This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/vG3ETTisgvR8uHGsP-7vqX6UxOU.roa File: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (raw, json) Hash identifier: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY= Subject key identifier: BC:6D:C4:4D:38:AC:82:F4:7C:B8:71:AC:3F:EE:EF:A9:7E:94:C4:E5 Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0 Certificate serial: 019B7DCB5A251203CDE348E587B6A31ABC40 Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/vG3ETTisgvR8uHGsP-7vqX6UxOU.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43050 IP address blocks: 91.194.50.0/23 maxlen: 23 91.215.124.0/22 maxlen: 22 176.119.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:25:12:03:cd:e3:48:e5:87:b6:a3:1a:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6dc44d38ac82f47cb871ac3feeefa97e94c4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:3a:97:d7:0d:01:0f:34:c5:34:74:6d:26: 80:16:92:b9:5a:c2:71:fd:c6:7a:71:a8:bc:c8:be: 7c:68:6e:3a:30:b5:9a:a2:dd:ea:d5:8a:c4:42:5a: 44:34:86:7c:e5:da:8d:e9:53:53:5b:91:cd:fd:d4: ff:3d:35:03:8d:a3:0d:02:b2:4f:58:7b:cc:76:71: 00:d2:4c:1c:fc:98:6c:92:33:22:18:45:a7:15:3f: 8c:69:74:ee:04:39:93:8d:f7:c3:2b:7b:97:ce:61: a8:f9:6c:7b:d0:60:e5:3e:9a:4c:ad:df:3a:c7:8f: 75:7a:23:28:ec:bf:a3:9c:30:92:b1:40:e4:03:ee: 60:16:60:e0:96:1b:9d:00:d1:06:c7:63:01:14:88: c9:9b:66:d1:0d:b2:ed:ec:b7:40:c2:26:78:c0:a7: 35:65:83:8a:78:e9:9e:81:74:fe:e3:47:ed:2d:68: 2f:77:cd:75:8e:e5:5c:83:0c:88:76:29:c1:fb:22: 78:59:0c:43:7c:f9:b7:25:53:43:95:e5:26:da:e6: 5c:31:87:87:c5:c3:5e:33:a8:38:25:7c:d3:82:69: 79:17:1b:1a:ff:66:29:a1:51:6f:0b:a9:fc:61:d6: 57:af:50:8d:42:18:6d:3a:72:08:56:55:6e:4a:02: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:C4:4D:38:AC:82:F4:7C:B8:71:AC:3F:EE:EF:A9:7E:94:C4:E5 X509v3 Authority Key Identifier: keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/vG3ETTisgvR8uHGsP-7vqX6UxOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.50.0/23 91.215.124.0/22 176.119.232.0/21 Signature Algorithm: sha256WithRSAEncryption 72:4e:85:25:22:d3:02:35:ae:3e:80:77:ab:3f:9b:08:00:34: 68:92:6d:84:bc:44:11:c6:8b:c7:f2:1e:08:f2:b7:1f:d2:3d: bd:2a:96:7c:b7:2e:18:48:d5:1f:86:f7:af:2e:8a:c0:59:52: 65:8d:de:bd:4b:c8:23:3b:ed:f2:d9:2f:79:4b:ad:de:6c:ad: 2f:12:39:51:10:3c:23:5c:70:9c:dd:5e:a6:53:a9:80:1a:d9: 67:15:5b:3f:ee:c7:5c:cc:c0:0f:12:7d:63:c1:d8:58:ac:c3: 22:5e:80:94:01:55:47:d6:eb:56:ca:67:a0:be:34:fe:82:37: 53:51:2d:ed:af:e7:2d:fb:4f:3a:dc:b3:93:47:4f:61:9a:c1: 3a:fb:b7:97:fd:21:d7:e7:42:c8:b0:7b:9f:2d:ec:dd:c6:a4: 4b:92:e7:ed:49:79:d1:d6:1d:a9:7a:79:fd:fa:51:0d:bc:aa: 8f:6b:10:13:1b:34:90:6c:d8:d1:56:e9:54:37:02:13:ca:50: 87:46:29:10:fb:ed:03:68:4a:d6:3c:b5:07:4f:20:bc:19:42: dc:42:ac:05:2b:39:5e:86:ee:c6:ed:e9:24:d4:a8:9c:a8:49: 76:3d:80:3f:d1:e6:0a:5a:a4:67:26:3a:2f:14:bc:58:a5:b8: b0:8b:90:5b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y1olEgPN40jlh7ajGrxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy YTdlYTAwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzZkYzQ0ZDM4YWM4MmY0N2NiODcxYWMzZmVlZWZhOTdlOTRjNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo206l9cNAQ80xTR0bSaAFpK5WsJx /cZ6cai8yL58aG46MLWaot3q1YrEQlpENIZ85dqN6VNTW5HN/dT/PTUDjaMNArJP WHvMdnEA0kwc/JhskjMiGEWnFT+MaXTuBDmTjffDK3uXzmGo+Wx70GDlPppMrd86 x491eiMo7L+jnDCSsUDkA+5gFmDglhudANEGx2MBFIjJm2bRDbLt7LdAwiZ4wKc1 ZYOKeOmegXT+40ftLWgvd811juVcgwyIdinB+yJ4WQxDfPm3JVNDleUm2uZcMYeH xcNeM6g4JXzTgml5Fxsa/2YpoVFvC6n8YdZXr1CNQhhtOnIIVlVuSgKl0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLxtxE04rIL0fLhxrD/u76l+lMTlMB8GA1UdIwQY MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt NDk2NmIzY2ZjODdkLzEvdkczRVRUaXNndlI4dUhHc1AtN3ZxWDZVeE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8IyAwQC W9d8AwQDsHfoMA0GCSqGSIb3DQEBCwUAA4IBAQByToUlItMCNa4+gHerP5sIADRo km2EvEQRxovH8h4I8rcf0j29KpZ8ty4YSNUfhvevLorAWVJljd69S8gjO+3y2S95 S63ebK0vEjlREDwjXHCc3V6mU6mAGtlnFVs/7sdczMAPEn1jwdhYrMMiXoCUAVVH 1utWymegvjT+gjdTUS3tr+ct+0863LOTR09hmsE6+7eX/SHX50LIsHufLezdxqRL kuftSXnR1h2penn9+lENvKqPaxATGzSQbNjRVulUNwITylCHRikQ++0DaErWPLUH TyC8GULcQqwFKzlehu7G7ekk1KicqEl2PYA/0eYKWqRnJjovFLxYpbiwi5Bb -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:24 2026 by rpki-client