This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vH7rrGITtAP6GmK4LXyxobUcePQ.roa File: vH7rrGITtAP6GmK4LXyxobUcePQ.roa (raw, json) Hash identifier: Wf6Z3W6bIHnyxGibTmjBzRqrlxTUGARmRUFdCoR9nYA= Subject key identifier: BC:7E:EB:AC:62:13:B4:03:FA:1A:62:B8:2D:7C:B1:A1:B5:1C:78:F4 Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Certificate serial: 019B7F159F7529DD6E2369B6B157E833DF04 Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vH7rrGITtAP6GmK4LXyxobUcePQ.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51708 IP address blocks: 46.18.24.0/21 maxlen: 21 46.18.24.0/22 maxlen: 22 2a02:27e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9f:75:29:dd:6e:23:69:b6:b1:57:e8:33:df:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc7eebac6213b403fa1a62b82d7cb1a1b51c78f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:9d:9d:ef:14:03:d5:48:59:2b:54:a1:88: 21:f3:cf:ca:1b:54:28:d6:1b:c8:f3:5b:fa:bc:32: cb:e1:b0:06:81:22:95:ed:f8:84:f3:62:c3:12:39: b2:61:36:54:02:cc:10:f4:56:85:7f:a6:2e:36:ae: be:43:51:d0:b8:a9:ee:dc:80:fd:85:52:9b:77:f7: 72:0d:fc:3b:6a:f4:c8:b2:d7:ac:b6:1e:ce:df:56: c7:d5:55:a1:6a:06:10:ab:1e:5a:0a:fc:ba:9f:8a: c9:65:ec:dd:4f:29:04:a2:00:d9:18:ca:15:bf:5d: 8f:96:31:a7:0b:6d:57:db:00:06:b3:ef:c6:92:6b: 7e:82:1d:13:d9:c1:56:18:28:37:a5:ef:eb:ed:48: 2e:60:9e:e8:2a:0b:a4:79:c1:e4:21:83:c7:83:45: ad:f7:96:df:77:f0:e2:c7:c8:fa:f3:6a:95:0c:f9: 4a:e8:ba:1e:53:37:6b:06:c9:ab:b0:fb:b9:2d:e7: b4:7e:56:cd:92:e1:66:b8:08:04:d7:35:cf:4a:e7: 1d:41:49:f1:a1:a2:de:c5:2a:20:6f:74:de:fa:89: 97:ca:66:0c:4d:8e:aa:18:d4:bb:1d:e4:b6:c2:31: 24:d6:7d:9f:42:fd:a7:36:e7:c3:9a:b9:48:e4:05: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7E:EB:AC:62:13:B4:03:FA:1A:62:B8:2D:7C:B1:A1:B5:1C:78:F4 X509v3 Authority Key Identifier: keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vH7rrGITtAP6GmK4LXyxobUcePQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.24.0/21 IPv6: 2a02:27e8::/32 Signature Algorithm: sha256WithRSAEncryption ba:53:e8:71:13:c8:6b:18:d3:2d:f6:44:f9:3c:22:d1:66:5e: 00:3b:ff:8e:f9:5b:67:f5:3b:96:26:72:f0:2b:d1:06:17:c0: ad:2b:ac:ef:e7:2d:f4:fd:86:a8:53:7f:40:88:dc:3d:44:d9: de:60:05:6a:43:00:d4:20:7b:79:27:fe:b8:91:6e:6b:56:94: 0d:9c:2a:16:8d:26:9e:25:39:1b:1b:14:ac:b2:1b:c1:04:9a: e4:b5:04:ec:8d:71:95:9b:f1:9f:b7:d3:a6:c4:3e:f3:b0:67: 55:52:1c:b4:87:6c:e4:24:0f:e6:30:da:06:f8:4f:67:20:4b: c3:62:2a:44:b4:4f:1c:93:22:4b:36:27:3c:ea:32:70:74:e6: 87:f6:87:ca:e1:5b:42:f2:ca:e1:b1:fe:71:a9:c8:e5:dd:d5: 7d:8c:3f:77:75:04:12:37:a9:c0:b9:bb:d7:8f:fe:99:a3:93: 9d:3b:c5:a4:fd:29:4f:f7:e0:28:34:ef:d2:70:bd:9c:0a:45: 58:63:06:d0:3d:07:04:23:60:a5:37:f8:2b:6d:9c:40:12:f1: db:ce:7b:f1:a0:54:a5:07:58:98:71:14:4b:9e:e5:e4:57:34: da:33:2b:19:0b:8f:f4:02:ca:4a:18:57:ad:5b:90:00:0b:55: 3c:b1:40:f0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FZ91Kd1uI2m2sVfoM98EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi MzgzZmEwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzdlZWJhYzYyMTNiNDAzZmExYTYyYjgyZDdjYjFhMWI1MWM3OGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoGdne8UA9VIWStUoYgh88/KG1Qo 1hvI81v6vDLL4bAGgSKV7fiE82LDEjmyYTZUAswQ9FaFf6YuNq6+Q1HQuKnu3ID9 hVKbd/dyDfw7avTIstesth7O31bH1VWhagYQqx5aCvy6n4rJZezdTykEogDZGMoV v12PljGnC21X2wAGs+/Gkmt+gh0T2cFWGCg3pe/r7UguYJ7oKgukecHkIYPHg0Wt 95bfd/Dix8j682qVDPlK6LoeUzdrBsmrsPu5Lee0flbNkuFmuAgE1zXPSucdQUnx oaLexSogb3Te+omXymYMTY6qGNS7HeS2wjEk1n2fQv2nNufDmrlI5AXKsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLx+66xiE7QD+hpiuC18saG1HHj0MB8GA1UdIwQY MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt YjBjNjA0NjRkZjA2LzEvdkg3cnJHSVR0QVA2R21LNExYeXhvYlVjZVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2 LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLhIYMA0E AgACMAcDBQAqAifoMA0GCSqGSIb3DQEBCwUAA4IBAQC6U+hxE8hrGNMt9kT5PCLR Zl4AO/+O+Vtn9TuWJnLwK9EGF8CtK6zv5y30/YaoU39AiNw9RNneYAVqQwDUIHt5 J/64kW5rVpQNnCoWjSaeJTkbGxSsshvBBJrktQTsjXGVm/Gft9OmxD7zsGdVUhy0 h2zkJA/mMNoG+E9nIEvDYipEtE8ckyJLNic86jJwdOaH9ofK4VtC8srhsf5xqcjl 3dV9jD93dQQSN6nAubvXj/6Zo5OdO8Wk/SlP9+AoNO/ScL2cCkVYYwbQPQcEI2Cl N/grbZxAEvHbznvxoFSlB1iYcRRLnuXkVzTaMysZC4/0AspKGFetW5AAC1U8sUDw -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:35 2026 by rpki-client