This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RVbKYNsXkpigrW8bpc1iUTS3mgI.roa File: RVbKYNsXkpigrW8bpc1iUTS3mgI.roa (raw, json) Hash identifier: IrBHJsse41bdExiPxgQe3tLrqVamrKp11wXC487m10U= Subject key identifier: 45:56:CA:60:DB:17:92:98:A0:AD:6F:1B:A5:CD:62:51:34:B7:9A:02 Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17 Certificate serial: 019B7EA471C3A1F1DC03284328A2C7153B63 Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RVbKYNsXkpigrW8bpc1iUTS3mgI.roa Signing time: Fri 02 Jan 2026 12:17:44 +0000 ROA not before: Fri 02 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61241 IP address blocks: 185.161.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:71:c3:a1:f1:dc:03:28:43:28:a2:c7:15:3b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17 Validity Not Before: Jan 2 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4556ca60db179298a0ad6f1ba5cd625134b79a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:0e:2f:ff:cb:f1:12:ac:17:14:93:17:2c: ad:b7:35:f8:a7:60:3e:e7:e0:1d:58:54:bf:14:e1: 40:19:93:05:de:e2:4e:e1:8c:91:3e:f9:e9:83:7e: 7c:60:7a:62:72:68:1f:4a:9b:77:37:f9:dd:77:dd: 63:fd:2b:be:dd:88:45:25:57:3b:7f:90:fa:9d:c8: 13:bb:1c:0c:04:80:40:fd:b3:62:82:73:a4:9b:67: c7:e4:db:06:2a:cd:3b:00:22:34:dd:a7:27:1b:d6: 22:45:9a:7b:05:64:70:8d:d9:2d:35:59:37:b9:db: cb:64:87:45:42:f7:fc:18:ec:5c:35:84:ff:5e:3e: 4d:9a:86:51:83:ef:0b:83:37:fa:74:00:6d:57:9c: 7b:16:36:e0:72:ec:5b:c4:6d:a4:23:27:91:95:cb: 9d:c5:29:f7:bf:7a:c8:2d:87:5d:41:9b:7d:cc:ba: 65:de:f2:f2:c8:0f:1d:2f:0c:d6:e2:06:e6:3c:e8: a7:be:b4:bc:ac:92:1a:28:db:d8:1e:fc:d4:ef:b1: 8a:6d:04:bc:41:fa:cc:bd:f0:82:fd:88:9f:8a:ee: 96:ea:a4:2f:00:c2:14:c0:70:62:d2:eb:57:7c:86: 8b:26:33:c6:0a:21:e7:0a:63:cd:78:fe:fa:8c:06: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:CA:60:DB:17:92:98:A0:AD:6F:1B:A5:CD:62:51:34:B7:9A:02 X509v3 Authority Key Identifier: keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RVbKYNsXkpigrW8bpc1iUTS3mgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.172.0/23 Signature Algorithm: sha256WithRSAEncryption 47:03:c2:c0:89:6c:db:b5:79:9e:13:da:e0:92:f0:30:2f:9d: b0:a1:1d:c1:f4:86:2d:ef:bc:94:5e:99:21:a0:3d:56:7d:63: 8a:77:41:2a:76:3f:c6:72:2a:51:af:51:f7:51:9a:aa:05:dd: 79:2f:c8:a7:0f:56:6e:5b:3c:5a:c5:0b:e5:03:66:04:c5:93: 4d:8f:ff:61:a8:1b:fc:46:47:13:57:4e:5d:0f:9c:81:ac:f3: 0e:91:64:5c:e3:7c:0f:76:64:72:aa:d0:83:e1:1c:1c:72:8b: cc:e6:93:c5:95:fe:2b:0d:51:ff:b7:c8:1a:1e:81:3c:04:bf: 40:b6:46:cf:2d:09:8c:16:fa:11:36:bc:4f:73:19:21:a6:ec: 6b:01:6b:e4:d5:6d:02:f9:e4:6c:ea:26:a9:88:53:50:dd:32: 66:0a:c0:52:a9:bf:e2:99:d0:e4:ec:9b:56:4a:69:cf:a0:68: ff:d2:7d:29:a3:dd:53:c2:90:b8:de:6c:66:8a:8f:e9:41:1f: a6:fc:d2:a2:67:a7:ed:d8:b1:8f:14:76:e8:5c:51:a5:b1:d9: c3:2c:5b:0b:2a:1c:fd:81:14:20:36:7c:c1:b3:8b:05:ae:e6: 46:31:8c:78:00:2b:03:67:f1:ce:7c:a0:da:6c:3a:fb:9f:c3: 0c:84:47:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pHHDofHcAyhDKKLHFTtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZmJjZmMxM2Q0ZDVmZjZkMzdjMjI2ZjExZTEyMTIwNGMz NjdkMTcwHhcNMjYwMTAyMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTU2Y2E2MGRiMTc5Mjk4YTBhZDZmMWJhNWNkNjI1MTM0Yjc5YTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf8OL//L8RKsFxSTFyyttzX4p2A+ 5+AdWFS/FOFAGZMF3uJO4YyRPvnpg358YHpicmgfSpt3N/ndd91j/Su+3YhFJVc7 f5D6ncgTuxwMBIBA/bNignOkm2fH5NsGKs07ACI03acnG9YiRZp7BWRwjdktNVk3 udvLZIdFQvf8GOxcNYT/Xj5NmoZRg+8Lgzf6dABtV5x7FjbgcuxbxG2kIyeRlcud xSn3v3rILYddQZt9zLpl3vLyyA8dLwzW4gbmPOinvrS8rJIaKNvYHvzU77GKbQS8 QfrMvfCC/Yifiu6W6qQvAMIUwHBi0utXfIaLJjPGCiHnCmPNeP76jAbr3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVWymDbF5KYoK1vG6XNYlE0t5oCMB8GA1UdIwQY MBaAFEb7z8E9TV/203wibxHhISBMNn0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2It ZmFjYTBlYjMzNTdkLzEvUlZiS1lOc1hrcGlnclc4YnBjMWlVVFMzbWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2ItZmFjYTBlYjMzNTdk LzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaGsMA0G CSqGSIb3DQEBCwUAA4IBAQBHA8LAiWzbtXmeE9rgkvAwL52woR3B9IYt77yUXpkh oD1WfWOKd0Eqdj/GcipRr1H3UZqqBd15L8inD1ZuWzxaxQvlA2YExZNNj/9hqBv8 RkcTV05dD5yBrPMOkWRc43wPdmRyqtCD4RwccovM5pPFlf4rDVH/t8gaHoE8BL9A tkbPLQmMFvoRNrxPcxkhpuxrAWvk1W0C+eRs6iapiFNQ3TJmCsBSqb/imdDk7JtW SmnPoGj/0n0po91TwpC43mxmio/pQR+m/NKiZ6ft2LGPFHboXFGlsdnDLFsLKhz9 gRQgNnzBs4sFruZGMYx4ACsDZ/HOfKDabDr7n8MMhEc2 -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:29 2026 by rpki-client