This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa File: vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa (raw, json) Hash identifier: o/PY0zcPwn5EFiTDVfiSoj0UDONeDefYMUGFGgIeJHQ= Subject key identifier: BD:D3:BD:95:D1:A5:85:41:AE:84:C6:EF:11:98:10:8B:65:00:2F:A4 Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Certificate serial: 019B7D5CD833DEFBB7052C5342338E394356 Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48757 IP address blocks: 91.215.172.0/22 maxlen: 22 95.128.176.0/22 maxlen: 22 95.128.180.0/22 maxlen: 22 95.128.180.0/24 maxlen: 24 95.128.181.0/24 maxlen: 24 95.128.182.0/24 maxlen: 24 95.128.183.0/24 maxlen: 24 185.17.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d8:33:de:fb:b7:05:2c:53:42:33:8e:39:43:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd3bd95d1a58541ae84c6ef1198108b65002fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:a0:4a:66:b7:1f:2d:11:70:75:1c:58:4f: 3c:4d:35:d7:ae:3f:ee:61:4d:05:6a:5d:a6:ac:30: 7a:94:fc:8f:a9:90:b3:74:51:f2:a0:cc:e8:6a:71: 6d:a8:25:d2:a7:c6:fc:56:a5:2c:74:58:cb:e2:4b: 72:03:0c:d8:77:57:59:ff:8e:75:50:b1:be:08:f5: 51:9d:ab:3e:a5:0c:04:29:9e:b5:dd:3a:3b:eb:12: 24:c8:c6:ca:fa:09:32:28:1c:da:87:e2:8e:2b:ec: 66:9f:82:dd:6d:c7:e5:6e:6c:78:25:a7:b0:01:92: 35:c0:38:44:17:36:6b:b9:61:4c:db:d8:a8:d1:45: ae:d4:aa:b5:19:8d:7b:25:24:74:a6:f4:f5:79:6a: 30:e0:3f:c1:8a:4f:76:2a:5c:14:f5:5c:83:f8:a8: c8:78:82:60:14:53:3e:67:25:c8:67:86:3b:b0:30: bd:de:50:3d:30:db:7b:f6:ed:1d:ae:d8:10:23:11: da:ed:1e:75:1a:ec:05:1c:0a:2f:ee:4d:28:de:cf: 80:da:8c:18:40:ee:ab:4c:65:d4:38:05:df:7f:e0: ff:0b:34:8b:5c:2a:ba:96:14:4a:ec:78:18:1b:85: 09:dd:81:0f:88:09:3f:e1:4f:0b:84:6e:e9:c7:1c: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:BD:95:D1:A5:85:41:AE:84:C6:EF:11:98:10:8B:65:00:2F:A4 X509v3 Authority Key Identifier: keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.172.0/22 95.128.176.0/21 185.17.140.0/22 Signature Algorithm: sha256WithRSAEncryption 09:65:b8:b3:7e:16:ed:cd:08:c4:f9:39:c5:27:d7:f8:b9:ed: a1:14:a7:4d:a7:b3:7f:45:66:5c:ec:dc:e2:bc:9a:12:5e:dd: 51:34:3c:73:63:26:0b:62:b5:f7:7a:de:a5:ad:4c:d3:b9:b1: 4b:d7:b4:29:09:2b:7a:18:77:ab:23:4b:23:18:91:09:3b:5b: a7:a4:60:23:ef:3e:26:40:13:10:51:52:44:fc:5c:bb:4d:79: 22:a1:12:7e:ff:ca:4a:d5:5b:31:f4:09:47:e1:cf:e7:be:d4: 5c:e8:3e:ea:76:37:88:4a:6e:3c:16:53:ce:34:33:6d:20:3d: 98:fb:95:8d:b1:3c:0f:19:99:c4:cc:fe:58:fc:a4:8e:9b:72: b2:3a:3f:7d:76:d9:22:db:18:19:f5:5c:5e:96:2a:9e:d5:10: 21:0b:ca:d1:4a:01:55:10:06:0d:ab:be:e8:72:fa:01:b0:85: 99:39:88:69:fd:42:4a:db:56:96:be:e2:41:a1:79:31:46:68: c1:2c:b3:c9:3e:59:35:d2:ee:ff:bb:f0:12:3b:33:d8:8c:1d: a4:70:f9:43:bb:0c:77:2d:ac:8c:4a:0d:11:c7:64:85:3a:ab: 5c:a6:d2:ac:5c:d4:4c:93:6d:fc:c5:2b:19:88:9b:cb:55:b5: 48:ff:99:d8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNgz3vu3BSxTQjOOOUNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk MjcxYjMwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQzYmQ5NWQxYTU4NTQxYWU4NGM2ZWYxMTk4MTA4YjY1MDAyZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHagSma3Hy0RcHUcWE88TTXXrj/u YU0Fal2mrDB6lPyPqZCzdFHyoMzoanFtqCXSp8b8VqUsdFjL4ktyAwzYd1dZ/451 ULG+CPVRnas+pQwEKZ613To76xIkyMbK+gkyKBzah+KOK+xmn4Ldbcflbmx4Jaew AZI1wDhEFzZruWFM29io0UWu1Kq1GY17JSR0pvT1eWow4D/Bik92KlwU9VyD+KjI eIJgFFM+ZyXIZ4Y7sDC93lA9MNt79u0drtgQIxHa7R51GuwFHAov7k0o3s+A2owY QO6rTGXUOAXff+D/CzSLXCq6lhRK7HgYG4UJ3YEPiAk/4U8LhG7pxxyiaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL3TvZXRpYVBroTG7xGYEItlAC+kMB8GA1UdIwQY MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt Yjk3YzJjNGFkNDM5LzEvdmRPOWxkR2xoVUd1aE1idkVaZ1FpMlVBTDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5 LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW9esAwQD X4CwAwQCuRGMMA0GCSqGSIb3DQEBCwUAA4IBAQAJZbizfhbtzQjE+TnFJ9f4ue2h FKdNp7N/RWZc7NzivJoSXt1RNDxzYyYLYrX3et6lrUzTubFL17QpCSt6GHerI0sj GJEJO1unpGAj7z4mQBMQUVJE/Fy7TXkioRJ+/8pK1Vsx9AlH4c/nvtRc6D7qdjeI Sm48FlPONDNtID2Y+5WNsTwPGZnEzP5Y/KSOm3KyOj99dtki2xgZ9Vxeliqe1RAh C8rRSgFVEAYNq77ocvoBsIWZOYhp/UJK21aWvuJBoXkxRmjBLLPJPlk10u7/u/AS OzPYjB2kcPlDuwx3LayMSg0Rx2SFOqtcptKsXNRMk238xSsZiJvLVbVI/5nY -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:15 2026 by rpki-client