq9s6AhBaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2VhNDM2ZmY0NmQwZDVjYWQ5Nzk2MjBiM2Y0ZGJmYzNlYWRjMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGQ08IY5HZlyqneGJ0P14L/ux0dI TTgYr9ul4TT8Zz2NDjFzDCt+uCPO7T3elQmeK7dzp6+N/T9Kf5oCry9gWbC1bZC6 QFy4QpUHlPJtsDzKclCyGyztF5GHuiLfTGIqkTFVpl0PZXCtt32YSKsLRPQsk9V/ R0h23AuWdI1ZIPBlLq7fiVU/4pwk5GP0uK4VDRxmS7fOgbTtoQ7V2CZIU/GfVdKc seYNKh9EfDptigeFyW7bImXxpRBlgLzpFwJjKWfry1GZrjP6DnCrMqcvG+hDB4Ag YNRtOL+HkB3isbmYlO/DlTHtaDJRU+HHT3xfIyr5RCitmxToI6HSSMaVQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLzqQ2/0bQ1crZeWILP02/w+rcIPMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvdk9wRGJfUnREVnl0bDVZZ3NfVGJfRDZ0d2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8bIAwQA stTgMA0GCSqGSIb3DQEBCwUAA4IBAQBSEEeYJ8t2tWdq9Uo/XbwG45LTPOmh5v2h KS+xYBcrVSzCOWwh4cmvDFBLQIcc0tboao6Jy6L5a2glLp17Nd3ov7qZnb7ooSWx 2fwQdIQUiMJqqdbp1PMd144eqAYHzxEswwa0OuErFKuaOjQD73BrlkBh6mn1ItnB UwyEb3iAKjuqQoRG6AcWXVwOdbS9TLVQW5uQKphOWC/LLhFVbWML0yzQHEuf4cQr HfhG0EG4cBj1AQlVhD+PBL+y8KI8sKP6JscguYPS2XCawC8uoMXWrMM+aMEIlgsS oFvwEetDmbxwAGpGNYoYemOor5qufBuhA44MvUfG3nl24t/3iQBp -----END CERTIFICATE-----Generated at Mon Jan 19 17:47:58 2026 by rpki-client