This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/v_G295N19bDrQCJDMtlZ-ai88wg.roa File: v_G295N19bDrQCJDMtlZ-ai88wg.roa (raw, json) Hash identifier: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA= Subject key identifier: BF:F1:B6:F7:93:75:F5:B0:EB:40:22:43:32:D9:59:F9:A8:BC:F3:08 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019B7B36709D4FBE8CE78891FFBC94A42EF1 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/v_G295N19bDrQCJDMtlZ-ai88wg.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12297 IP address blocks: 46.71.0.0/16 maxlen: 24 87.241.128.0/18 maxlen: 24 178.160.192.0/18 maxlen: 24 178.160.245.0/24 maxlen: 24 178.160.248.0/22 maxlen: 24 178.160.251.0/24 maxlen: 24 178.160.252.0/22 maxlen: 24 212.73.64.0/19 maxlen: 24 2a00:f38::/29 maxlen: 48 2a00:f38::/32 maxlen: 48 2a00:f38:0:101d::/64 maxlen: 64 2a00:f38:0:111c::/64 maxlen: 64 2a00:f38:0:111d::/64 maxlen: 64 2a00:f38:0:111e::/64 maxlen: 64 2a00:f38:0:111f::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:70:9d:4f:be:8c:e7:88:91:ff:bc:94:a4:2e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff1b6f79375f5b0eb40224332d959f9a8bcf308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:f6:5a:b5:e0:92:88:12:47:97:da:4f:dc: 21:c0:66:2e:f8:b2:34:e4:43:01:b1:45:77:e3:1b: 40:59:5f:12:d4:6d:0c:9f:45:53:9a:03:a9:98:cc: 98:0a:c1:6c:13:3b:b5:fb:f9:f3:1c:18:8e:b9:56: 36:5a:02:40:45:4f:a5:e1:8a:5c:3b:f9:c7:2b:7a: 8a:b4:17:4d:b3:23:bd:9a:e7:ab:b4:e1:c7:ad:e6: f5:9f:4b:d5:79:97:ee:b4:27:23:8e:c2:cd:65:fe: 75:9f:67:4f:56:8b:c0:cd:34:88:a0:a3:4b:71:4d: a1:35:36:f3:cc:7e:07:5e:1c:e8:47:38:4f:44:a5: c9:d2:de:59:95:5f:04:1d:87:ec:43:00:d5:47:79: 4e:9b:a1:f3:8f:80:2e:49:84:d3:a9:fd:7d:f3:a6: bb:7d:4c:f0:92:b4:e1:4e:6e:48:77:ec:f5:0b:fa: 85:88:c5:dc:83:ec:db:a9:ac:77:6d:0a:c2:91:f4: c4:a3:db:02:88:d8:06:55:b6:51:e2:83:34:44:2b: 8c:f2:99:4a:63:eb:0f:7b:9f:59:e6:15:1f:36:30: cf:db:75:bc:83:f6:cd:c2:fe:fe:df:94:9f:a7:bb: 8c:8b:4f:cf:4a:f5:bd:ad:47:a2:f7:5c:bb:60:57: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:B6:F7:93:75:F5:B0:EB:40:22:43:32:D9:59:F9:A8:BC:F3:08 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/v_G295N19bDrQCJDMtlZ-ai88wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.71.0.0/16 87.241.128.0/18 178.160.192.0/18 212.73.64.0/19 IPv6: 2a00:f38::/29 Signature Algorithm: sha256WithRSAEncryption 53:05:87:52:77:81:d2:8e:60:7a:d1:b6:49:b8:59:2f:69:f7: f4:24:dd:2c:d1:1b:8f:c2:f0:06:c5:31:ab:6a:75:d4:35:21: b0:1d:b3:91:24:d2:c5:37:2c:3f:7b:36:86:14:15:03:48:54: 56:0f:fa:3a:b6:da:f5:a6:05:f4:02:41:30:cd:35:4c:30:48: ec:0b:f7:2e:24:31:9a:d7:27:63:f9:9e:5d:ba:ee:e6:a8:cd: 94:83:37:d7:97:cf:fb:b7:79:d2:28:f7:9e:7d:6b:37:ea:f2: 87:10:da:cf:98:4a:09:2f:70:c5:d5:76:8f:e5:74:6c:da:9a: 0a:5e:9c:f6:64:56:51:e3:af:b2:3d:fe:e9:96:bc:6b:1f:cb: a4:3c:fd:40:51:46:99:1c:c7:7c:38:56:a2:b5:cd:3f:4d:13: e3:53:85:73:61:45:90:20:30:c4:9e:6a:8d:75:c7:1b:43:83: 97:d5:c2:1b:30:0a:c3:98:13:a7:95:7a:d1:4b:48:2e:41:a1: f0:7a:32:2e:f2:cb:28:b9:e7:33:81:72:79:9d:3d:1a:c5:b8: 5d:fc:d0:30:c9:92:00:9a:d0:b8:a4:31:78:44:4a:1c:a3:9a: 1f:a1:ca:4e:35:3a:02:67:24:0b:c9:e6:10:26:40:b9:1e:36: 78:d1:93:45 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt7NnCdT76M54iR/7yUpC7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmYxYjZmNzkzNzVmNWIwZWI0MDIyNDMzMmQ5NTlmOWE4YmNmMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNn2WrXgkogSR5faT9whwGYu+LI0 5EMBsUV34xtAWV8S1G0Mn0VTmgOpmMyYCsFsEzu1+/nzHBiOuVY2WgJARU+l4Ypc O/nHK3qKtBdNsyO9muertOHHreb1n0vVeZfutCcjjsLNZf51n2dPVovAzTSIoKNL cU2hNTbzzH4HXhzoRzhPRKXJ0t5ZlV8EHYfsQwDVR3lOm6Hzj4AuSYTTqf1986a7 fUzwkrThTm5Id+z1C/qFiMXcg+zbqax3bQrCkfTEo9sCiNgGVbZR4oM0RCuM8plK Y+sPe59Z5hUfNjDP23W8g/bNwv7+35Sfp7uMi0/PSvW9rUei91y7YFcrJwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFL/xtveTdfWw60AiQzLZWfmovPMIMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvdl9HMjk1TjE5YkRyUUNKRE10bFotYWk4OHdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMALkcDBAZX 8YADBAayoMADBAXUSUAwDQQCAAIwBwMFAyoADzgwDQYJKoZIhvcNAQELBQADggEB AFMFh1J3gdKOYHrRtkm4WS9p9/Qk3SzRG4/C8AbFMatqddQ1IbAds5Ek0sU3LD97 NoYUFQNIVFYP+jq22vWmBfQCQTDNNUwwSOwL9y4kMZrXJ2P5nl267uaozZSDN9eX z/u3edIo9559azfq8ocQ2s+YSgkvcMXVdo/ldGzamgpenPZkVlHjr7I9/umWvGsf y6Q8/UBRRpkcx3w4VqK1zT9NE+NThXNhRZAgMMSeao11xxtDg5fVwhswCsOYE6eV etFLSC5BofB6Mi7yyyi55zOBcnmdPRrFuF380DDJkgCa0LikMXhEShyjmh+hyk41 OgJnJAvJ5hAmQLkeNnjRk0U= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:08 2026 by rpki-client