This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa File: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (raw, json) Hash identifier: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik= Subject key identifier: 60:51:5E:BD:F7:1B:D0:C2:7F:C8:F1:79:80:55:AE:89:83:4F:6A:A8 Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac Certificate serial: 019B7BA510F44968EBA0F492B7CB72C44B96 Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa Signing time: Thu 01 Jan 2026 22:19:33 +0000 ROA not before: Thu 01 Jan 2026 22:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33846 IP address blocks: 164.133.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:10:f4:49:68:eb:a0:f4:92:b7:cb:72:c4:4b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60515ebdf71bd0c27fc8f1798055ae89834f6aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:fc:60:8a:3a:4c:df:3c:e3:9e:43:bc:78: 41:61:9e:91:fc:86:e4:63:1a:d6:1c:32:f4:24:1c: a4:34:7a:db:58:4e:a8:08:db:84:d6:5b:a4:08:83: 79:36:24:bf:e4:bc:06:d4:75:67:d9:ca:65:e9:c3: 9d:d2:8d:67:fe:3b:aa:9d:f1:68:9c:32:15:f3:97: b3:b6:49:78:7e:63:9b:b5:18:22:da:59:50:af:3f: 99:ac:47:e7:fe:2b:4d:9f:42:7c:36:26:5f:4d:a0: 53:2e:47:6a:3b:be:b3:9b:4a:18:eb:c9:02:7d:cd: 7a:cd:40:cb:57:ea:24:0b:45:dc:5e:30:24:0e:64: f7:20:af:f3:c4:81:68:6c:1e:59:8e:7c:78:06:40: df:85:49:19:25:46:3c:b3:5c:99:1a:75:5e:73:50: f0:a5:dd:7b:4c:4f:92:b0:52:b3:a9:c4:84:5b:63: ae:7a:5a:eb:d7:d9:bf:0f:df:2e:97:18:e6:19:b8: c1:cc:21:c7:ca:c1:90:37:82:fb:ee:66:41:3f:54: 4a:8d:2c:8a:18:22:20:8c:f0:b5:8f:2c:b2:8a:d2: f3:a4:4d:88:fa:bb:41:c4:bb:41:61:79:2e:36:28: a0:e9:23:f8:58:5b:ef:a0:92:3a:b5:16:43:e8:af: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:51:5E:BD:F7:1B:D0:C2:7F:C8:F1:79:80:55:AE:89:83:4F:6A:A8 X509v3 Authority Key Identifier: keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.133.230.0/24 Signature Algorithm: sha256WithRSAEncryption 67:34:c4:da:d5:b3:5d:22:67:3a:42:d7:8d:27:1e:51:92:ee: 19:b4:f1:30:2f:f2:c2:88:80:78:d1:4d:5f:e6:ab:50:dc:d8: c2:c4:37:c5:95:f9:bf:fc:e3:14:36:4f:d9:66:53:8c:29:f6: 42:07:9c:6b:30:f8:88:b6:ff:e4:21:73:45:46:ef:af:42:5f: 23:be:36:8a:7c:27:2c:ba:76:b5:28:44:44:75:f4:c6:7a:ca: 13:d3:ab:73:4e:57:72:a6:ba:f4:1f:58:40:e8:9e:b9:bd:22: 83:df:3e:6c:30:2a:16:01:f0:e7:a6:fe:33:8d:6e:75:4d:ad: 4e:58:46:af:e2:63:d7:91:68:71:74:27:c4:c4:b7:f9:f6:e9: e6:a8:30:d5:32:d0:68:82:ce:fb:b4:7d:6a:64:cd:eb:33:6e: 2f:2e:f9:31:16:1a:87:b7:7f:46:0a:4f:26:99:88:a6:15:08: 8a:a7:06:d3:bd:96:29:07:52:be:bc:09:40:1c:72:86:f8:7c: 44:3c:84:dc:08:16:04:7c:a3:86:d6:3f:7a:9e:b0:ed:d3:b1: 09:ff:5c:aa:26:0e:a6:92:43:b6:e5:92:15:63:67:0d:10:c4: a4:26:15:b2:09:83:d6:c6:16:da:a8:f7:e5:ae:93:10:12:d9: 23:5c:f1:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRD0SWjroPSSt8tyxEuWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlY2VjNTMxZTVjMzc3NTZiODI4NjYzZjljYzIwYWQ2MjE3 NzEzYWMwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDUxNWViZGY3MWJkMGMyN2ZjOGYxNzk4MDU1YWU4OTgzNGY2YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pr8YIo6TN88455DvHhBYZ6R/Ibk YxrWHDL0JBykNHrbWE6oCNuE1lukCIN5NiS/5LwG1HVn2cpl6cOd0o1n/juqnfFo nDIV85eztkl4fmObtRgi2llQrz+ZrEfn/itNn0J8NiZfTaBTLkdqO76zm0oY68kC fc16zUDLV+okC0XcXjAkDmT3IK/zxIFobB5Zjnx4BkDfhUkZJUY8s1yZGnVec1Dw pd17TE+SsFKzqcSEW2Ouelrr19m/D98ulxjmGbjBzCHHysGQN4L77mZBP1RKjSyK GCIgjPC1jyyyitLzpE2I+rtBxLtBYXkuNiig6SP4WFvvoJI6tRZD6K8OPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBRXr33G9DCf8jxeYBVromDT2qoMB8GA1UdIwQY MBaAFL7OxTHlw3dWuChmP5zCCtYhdxOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjkt M2RmOWUyMWY0YmNjLzEvWUZGZXZmY2IwTUpfeVBGNWdGV3VpWU5QYXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjktM2RmOWUyMWY0YmNj LzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIXmMA0G CSqGSIb3DQEBCwUAA4IBAQBnNMTa1bNdImc6QteNJx5Rku4ZtPEwL/LCiIB40U1f 5qtQ3NjCxDfFlfm//OMUNk/ZZlOMKfZCB5xrMPiItv/kIXNFRu+vQl8jvjaKfCcs una1KEREdfTGesoT06tzTldyprr0H1hA6J65vSKD3z5sMCoWAfDnpv4zjW51Ta1O WEav4mPXkWhxdCfExLf59unmqDDVMtBogs77tH1qZM3rM24vLvkxFhqHt39GCk8m mYimFQiKpwbTvZYpB1K+vAlAHHKG+HxEPITcCBYEfKOG1j96nrDt07EJ/1yqJg6m kkO25ZIVY2cNEMSkJhWyCYPWxhbaqPflrpMQEtkjXPHl -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:40 2026 by rpki-client