This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa File: vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa (raw, json) Hash identifier: IslrtVbkyC6BHr/5GuZpnn/vnO+GSJxpxZntKhzxnaA= Subject key identifier: BC:30:F6:9B:90:BB:3E:AF:09:0B:68:C9:7A:9B:54:3C:74:CF:89:6E Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Certificate serial: 019B7C12C486C3AE1E62EE916708C62925DE Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213299 IP address blocks: 185.155.116.0/24 maxlen: 24 2a10:40c0::/32 maxlen: 32 2a10:40c0:1::/48 maxlen: 48 2a10:40c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c4:86:c3:ae:1e:62:ee:91:67:08:c6:29:25:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc30f69b90bb3eaf090b68c97a9b543c74cf896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:e0:99:d3:b8:b1:9f:db:70:31:99:09:59: ca:47:43:1c:3a:9e:56:cd:39:c3:1d:5d:42:9c:36: 1f:8f:91:7e:d3:e0:d6:96:e5:e4:54:85:49:af:04: 00:b0:b8:54:6a:a4:7c:2c:ef:7f:cf:00:9e:c2:6f: 4d:64:de:50:2c:da:90:c7:a9:d2:33:35:68:49:35: 25:48:0f:70:91:a5:1d:10:2d:2a:c6:22:78:84:fa: 4c:ab:61:c3:83:23:f6:bb:06:b0:e2:e8:a4:54:2a: db:34:23:ce:c2:bf:c0:da:f1:29:37:47:93:fe:44: 66:b9:3f:b7:fe:2d:69:ac:76:fd:f1:4b:60:3c:44: af:db:b4:ca:f4:ea:a0:11:b3:b7:7c:8d:a3:d9:33: 57:dc:8e:7e:84:04:7a:db:65:c6:69:89:d3:fc:2a: ea:14:35:d9:24:f0:21:18:7d:01:25:e7:0b:12:6e: 30:67:48:63:06:00:d2:d3:74:ac:bd:38:73:c2:fd: d9:3f:38:18:19:16:06:d7:97:f9:b8:3a:bf:0a:78: e1:3e:58:43:cc:4a:03:ef:01:cc:fd:92:3b:b5:52: d6:a2:7f:a2:08:66:2c:e9:79:9a:68:21:30:7c:c8: 5b:ce:ec:0a:2f:ee:53:e4:d0:78:91:a6:d9:ee:08: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:F6:9B:90:BB:3E:AF:09:0B:68:C9:7A:9B:54:3C:74:CF:89:6E X509v3 Authority Key Identifier: keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.116.0/24 IPv6: 2a10:40c0::/32 Signature Algorithm: sha256WithRSAEncryption 51:a9:80:4e:3b:9c:97:bc:7c:dc:6c:dc:d2:90:09:84:d1:46: 73:a7:18:2f:bb:fb:41:c8:1c:91:d7:28:c4:96:c1:63:38:75: c7:ef:3d:df:bd:71:92:9a:25:86:23:f7:13:cb:03:8c:78:8b: 46:43:7a:3c:a3:32:5f:58:30:b4:77:1c:85:b3:6d:4e:08:08: 8c:37:82:c2:24:93:9a:d5:65:13:48:45:8b:92:0a:1f:91:40: 5f:3d:9e:d8:a9:c4:a9:51:7e:d0:90:1f:5b:d4:70:46:8e:38: b8:f8:80:c5:fb:f8:5d:f9:cb:3e:5e:cc:fb:c8:43:a9:0c:10: 79:bb:3d:33:fe:d8:5d:90:1b:dc:c5:b1:78:7d:b3:8b:7b:27: e1:88:8a:fe:ed:fc:5d:3d:05:f5:44:e1:fb:48:4e:80:cc:cd: 62:e5:a2:f2:75:3c:a7:54:fe:eb:63:5d:1d:d5:66:f7:dc:9c: 81:68:a8:93:12:13:6e:98:81:05:a6:80:12:4a:9c:8e:f6:2b: b7:d2:60:b1:4b:1b:45:e4:ac:86:15:40:d2:09:67:0a:38:20: 8e:f6:bf:7e:9e:49:8d:d2:4e:32:45:54:8e:95:31:b4:94:93: 42:f3:e4:0c:50:3b:a7:1b:03:a0:ef:a9:bb:86:76:67:00:57: 6d:f1:65:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EsSGw64eYu6RZwjGKSXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm NDYxYTQwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzMwZjY5YjkwYmIzZWFmMDkwYjY4Yzk3YTliNTQzYzc0Y2Y4OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyHgmdO4sZ/bcDGZCVnKR0McOp5W zTnDHV1CnDYfj5F+0+DWluXkVIVJrwQAsLhUaqR8LO9/zwCewm9NZN5QLNqQx6nS MzVoSTUlSA9wkaUdEC0qxiJ4hPpMq2HDgyP2uwaw4uikVCrbNCPOwr/A2vEpN0eT /kRmuT+3/i1prHb98UtgPESv27TK9OqgEbO3fI2j2TNX3I5+hAR622XGaYnT/Crq FDXZJPAhGH0BJecLEm4wZ0hjBgDS03SsvThzwv3ZPzgYGRYG15f5uDq/CnjhPlhD zEoD7wHM/ZI7tVLWon+iCGYs6XmaaCEwfMhbzuwKL+5T5NB4kabZ7giJlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLww9puQuz6vCQtoyXqbVDx0z4luMB8GA1UdIwQY MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt NWNkODg1NDg5ZjgyLzEvdkREMm01QzdQcThKQzJqSmVwdFVQSFRQaVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZt0MA0E AgACMAcDBQAqEEDAMA0GCSqGSIb3DQEBCwUAA4IBAQBRqYBOO5yXvHzcbNzSkAmE 0UZzpxgvu/tByByR1yjElsFjOHXH7z3fvXGSmiWGI/cTywOMeItGQ3o8ozJfWDC0 dxyFs21OCAiMN4LCJJOa1WUTSEWLkgofkUBfPZ7YqcSpUX7QkB9b1HBGjji4+IDF +/hd+cs+Xsz7yEOpDBB5uz0z/thdkBvcxbF4fbOLeyfhiIr+7fxdPQX1ROH7SE6A zM1i5aLydTynVP7rY10d1Wb33JyBaKiTEhNumIEFpoASSpyO9iu30mCxSxtF5KyG FUDSCWcKOCCO9r9+nkmN0k4yRVSOlTG0lJNC8+QMUDunGwOg76m7hnZnAFdt8WVL -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:11 2026 by rpki-client