This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/vYMGfpWvYNZs02-62C7WJ9xAV3E.roa File: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (raw, json) Hash identifier: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w= Subject key identifier: BD:83:06:7E:95:AF:60:D6:6C:D3:6F:BA:D8:2E:D6:27:DC:40:57:71 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019B7758C71FE9F82C04488A2C3BE684214E Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/vYMGfpWvYNZs02-62C7WJ9xAV3E.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39257 IP address blocks: 185.146.48.0/22 maxlen: 22 185.191.216.0/22 maxlen: 22 185.221.148.0/22 maxlen: 22 2a0a:2040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c7:1f:e9:f8:2c:04:48:8a:2c:3b:e6:84:21:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd83067e95af60d66cd36fbad82ed627dc405771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:f9:57:d8:cf:89:ee:be:6c:19:a2:dd:00: b5:fe:6f:0e:33:e4:c7:a0:71:b2:6e:1d:6b:48:f2: 30:f3:89:e5:ca:9d:d1:cc:d4:84:b0:f9:72:d5:62: 31:f0:e7:77:69:5f:96:85:a4:37:b4:56:27:04:54: 38:a0:01:fe:c5:41:e9:d0:af:75:37:37:44:1c:a5: 1b:81:c7:5b:11:cd:43:6e:e5:b8:b5:a3:52:10:84: 43:7d:4a:13:0f:c6:1f:ef:99:8f:42:f0:93:17:fa: 5a:00:4b:57:b6:b9:8f:f2:7c:53:46:5d:c8:2a:4a: e7:18:bb:8a:bd:2a:ae:15:21:8f:c0:aa:f3:04:5c: 67:88:9a:68:11:a8:98:6e:76:18:b9:93:86:01:c0: c5:0d:a1:f9:c1:ba:f7:4c:94:35:7c:b9:00:1c:9b: eb:80:ac:82:37:f0:bc:63:18:59:34:23:6d:88:a9: 3b:7e:cd:ba:5a:30:9e:17:ea:25:e9:a4:79:76:c5: 19:7f:82:66:31:c3:7f:36:72:93:b9:eb:2e:44:d0: 8a:7c:9c:3d:a6:44:c3:5d:26:fa:df:ea:20:f1:f6: 74:f8:42:b4:33:49:08:1e:8f:9c:41:a1:84:73:08: 2c:66:96:09:68:c5:00:a7:a8:e5:24:a5:77:5b:27: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:83:06:7E:95:AF:60:D6:6C:D3:6F:BA:D8:2E:D6:27:DC:40:57:71 X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/vYMGfpWvYNZs02-62C7WJ9xAV3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.48.0/22 185.191.216.0/22 185.221.148.0/22 IPv6: 2a0a:2040::/32 Signature Algorithm: sha256WithRSAEncryption b5:b9:ee:58:23:20:49:3d:82:10:29:98:e9:d9:bc:9b:78:7a: 1f:2b:0f:7f:85:16:9e:b2:ad:aa:f5:eb:bc:4e:f2:b1:b9:1d: 04:3d:d1:7f:e5:2a:ad:2c:ee:77:51:e2:75:89:73:cc:22:1a: 68:f9:1b:34:1f:ab:e3:74:2b:f9:df:25:ef:fc:93:4d:fd:57: 3a:70:98:cc:62:ee:7f:be:40:ac:3c:b8:e0:d0:89:f4:b9:16: 52:48:bf:c0:6d:11:45:6f:e2:d3:44:91:c1:e9:b3:3b:c2:7c: 55:9b:7b:07:8f:57:66:e6:42:b2:cf:6d:bf:35:26:97:29:a0: 0b:b6:95:18:aa:44:f4:61:db:55:bb:28:b0:2a:9b:82:44:7c: 5e:7a:08:83:65:ca:3b:74:0f:e9:a9:88:6f:c4:e3:f1:50:47: 7e:52:67:26:f7:6c:45:94:7c:42:83:85:41:3d:e0:8f:da:7c: e2:9d:b7:1d:d8:34:07:31:39:f2:74:e9:8c:cb:f5:94:74:07: 17:c5:5f:b6:a3:61:88:7a:14:40:4b:f5:30:fb:64:65:57:de: db:bf:23:71:e0:26:2e:cc:68:e8:bd:95:67:16:5f:48:e2:1b: 9d:ea:36:35:fe:2a:a4:4a:af:92:1b:19:78:d1:0c:3d:bf:30: 82:3d:d2:62 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WMcf6fgsBEiKLDvmhCFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDgzMDY3ZTk1YWY2MGQ2NmNkMzZmYmFkODJlZDYyN2RjNDA1NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P75V9jPie6+bBmi3QC1/m8OM+TH oHGybh1rSPIw84nlyp3RzNSEsPly1WIx8Od3aV+WhaQ3tFYnBFQ4oAH+xUHp0K91 NzdEHKUbgcdbEc1DbuW4taNSEIRDfUoTD8Yf75mPQvCTF/paAEtXtrmP8nxTRl3I KkrnGLuKvSquFSGPwKrzBFxniJpoEaiYbnYYuZOGAcDFDaH5wbr3TJQ1fLkAHJvr gKyCN/C8YxhZNCNtiKk7fs26WjCeF+ol6aR5dsUZf4JmMcN/NnKTuesuRNCKfJw9 pkTDXSb63+og8fZ0+EK0M0kIHo+cQaGEcwgsZpYJaMUAp6jlJKV3WyebpQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFL2DBn6Vr2DWbNNvutgu1ifcQFdxMB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvdllNR2ZwV3ZZTlpzMDItNjJDN1dKOXhBVjNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuZIwAwQC ub/YAwQCud2UMA0EAgACMAcDBQAqCiBAMA0GCSqGSIb3DQEBCwUAA4IBAQC1ue5Y IyBJPYIQKZjp2bybeHofKw9/hRaesq2q9eu8TvKxuR0EPdF/5SqtLO53UeJ1iXPM Ihpo+Rs0H6vjdCv53yXv/JNN/Vc6cJjMYu5/vkCsPLjg0In0uRZSSL/AbRFFb+LT RJHB6bM7wnxVm3sHj1dm5kKyz22/NSaXKaALtpUYqkT0YdtVuyiwKpuCRHxeegiD Zco7dA/pqYhvxOPxUEd+Umcm92xFlHxCg4VBPeCP2nzinbcd2DQHMTnydOmMy/WU dAcXxV+2o2GIehRAS/Uw+2RlV97bvyNx4CYuzGjovZVnFl9I4hud6jY1/iqkSq+S Gxl40Qw9vzCCPdJi -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:59 2026 by rpki-client