This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/V8PCFPrTValkKCiDtwNotmUAoXc.roa File: V8PCFPrTValkKCiDtwNotmUAoXc.roa (raw, json) Hash identifier: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg= Subject key identifier: 57:C3:C2:14:FA:D3:55:A9:64:28:28:83:B7:03:68:B6:65:00:A1:77 Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Certificate serial: 019B79ED256A2D88F944164F0BFB41833D80 Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/V8PCFPrTValkKCiDtwNotmUAoXc.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48417 IP address blocks: 94.247.32.0/21 maxlen: 24 185.21.162.0/23 maxlen: 23 2a02:db8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:25:6a:2d:88:f9:44:16:4f:0b:fb:41:83:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57c3c214fad355a964282883b70368b66500a177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:10:dd:2a:4a:39:e0:38:ed:e6:fa:cc:90: c6:e9:16:ab:e9:a7:1c:49:bb:0d:00:46:eb:80:ec: cf:f5:54:13:78:da:34:3b:4e:0d:de:65:d7:bf:5b: 69:dc:8d:0a:0e:22:10:49:c7:fa:e9:f6:2a:7a:a1: 00:0d:7d:7e:0c:f5:4e:c9:2d:fe:3e:5f:44:05:e6: 72:4e:20:64:23:6c:74:25:af:dd:b5:0b:ff:64:00: 40:6f:52:e3:d1:91:10:fe:7e:77:27:f3:ca:59:5d: 0f:c9:43:8b:f8:37:23:ff:de:a7:1b:c8:51:82:ee: 97:07:00:e6:ff:f2:74:d6:23:72:6d:23:67:26:95: ce:06:82:66:a1:3d:2d:55:b1:30:3c:0e:78:26:24: ad:03:35:3c:0c:2f:30:43:a8:6f:9c:79:5c:bd:df: e4:ff:e6:36:7e:cc:22:f1:43:11:bb:9a:a9:7c:d6: 2a:0f:7b:67:dc:5c:ef:96:1f:41:bb:b0:e9:1b:b6: 25:0f:0e:73:ee:92:8c:9a:72:1a:4d:4b:f7:47:a5: c3:e0:ea:46:eb:f9:17:c1:b7:6d:48:d2:db:b9:0d: 1a:4f:2a:10:e9:e2:4b:43:17:8e:c9:50:e4:68:9c: b8:27:6f:a7:63:89:2a:54:49:a4:24:91:de:7a:64: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C3:C2:14:FA:D3:55:A9:64:28:28:83:B7:03:68:B6:65:00:A1:77 X509v3 Authority Key Identifier: keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/V8PCFPrTValkKCiDtwNotmUAoXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.32.0/21 185.21.162.0/23 IPv6: 2a02:db8::/32 Signature Algorithm: sha256WithRSAEncryption ae:4d:fe:7f:8a:74:e6:df:c3:15:44:e2:ec:39:a4:cd:7b:61: 0a:3c:3c:95:93:e7:51:4e:87:5c:d0:9e:4f:70:94:4c:7a:09: ed:70:ac:1a:73:ac:0a:69:34:0b:26:cc:35:a3:42:30:b2:32: 32:3a:b7:e8:65:f6:c7:5c:2f:ea:69:da:a8:37:23:2a:33:58: 13:97:a3:a8:dd:0e:a5:48:6d:04:e3:62:28:69:e2:df:e4:83: 33:89:ad:8a:d6:41:8f:9f:25:5d:3a:a7:41:0e:42:28:38:d7: 98:44:2c:30:4b:c4:d0:ea:be:ca:b1:fd:29:44:b1:b1:a9:be: 6b:66:03:de:c7:87:ec:2b:ee:1f:fb:2d:fa:28:fb:ad:d7:3e: 3a:4c:91:44:ba:08:f0:15:e8:0d:8e:b8:f5:56:e4:53:85:7c: 6a:71:53:7c:8d:a0:22:61:0c:55:33:c9:a0:47:61:ba:01:1b: 57:b9:f3:2a:34:6b:df:bf:54:a7:77:aa:cb:a8:8c:78:5e:45: 3a:73:64:ce:ba:5e:6b:50:71:7e:cb:f5:23:5c:d4:5d:86:ca: df:17:19:f7:9a:3c:03:c6:8e:1d:bd:71:a8:87:e9:d1:77:91: cc:4d:2b:02:5b:7a:76:a6:56:61:e7:cf:df:30:58:cc:3f:35: fb:4a:8d:e5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57SVqLYj5RBZPC/tBgz2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi ZGU3MGUwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2MzYzIxNGZhZDM1NWE5NjQyODI4ODNiNzAzNjhiNjY1MDBhMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc8Q3SpKOeA47eb6zJDG6Rar6acc SbsNAEbrgOzP9VQTeNo0O04N3mXXv1tp3I0KDiIQScf66fYqeqEADX1+DPVOyS3+ Pl9EBeZyTiBkI2x0Ja/dtQv/ZABAb1Lj0ZEQ/n53J/PKWV0PyUOL+Dcj/96nG8hR gu6XBwDm//J01iNybSNnJpXOBoJmoT0tVbEwPA54JiStAzU8DC8wQ6hvnHlcvd/k /+Y2fswi8UMRu5qpfNYqD3tn3Fzvlh9Bu7DpG7YlDw5z7pKMmnIaTUv3R6XD4OpG 6/kXwbdtSNLbuQ0aTyoQ6eJLQxeOyVDkaJy4J2+nY4kqVEmkJJHeemToGQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFfDwhT601WpZCgog7cDaLZlAKF3MB8GA1UdIwQY MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt MTM1YzQwMjE3Yjg2LzEvVjhQQ0ZQclRWYWxrS0NpRHR3Tm90bVVBb1hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2 LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXvcgAwQB uRWiMA0EAgACMAcDBQAqAg24MA0GCSqGSIb3DQEBCwUAA4IBAQCuTf5/inTm38MV ROLsOaTNe2EKPDyVk+dRTodc0J5PcJRMegntcKwac6wKaTQLJsw1o0IwsjIyOrfo ZfbHXC/qadqoNyMqM1gTl6Oo3Q6lSG0E42IoaeLf5IMzia2K1kGPnyVdOqdBDkIo ONeYRCwwS8TQ6r7Ksf0pRLGxqb5rZgPex4fsK+4f+y36KPut1z46TJFEugjwFegN jrj1VuRThXxqcVN8jaAiYQxVM8mgR2G6ARtXufMqNGvfv1Snd6rLqIx4XkU6c2TO ul5rUHF+y/UjXNRdhsrfFxn3mjwDxo4dvXGoh+nRd5HMTSsCW3p2plZh58/fMFjM PzX7So3l -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:30 2026 by rpki-client