This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/vmbqeh6-vK4ev0adywfz4g1Rvoo.roa File: vmbqeh6-vK4ev0adywfz4g1Rvoo.roa (raw, json) Hash identifier: xqWqv6l8nmG+Jik4AMPhv/K9W2arr299/CeqLO5XHe0= Subject key identifier: BE:66:EA:7A:1E:BE:BC:AE:1E:BF:46:9D:CB:07:F3:E2:0D:51:BE:8A Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Certificate serial: 019B7E38787A924F8B60E5BD841316C45EF3 Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/vmbqeh6-vK4ev0adywfz4g1Rvoo.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197946 IP address blocks: 91.208.163.0/24 maxlen: 24 185.105.237.0/24 maxlen: 24 185.231.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:78:7a:92:4f:8b:60:e5:bd:84:13:16:c4:5e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be66ea7a1ebebcae1ebf469dcb07f3e20d51be8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:78:11:02:e5:47:65:f1:d1:0a:18:0e:66: 51:6b:f0:9a:2d:18:20:83:07:7e:23:c4:8a:88:bb: 0c:21:15:dc:60:b7:68:19:ed:9f:29:9f:66:c5:2c: 8e:69:d6:c0:bf:ee:ff:32:3d:e2:98:6f:80:64:4b: 7c:2e:93:66:b7:e2:45:33:69:58:c6:04:77:5e:06: df:15:f1:ef:dd:d1:e4:cc:44:c9:e8:3a:31:82:4b: 4a:2b:99:6d:d5:70:5d:82:6d:dd:06:d4:fd:4c:10: 3d:28:16:0f:93:76:9c:6b:09:bd:c5:0c:b2:fc:7c: e4:63:8c:7e:2f:f4:8e:f1:20:98:6f:53:3c:33:52: 16:21:57:2b:b9:af:83:78:77:7e:4c:5b:5f:c3:2c: 28:d6:cf:24:cb:81:33:19:8e:95:88:a2:0c:62:15: c9:b2:df:b8:e6:96:63:bd:b2:cd:70:7b:8a:41:86: 7b:2b:9b:50:f2:63:d9:9c:46:f4:0e:56:5b:1d:be: db:c3:96:0d:af:d9:97:ad:74:14:0e:53:de:e5:34: 28:c8:29:eb:95:f7:5c:22:ac:63:2d:fd:c6:47:d2: 4c:19:0e:dd:b2:63:0b:c3:b4:52:63:23:51:4e:13: ec:69:ed:27:36:52:dc:db:86:6b:61:39:3a:18:45: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:EA:7A:1E:BE:BC:AE:1E:BF:46:9D:CB:07:F3:E2:0D:51:BE:8A X509v3 Authority Key Identifier: keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/vmbqeh6-vK4ev0adywfz4g1Rvoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.163.0/24 185.105.237.0/24 185.231.114.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:8f:20:02:e0:f2:8e:3f:f1:7a:14:13:4d:c9:f6:63:f3:34: 51:8e:e1:8b:0a:c6:ef:8a:30:2c:a2:72:61:88:b3:df:19:52: fa:4e:9a:85:95:b7:76:fb:06:be:85:7a:ad:59:5c:72:2d:b1: 3e:6c:9a:ae:29:ed:3f:78:43:1c:7d:cf:4b:54:d2:17:a1:2d: 6b:54:83:c3:27:0b:45:4f:39:44:96:ea:c2:59:69:4f:fe:05: 47:52:a5:56:de:75:68:e0:b9:fe:1b:30:81:f4:91:dd:15:24: 56:38:05:f7:77:a7:49:f5:66:af:ed:bc:af:2b:b5:b5:a4:05: 73:1c:44:8b:79:45:f1:83:f1:10:9f:80:54:97:55:24:d5:9d: 44:d2:2b:f2:1e:7a:70:33:a6:da:48:9d:d0:c7:03:77:cf:89: 4b:92:e1:0b:4c:85:f3:0b:52:59:4f:9a:26:7a:59:31:6c:73: 5a:31:88:8b:3f:2e:c3:1d:da:96:7f:29:9f:25:3e:61:12:c7: ed:a0:21:9b:3a:22:a9:a5:40:16:4b:dc:74:72:a9:bd:11:4a: 4f:95:79:61:63:b0:1b:8d:bb:39:f3:36:f7:7d:b2:8e:44:fb: 71:f0:7d:74:c4:10:09:76:47:db:d3:97:cf:01:19:b8:34:2a: 17:74:ce:01 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OHh6kk+LYOW9hBMWxF7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjM2YzNiZWY1NWQxMmE2NDUzNmI3MDEzMGE3NGY1M2Y0 NGQ2ZDAwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTY2ZWE3YTFlYmViY2FlMWViZjQ2OWRjYjA3ZjNlMjBkNTFiZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1N4EQLlR2Xx0QoYDmZRa/CaLRgg gwd+I8SKiLsMIRXcYLdoGe2fKZ9mxSyOadbAv+7/Mj3imG+AZEt8LpNmt+JFM2lY xgR3XgbfFfHv3dHkzETJ6DoxgktKK5lt1XBdgm3dBtT9TBA9KBYPk3acawm9xQyy /HzkY4x+L/SO8SCYb1M8M1IWIVcrua+DeHd+TFtfwywo1s8ky4EzGY6ViKIMYhXJ st+45pZjvbLNcHuKQYZ7K5tQ8mPZnEb0DlZbHb7bw5YNr9mXrXQUDlPe5TQoyCnr lfdcIqxjLf3GR9JMGQ7dsmMLw7RSYyNRThPsae0nNlLc24ZrYTk6GEU4mwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL5m6noevryuHr9GncsH8+INUb6KMB8GA1UdIwQY MBaAFGNjbDvvVdEqZFNrcBMKdPU/RNbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2Qt NzA1NWMyZTA0NzZmLzEvdm1icWVoNi12SzRldjBhZHl3Zno0ZzFSdm9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2QtNzA1NWMyZTA0NzZm LzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9CjAwQA uWntAwQAuedyMA0GCSqGSIb3DQEBCwUAA4IBAQBbjyAC4PKOP/F6FBNNyfZj8zRR juGLCsbvijAsonJhiLPfGVL6TpqFlbd2+wa+hXqtWVxyLbE+bJquKe0/eEMcfc9L VNIXoS1rVIPDJwtFTzlElurCWWlP/gVHUqVW3nVo4Ln+GzCB9JHdFSRWOAX3d6dJ 9Wav7byvK7W1pAVzHESLeUXxg/EQn4BUl1Uk1Z1E0ivyHnpwM6baSJ3QxwN3z4lL kuELTIXzC1JZT5omelkxbHNaMYiLPy7DHdqWfymfJT5hEsftoCGbOiKppUAWS9x0 cqm9EUpPlXlhY7Abjbs58zb3fbKORPtx8H10xBAJdkfb05fPARm4NCoXdM4B -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:37 2026 by rpki-client