This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa File: vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa (raw, json) Hash identifier: Ft3k1GMH35DD813n5Ke6tEuRDCxpQCa27sS+PQPuKK0= Subject key identifier: BE:43:52:43:F4:DC:DC:17:DE:DE:3A:0E:54:31:A0:6C:DE:82:42:D9 Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Certificate serial: 019B7C7FC8FC92449142288121410C46FA33 Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa Signing time: Fri 02 Jan 2026 02:18:27 +0000 ROA not before: Fri 02 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214977 IP address blocks: 91.228.249.0/24 maxlen: 24 194.11.239.0/24 maxlen: 24 2a14:4800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c8:fc:92:44:91:42:28:81:21:41:0c:46:fa:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be435243f4dcdc17dede3a0e5431a06cde8242d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:73:e0:ad:a4:72:37:4c:52:2d:b1:f9:9f: 8b:e8:e7:40:49:6e:2c:4d:5c:59:0d:76:b3:57:28: 5e:b8:78:8b:7d:fe:44:cb:a0:a3:8e:7a:a4:d5:fd: 7e:36:d1:83:46:84:00:55:e3:33:54:ab:a9:74:25: 33:4d:6f:73:5b:53:a7:83:eb:39:a6:00:29:33:af: 30:4a:1c:21:a0:f7:49:0a:3d:21:aa:07:b4:05:8c: e3:d2:7b:cf:97:55:4f:d4:02:7f:29:e7:3e:90:62: ae:0f:09:82:50:59:27:da:60:76:0b:41:24:b0:5b: 55:f0:a8:8e:05:e8:b5:ee:18:78:85:38:7b:2e:ef: ff:a4:96:e2:f1:cb:ae:9b:f6:4a:22:84:b5:0c:38: 54:a7:f3:7d:15:14:2d:e7:b5:73:05:80:f3:86:20: 20:6a:43:1c:e3:e9:2b:02:4f:8a:ac:a3:9c:7e:a8: df:c6:67:c1:36:f7:ab:57:96:0a:59:20:9d:0c:b1: f0:55:4b:22:8d:ed:a2:81:4b:f9:27:97:a5:a3:7e: dc:88:2d:bb:f7:ee:27:1c:25:a7:6a:87:bb:47:af: d4:f9:14:98:59:4a:5c:45:9b:46:2f:5e:03:37:dc: 6b:b6:d9:45:73:44:61:8b:0e:c3:41:fd:b0:ca:05: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:52:43:F4:DC:DC:17:DE:DE:3A:0E:54:31:A0:6C:DE:82:42:D9 X509v3 Authority Key Identifier: keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.249.0/24 194.11.239.0/24 IPv6: 2a14:4800::/29 Signature Algorithm: sha256WithRSAEncryption af:8a:41:b0:8c:ea:01:3d:29:aa:50:ab:4b:93:01:a9:01:36: 49:ed:07:1f:04:87:bc:d9:2d:23:50:70:f7:16:d1:93:7b:d7: 57:08:9a:51:f7:dc:8b:df:c0:e1:56:7c:e1:be:fc:33:f4:28: cf:30:b4:a4:68:4f:d4:19:0a:e1:7b:40:81:c0:11:a7:ed:03: 7c:8a:9b:1f:8c:1a:26:f1:3e:44:4b:7b:99:cd:ac:70:00:4e: 2d:06:3f:81:cf:35:e0:57:bd:4c:01:ef:01:93:c7:2f:d4:10: ac:f3:97:43:a4:1e:b7:42:02:39:8e:fd:6d:27:39:69:c4:1e: 66:5b:01:8d:95:9e:cc:56:01:75:8a:e9:19:3f:22:b1:6b:4f: d8:f0:4d:af:1f:2d:a2:6e:b0:e8:e8:35:5b:79:aa:a9:72:ea: ce:b6:0c:0c:f0:03:d8:6f:5b:4d:99:73:70:7f:d8:e4:ac:ab: cf:89:91:b9:f2:62:42:42:b5:0e:7b:44:82:3c:ff:54:2f:db: 97:3b:c7:f9:8f:60:ff:e2:63:6e:f1:f3:4a:18:80:19:09:27: d9:ed:a0:00:72:37:54:db:23:8a:ec:75:5b:22:6b:29:54:0a: 77:4c:08:ca:94:90:1c:86:c5:a1:f6:d0:4f:58:0d:94:b0:9a: e2:d1:72:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8f8j8kkSRQiiBIUEMRvozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx N2FiYjQwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQzNTI0M2Y0ZGNkYzE3ZGVkZTNhMGU1NDMxYTA2Y2RlODI0MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Fz4K2kcjdMUi2x+Z+L6OdASW4s TVxZDXazVyheuHiLff5Ey6Cjjnqk1f1+NtGDRoQAVeMzVKupdCUzTW9zW1Ong+s5 pgApM68wShwhoPdJCj0hqge0BYzj0nvPl1VP1AJ/Kec+kGKuDwmCUFkn2mB2C0Ek sFtV8KiOBei17hh4hTh7Lu//pJbi8cuum/ZKIoS1DDhUp/N9FRQt57VzBYDzhiAg akMc4+krAk+KrKOcfqjfxmfBNverV5YKWSCdDLHwVUsije2igUv5J5elo37ciC27 9+4nHCWnaoe7R6/U+RSYWUpcRZtGL14DN9xrttlFc0Rhiw7DQf2wygVv7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL5DUkP03NwX3t46DlQxoGzegkLZMB8GA1UdIwQY MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt YjdiYmY1YTFhYzczLzEvdmtOU1FfVGMzQmZlM2pvT1ZER2diTjZDUXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+T5AwQA wgvvMA0EAgACMAcDBQMqFEgAMA0GCSqGSIb3DQEBCwUAA4IBAQCvikGwjOoBPSmq UKtLkwGpATZJ7QcfBIe82S0jUHD3FtGTe9dXCJpR99yL38DhVnzhvvwz9CjPMLSk aE/UGQrhe0CBwBGn7QN8ipsfjBom8T5ES3uZzaxwAE4tBj+BzzXgV71MAe8Bk8cv 1BCs85dDpB63QgI5jv1tJzlpxB5mWwGNlZ7MVgF1iukZPyKxa0/Y8E2vHy2ibrDo 6DVbeaqpcurOtgwM8APYb1tNmXNwf9jkrKvPiZG58mJCQrUOe0SCPP9UL9uXO8f5 j2D/4mNu8fNKGIAZCSfZ7aAAcjdU2yOK7HVbImspVAp3TAjKlJAchsWh9tBPWA2U sJri0XLj -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:07 2026 by rpki-client