This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/_vTGMoMd2OUixFc93cU4_AKUok0.roa File: _vTGMoMd2OUixFc93cU4_AKUok0.roa (raw, json) Hash identifier: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg= Subject key identifier: FE:F4:C6:32:83:1D:D8:E5:22:C4:57:3D:DD:C5:38:FC:02:94:A2:4D Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805 Certificate serial: 019B7D5CE079D275F459455EFF299B23366E Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/_vTGMoMd2OUixFc93cU4_AKUok0.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39114 IP address blocks: 185.91.12.0/22 maxlen: 22 185.91.12.0/24 maxlen: 24 185.91.13.0/24 maxlen: 24 185.91.14.0/24 maxlen: 24 185.91.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e0:79:d2:75:f4:59:45:5e:ff:29:9b:23:36:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef4c632831dd8e522c4573dddc538fc0294a24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:14:40:59:3d:0c:8d:6f:e8:e3:87:8d:db: fb:19:85:0a:c9:62:b5:fa:e8:36:9a:91:4f:48:98: ba:c5:d4:87:f2:02:c9:5b:91:15:d0:cb:20:d5:78: 5a:e2:e1:71:ad:e1:05:f9:33:fc:9c:e8:3e:ee:16: cf:e3:b0:db:73:43:6d:1c:b4:5d:a6:ed:c3:e6:12: 11:ac:52:36:13:84:5c:83:d4:9a:e5:9b:e1:ef:17: eb:a6:0d:6e:b2:31:9f:41:71:82:2d:9f:75:1f:60: e7:9a:83:4f:ac:1b:7c:8d:d3:5e:cc:4f:e7:6a:db: 60:db:9d:05:c1:d0:69:f0:4f:05:9e:72:65:1f:0e: 7e:35:e2:47:e5:53:43:0e:47:ca:75:8a:e3:31:24: 2c:46:d1:91:a1:6c:33:a2:07:3a:f6:13:0d:c6:e2: 01:1c:11:61:5c:82:a0:7c:f3:9e:1f:28:a3:b2:e4: 4d:94:84:40:e2:4b:8c:92:bb:8a:29:0e:78:99:b0: b7:bd:8c:f3:21:ee:27:a5:c4:5b:63:e1:b8:2d:00: 51:10:b1:b9:98:00:09:bb:b6:fc:82:b7:f4:c3:a1: b8:02:15:3d:75:24:72:9f:79:73:74:3b:6a:c5:15: 9b:76:46:4c:9e:0e:28:ce:3b:ab:65:09:ec:1e:55: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F4:C6:32:83:1D:D8:E5:22:C4:57:3D:DD:C5:38:FC:02:94:A2:4D X509v3 Authority Key Identifier: keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/_vTGMoMd2OUixFc93cU4_AKUok0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.12.0/22 Signature Algorithm: sha256WithRSAEncryption 65:43:e7:b3:70:55:9a:e0:5b:30:70:a2:4e:2c:90:17:0c:5c: 89:00:40:6c:2b:a2:14:68:01:33:6b:49:80:37:f6:f0:c8:58: 12:9d:51:67:50:c7:bc:8b:a7:8c:54:8a:3a:d7:34:36:1f:a3: 25:4e:01:df:80:9e:df:11:6e:c4:cf:a1:50:6e:5c:97:a3:18: 5c:0a:fc:ed:34:26:0f:09:4c:18:fd:f4:78:da:80:39:2b:8c: 45:fd:df:56:ea:f6:62:47:d5:74:98:27:95:42:65:f6:c4:a9: 12:98:3a:39:73:c8:6a:15:ed:1c:3c:3c:70:d8:c5:36:4e:1e: 82:8a:ef:16:61:24:db:47:ea:12:5c:b8:d8:07:bc:7f:92:ff: d2:76:87:4b:26:bc:62:ee:19:a3:50:ce:83:31:7e:e6:2a:74: 37:2d:72:f0:39:76:88:49:35:78:af:92:b3:9c:c9:64:42:c0: d7:e0:43:e4:f4:80:f5:4d:03:24:28:44:32:38:a0:c6:55:5e: ae:88:3c:a5:d8:e1:40:f9:e8:59:63:4a:13:dc:a8:f6:f3:92: b4:73:af:ec:ba:a8:51:f3:61:3c:19:b0:78:e5:ca:42:8f:87: 41:ab:87:90:d3:1b:d4:3e:16:5e:e6:37:5a:11:51:e9:66:87: 06:4f:eb:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOB50nX0WUVe/ymbIzZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm ZGE4MDUwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWY0YzYzMjgzMWRkOGU1MjJjNDU3M2RkZGM1MzhmYzAyOTRhMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UIUQFk9DI1v6OOHjdv7GYUKyWK1 +ug2mpFPSJi6xdSH8gLJW5EV0Msg1Xha4uFxreEF+TP8nOg+7hbP47Dbc0NtHLRd pu3D5hIRrFI2E4Rcg9Sa5Zvh7xfrpg1usjGfQXGCLZ91H2DnmoNPrBt8jdNezE/n attg250FwdBp8E8FnnJlHw5+NeJH5VNDDkfKdYrjMSQsRtGRoWwzogc69hMNxuIB HBFhXIKgfPOeHyijsuRNlIRA4kuMkruKKQ54mbC3vYzzIe4npcRbY+G4LQBRELG5 mAAJu7b8grf0w6G4AhU9dSRyn3lzdDtqxRWbdkZMng4ozjurZQnsHlXaXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP70xjKDHdjlIsRXPd3FOPwClKJNMB8GA1UdIwQY MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt MTBlMTNkNDNmMGRkLzEvX3ZUR01vTWQyT1VpeEZjOTNjVTRfQUtVb2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVsMMA0G CSqGSIb3DQEBCwUAA4IBAQBlQ+ezcFWa4FswcKJOLJAXDFyJAEBsK6IUaAEza0mA N/bwyFgSnVFnUMe8i6eMVIo61zQ2H6MlTgHfgJ7fEW7Ez6FQblyXoxhcCvztNCYP CUwY/fR42oA5K4xF/d9W6vZiR9V0mCeVQmX2xKkSmDo5c8hqFe0cPDxw2MU2Th6C iu8WYSTbR+oSXLjYB7x/kv/SdodLJrxi7hmjUM6DMX7mKnQ3LXLwOXaISTV4r5Kz nMlkQsDX4EPk9ID1TQMkKEQyOKDGVV6uiDyl2OFA+ehZY0oT3Kj285K0c6/suqhR 82E8GbB45cpCj4dBq4eQ0xvUPhZe5jdaEVHpZocGT+v1 -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:46 2026 by rpki-client