This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/vWaSI97YDOehiwDX9EtCVi1TGr8.roa File: vWaSI97YDOehiwDX9EtCVi1TGr8.roa (raw, json) Hash identifier: qObHiQ/zhXEaIaP9YgXMKfb5GBmcR4gdeH2I3WxGujw= Subject key identifier: BD:66:92:23:DE:D8:0C:E7:A1:8B:00:D7:F4:4B:42:56:2D:53:1A:BF Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015 Certificate serial: 019B797ED449D37D75328D27AD427610813C Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/vWaSI97YDOehiwDX9EtCVi1TGr8.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29596 IP address blocks: 87.239.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d4:49:d3:7d:75:32:8d:27:ad:42:76:10:81:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd669223ded80ce7a18b00d7f44b42562d531abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:03:89:de:2f:e5:7e:23:5f:d9:0d:62:ff: 48:7e:8d:5f:a6:35:7f:1c:a4:49:b5:af:26:0d:51: 51:0f:2b:fa:b6:6e:fe:4f:81:dd:cb:54:2c:56:f0: 62:7e:b7:bb:d3:b5:af:d5:0f:d3:0b:cb:a2:c2:02: 2e:d7:bb:47:98:4e:a8:9b:cd:40:15:72:3e:5c:0f: 5f:6c:dc:f6:7a:52:b6:1e:d0:86:42:f3:77:2f:43: 35:f1:61:89:ad:5f:9a:7f:52:b3:b0:f5:68:c1:93: 00:c7:53:05:10:4c:18:d6:da:de:f6:5d:bc:90:42: 54:ad:5f:ca:50:9d:be:f5:f8:81:bd:a3:dd:5a:1f: 05:f7:af:f5:9f:a3:2f:56:38:33:46:41:3c:e0:18: f1:1e:a6:3d:9a:56:e4:33:a6:a0:12:25:f0:e7:4d: 23:e6:33:fa:e5:26:39:f1:7d:1b:50:24:f2:ce:1c: ff:23:65:c6:89:4c:ed:8d:94:e9:49:ed:d5:77:a1: 61:5c:65:86:79:4e:bb:2e:d1:9e:63:ea:d5:66:d8: d6:04:73:85:39:bc:df:4a:19:eb:f9:6f:fc:3f:1f: b0:6c:fe:50:0e:e7:69:d7:44:dc:d0:42:1b:e4:86: 85:d9:45:af:f1:5d:95:88:e1:b3:a2:d4:99:91:ed: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:66:92:23:DE:D8:0C:E7:A1:8B:00:D7:F4:4B:42:56:2D:53:1A:BF X509v3 Authority Key Identifier: keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/vWaSI97YDOehiwDX9EtCVi1TGr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.88.0/21 Signature Algorithm: sha256WithRSAEncryption 20:4d:eb:ad:a9:95:54:74:16:19:e4:cd:dc:a8:29:8e:af:4f: 82:e7:11:a0:42:e8:8e:99:d9:17:b1:93:90:c2:fa:eb:09:3f: c1:d1:b7:a4:72:d5:f3:58:b4:3f:b0:2b:cc:61:00:c6:0d:95: ba:ef:e9:1a:23:2e:36:98:83:3a:f9:b6:49:aa:7e:de:32:9a: ed:49:bd:22:2b:73:94:9b:ba:db:2d:87:86:df:12:6a:ef:e2: bc:c7:f4:b1:cc:d7:0c:b4:fe:cb:f0:38:99:f3:3b:e0:a8:29: d6:dd:49:8b:df:17:86:f6:8b:e9:8d:fe:ee:85:c6:e7:f1:89: 1c:28:22:27:63:13:65:82:5a:22:e7:ee:0c:ee:4b:78:e0:8b: 6a:66:36:71:83:20:9e:0e:b3:14:af:ee:d1:6a:a3:93:b6:e9: 13:92:44:1a:46:d5:fa:91:5b:7d:65:95:26:3c:bb:99:ba:e9: a7:aa:6a:5f:ea:59:b4:0f:df:88:75:40:85:95:b4:79:7c:b2: 80:25:a7:e2:d2:51:c5:ec:7b:0c:ef:dd:00:90:63:b6:7d:30: ca:de:ee:81:04:53:ac:f1:42:f2:de:63:dd:c8:b7:66:d5:1f: 51:a3:29:f9:e8:3c:3a:59:7a:5a:97:2e:70:58:2a:6a:f2:6b: 5d:e6:b5:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftRJ0311Mo0nrUJ2EIE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NDQ2YzdmNjM0MjFkNzNjMjhmOGNhNzdmZDJkNGEzNTcy MTAwMTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDY2OTIyM2RlZDgwY2U3YTE4YjAwZDdmNDRiNDI1NjJkNTMxYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+sDid4v5X4jX9kNYv9Ifo1fpjV/ HKRJta8mDVFRDyv6tm7+T4Hdy1QsVvBifre707Wv1Q/TC8uiwgIu17tHmE6om81A FXI+XA9fbNz2elK2HtCGQvN3L0M18WGJrV+af1KzsPVowZMAx1MFEEwY1tre9l28 kEJUrV/KUJ2+9fiBvaPdWh8F96/1n6MvVjgzRkE84BjxHqY9mlbkM6agEiXw500j 5jP65SY58X0bUCTyzhz/I2XGiUztjZTpSe3Vd6FhXGWGeU67LtGeY+rVZtjWBHOF ObzfShnr+W/8Px+wbP5QDudp10Tc0EIb5IaF2UWv8V2ViOGzotSZke3buwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1mkiPe2AznoYsA1/RLQlYtUxq/MB8GA1UdIwQY MBaAFAdEbH9jQh1zwo+Mp3/S1KNXIQAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUt YTRmMTFiMDRjNjQwLzEvdldhU0k5N1lET2VoaXdEWDlFdENWaTFUR3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wZGUzNDMtMmJlNS00MzA5LWI3YjUtYTRmMTFiMDRjNjQw LzEvQjBSc2YyTkNIWFBDajR5bmY5TFVvMWNoQUJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDV+9YMA0G CSqGSIb3DQEBCwUAA4IBAQAgTeutqZVUdBYZ5M3cqCmOr0+C5xGgQuiOmdkXsZOQ wvrrCT/B0bekctXzWLQ/sCvMYQDGDZW67+kaIy42mIM6+bZJqn7eMprtSb0iK3OU m7rbLYeG3xJq7+K8x/SxzNcMtP7L8DiZ8zvgqCnW3UmL3xeG9ovpjf7uhcbn8Ykc KCInYxNlgloi5+4M7kt44ItqZjZxgyCeDrMUr+7RaqOTtukTkkQaRtX6kVt9ZZUm PLuZuumnqmpf6lm0D9+IdUCFlbR5fLKAJafi0lHF7HsM790AkGO2fTDK3u6BBFOs 8ULy3mPdyLdm1R9Royn56Dw6WXpaly5wWCpq8mtd5rVH -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:19 2026 by rpki-client