This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/vkfnJrHiy2sJ2-fSn0x2K1mT3tU.roa File: vkfnJrHiy2sJ2-fSn0x2K1mT3tU.roa (raw, json) Hash identifier: RiiYyuDkNY9o+2d4f389MOhfKC15CjzA8CBlt+hYg4s= Subject key identifier: BE:47:E7:26:B1:E2:CB:6B:09:DB:E7:D2:9F:4C:76:2B:59:93:DE:D5 Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9 Certificate serial: 019B7F81F617391FCF6BBBD5ED14CD84E0A8 Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/vkfnJrHiy2sJ2-fSn0x2K1mT3tU.roa Signing time: Fri 02 Jan 2026 16:19:42 +0000 ROA not before: Fri 02 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207775 IP address blocks: 185.137.97.0/24 maxlen: 24 2a12:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:f6:17:39:1f:cf:6b:bb:d5:ed:14:cd:84:e0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9 Validity Not Before: Jan 2 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be47e726b1e2cb6b09dbe7d29f4c762b5993ded5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:b2:fe:e8:26:2a:41:55:2b:88:95:9c:8a: f4:b0:af:86:f5:51:32:ae:a5:02:1c:27:b1:a2:40: f5:68:b2:7d:62:3c:85:1b:ce:0e:46:44:78:76:c1: b9:cd:5e:77:53:2d:90:2c:6d:c3:bb:52:cf:ec:6d: 4f:bd:cf:89:12:93:81:e4:00:f3:27:9e:e3:da:e1: 37:81:07:c7:eb:47:c6:f4:36:70:ba:ef:a0:f3:20: 18:2d:39:8a:a7:19:a1:8c:58:1f:93:9c:26:2e:fb: 6c:a9:61:34:90:03:73:0c:3d:6e:53:31:ad:0c:22: b9:3a:54:7f:bb:6f:a4:ee:9e:1a:95:9f:a7:d7:6d: 15:11:ea:27:9a:39:4d:9b:5b:b6:38:9a:9f:cc:a4: aa:77:89:a4:1e:11:38:36:e8:cd:0a:b5:80:f1:a8: 5a:93:c2:e7:2e:ba:ce:dd:e8:0a:25:5b:ec:47:cd: e7:e3:26:56:7c:e5:2c:16:50:6e:02:1c:fd:f8:e3: 41:2a:c9:a1:3e:8d:9d:d6:66:8f:27:5d:0f:62:e3: 87:f8:aa:85:b4:31:66:f9:27:97:bc:2f:c9:3b:fb: 9d:cc:a5:da:f3:fa:ef:1e:11:8f:30:f0:bf:20:19: 72:09:17:53:05:91:8e:e8:7f:f3:42:66:b5:df:b2: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:47:E7:26:B1:E2:CB:6B:09:DB:E7:D2:9F:4C:76:2B:59:93:DE:D5 X509v3 Authority Key Identifier: keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/vkfnJrHiy2sJ2-fSn0x2K1mT3tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.97.0/24 IPv6: 2a12:7040::/32 Signature Algorithm: sha256WithRSAEncryption cc:92:12:f3:1f:8e:77:4a:47:81:14:27:4b:d9:55:d3:6d:0c: 29:c4:4a:46:14:14:8b:54:84:79:f5:8b:fc:77:88:1a:2b:17: 5e:c1:1c:71:20:eb:6f:7f:2f:50:21:f3:15:16:83:c1:6c:fb: f0:e4:07:b8:a8:5c:4e:9d:c1:a7:47:ca:4b:9e:31:a1:b9:e4: 2e:80:f0:1a:e3:9c:f6:dc:db:82:5d:06:9a:9d:02:dc:83:a2: 00:49:ab:34:3d:5e:be:d7:48:b6:fd:6f:d7:34:9c:5a:ce:d3: 72:45:41:a2:06:52:30:77:2f:72:f9:5f:65:13:43:49:59:ce: 02:32:80:4e:1f:dc:77:3f:d1:20:e2:43:6d:71:dd:28:b9:d7: 58:08:8a:89:92:0d:8c:3e:6f:f9:73:5a:fd:cf:d1:91:18:ca: a3:82:31:1f:55:cf:b3:60:90:38:4b:cb:c6:e0:47:00:a5:2a: 83:3d:96:97:72:83:4a:b6:86:1d:e9:9c:f2:34:d1:2b:4c:5d: 44:04:94:71:c8:0b:16:2f:1f:c2:a8:43:f6:6f:6a:c8:8e:5b: aa:59:dc:66:52:b7:cc:fa:a3:5c:4d:e3:8e:68:28:06:66:d6: db:68:68:ac:5c:34:8e:5e:5c:4d:7b:37:2f:19:3f:33:e5:d2: d3:12:fa:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gfYXOR/Pa7vV7RTNhOCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWIzNmJmMzlkMmJjN2YwNzhlMDI3OTk5MTg3NjcwOWM4 NWFjZDkwHhcNMjYwMTAyMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQ3ZTcyNmIxZTJjYjZiMDlkYmU3ZDI5ZjRjNzYyYjU5OTNkZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx6y/ugmKkFVK4iVnIr0sK+G9VEy rqUCHCexokD1aLJ9YjyFG84ORkR4dsG5zV53Uy2QLG3Du1LP7G1Pvc+JEpOB5ADz J57j2uE3gQfH60fG9DZwuu+g8yAYLTmKpxmhjFgfk5wmLvtsqWE0kANzDD1uUzGt DCK5OlR/u2+k7p4alZ+n120VEeonmjlNm1u2OJqfzKSqd4mkHhE4NujNCrWA8aha k8LnLrrO3egKJVvsR83n4yZWfOUsFlBuAhz9+ONBKsmhPo2d1maPJ10PYuOH+KqF tDFm+SeXvC/JO/udzKXa8/rvHhGPMPC/IBlyCRdTBZGO6H/zQma137LhlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL5H5yax4strCdvn0p9MditZk97VMB8GA1UdIwQY MBaAFDkbNr850rx/B44CeZkYdnCchazZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wODNlMmYtMGYwNS00MjU4LWJmOTkt MWRkYWQ2ZjM2YWYwLzEvdmtmbkpySGl5MnNKMi1mU24weDJLMW1UM3RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wODNlMmYtMGYwNS00MjU4LWJmOTktMWRkYWQ2ZjM2YWYw LzEvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYlhMA0E AgACMAcDBQAqEnBAMA0GCSqGSIb3DQEBCwUAA4IBAQDMkhLzH453SkeBFCdL2VXT bQwpxEpGFBSLVIR59Yv8d4gaKxdewRxxIOtvfy9QIfMVFoPBbPvw5Ae4qFxOncGn R8pLnjGhueQugPAa45z23NuCXQaanQLcg6IASas0PV6+10i2/W/XNJxaztNyRUGi BlIwdy9y+V9lE0NJWc4CMoBOH9x3P9Eg4kNtcd0ouddYCIqJkg2MPm/5c1r9z9GR GMqjgjEfVc+zYJA4S8vG4EcApSqDPZaXcoNKtoYd6ZzyNNErTF1EBJRxyAsWLx/C qEP2b2rIjluqWdxmUrfM+qNcTeOOaCgGZtbbaGisXDSOXlxNezcvGT8z5dLTEvpL -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:01 2026 by rpki-client