This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/_vXqV2-g7xwCNYuc9LOG1sJWevM.roa File: _vXqV2-g7xwCNYuc9LOG1sJWevM.roa (raw, json) Hash identifier: BJlsW9/rnHnD9aRumzD296n7QaGzXmfbPDZjx3MN9U0= Subject key identifier: FE:F5:EA:57:6F:A0:EF:1C:02:35:8B:9C:F4:B3:86:D6:C2:56:7A:F3 Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894 Certificate serial: 019B7758C8FC75EB440C9BBF21C83CC780CF Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/_vXqV2-g7xwCNYuc9LOG1sJWevM.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56947 IP address blocks: 91.229.108.0/22 maxlen: 24 185.7.116.0/23 maxlen: 24 188.68.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:fc:75:eb:44:0c:9b:bf:21:c8:3c:c7:80:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef5ea576fa0ef1c02358b9cf4b386d6c2567af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:f4:9a:f7:ab:60:ce:60:12:32:7e:cd:0f: 29:83:99:5d:aa:b0:f3:a8:22:0d:e7:60:bd:dd:a4: e0:07:dc:af:5d:a4:54:42:bd:a0:9b:85:58:7a:cb: c3:1a:73:c0:22:8d:98:23:9a:51:6f:ba:07:64:9e: d7:84:a5:27:5f:f0:29:a7:d2:22:e5:73:00:6f:53: 2c:f8:e6:c8:39:27:fe:63:c2:74:da:55:de:45:81: ac:77:ef:9f:ca:47:ee:1b:4e:df:84:6f:5c:c1:3b: c3:28:9d:98:ad:09:06:31:a4:4b:99:36:97:d5:31: 32:83:e6:f9:51:b6:9b:1e:20:51:24:75:24:8b:a8: 6d:21:94:a0:a7:fb:6e:3b:37:3a:6e:7e:f0:2e:58: 9e:c2:18:7d:ea:9d:79:5f:14:87:65:c1:dc:7e:66: b6:06:d6:e4:61:01:05:29:b6:c5:63:e7:f7:09:da: 42:65:d2:5a:64:7c:55:2d:67:6b:d1:77:7f:d2:0a: 76:8a:2c:3e:f6:ac:a2:94:af:88:ed:00:cf:32:90: 7e:8f:60:e1:ac:4d:bf:65:98:08:2f:29:c8:3c:55: 5a:b2:6c:90:70:d4:9a:c1:da:d4:59:41:6b:fa:f9: 85:47:63:2e:5c:42:74:09:56:a4:71:92:05:12:30: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:EA:57:6F:A0:EF:1C:02:35:8B:9C:F4:B3:86:D6:C2:56:7A:F3 X509v3 Authority Key Identifier: keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/_vXqV2-g7xwCNYuc9LOG1sJWevM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.108.0/22 185.7.116.0/23 188.68.81.0/24 Signature Algorithm: sha256WithRSAEncryption 53:41:6f:51:5f:e0:63:8b:23:94:88:56:09:ea:f9:0d:18:8c: 0b:e0:95:d3:02:f3:b5:3c:65:87:05:33:2e:f1:9f:78:8b:99: 23:70:c2:a4:c7:93:b0:a5:df:83:34:9b:3a:17:b7:bb:db:a6: df:3d:c9:e0:9d:c0:86:cc:c1:25:d2:56:62:1b:d6:c8:e3:f7: 6a:ef:18:3c:7c:97:a4:af:0c:97:00:76:95:80:54:ee:17:4f: dd:35:8f:60:1e:dc:8e:57:fc:12:0f:7f:c9:55:c1:6d:c1:d3: eb:16:18:11:dd:04:fc:f9:e5:5a:b0:51:47:3c:e0:30:d1:8f: 0d:cf:c5:74:d3:49:ef:7f:b5:cf:98:ab:86:58:ad:c5:5c:24: a2:7f:30:7b:a3:af:63:d6:d2:1d:ff:99:11:90:86:1b:da:72: 78:de:17:e9:aa:bf:a9:18:25:5a:e0:1f:72:4f:e2:c1:80:9e: ea:4b:64:d8:fe:cb:ca:ee:e4:ec:b7:ae:1b:a7:80:b7:e1:59: 7e:80:cb:cb:0a:85:26:a2:eb:4b:d7:4f:e8:50:04:9c:a2:49: d2:34:b6:cc:7d:5a:13:0f:2c:2c:94:ac:09:da:d9:d5:82:91: 4e:59:20:4f:2a:e6:4f:73:79:e8:1e:c1:96:f6:cd:95:83:bd: da:9b:c7:eb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WMj8detEDJu/Icg8x4DPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1 NDg4OTQwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWY1ZWE1NzZmYTBlZjFjMDIzNThiOWNmNGIzODZkNmMyNTY3YWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLf0mverYM5gEjJ+zQ8pg5ldqrDz qCIN52C93aTgB9yvXaRUQr2gm4VYesvDGnPAIo2YI5pRb7oHZJ7XhKUnX/App9Ii 5XMAb1Ms+ObIOSf+Y8J02lXeRYGsd++fykfuG07fhG9cwTvDKJ2YrQkGMaRLmTaX 1TEyg+b5UbabHiBRJHUki6htIZSgp/tuOzc6bn7wLliewhh96p15XxSHZcHcfma2 BtbkYQEFKbbFY+f3CdpCZdJaZHxVLWdr0Xd/0gp2iiw+9qyilK+I7QDPMpB+j2Dh rE2/ZZgILynIPFVasmyQcNSawdrUWUFr+vmFR2MuXEJ0CVakcZIFEjBYoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP716ldvoO8cAjWLnPSzhtbCVnrzMB8GA1UdIwQY MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt MWVmN2VmMTdmYTQzLzEvX3ZYcVYyLWc3eHdDTll1YzlMT0cxc0pXZXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW+VsAwQB uQd0AwQAvERRMA0GCSqGSIb3DQEBCwUAA4IBAQBTQW9RX+BjiyOUiFYJ6vkNGIwL 4JXTAvO1PGWHBTMu8Z94i5kjcMKkx5Owpd+DNJs6F7e726bfPcngncCGzMEl0lZi G9bI4/dq7xg8fJekrwyXAHaVgFTuF0/dNY9gHtyOV/wSD3/JVcFtwdPrFhgR3QT8 +eVasFFHPOAw0Y8Nz8V000nvf7XPmKuGWK3FXCSifzB7o69j1tId/5kRkIYb2nJ4 3hfpqr+pGCVa4B9yT+LBgJ7qS2TY/svK7uTst64bp4C34Vl+gMvLCoUmoutL10/o UAScoknSNLbMfVoTDywslKwJ2tnVgpFOWSBPKuZPc3noHsGW9s2Vg73am8fr -----END CERTIFICATE-----Generated at Thu Jan 1 12:15:44 2026 by rpki-client