This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/t-vB5k9vNf95Sy02gmlc7kzthBM.roa File: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (raw, json) Hash identifier: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI= Subject key identifier: B7:EB:C1:E6:4F:6F:35:FF:79:4B:2D:36:82:69:5C:EE:4C:ED:84:13 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C8CA974BBA350140DF6EE401AC3D Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/t-vB5k9vNf95Sy02gmlc7kzthBM.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 37.44.212.0/24 maxlen: 24 171.22.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c8:ca:97:4b:ba:35:01:40:df:6e:e4:01:ac:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7ebc1e64f6f35ff794b2d3682695cee4ced8413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:c0:a9:73:42:7b:25:fa:b7:c1:34:2d:4d: ba:f5:e1:78:99:09:23:e8:bc:60:33:8a:7b:e5:a5: 41:62:4f:2d:27:2d:ad:84:3e:1d:ed:e5:19:54:69: dd:22:55:52:d7:42:d6:2e:5b:21:5a:ac:1c:0a:a9: e3:44:ab:d8:8b:91:48:09:44:a9:36:3d:81:ee:6a: 96:e5:e0:d0:79:76:af:30:64:79:e7:92:fa:4f:15: ae:37:8d:fe:a5:d7:a7:98:d4:98:07:d6:3d:53:83: 86:e2:62:fc:b7:90:1a:19:a1:e1:c8:07:fb:dc:46: 50:59:e5:83:d0:e6:cc:20:19:92:24:82:a7:7c:72: 0e:f6:b2:16:59:de:2f:a4:db:a0:e7:cf:62:cf:2e: ea:60:7b:c2:32:5d:81:15:ad:e9:30:af:19:ae:5d: e5:ca:e3:42:57:83:af:f8:02:af:11:2e:f5:60:73: 54:b8:42:da:c9:41:95:4d:b3:e6:37:25:c8:08:a0: fd:da:82:b8:98:87:99:59:54:98:f1:1c:35:cb:d1: 3c:55:5b:27:e2:eb:34:0e:70:99:99:8d:7a:fd:04: 30:25:1b:3a:0d:d3:7e:f3:d3:a5:d0:54:1a:45:b1: 74:f9:30:8a:9a:6c:54:13:c5:42:fe:55:22:ef:3e: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EB:C1:E6:4F:6F:35:FF:79:4B:2D:36:82:69:5C:EE:4C:ED:84:13 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/t-vB5k9vNf95Sy02gmlc7kzthBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.212.0/24 171.22.220.0/22 Signature Algorithm: sha256WithRSAEncryption 05:8c:56:31:13:26:af:a2:99:b5:59:98:8e:a4:53:46:d6:21: 12:15:f2:14:7d:46:b2:81:5e:71:bf:7c:20:b4:d0:a5:13:09: 9b:15:68:cf:07:05:21:42:f7:c5:ae:18:a7:17:3a:c8:21:8f: c8:82:d2:9b:77:07:92:79:d7:ae:fe:c4:ac:63:dc:ef:f7:7e: a3:4f:94:e5:2a:d5:1c:01:31:c0:f7:13:85:a6:07:08:84:14: 45:4f:9d:a0:f6:6d:50:0b:34:04:a8:57:7a:9b:3e:d6:20:93: fc:8c:0d:ba:4a:2d:ac:88:aa:b6:61:cd:a0:8d:5c:78:01:74: 36:5d:48:a1:76:28:4a:b7:84:37:7f:ac:fe:98:e8:f2:5e:bb: b9:59:3c:a8:60:37:f2:d1:9e:f7:36:82:ae:f8:bc:37:ab:26: 34:05:b6:0a:9f:8c:b7:de:a4:ff:4e:ed:2a:17:07:2c:6d:ac: 2a:c4:70:b5:46:86:48:d7:f8:db:1f:6e:2c:ae:19:4b:6a:ac: f5:77:34:9f:c5:35:9e:f6:b1:2f:60:e8:27:4f:f8:a8:76:50: 5e:2e:3c:8d:5d:62:b1:c3:a0:c9:25:54:c4:08:2c:98:8e:eb: 43:85:55:4f:1a:ce:a0:73:f0:2c:70:20:19:22:1a:7c:6d:35: 0e:01:7d:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FcjKl0u6NQFA327kAaw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2ViYzFlNjRmNmYzNWZmNzk0YjJkMzY4MjY5NWNlZTRjZWQ4NDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9jAqXNCeyX6t8E0LU269eF4mQkj 6LxgM4p75aVBYk8tJy2thD4d7eUZVGndIlVS10LWLlshWqwcCqnjRKvYi5FICUSp Nj2B7mqW5eDQeXavMGR555L6TxWuN43+pdenmNSYB9Y9U4OG4mL8t5AaGaHhyAf7 3EZQWeWD0ObMIBmSJIKnfHIO9rIWWd4vpNug589izy7qYHvCMl2BFa3pMK8Zrl3l yuNCV4Ov+AKvES71YHNUuELayUGVTbPmNyXICKD92oK4mIeZWVSY8Rw1y9E8VVsn 4us0DnCZmY16/QQwJRs6DdN+89Ol0FQaRbF0+TCKmmxUE8VC/lUi7z4hSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLfrweZPbzX/eUstNoJpXO5M7YQTMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvdC12QjVrOXZOZjk1U3kwMmdtbGM3a3p0aEJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJSzUAwQC qxbcMA0GCSqGSIb3DQEBCwUAA4IBAQAFjFYxEyavopm1WZiOpFNG1iESFfIUfUay gV5xv3wgtNClEwmbFWjPBwUhQvfFrhinFzrIIY/IgtKbdweSedeu/sSsY9zv936j T5TlKtUcATHA9xOFpgcIhBRFT52g9m1QCzQEqFd6mz7WIJP8jA26Si2siKq2Yc2g jVx4AXQ2XUihdihKt4Q3f6z+mOjyXru5WTyoYDfy0Z73NoKu+Lw3qyY0BbYKn4y3 3qT/Tu0qFwcsbawqxHC1RoZI1/jbH24srhlLaqz1dzSfxTWe9rEvYOgnT/iodlBe LjyNXWKxw6DJJVTECCyYjutDhVVPGs6gc/AscCAZIhp8bTUOAX3S -----END CERTIFICATE-----Generated at Mon Jan 19 17:08:27 2026 by rpki-client