This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa File: rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa (raw, json) Hash identifier: kQhxnU+CRwoQ25mo4Up88vGMY8Gm4YSKOXHtcexGtww= Subject key identifier: AE:FA:EF:3B:B9:21:BC:6C:F8:AC:9D:E7:65:AC:40:FD:4D:1A:21:B6 Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e Certificate serial: 019B7C124F702DF76FD17455021250A48899 Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa Signing time: Fri 02 Jan 2026 00:18:53 +0000 ROA not before: Fri 02 Jan 2026 00:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51426 IP address blocks: 46.175.112.0/21 maxlen: 21 85.209.38.0/23 maxlen: 23 91.217.18.0/23 maxlen: 23 185.225.108.0/22 maxlen: 22 2a0d:bc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4f:70:2d:f7:6f:d1:74:55:02:12:50:a4:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e Validity Not Before: Jan 2 00:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aefaef3bb921bc6cf8ac9de765ac40fd4d1a21b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:97:00:30:bb:38:6a:e8:5c:24:63:58:2b: b8:72:5b:b7:17:0c:80:23:4f:74:eb:e4:31:ef:a4: 7f:90:a3:4f:34:6b:25:ac:7d:b4:2c:a1:4d:1d:ea: 26:34:74:d7:74:d7:df:98:d9:0d:8e:2c:ce:01:b0: 07:21:69:7d:4c:2a:e3:f7:0b:d8:1d:79:59:c2:d2: 8c:00:9b:a8:67:7b:74:89:c1:97:e1:1c:37:99:a7: f2:42:05:27:5b:56:71:9c:be:4a:66:28:d4:14:b4: 12:d4:ee:58:50:ea:89:30:28:63:ab:e9:df:14:7c: e7:4d:ce:a9:8f:34:76:fc:4f:fc:31:c4:7b:c9:d0: 44:39:b7:e7:25:5e:bc:1a:4e:e4:0f:ca:cb:69:5d: b9:3b:73:e0:33:46:d1:16:17:6d:b4:0b:e7:57:29: 64:21:eb:49:e9:5f:2d:d3:dd:99:81:6c:75:75:65: 45:9a:c3:6b:83:e0:7b:6c:5e:0f:2c:f5:c8:fe:c7: a8:7a:40:63:a7:86:39:ab:4b:4c:77:44:d0:06:91: 37:70:a1:c0:d5:67:77:d8:e0:66:b2:2d:7a:b1:98: 7e:ee:5b:b1:79:51:1e:43:fb:9a:e8:07:39:ce:7d: 8b:a7:af:0a:21:52:c0:c3:18:bb:f1:29:6e:62:ee: d1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FA:EF:3B:B9:21:BC:6C:F8:AC:9D:E7:65:AC:40:FD:4D:1A:21:B6 X509v3 Authority Key Identifier: keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.112.0/21 85.209.38.0/23 91.217.18.0/23 185.225.108.0/22 IPv6: 2a0d:bc00::/29 Signature Algorithm: sha256WithRSAEncryption 7b:19:58:92:0f:52:02:2a:fa:8a:e5:b3:69:14:cd:f9:55:ce: 6e:9e:36:57:b8:6e:2e:44:85:cf:39:53:d3:ba:dc:80:7d:33: a3:07:af:36:4b:88:68:92:8f:55:9a:3b:b7:c4:c4:46:76:77: 8d:b0:75:3f:d3:3f:98:93:d1:bf:17:8e:aa:6f:25:2d:65:8e: 5c:4b:38:83:35:54:2a:b3:92:4d:6e:f7:a0:16:be:84:0e:4f: 22:d0:6d:4f:20:d0:87:c0:0a:43:ea:8e:48:32:8e:cf:4f:05: d1:74:bc:bd:9e:2f:85:57:52:53:9d:48:95:a8:c4:ec:c0:55: 94:c4:02:a9:82:28:fd:51:40:2f:b3:1c:3b:d3:8a:65:d1:4c: aa:4e:2d:3b:7c:d2:fd:2c:a6:b8:89:23:c0:5c:cd:a8:b4:0d: a4:ba:ef:8e:89:f1:92:78:19:4f:a9:92:8a:a1:7b:ed:61:08: 58:0e:91:74:72:dd:b5:c5:89:98:e5:44:f9:d1:76:b7:2f:f5: 8e:b1:ae:55:ad:b3:b4:cd:4c:d0:4e:23:96:7c:c4:f8:f0:44: a0:7c:bf:c3:e1:5c:6e:3e:e5:87:ad:14:0e:f9:b4:b9:86:f4: c5:c4:25:8f:50:f7:5a:06:de:ad:b1:ec:1b:3c:2d:d3:d2:da: b5:0e:56:9a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8Ek9wLfdv0XRVAhJQpIiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmM4NTQwMTExNDBhMTA5NDdkYTdiNTNiYmIzNTBmM2M1 NGIzM2UwHhcNMjYwMTAyMDAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWZhZWYzYmI5MjFiYzZjZjhhYzlkZTc2NWFjNDBmZDRkMWEyMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEWXADC7OGroXCRjWCu4clu3FwyA I0906+Qx76R/kKNPNGslrH20LKFNHeomNHTXdNffmNkNjizOAbAHIWl9TCrj9wvY HXlZwtKMAJuoZ3t0icGX4Rw3mafyQgUnW1ZxnL5KZijUFLQS1O5YUOqJMChjq+nf FHznTc6pjzR2/E/8McR7ydBEObfnJV68Gk7kD8rLaV25O3PgM0bRFhdttAvnVylk IetJ6V8t092ZgWx1dWVFmsNrg+B7bF4PLPXI/seoekBjp4Y5q0tMd0TQBpE3cKHA 1Wd32OBmsi16sZh+7luxeVEeQ/ua6Ac5zn2Lp68KIVLAwxi78SluYu7RnwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFK767zu5Ibxs+Kyd52WsQP1NGiG2MB8GA1UdIwQY MBaAFDwshUARFAoQlH2ntTu7NQ88VLM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYt YjViYmQwYjVlMGFhLzEvcnZydk83a2h2R3o0ckozblpheEFfVTBhSWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYtYjViYmQwYjVlMGFh LzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLq9wAwQB VdEmAwQBW9kSAwQCueFsMA0EAgACMAcDBQMqDbwAMA0GCSqGSIb3DQEBCwUAA4IB AQB7GViSD1ICKvqK5bNpFM35Vc5unjZXuG4uRIXPOVPTutyAfTOjB682S4hoko9V mju3xMRGdneNsHU/0z+Yk9G/F46qbyUtZY5cSziDNVQqs5JNbvegFr6EDk8i0G1P INCHwApD6o5IMo7PTwXRdLy9ni+FV1JTnUiVqMTswFWUxAKpgij9UUAvsxw704pl 0UyqTi07fNL9LKa4iSPAXM2otA2kuu+OifGSeBlPqZKKoXvtYQhYDpF0ct21xYmY 5UT50Xa3L/WOsa5VrbO0zUzQTiOWfMT48ESgfL/D4VxuPuWHrRQO+bS5hvTFxCWP UPdaBt6tsewbPC3T0tq1Dlaa -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:44 2026 by rpki-client