This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa File: t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa (raw, json) Hash identifier: yo6pqMRWLvkyp3h1nhu6jmRo6lvB15VlScam6f7A8qw= Subject key identifier: B7:7F:27:2F:9A:0D:E4:79:7B:61:6D:94:9B:88:78:6F:89:A4:15:06 Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163 Certificate serial: 019B77C6EF5DE0474604855C16695F483938 Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394805 IP address blocks: 185.240.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ef:5d:e0:47:46:04:85:5c:16:69:5f:48:39:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b77f272f9a0de4797b616d949b88786f89a41506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:5e:d4:93:68:83:82:e1:18:8f:ac:30:06: 14:f7:fc:70:59:f8:b1:38:b3:f8:55:ea:90:a1:5c: 21:44:5a:9e:3a:d1:39:74:a7:c5:0c:ed:57:be:e6: 07:f7:8a:aa:ba:04:66:2a:29:d0:17:89:f7:40:18: ed:4f:2e:91:72:d9:8f:0d:56:92:6b:1a:8a:e4:42: 91:52:be:20:5e:88:6c:ee:14:bd:f1:f2:14:70:93: 69:31:24:fe:7b:ba:64:d6:5f:3d:cf:49:3e:bf:57: 3a:86:d9:98:79:92:4b:3d:16:93:27:45:6f:18:84: 0f:dc:f8:40:da:e3:28:62:0a:cd:71:33:0b:01:1c: 3f:88:cc:69:16:28:23:86:59:8a:a0:e9:c5:c3:b5: c2:45:62:2b:9f:95:b0:51:6c:b7:b5:27:73:6b:1d: cb:32:d2:00:32:0e:80:97:80:ed:d2:5a:37:98:24: a6:84:ed:a4:8d:4c:ed:ca:da:b4:a0:fd:e5:68:3c: 27:9f:48:b6:56:78:f5:43:b3:19:3f:53:60:79:3e: 3c:14:97:81:68:fe:6c:54:b1:ce:75:cd:b7:f3:95: 28:d3:be:83:b0:1c:24:40:db:2a:53:c5:09:3b:05: 51:00:38:f8:a5:bb:b1:40:e8:95:50:cb:1e:6c:fa: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7F:27:2F:9A:0D:E4:79:7B:61:6D:94:9B:88:78:6F:89:A4:15:06 X509v3 Authority Key Identifier: keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.186.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d8:7e:18:18:98:2a:9c:fb:d4:49:88:7f:64:ae:30:df:48: e5:46:9c:fd:8c:8b:db:1e:b5:1a:f5:8e:ce:b0:f8:ec:92:ab: 58:bf:cc:c5:d1:6a:b5:1b:9e:2b:b2:03:12:18:20:50:cb:a6: 37:df:f5:0f:14:61:d1:6f:a8:f0:43:4e:43:a6:1d:67:03:b2: ed:a3:0b:05:02:ab:ea:30:0b:90:3e:6b:b9:c7:0d:85:68:d7: 59:29:37:01:a4:99:22:1b:dc:a7:5b:fe:fe:30:35:d3:1f:81: 81:20:11:95:de:2c:f6:71:5c:cd:e1:ee:bb:24:16:05:4e:92: 52:58:92:9c:a1:80:4d:df:c3:73:ea:3c:d3:d5:d7:de:7c:35: 06:ff:dd:d7:1e:d0:8f:e5:b0:00:a4:58:31:35:f4:7d:0a:11: 2e:dc:57:fc:e9:e1:ac:b2:b3:86:d9:4a:09:c9:d6:d1:69:4e: bf:8e:35:24:bb:b1:43:1c:12:c5:7c:a8:31:37:4f:9d:93:de: 7a:1b:d1:80:18:cd:05:7a:cd:ba:6f:ad:a8:18:20:50:c1:b9: c3:c1:c2:a8:fc:5e:df:4b:3d:e4:fa:01:59:c2:db:36:80:8d: c8:e8:05:6b:91:0a:31:76:55:97:7b:97:84:82:7c:11:07:c6: db:47:19:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu9d4EdGBIVcFmlfSDk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODNjMjg0M2MxNjQ5YjAwNTRjOTExMjRmZWUwMzExNDA5 NWUxNjMwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzdmMjcyZjlhMGRlNDc5N2I2MTZkOTQ5Yjg4Nzg2Zjg5YTQxNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBe1JNog4LhGI+sMAYU9/xwWfix OLP4VeqQoVwhRFqeOtE5dKfFDO1XvuYH94qqugRmKinQF4n3QBjtTy6RctmPDVaS axqK5EKRUr4gXohs7hS98fIUcJNpMST+e7pk1l89z0k+v1c6htmYeZJLPRaTJ0Vv GIQP3PhA2uMoYgrNcTMLARw/iMxpFigjhlmKoOnFw7XCRWIrn5WwUWy3tSdzax3L MtIAMg6Al4Dt0lo3mCSmhO2kjUztytq0oP3laDwnn0i2Vnj1Q7MZP1NgeT48FJeB aP5sVLHOdc2385Uo076DsBwkQNsqU8UJOwVRADj4pbuxQOiVUMsebPppqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLd/Jy+aDeR5e2FtlJuIeG+JpBUGMB8GA1UdIwQY MBaAFLyDwoQ8FkmwBUyREk/uAxFAleFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUt NTI5NWY1YjNmMTliLzEvdDM4bkw1b041SGw3WVcyVW00aDRiNG1rRlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUtNTI5NWY1YjNmMTli LzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufC6MA0G CSqGSIb3DQEBCwUAA4IBAQBa2H4YGJgqnPvUSYh/ZK4w30jlRpz9jIvbHrUa9Y7O sPjskqtYv8zF0Wq1G54rsgMSGCBQy6Y33/UPFGHRb6jwQ05Dph1nA7LtowsFAqvq MAuQPmu5xw2FaNdZKTcBpJkiG9ynW/7+MDXTH4GBIBGV3iz2cVzN4e67JBYFTpJS WJKcoYBN38Nz6jzT1dfefDUG/93XHtCP5bAApFgxNfR9ChEu3Ff86eGssrOG2UoJ ydbRaU6/jjUku7FDHBLFfKgxN0+dk956G9GAGM0Fes26b62oGCBQwbnDwcKo/F7f Sz3k+gFZwts2gI3I6AVrkQoxdlWXe5eEgnwRB8bbRxlQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:29 2026 by rpki-client