This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/_Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa File: _Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa (raw, json) Hash identifier: xyogZ8QKw5nxXSVIno+0JDHOn4OpmuVmDGIYgg6rJzo= Subject key identifier: FD:5B:34:43:7D:99:E3:A7:D1:5E:11:BE:93:12:71:11:86:57:C6:D8 Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33 Certificate serial: 019B7FF28A6DD41E1A2E42BB89562313930C Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/_Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa Signing time: Fri 02 Jan 2026 18:22:40 +0000 ROA not before: Fri 02 Jan 2026 18:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35302 IP address blocks: 85.15.230.0/24 maxlen: 24 95.131.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8a:6d:d4:1e:1a:2e:42:bb:89:56:23:13:93:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd5b34437d99e3a7d15e11be931271118657c6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:62:ff:d8:f7:a9:92:ef:c7:88:da:e3:5c: 99:e2:33:ef:a1:ae:d0:68:3d:12:35:67:f8:2f:1f: 39:74:1f:38:19:92:85:25:f5:c6:6c:25:ef:c7:2f: b9:31:ce:d2:e7:7e:73:73:4c:1c:0f:57:f6:b8:2e: ae:2e:af:32:62:dd:6d:54:b5:d0:e4:e4:4e:ee:b1: 2a:fb:cb:45:f6:bb:e4:cc:32:5c:66:59:d9:30:cd: aa:29:36:04:01:c3:0d:ef:cc:38:a6:41:18:82:16: a5:d2:dd:8f:2c:52:ae:80:a5:cc:d9:61:1a:6e:92: b6:d5:c1:4a:5d:3d:f6:44:b1:22:03:38:b7:c5:cd: 5f:ff:e5:cc:33:cb:09:f1:40:27:db:d7:a2:53:f1: 31:05:58:d1:05:bb:e2:68:e9:aa:ac:16:8a:28:de: 97:7a:db:53:5e:93:ff:ab:9a:83:69:27:1d:96:86: e5:0c:9c:51:2d:df:b5:04:22:d9:2e:a4:be:50:ce: 85:a8:fc:f0:94:c5:68:41:f5:c0:da:e1:1a:78:96: de:76:5b:db:4e:2b:01:97:a6:31:e9:32:39:35:31: 74:2b:51:d0:32:16:a1:a2:20:d1:fa:6e:f1:8c:35: 7b:23:7c:cf:9a:a4:47:76:45:d2:7a:cc:e4:76:f6: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5B:34:43:7D:99:E3:A7:D1:5E:11:BE:93:12:71:11:86:57:C6:D8 X509v3 Authority Key Identifier: keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/_Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.15.230.0/24 95.131.118.0/23 Signature Algorithm: sha256WithRSAEncryption 77:92:cb:fc:7d:c3:15:0c:7a:a6:5e:76:f8:3e:b8:eb:4c:fe: 0b:02:93:24:4c:e2:80:0f:dd:47:b9:70:d2:c2:82:6a:4d:0c: e1:74:b6:b1:74:ba:98:22:ea:a5:0b:00:87:88:05:8b:80:ac: 3f:1a:9e:3f:23:49:ac:7d:f3:9b:f6:9c:83:42:9c:d8:a2:74: c8:f9:41:e8:cf:a7:a0:e9:e0:0f:9c:69:17:37:ca:ab:51:a7: c8:b4:7e:32:b2:c9:00:d6:d0:db:7b:b3:e7:08:fb:b4:9a:d2: f9:ee:1f:da:ab:62:e3:49:1b:97:03:c7:cd:ec:66:8c:07:9d: 39:f2:6b:ee:93:ab:77:f8:ad:a0:07:38:28:4c:c3:b4:18:55: ec:19:8b:f8:61:0b:9c:b2:1c:97:b2:9d:3c:a4:6e:11:86:b6: b9:f1:c5:88:48:82:6c:35:2c:e4:95:85:88:8a:83:56:87:3d: 5c:8f:16:61:32:00:0c:52:b1:45:ee:17:90:93:93:77:f3:ea: 13:4b:3c:f1:01:18:ad:73:d6:4b:7f:e2:67:c6:aa:2c:57:3a: 03:23:08:f8:67:33:8d:b7:66:1b:77:a2:70:dd:0a:5d:f1:9f: 1b:d7:e9:ce:ee:47:3b:3f:c8:e0:c0:1b:23:c1:76:16:11:19: 6d:52:68:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8opt1B4aLkK7iVYjE5MMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTc1MjI1ZjM4NmNlOTgwMTE5ZjY5ODg0ZjliZTdjNmEy YjNiMzMwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDViMzQ0MzdkOTllM2E3ZDE1ZTExYmU5MzEyNzExMTg2NTdjNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodli/9j3qZLvx4ja41yZ4jPvoa7Q aD0SNWf4Lx85dB84GZKFJfXGbCXvxy+5Mc7S535zc0wcD1f2uC6uLq8yYt1tVLXQ 5ORO7rEq+8tF9rvkzDJcZlnZMM2qKTYEAcMN78w4pkEYghal0t2PLFKugKXM2WEa bpK21cFKXT32RLEiAzi3xc1f/+XMM8sJ8UAn29eiU/ExBVjRBbviaOmqrBaKKN6X ettTXpP/q5qDaScdloblDJxRLd+1BCLZLqS+UM6FqPzwlMVoQfXA2uEaeJbedlvb TisBl6Yx6TI5NTF0K1HQMhahoiDR+m7xjDV7I3zPmqRHdkXSeszkdvbfwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP1bNEN9meOn0V4RvpMScRGGV8bYMB8GA1UdIwQY MBaAFI8XUiXzhs6YARn2mIT5vnxqKzszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjct NjFiNzcyZDc1MWVjLzEvX1ZzMFEzMlo0NmZSWGhHLWt4SnhFWVpYeHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjctNjFiNzcyZDc1MWVj LzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVQ/mAwQB X4N2MA0GCSqGSIb3DQEBCwUAA4IBAQB3ksv8fcMVDHqmXnb4PrjrTP4LApMkTOKA D91HuXDSwoJqTQzhdLaxdLqYIuqlCwCHiAWLgKw/Gp4/I0msffOb9pyDQpzYonTI +UHoz6eg6eAPnGkXN8qrUafItH4ysskA1tDbe7PnCPu0mtL57h/aq2LjSRuXA8fN 7GaMB5058mvuk6t3+K2gBzgoTMO0GFXsGYv4YQucshyXsp08pG4Rhra58cWISIJs NSzklYWIioNWhz1cjxZhMgAMUrFF7heQk5N38+oTSzzxARitc9ZLf+JnxqosVzoD Iwj4ZzONt2Ybd6Jw3Qpd8Z8b1+nO7kc7P8jgwBsjwXYWERltUmhH -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:35 2026 by rpki-client