This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa File: Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa (raw, json) Hash identifier: u+02TSm2IbZTqUuUBwPekY51BpwcVFSZdhS945AWzxs= Subject key identifier: 46:F6:FF:31:8A:22:50:71:42:39:A0:3E:45:B1:F0:56:29:2C:A7:04 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019BC6819324B327699921BC01C6755C999E Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa Signing time: Fri 16 Jan 2026 11:12:19 +0000 ROA not before: Fri 16 Jan 2026 11:12:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 85.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:81:93:24:b3:27:69:99:21:bc:01:c6:75:5c:99:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 16 11:12:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46f6ff318a2250714239a03e45b1f056292ca704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:70:aa:ef:7d:d8:59:80:56:06:0d:73:ab: f3:44:61:be:72:ee:4d:4a:fd:11:92:36:a6:8b:0f: b7:95:c8:da:90:47:33:dd:a4:ad:f3:d4:39:13:40: 83:40:c4:bf:80:07:1f:7a:f3:2c:3c:35:b4:79:37: a7:79:ec:b1:b8:24:91:b6:eb:36:b9:40:19:d9:33: 38:f2:0a:9b:42:ff:40:d6:d0:28:8e:24:6e:53:4f: 00:e4:9b:44:38:0c:de:c2:8c:2f:0a:1c:24:ef:02: 0b:e0:78:d7:8b:f8:f5:cb:4b:68:3f:d5:63:43:64: 30:08:ea:46:25:44:ab:33:92:90:fc:14:a3:4c:4b: 96:6b:b1:a1:f6:25:a1:0f:24:b3:d3:a4:62:a7:45: 15:38:2c:38:5d:d3:2b:fb:7f:f8:c6:90:76:84:07: 74:bc:87:a8:ca:79:ad:66:fe:a9:07:76:16:5f:ba: 79:4e:7b:7a:65:05:f3:ae:ea:ba:f5:fa:58:93:0d: c3:6d:17:5a:51:2a:72:f1:aa:77:85:99:b3:a4:b4: 10:1f:45:91:9b:e4:2a:eb:04:8c:ff:87:46:d4:de: fe:26:df:5c:44:6b:e8:91:03:0f:fd:6b:dc:0d:b7: d1:77:07:c7:68:60:c5:96:b3:d8:b3:a9:d3:df:c7: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:FF:31:8A:22:50:71:42:39:A0:3E:45:B1:F0:56:29:2C:A7:04 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.70.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e0:3b:c0:47:ef:f4:de:3d:e3:e0:f9:86:99:58:d9:d5:a5: 1f:b4:a1:ff:97:a3:52:63:0b:91:d7:94:da:d8:ca:1c:3f:5d: da:4c:08:de:d7:a8:f0:27:b0:53:ed:d5:68:80:0f:d0:ac:2d: 49:7e:5e:f1:56:30:e4:4c:7b:10:50:da:36:cc:16:fb:e9:78: 0b:96:1a:2f:cf:35:b0:e2:89:b3:8d:a3:19:a5:13:48:75:c7: 8d:89:71:a9:04:7f:ef:7b:c2:b1:9b:99:35:39:bc:df:5f:36: 64:04:8e:58:6b:81:b2:bc:e4:ce:f9:64:ff:ea:2c:7f:e4:dc: 88:69:87:08:4d:6f:4b:b8:27:05:2f:9d:89:45:2c:63:c8:5d: 17:9c:f6:47:87:ba:26:e1:c0:04:09:0b:a5:80:e0:f9:c9:79: d9:36:d6:72:c6:14:1e:cb:d1:8c:5f:e3:af:29:b7:47:6e:fe: 9c:0c:a4:00:d6:f4:5a:9b:10:91:d5:ba:07:00:e3:96:14:93: dd:bd:c5:8b:9b:96:08:01:45:19:92:a8:bf:5c:47:18:b1:50: 5c:98:e0:00:77:31:a4:e6:e0:68:c5:b1:7a:d1:64:1b:28:8c: eb:29:05:d1:06:d7:da:a3:0b:8a:cf:36:e6:f8:ec:73:30:cb: ae:ad:f6:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGgZMksydpmSG8AcZ1XJmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTE2MTExMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmY2ZmYzMThhMjI1MDcxNDIzOWEwM2U0NWIxZjA1NjI5MmNhNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXtwqu992FmAVgYNc6vzRGG+cu5N Sv0Rkjamiw+3lcjakEcz3aSt89Q5E0CDQMS/gAcfevMsPDW0eTeneeyxuCSRtus2 uUAZ2TM48gqbQv9A1tAojiRuU08A5JtEOAzewowvChwk7wIL4HjXi/j1y0toP9Vj Q2QwCOpGJUSrM5KQ/BSjTEuWa7Gh9iWhDySz06Rip0UVOCw4XdMr+3/4xpB2hAd0 vIeoynmtZv6pB3YWX7p5Tnt6ZQXzruq69fpYkw3DbRdaUSpy8ap3hZmzpLQQH0WR m+Qq6wSM/4dG1N7+Jt9cRGvokQMP/WvcDbfRdwfHaGDFlrPYs6nT38d5RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEb2/zGKIlBxQjmgPkWx8FYpLKcEMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvUnZiX01Zb2lVSEZDT2FBLVJiSHdWaWtzcHdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1GMA0G CSqGSIb3DQEBCwUAA4IBAQBA4DvAR+/03j3j4PmGmVjZ1aUftKH/l6NSYwuR15Ta 2MocP13aTAje16jwJ7BT7dVogA/QrC1Jfl7xVjDkTHsQUNo2zBb76XgLlhovzzWw 4omzjaMZpRNIdceNiXGpBH/ve8Kxm5k1ObzfXzZkBI5Ya4GyvOTO+WT/6ix/5NyI aYcITW9LuCcFL52JRSxjyF0XnPZHh7om4cAECQulgOD5yXnZNtZyxhQey9GMX+Ov KbdHbv6cDKQA1vRamxCR1boHAOOWFJPdvcWLm5YIAUUZkqi/XEcYsVBcmOAAdzGk 5uBoxbF60WQbKIzrKQXRBtfaowuKzzbm+OxzMMuurfaY -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:35 2026 by rpki-client