This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/A6vGIJGT64W29On7fsToe2iuYDQ.roa File: A6vGIJGT64W29On7fsToe2iuYDQ.roa (raw, json) Hash identifier: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI= Subject key identifier: 03:AB:C6:20:91:93:EB:85:B6:F4:E9:FB:7E:C4:E8:7B:68:AE:60:34 Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Certificate serial: 019B7E375627BA4A4F7D1FDC95E53049E4CD Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/A6vGIJGT64W29On7fsToe2iuYDQ.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.135.128.0/24 maxlen: 24 195.191.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:56:27:ba:4a:4f:7d:1f:dc:95:e5:30:49:e4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03abc6209193eb85b6f4e9fb7ec4e87b68ae6034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:06:44:9c:7f:9f:9d:3e:7f:4f:b5:2a:25: c8:5a:73:c9:1f:53:8c:55:57:ec:49:a2:63:43:42: d9:8c:fa:8b:3c:c8:b0:0e:ec:14:90:a9:38:ee:6b: 31:d4:a3:bf:e2:a1:fe:84:83:1c:f8:ce:74:2a:84: 0c:f3:35:1d:1b:4f:21:d6:25:50:21:38:f2:bd:6e: 91:03:07:e9:0e:cb:d4:6f:eb:ad:9d:32:28:b0:5d: 1a:dd:01:92:79:c3:47:b5:ee:78:d3:0f:ff:e2:e3: d8:2b:46:a1:a9:a5:12:aa:fe:4c:6f:a8:f4:49:3f: d7:c8:d9:b1:3b:92:fb:8d:6c:39:ef:8d:35:35:40: 62:31:76:a1:72:d2:46:b8:6f:d9:dd:fb:57:cb:f2: cb:10:dc:99:31:01:73:15:f6:b7:99:84:8a:c4:fb: 20:22:ba:25:c3:a9:45:53:d7:00:a4:42:26:d2:8d: cb:c0:79:85:81:eb:3e:77:19:fe:d0:72:12:59:fe: 7f:44:fc:a3:64:30:65:68:8d:09:13:a6:22:cd:a8: 61:90:7d:cd:58:47:a5:37:bb:2f:9d:e3:b6:50:02: 98:b9:92:e3:14:60:9e:a9:e3:45:93:3b:5d:a7:ef: 55:a8:b6:23:24:10:00:ba:2d:2b:4e:b8:24:2b:c5: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AB:C6:20:91:93:EB:85:B6:F4:E9:FB:7E:C4:E8:7B:68:AE:60:34 X509v3 Authority Key Identifier: keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/A6vGIJGT64W29On7fsToe2iuYDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.128.0/24 195.191.165.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:3b:82:53:cf:30:d9:28:a2:ee:d2:51:95:bb:f6:cf:b2:0a: d2:1d:7d:1c:64:84:02:1d:a5:b5:66:2b:92:90:28:38:2e:bb: a5:24:79:be:27:42:de:a8:ab:c9:34:ee:ac:60:77:f9:c3:41: 21:39:ba:6f:7a:cb:a3:5b:63:53:de:49:0d:50:10:47:bd:48: fc:d6:d8:13:a2:f3:d5:c6:fd:7a:71:56:7b:d9:97:97:61:fc: 1e:be:7c:70:1a:20:3d:88:bf:3f:9b:fd:31:36:62:f1:8a:a6: 1d:66:70:2f:da:d4:de:69:38:6c:ef:57:4e:bc:6d:c4:12:a5: 76:54:e7:fe:31:75:51:e9:9f:49:23:5e:32:fb:94:93:01:25: 47:4c:ef:81:98:92:3e:cd:9f:3c:47:47:a3:9e:4c:47:38:87: d4:16:7f:df:82:3a:ea:72:47:f2:d5:a5:af:c2:aa:86:2e:96: a7:fb:cf:96:16:44:b2:00:11:6b:9f:10:17:1d:43:4e:2b:5a: 37:c2:53:37:3d:d7:0f:93:5d:b8:7d:58:07:95:4d:a6:4f:d3: 32:16:ff:99:fc:47:f5:4b:27:94:d2:51:a6:36:b1:95:52:f1: 25:74:0a:4a:64:a1:8c:39:e1:2d:5f:ff:5a:c1:e4:c3:15:91: ac:8a:ff:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N1YnukpPfR/cleUwSeTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3 OGIzZmYwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2FiYzYyMDkxOTNlYjg1YjZmNGU5ZmI3ZWM0ZTg3YjY4YWU2MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQGRJx/n50+f0+1KiXIWnPJH1OM VVfsSaJjQ0LZjPqLPMiwDuwUkKk47msx1KO/4qH+hIMc+M50KoQM8zUdG08h1iVQ ITjyvW6RAwfpDsvUb+utnTIosF0a3QGSecNHte540w//4uPYK0ahqaUSqv5Mb6j0 ST/XyNmxO5L7jWw57401NUBiMXahctJGuG/Z3ftXy/LLENyZMQFzFfa3mYSKxPsg Irolw6lFU9cApEIm0o3LwHmFges+dxn+0HISWf5/RPyjZDBlaI0JE6YizahhkH3N WEelN7svneO2UAKYuZLjFGCeqeNFkztdp+9VqLYjJBAAui0rTrgkK8WA6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAOrxiCRk+uFtvTp+37E6HtormA0MB8GA1UdIwQY MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt ZmMyOWNhYTVkYjdhLzEvQTZ2R0lKR1Q2NFcyOU9uN2ZzVG9lMml1WURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYeAAwQA w7+lMA0GCSqGSIb3DQEBCwUAA4IBAQAcO4JTzzDZKKLu0lGVu/bPsgrSHX0cZIQC HaW1ZiuSkCg4LrulJHm+J0LeqKvJNO6sYHf5w0EhObpvesujW2NT3kkNUBBHvUj8 1tgTovPVxv16cVZ72ZeXYfwevnxwGiA9iL8/m/0xNmLxiqYdZnAv2tTeaThs71dO vG3EEqV2VOf+MXVR6Z9JI14y+5STASVHTO+BmJI+zZ88R0ejnkxHOIfUFn/fgjrq ckfy1aWvwqqGLpan+8+WFkSyABFrnxAXHUNOK1o3wlM3PdcPk124fVgHlU2mT9My Fv+Z/Ef1SyeU0lGmNrGVUvEldApKZKGMOeEtX/9aweTDFZGsiv86 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:47 2026 by rpki-client