This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa File: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (raw, json) Hash identifier: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4= Subject key identifier: 21:5F:EF:BB:B3:97:EC:67:86:6B:C9:52:7C:98:3C:FE:AF:31:0A:FA Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A14A0E0DDF55B65DCC79B6533FA3 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211484 IP address blocks: 194.143.206.0/24 maxlen: 24 195.114.201.0/24 maxlen: 24 213.220.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:4a:0e:0d:df:55:b6:5d:cc:79:b6:53:3f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=215fefbbb397ec67866bc9527c983cfeaf310afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:6c:a2:35:f5:8b:16:87:f2:c9:85:28:2e: ca:0e:5e:c8:dd:c2:40:d5:58:dd:da:43:4a:fa:14: ec:a0:e0:a2:16:bf:86:14:fd:f2:bc:14:1d:1d:bf: 72:42:c6:cf:9d:57:89:70:e5:4c:50:48:d7:df:8d: e7:81:30:bd:83:f2:50:13:79:15:71:70:89:da:32: 6c:d6:7b:58:43:24:67:c5:d8:15:51:57:df:90:be: 48:29:d8:b6:34:d2:41:48:0e:c3:d5:91:3f:57:5c: f9:35:c8:30:eb:08:a7:f1:b3:db:d0:91:1e:b0:2c: 00:af:b9:58:79:6e:68:f6:69:1d:81:50:6c:ce:be: 90:86:c0:c3:ee:3a:14:57:48:86:74:77:ff:97:e8: ef:7c:a4:27:50:71:d0:4c:79:ea:42:8e:80:f2:6c: 94:fa:32:1b:5a:89:33:c0:b4:41:58:5d:89:40:7a: 7f:c0:db:28:62:05:e0:cd:35:07:f7:a1:a5:23:0a: f5:ac:5f:38:f5:af:f8:ac:2c:bb:89:52:d9:7a:5b: 86:12:b8:90:67:72:0e:ef:d6:cd:d2:ed:07:91:e2: d2:d5:4e:f7:21:e9:86:ba:57:fd:97:8b:62:e8:0c: 92:d2:d6:1b:d1:fb:7b:c8:5a:35:1a:7d:72:40:97: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5F:EF:BB:B3:97:EC:67:86:6B:C9:52:7C:98:3C:FE:AF:31:0A:FA X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.206.0/24 195.114.201.0/24 213.220.3.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:dc:a5:4b:39:68:c7:37:6e:d5:c7:31:59:41:ea:01:53:3c: bc:31:02:b6:a3:5c:14:1b:a5:dd:b5:21:7e:8f:42:74:73:57: 9e:53:cc:db:ac:07:c3:67:fd:70:48:c6:ef:ab:cd:e8:c0:43: 8e:f0:c3:b7:8d:a5:d3:53:31:27:44:e2:b9:ea:1a:5e:28:4a: 19:ed:c9:ca:1c:16:7e:0f:f0:8d:27:cc:69:c5:93:6c:c3:40: 8f:b2:05:7c:82:fa:4a:c9:99:b3:05:29:95:b4:69:ac:89:ba: b7:b0:de:78:b0:bd:78:72:9c:61:24:a3:63:41:8a:91:87:a7: 85:e4:13:30:8c:3e:2a:1a:5b:7a:a5:da:3f:7e:84:0f:7b:0e: b3:b7:03:63:b8:cf:82:1f:33:38:1c:f2:89:52:23:73:1b:ba: 75:47:76:e0:61:c7:2b:0b:05:96:1e:57:1f:42:21:4f:5f:f5: 64:3a:9e:91:06:95:f3:bd:3b:59:0c:77:8c:fb:da:8c:d5:0d: ac:59:66:b9:be:6a:57:f5:09:8f:95:94:1e:81:75:58:ce:36: b2:5c:6a:06:05:0c:a8:42:62:5f:ad:18:df:07:c6:8c:59:db: da:77:77:10:27:bb:bc:32:9a:7b:a4:09:ad:bc:99:31:a3:06: b2:99:d1:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OKFKDg3fVbZdzHm2Uz+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTVmZWZiYmIzOTdlYzY3ODY2YmM5NTI3Yzk4M2NmZWFmMzEwYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3tsojX1ixaH8smFKC7KDl7I3cJA 1Vjd2kNK+hTsoOCiFr+GFP3yvBQdHb9yQsbPnVeJcOVMUEjX343ngTC9g/JQE3kV cXCJ2jJs1ntYQyRnxdgVUVffkL5IKdi2NNJBSA7D1ZE/V1z5Ncgw6win8bPb0JEe sCwAr7lYeW5o9mkdgVBszr6QhsDD7joUV0iGdHf/l+jvfKQnUHHQTHnqQo6A8myU +jIbWokzwLRBWF2JQHp/wNsoYgXgzTUH96GlIwr1rF849a/4rCy7iVLZeluGEriQ Z3IO79bN0u0HkeLS1U73IemGulf9l4ti6AyS0tYb0ft7yFo1Gn1yQJeqbwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCFf77uzl+xnhmvJUnyYPP6vMQr6MB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvSVZfdnU3T1g3R2VHYThsU2ZKZzhfcTh4Q3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwo/OAwQA w3LJAwQA1dwDMA0GCSqGSIb3DQEBCwUAA4IBAQAf3KVLOWjHN27VxzFZQeoBUzy8 MQK2o1wUG6XdtSF+j0J0c1eeU8zbrAfDZ/1wSMbvq83owEOO8MO3jaXTUzEnROK5 6hpeKEoZ7cnKHBZ+D/CNJ8xpxZNsw0CPsgV8gvpKyZmzBSmVtGmsibq3sN54sL14 cpxhJKNjQYqRh6eF5BMwjD4qGlt6pdo/foQPew6ztwNjuM+CHzM4HPKJUiNzG7p1 R3bgYccrCwWWHlcfQiFPX/VkOp6RBpXzvTtZDHeM+9qM1Q2sWWa5vmpX9QmPlZQe gXVYzjayXGoGBQyoQmJfrRjfB8aMWdvad3cQJ7u8Mpp7pAmtvJkxowaymdGP -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:54 2026 by rpki-client