This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/bVpF-JYq76hoB_KaZysLKYZxssY.roa File: bVpF-JYq76hoB_KaZysLKYZxssY.roa (raw, json) Hash identifier: SoJIyXdEMWSvR/+6Xh9JWJx82o79MJZiZkGc6eExE4Q= Subject key identifier: 6D:5A:45:F8:96:2A:EF:A8:68:07:F2:9A:67:2B:0B:29:86:71:B2:C6 Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca Certificate serial: 019B79ED11D5FEAF86B7756035D2881A47B5 Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/bVpF-JYq76hoB_KaZysLKYZxssY.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31115 IP address blocks: 5.172.64.0/19 maxlen: 24 31.171.136.0/21 maxlen: 24 62.97.32.0/19 maxlen: 24 91.187.192.0/19 maxlen: 24 94.126.56.0/21 maxlen: 24 130.255.144.0/21 maxlen: 24 178.19.144.0/20 maxlen: 24 185.11.192.0/22 maxlen: 24 185.189.36.0/22 maxlen: 24 194.150.162.0/23 maxlen: 24 195.134.176.0/21 maxlen: 24 213.225.234.0/23 maxlen: 24 2a01:9840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:11:d5:fe:af:86:b7:75:60:35:d2:88:1a:47:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d5a45f8962aefa86807f29a672b0b298671b2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:00:0d:8c:7f:d3:1c:55:1f:11:2f:5b:f7: ee:a2:cd:19:fe:de:00:98:dc:9b:39:3a:33:3c:23: 10:82:95:54:9c:5e:e6:fe:f1:23:89:1d:72:cd:c3: 56:23:aa:f9:a0:26:39:8f:6b:3b:fd:00:2a:f3:8a: 5a:93:4f:25:0f:44:09:7d:c1:da:b0:91:7f:8d:60: da:4d:5c:e1:c2:5e:ae:f8:68:61:e1:22:ac:7a:ba: f2:31:3a:db:17:13:0e:da:23:f6:6a:7d:9d:4f:d9: d8:b4:c7:60:d8:3b:49:75:d1:b0:1d:71:d9:da:c5: 08:08:54:44:37:d8:8c:2f:90:b3:88:b1:b0:2e:1f: 37:67:05:f6:b1:94:bb:e3:22:93:b9:91:e5:cf:66: be:af:5f:66:02:b3:c7:80:85:6b:25:1b:22:c7:6a: 95:d2:30:0a:c1:a4:ee:f8:73:50:af:49:7b:15:27: 64:e6:fe:08:49:7a:b3:2d:29:a5:24:f5:b1:27:74: 62:47:18:58:07:20:9d:a6:fc:9c:80:08:10:f8:59: 86:dd:46:db:d6:ed:31:62:ff:2d:fa:0c:59:5d:aa: a4:39:ba:d6:14:c0:71:4a:62:b7:ba:e7:c9:6d:a7: 74:7f:26:4a:1a:80:13:92:99:25:f5:0f:b7:a7:da: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:45:F8:96:2A:EF:A8:68:07:F2:9A:67:2B:0B:29:86:71:B2:C6 X509v3 Authority Key Identifier: keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/bVpF-JYq76hoB_KaZysLKYZxssY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.64.0/19 31.171.136.0/21 62.97.32.0/19 91.187.192.0/19 94.126.56.0/21 130.255.144.0/21 178.19.144.0/20 185.11.192.0/22 185.189.36.0/22 194.150.162.0/23 195.134.176.0/21 213.225.234.0/23 IPv6: 2a01:9840::/32 Signature Algorithm: sha256WithRSAEncryption 1b:dc:8f:c4:f1:87:4c:fc:f6:d6:14:79:9a:a3:38:9f:bc:e0: 3f:99:9b:6f:26:7e:0c:4e:2e:7b:43:d0:94:f7:72:ec:8b:5b: 7d:da:af:f7:7c:45:af:20:3a:27:6f:ba:6e:7d:56:a1:fa:33: cf:4c:f7:2a:97:07:e7:04:d2:c4:14:10:2a:f1:c8:eb:07:68: 02:48:fa:f8:2f:f7:ee:4c:45:e7:94:87:ec:4e:bf:da:03:82: 2b:8c:c3:54:8a:e2:6d:fb:05:d5:ec:12:40:be:ff:ae:ed:aa: 2b:6d:bc:e1:98:05:9a:75:31:d0:97:fe:57:40:4f:b4:28:3d: ef:72:b1:3b:02:a4:91:8c:f2:4b:90:22:2e:3a:24:7b:30:3a: 4b:61:90:19:19:b1:d1:80:e1:e6:d9:e3:74:8f:29:17:99:63: 98:61:80:20:b9:19:70:87:f1:a5:dc:f4:9f:6c:ef:3e:16:2e: 5f:92:50:28:dc:a4:ff:da:8c:42:ff:1e:cc:7f:43:9a:d3:1a: c6:58:94:d9:95:21:2e:3b:cb:8a:fd:46:13:1c:87:e7:4c:6d: e0:ca:97:0f:23:ee:73:c8:5b:14:cc:aa:1a:f0:76:2b:0e:15: 54:ea:c2:0f:9c:96:04:f0:b7:e3:c2:78:61:64:94:a2:dd:a0: c6:2d:d3:19 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt57RHV/q+Gt3VgNdKIGke1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OTE5NTg0MDMzYzM5MTFhMDA5YmRkZTMxODNmNmM2MGIy YWZjY2EwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDVhNDVmODk2MmFlZmE4NjgwN2YyOWE2NzJiMGIyOTg2NzFiMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswUADYx/0xxVHxEvW/fuos0Z/t4A mNybOTozPCMQgpVUnF7m/vEjiR1yzcNWI6r5oCY5j2s7/QAq84pak08lD0QJfcHa sJF/jWDaTVzhwl6u+Ghh4SKserryMTrbFxMO2iP2an2dT9nYtMdg2DtJddGwHXHZ 2sUICFREN9iML5CziLGwLh83ZwX2sZS74yKTuZHlz2a+r19mArPHgIVrJRsix2qV 0jAKwaTu+HNQr0l7FSdk5v4ISXqzLSmlJPWxJ3RiRxhYByCdpvycgAgQ+FmG3Ubb 1u0xYv8t+gxZXaqkObrWFMBxSmK3uufJbad0fyZKGoATkpkl9Q+3p9oF0QIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFG1aRfiWKu+oaAfymmcrCymGcbLGMB8GA1UdIwQY MBaAFFmRlYQDPDkRoAm93jGD9sYLKvzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWIt OWNmODExZTlmYTdhLzEvYlZwRi1KWXE3NmhvQl9LYVp5c0xLWVp4c3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdh LzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQFBaxAAwQD H6uIAwQFPmEgAwQFW7vAAwQDXn44AwQDgv+QAwQEshOQAwQCuQvAAwQCub0kAwQB wpaiAwQDw4awAwQB1eHqMA0EAgACMAcDBQAqAZhAMA0GCSqGSIb3DQEBCwUAA4IB AQAb3I/E8YdM/PbWFHmaozifvOA/mZtvJn4MTi57Q9CU93Lsi1t92q/3fEWvIDon b7pufVah+jPPTPcqlwfnBNLEFBAq8cjrB2gCSPr4L/fuTEXnlIfsTr/aA4IrjMNU iuJt+wXV7BJAvv+u7aorbbzhmAWadTHQl/5XQE+0KD3vcrE7AqSRjPJLkCIuOiR7 MDpLYZAZGbHRgOHm2eN0jykXmWOYYYAguRlwh/Gl3PSfbO8+Fi5fklAo3KT/2oxC /x7Mf0Oa0xrGWJTZlSEuO8uK/UYTHIfnTG3gypcPI+5zyFsUzKoa8HYrDhVU6sIP nJYE8LfjwnhhZJSi3aDGLdMZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:41 2026 by rpki-client