This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/vhH6t6qr4OOEOFH2ZKyOJF9900M.roa File: vhH6t6qr4OOEOFH2ZKyOJF9900M.roa (raw, json) Hash identifier: +SWCDVXuJQ1wGclZXtz1oIs0lRGx7DF+jr45nXzXg2w= Subject key identifier: BE:11:FA:B7:AA:AB:E0:E3:84:38:51:F6:64:AC:8E:24:5F:7D:D3:43 Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019C18E116D0D621306543A96D39159637C2 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/vhH6t6qr4OOEOFH2ZKyOJF9900M.roa Signing time: Sun 01 Feb 2026 11:05:30 +0000 ROA not before: Sun 01 Feb 2026 11:05:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62442 IP address blocks: 95.38.45.0/24 maxlen: 24 95.38.54.0/23 maxlen: 23 95.38.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:18:e1:16:d0:d6:21:30:65:43:a9:6d:39:15:96:37:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Feb 1 11:05:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be11fab7aaabe0e3843851f664ac8e245f7dd343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:e5:0e:f7:23:e2:fc:54:93:eb:c7:13:ba: 03:27:39:8f:7a:f6:45:fd:99:dd:68:97:5a:41:07: aa:2e:90:98:b5:04:17:f2:5c:10:0b:40:d4:28:31: 9e:c7:b5:1e:2b:0b:f2:fa:fb:6d:ed:eb:a2:b0:2a: 4c:59:0b:4d:e6:55:80:a4:94:0f:d3:7b:c7:42:36: 01:2c:89:be:36:4d:9b:e9:d0:5e:9c:ee:1e:bf:ab: 51:39:8f:51:b7:13:76:01:bb:6b:ea:c4:1e:e6:1b: ef:e5:24:27:cb:6f:df:84:df:ba:b6:d2:4e:c5:33: 44:04:93:a3:3d:9c:da:c4:20:3c:5b:a9:de:a3:95: 72:f7:52:dc:98:55:f6:88:8e:63:bc:1d:dc:47:9f: dc:fc:01:7f:b6:02:35:1f:5d:01:22:df:6f:de:21: a7:6a:47:96:ea:30:d9:c5:52:92:4b:36:90:ec:8d: 2b:25:95:a1:c0:ee:09:07:2f:ee:de:bd:51:26:97: 6d:bf:d2:6e:8e:6d:87:51:85:71:38:58:55:19:a1: e1:6f:ab:2f:34:a9:ae:f0:cd:7e:1d:1e:18:99:10: b4:98:58:71:7a:1e:27:27:58:66:9b:75:c0:8a:88: dd:39:73:54:fd:86:fd:6f:3b:a7:55:16:2d:e7:0b: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:11:FA:B7:AA:AB:E0:E3:84:38:51:F6:64:AC:8E:24:5F:7D:D3:43 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/vhH6t6qr4OOEOFH2ZKyOJF9900M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.45.0/24 95.38.54.0/23 95.38.198.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d8:f2:be:24:89:a6:ab:58:3b:93:2c:1e:ec:89:7f:38:d4: 7f:2e:44:45:e0:84:d0:1f:32:1b:c9:0f:c3:9d:5d:a1:8c:a1: b9:90:76:00:c9:d9:f2:24:20:78:d9:6f:8a:4e:d3:c5:a9:37: b7:2a:40:ca:4a:61:43:4b:5f:c8:c7:f8:67:ab:2c:06:c3:93: 1b:81:04:aa:e3:cb:ca:15:af:9d:73:5a:04:9a:5d:71:ab:8c: 4f:17:60:b5:2b:e3:12:aa:6d:6b:0c:82:6e:7c:51:80:79:6a: c7:1b:4f:32:06:fe:f2:87:7b:2b:df:bd:cf:99:ec:1f:cb:fd: 33:a7:60:c4:08:1f:69:f1:e7:a3:6a:d5:e9:c0:22:75:fb:8d: e5:53:f3:53:bb:78:b1:2b:ed:0d:5c:d5:fa:52:35:5c:2d:6a: ad:e8:2d:80:f0:a7:fd:f1:0d:c4:62:fb:9f:2c:75:3a:94:da: 14:19:2d:bb:ba:5f:e4:cf:66:39:14:27:2e:a7:c5:89:0c:a3: af:5c:53:77:34:0b:07:56:1c:83:18:54:0a:57:45:3a:fb:07: 30:a8:f5:17:91:e5:99:da:37:54:54:8d:fe:30:88:0f:d3:a3: 07:f1:9f:53:cc:58:a2:b4:f3:b7:76:fd:86:3b:e3:eb:58:f0: 1d:64:90:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwY4RbQ1iEwZUOpbTkVljfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMjAxMTEwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTExZmFiN2FhYWJlMGUzODQzODUxZjY2NGFjOGUyNDVmN2RkMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzTlDvcj4vxUk+vHE7oDJzmPevZF /ZndaJdaQQeqLpCYtQQX8lwQC0DUKDGex7UeKwvy+vtt7euisCpMWQtN5lWApJQP 03vHQjYBLIm+Nk2b6dBenO4ev6tROY9RtxN2Abtr6sQe5hvv5SQny2/fhN+6ttJO xTNEBJOjPZzaxCA8W6neo5Vy91LcmFX2iI5jvB3cR5/c/AF/tgI1H10BIt9v3iGn akeW6jDZxVKSSzaQ7I0rJZWhwO4JBy/u3r1RJpdtv9Jujm2HUYVxOFhVGaHhb6sv NKmu8M1+HR4YmRC0mFhxeh4nJ1hmm3XAiojdOXNU/Yb9bzunVRYt5wuuCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL4R+reqq+DjhDhR9mSsjiRffdNDMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvdmhINnQ2cXI0T09FT0ZIMlpLeU9KRjk5MDBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXyYtAwQB XyY2AwQAXybGMA0GCSqGSIb3DQEBCwUAA4IBAQBK2PK+JImmq1g7kywe7Il/ONR/ LkRF4ITQHzIbyQ/DnV2hjKG5kHYAydnyJCB42W+KTtPFqTe3KkDKSmFDS1/Ix/hn qywGw5MbgQSq48vKFa+dc1oEml1xq4xPF2C1K+MSqm1rDIJufFGAeWrHG08yBv7y h3sr373Pmewfy/0zp2DECB9p8eejatXpwCJ1+43lU/NTu3ixK+0NXNX6UjVcLWqt 6C2A8Kf98Q3EYvufLHU6lNoUGS27ul/kz2Y5FCcup8WJDKOvXFN3NAsHVhyDGFQK V0U6+wcwqPUXkeWZ2jdUVI3+MIgP06MH8Z9TzFiitPO3dv2GO+PrWPAdZJAl -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:22 2026 by rpki-client