This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa File: vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa (raw, json) Hash identifier: /OpEMA+vjnSrbNhb5S52wsTvUT1f0OuMQ9Pxy+EXh7k= Subject key identifier: BD:35:3C:78:33:55:12:8D:EA:17:2F:F1:4E:83:06:3D:79:30:F9:9A Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Certificate serial: 019B7A5B1AAFE5F50840EDD4BD704CECBD8A Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41090 IP address blocks: 93.95.232.0/21 maxlen: 21 185.14.0.0/22 maxlen: 22 195.189.64.0/22 maxlen: 22 2a00:c000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1a:af:e5:f5:08:40:ed:d4:bd:70:4c:ec:bd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd353c783355128dea172ff14e83063d7930f99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:9b:1c:88:d4:ad:e0:b2:0a:18:f1:cb:38: 95:f4:10:a5:eb:ba:44:3a:1d:cd:9a:e8:b4:68:8c: 16:32:85:ec:b6:39:14:52:ff:47:f3:53:b3:88:44: 53:0e:21:62:7d:8f:6b:cd:52:56:93:b1:4d:e6:76: 28:33:1e:97:f0:27:c7:14:e5:46:e6:4a:97:4c:a1: d8:52:33:86:49:36:18:9d:35:60:06:6d:a6:2e:26: a7:f3:04:80:57:c9:79:2a:de:56:5f:37:db:8d:06: f3:f0:5c:74:e5:65:a0:fa:39:e4:87:e8:b5:cf:20: 7c:96:39:33:48:f4:f0:26:38:eb:ad:b5:02:ca:b5: 80:ab:d8:29:78:27:fa:31:e6:a3:3f:a5:7f:1d:99: 26:fd:5e:e5:9d:b7:e2:94:ea:73:7b:9d:87:8d:20: 95:6a:d3:48:a8:67:60:ff:84:a6:4f:13:63:9e:d9: 7a:f7:13:b4:69:76:86:50:6e:da:85:78:e6:b0:05: 4f:93:56:2d:73:d1:58:9c:d2:90:4e:4c:f0:67:1c: ce:90:34:d5:85:72:07:0d:19:59:23:45:3c:2a:55: 6b:01:9f:0b:7d:71:af:77:a4:89:fe:ef:50:33:ad: aa:da:f6:4b:1f:38:b5:ac:e2:ad:f0:52:47:3a:a3: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:3C:78:33:55:12:8D:EA:17:2F:F1:4E:83:06:3D:79:30:F9:9A X509v3 Authority Key Identifier: keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.232.0/21 185.14.0.0/22 195.189.64.0/22 IPv6: 2a00:c000::/32 Signature Algorithm: sha256WithRSAEncryption a3:cb:1e:13:5f:ba:05:0e:4e:ea:36:4d:de:9d:7d:ec:78:f3: ca:fc:e4:a6:70:2b:67:18:9a:c6:57:e1:2e:b1:fc:e9:7e:52: 16:ac:ee:fd:49:68:8d:26:a8:7f:82:41:de:c3:1b:70:e0:20: e6:b0:e3:69:69:c7:72:d7:5f:28:a5:51:9d:a2:f4:68:e4:4e: 9a:2b:89:4b:60:62:9c:0e:36:fa:a2:06:e2:bf:85:f9:04:f1: ac:6b:99:53:75:15:ca:f6:14:ed:fb:4c:e0:b0:09:e0:00:ff: fe:e3:54:65:8f:be:a4:12:e0:f3:ad:40:24:8e:26:0b:15:3c: 79:75:db:59:da:72:f4:18:6d:fe:f8:90:49:42:a1:73:64:33: 74:99:c8:2c:71:2b:84:45:76:5d:34:89:6f:80:aa:e4:2e:ab: 98:c4:43:1c:74:15:57:7e:28:00:b0:ec:c6:a7:39:d0:98:3e: 01:c4:85:ef:ad:97:5a:8a:78:4f:92:94:d2:55:f3:fa:f3:e1: 1d:04:04:0c:88:36:b5:b5:44:1c:03:a5:64:64:f2:5e:c4:65: 3f:5f:2a:7d:93:f0:01:e3:e8:a0:82:84:09:c3:ee:2a:7a:45: c0:a8:70:a6:13:4b:6a:9a:36:8e:7c:bf:97:28:55:15:13:c7: a9:ae:e6:71 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6Wxqv5fUIQO3UvXBM7L2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1 ZjU2NTgwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM1M2M3ODMzNTUxMjhkZWExNzJmZjE0ZTgzMDYzZDc5MzBmOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg6bHIjUreCyChjxyziV9BCl67pE Oh3Nmui0aIwWMoXstjkUUv9H81OziERTDiFifY9rzVJWk7FN5nYoMx6X8CfHFOVG 5kqXTKHYUjOGSTYYnTVgBm2mLian8wSAV8l5Kt5WXzfbjQbz8Fx05WWg+jnkh+i1 zyB8ljkzSPTwJjjrrbUCyrWAq9gpeCf6MeajP6V/HZkm/V7lnbfilOpze52HjSCV atNIqGdg/4SmTxNjntl69xO0aXaGUG7ahXjmsAVPk1Ytc9FYnNKQTkzwZxzOkDTV hXIHDRlZI0U8KlVrAZ8LfXGvd6SJ/u9QM62q2vZLHzi1rOKt8FJHOqPyUwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFL01PHgzVRKN6hcv8U6DBj15MPmaMB8GA1UdIwQY MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt OTU0MzcyOTY1YzVlLzEvdlRVOGVETlZFbzNxRnlfeFRvTUdQWGt3LVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV/oAwQC uQ4AAwQCw71AMA0EAgACMAcDBQAqAMAAMA0GCSqGSIb3DQEBCwUAA4IBAQCjyx4T X7oFDk7qNk3enX3sePPK/OSmcCtnGJrGV+EusfzpflIWrO79SWiNJqh/gkHewxtw 4CDmsONpacdy118opVGdovRo5E6aK4lLYGKcDjb6ogbiv4X5BPGsa5lTdRXK9hTt +0zgsAngAP/+41Rlj76kEuDzrUAkjiYLFTx5ddtZ2nL0GG3++JBJQqFzZDN0mcgs cSuERXZdNIlvgKrkLquYxEMcdBVXfigAsOzGpznQmD4BxIXvrZdainhPkpTSVfP6 8+EdBAQMiDa1tUQcA6VkZPJexGU/Xyp9k/AB4+iggoQJw+4qekXAqHCmE0tqmjaO fL+XKFUVE8epruZx -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:29 2026 by rpki-client