This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/VMe8OCfr_t5HXDVBLz0rgr2gaks.roa File: VMe8OCfr_t5HXDVBLz0rgr2gaks.roa (raw, json) Hash identifier: MtaQQQY5h3OtFKTOTJxg1rBiAaAsL5LhtWeLWQJUvu4= Subject key identifier: 54:C7:BC:38:27:EB:FE:DE:47:5C:35:41:2F:3D:2B:82:BD:A0:6A:4B Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503 Certificate serial: 019B7C80CE110C9D3E3D8270CAD8415CA5AA Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/VMe8OCfr_t5HXDVBLz0rgr2gaks.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2593 IP address blocks: 95.140.128.0/21 maxlen: 24 185.213.112.0/24 maxlen: 24 185.213.113.0/24 maxlen: 24 2a09:8d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ce:11:0c:9d:3e:3d:82:70:ca:d8:41:5c:a5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54c7bc3827ebfede475c35412f3d2b82bda06a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:03:41:18:c8:d5:ad:92:00:76:2f:d2:f9: 98:39:af:a2:cc:a1:4c:2d:f1:b0:1d:76:89:7e:c9: 06:fc:10:36:e0:45:1a:a2:68:49:0f:cf:d0:eb:d5: 2a:a3:3f:1a:a0:ca:5f:a2:1e:85:1e:d9:2e:f5:f7: 5e:7b:43:59:b7:a4:d4:5c:4e:df:0a:58:6b:dc:c6: 63:b4:d7:72:97:72:0c:03:ad:f2:0d:54:15:33:99: 7f:4b:f8:77:99:29:98:96:07:2e:73:21:c2:77:2b: 25:d3:54:0b:19:84:96:d0:69:cb:47:56:60:6d:52: 90:45:7a:fc:2a:45:d8:cc:0a:c7:fb:de:cf:7a:70: 41:f9:03:4a:b0:fc:27:6f:dd:35:c3:0b:66:0c:47: c0:b6:eb:bd:86:da:13:06:c1:1f:36:9f:5e:25:07: 56:da:c9:d7:2c:eb:de:2a:3e:33:93:ca:63:9a:80: 10:9e:c4:c9:f7:5c:3b:bf:0c:0e:24:89:53:cc:6e: 7f:87:a1:8d:15:3f:1a:ed:1f:a9:35:42:67:1e:d7: b8:82:84:a7:82:ad:09:33:6d:4c:7d:46:dd:58:7e: 2f:a5:b2:37:ff:1b:21:57:00:de:c5:c5:55:7e:d4: a7:43:61:d8:60:6a:05:03:a6:9b:8c:55:b1:1d:b7: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:BC:38:27:EB:FE:DE:47:5C:35:41:2F:3D:2B:82:BD:A0:6A:4B X509v3 Authority Key Identifier: keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/VMe8OCfr_t5HXDVBLz0rgr2gaks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.128.0/21 185.213.112.0/23 IPv6: 2a09:8d00::/29 Signature Algorithm: sha256WithRSAEncryption 79:8d:3b:33:e6:cc:b1:13:10:35:1c:c3:f4:d9:b1:b1:67:77: e2:1f:48:e9:2d:e9:d1:e6:56:17:e8:23:76:82:74:28:b1:0d: da:46:da:22:3c:5c:ee:cb:08:b1:61:e3:3a:b4:aa:93:db:ea: af:3b:f4:e6:d2:34:37:99:fb:b1:2d:85:37:d5:d2:4e:15:18: 80:4f:05:b9:63:d0:f7:86:08:39:a9:c6:f9:47:a2:a6:18:d2: d4:23:2c:8d:2c:fd:aa:3f:b8:43:0e:ce:c6:16:f3:df:97:22: c0:e2:2a:7b:59:60:cd:d9:0b:3d:6e:5e:5c:4c:00:6f:70:7b: 42:69:89:21:b0:e5:6c:84:a2:e0:7d:8c:da:38:cd:5d:58:a8: 8c:21:a9:45:78:71:fe:55:28:ab:14:bc:80:9d:16:03:de:61: 51:d0:8f:34:4d:42:03:d7:64:d0:eb:c7:db:6d:36:80:d2:54: b1:39:64:8a:76:e7:e7:2f:d3:85:25:30:fa:44:c5:a7:3a:35: 26:cc:8e:33:b0:6c:d8:85:e1:ed:14:31:d0:79:5e:0b:62:d5: c4:bd:e5:5f:f2:47:42:c5:a4:4d:5f:c2:9b:88:8d:1f:68:f6: 53:9e:ac:78:cc:95:85:41:aa:9e:83:c0:ea:e1:79:21:24:cc: 62:4d:b2:a0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gM4RDJ0+PYJwythBXKWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji Njk1MDMwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGM3YmMzODI3ZWJmZWRlNDc1YzM1NDEyZjNkMmI4MmJkYTA2YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo70DQRjI1a2SAHYv0vmYOa+izKFM LfGwHXaJfskG/BA24EUaomhJD8/Q69Uqoz8aoMpfoh6FHtku9fdee0NZt6TUXE7f Clhr3MZjtNdyl3IMA63yDVQVM5l/S/h3mSmYlgcucyHCdysl01QLGYSW0GnLR1Zg bVKQRXr8KkXYzArH+97PenBB+QNKsPwnb901wwtmDEfAtuu9htoTBsEfNp9eJQdW 2snXLOveKj4zk8pjmoAQnsTJ91w7vwwOJIlTzG5/h6GNFT8a7R+pNUJnHte4goSn gq0JM21MfUbdWH4vpbI3/xshVwDexcVVftSnQ2HYYGoFA6abjFWxHbdFvwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFTHvDgn6/7eR1w1QS89K4K9oGpLMB8GA1UdIwQY MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt NTczY2E1YTYwOWMwLzEvVk1lOE9DZnJfdDVIWERWQkx6MHJncjJnYWtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4yAAwQB udVwMA0EAgACMAcDBQMqCY0AMA0GCSqGSIb3DQEBCwUAA4IBAQB5jTsz5syxExA1 HMP02bGxZ3fiH0jpLenR5lYX6CN2gnQosQ3aRtoiPFzuywixYeM6tKqT2+qvO/Tm 0jQ3mfuxLYU31dJOFRiATwW5Y9D3hgg5qcb5R6KmGNLUIyyNLP2qP7hDDs7GFvPf lyLA4ip7WWDN2Qs9bl5cTABvcHtCaYkhsOVshKLgfYzaOM1dWKiMIalFeHH+VSir FLyAnRYD3mFR0I80TUID12TQ68fbbTaA0lSxOWSKdufnL9OFJTD6RMWnOjUmzI4z sGzYheHtFDHQeV4LYtXEveVf8kdCxaRNX8KbiI0faPZTnqx4zJWFQaqeg8Dq4Xkh JMxiTbKg -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:38 2026 by rpki-client