This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/vQVu0E2WyUWmteW1X5tAGdPGMFs.roa File: vQVu0E2WyUWmteW1X5tAGdPGMFs.roa (raw, json) Hash identifier: DDmHO+xrIG9LaR66B2Dm2O9/yty+KAgFsRFZqnf/WgM= Subject key identifier: BD:05:6E:D0:4D:96:C9:45:A6:B5:E5:B5:5F:9B:40:19:D3:C6:30:5B Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Certificate serial: 019B7EA643DE37180D71306CF2AEE560563F Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/vQVu0E2WyUWmteW1X5tAGdPGMFs.roa Signing time: Fri 02 Jan 2026 12:19:44 +0000 ROA not before: Fri 02 Jan 2026 12:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205239 IP address blocks: 91.229.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:43:de:37:18:0d:71:30:6c:f2:ae:e5:60:56:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Validity Not Before: Jan 2 12:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd056ed04d96c945a6b5e5b55f9b4019d3c6305b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:3a:9c:8d:44:db:a9:ad:21:a0:4e:83:0f: f3:73:a2:ff:b7:41:39:46:86:4d:ba:dd:41:26:1f: 74:4d:0b:d7:61:24:fd:06:0d:c4:5e:3b:90:b3:26: 9c:b2:72:52:96:30:f9:f8:21:ee:1a:77:38:e8:7b: 1f:f4:78:11:41:10:f6:b9:65:d3:50:71:9e:da:db: b9:d1:95:e0:1d:09:fa:bc:5b:97:01:c5:b9:46:71: d8:da:13:ce:a7:82:e3:51:58:69:8f:e1:6a:3a:60: 21:1b:84:60:94:7f:b9:b6:92:bd:e4:01:a9:48:04: 5c:1c:e1:19:72:e7:78:b5:db:66:6d:c0:86:58:9e: e2:ce:f4:e8:dd:88:a8:41:0d:ba:c5:6c:b3:9f:aa: e3:99:13:bc:fc:18:9d:e2:9f:26:ba:ac:cf:62:6d: 1f:88:89:15:91:44:93:67:ec:d3:1a:51:af:4f:78: 3a:93:35:09:aa:01:a8:18:db:52:3f:03:6f:0c:c2: 42:d9:ac:15:13:f4:89:40:5c:20:83:09:3d:04:28: 18:d9:98:e8:15:08:7b:d6:9d:90:d6:dc:15:bc:f0: b4:48:56:d8:d4:ec:21:ef:77:68:4d:33:62:51:69: 5a:35:b3:37:32:40:93:c7:a4:9c:eb:1d:ad:1c:7d: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:05:6E:D0:4D:96:C9:45:A6:B5:E5:B5:5F:9B:40:19:D3:C6:30:5B X509v3 Authority Key Identifier: keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/vQVu0E2WyUWmteW1X5tAGdPGMFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.101.0/24 Signature Algorithm: sha256WithRSAEncryption 70:8d:c1:f9:fe:77:d7:5e:a3:cd:21:17:0d:d2:71:22:59:f5: aa:ab:bb:26:48:b4:0e:b9:f8:df:37:83:0a:53:b9:06:77:68: 2a:1f:a2:88:2a:c1:b3:8e:c3:0f:ff:13:a8:87:f3:51:70:96: b3:26:0d:f3:2d:08:33:c2:06:4c:f5:7a:37:c0:e4:96:33:75: 67:e5:52:39:79:2b:7f:7c:13:f4:e1:04:26:eb:59:64:60:be: 64:57:14:1b:55:c3:ad:7c:b7:fc:45:2b:62:4d:01:c2:a4:ca: 35:ff:c2:48:ae:fb:9b:75:64:f5:13:95:a1:4b:87:20:30:7c: 14:0a:c2:54:42:2c:65:f4:e3:52:a5:d5:81:49:62:ac:92:66: 96:a7:0d:60:5f:8b:7c:58:d9:77:9d:a6:a9:3e:f2:5d:44:70: c4:c7:ec:43:96:0b:ca:95:75:1a:17:58:a0:4e:0f:13:75:6d: cf:7a:d6:4a:ec:d3:9d:fc:bc:e8:3d:be:ad:88:ac:f9:8c:a7: ad:37:46:c3:29:51:05:9b:4b:fd:62:bc:54:1e:04:af:68:62: 08:f4:ea:cc:dc:1c:d3:ef:03:4d:ea:24:dd:67:0b:d3:0c:3b: 07:2c:70:4c:34:e4:1e:5a:ca:6f:c8:c1:ad:b8:0f:a3:bb:7c: 37:34:31:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pkPeNxgNcTBs8q7lYFY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk YWM3ODQwHhcNMjYwMTAyMTIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDA1NmVkMDRkOTZjOTQ1YTZiNWU1YjU1ZjliNDAxOWQzYzYzMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7M6nI1E26mtIaBOgw/zc6L/t0E5 RoZNut1BJh90TQvXYST9Bg3EXjuQsyacsnJSljD5+CHuGnc46Hsf9HgRQRD2uWXT UHGe2tu50ZXgHQn6vFuXAcW5RnHY2hPOp4LjUVhpj+FqOmAhG4RglH+5tpK95AGp SARcHOEZcud4tdtmbcCGWJ7izvTo3YioQQ26xWyzn6rjmRO8/Bid4p8muqzPYm0f iIkVkUSTZ+zTGlGvT3g6kzUJqgGoGNtSPwNvDMJC2awVE/SJQFwggwk9BCgY2Zjo FQh71p2Q1twVvPC0SFbY1Owh73doTTNiUWlaNbM3MkCTx6Sc6x2tHH391QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL0FbtBNlslFprXltV+bQBnTxjBbMB8GA1UdIwQY MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt YWYzMzRhMGExZTkzLzEvdlFWdTBFMld5VVdtdGVXMVg1dEFHZFBHTUZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+VlMA0G CSqGSIb3DQEBCwUAA4IBAQBwjcH5/nfXXqPNIRcN0nEiWfWqq7smSLQOufjfN4MK U7kGd2gqH6KIKsGzjsMP/xOoh/NRcJazJg3zLQgzwgZM9Xo3wOSWM3Vn5VI5eSt/ fBP04QQm61lkYL5kVxQbVcOtfLf8RStiTQHCpMo1/8JIrvubdWT1E5WhS4cgMHwU CsJUQixl9ONSpdWBSWKskmaWpw1gX4t8WNl3naapPvJdRHDEx+xDlgvKlXUaF1ig Tg8TdW3PetZK7NOd/LzoPb6tiKz5jKetN0bDKVEFm0v9YrxUHgSvaGII9OrM3BzT 7wNN6iTdZwvTDDsHLHBMNOQeWspvyMGtuA+ju3w3NDGo -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:08 2026 by rpki-client