This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vxM_Mr-ZptEQ2v_ZSJAvvcmMDf4.roa File: vxM_Mr-ZptEQ2v_ZSJAvvcmMDf4.roa (raw, json) Hash identifier: cw6ONBpR5AhIqe62ul7jMAbaBSvsyqRyuJn9Lj5ipc4= Subject key identifier: BF:13:3F:32:BF:99:A6:D1:10:DA:FF:D9:48:90:2F:BD:C9:8C:0D:FE Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED130B2E73C504A4DBA1A4A92BF06 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vxM_Mr-ZptEQ2v_ZSJAvvcmMDf4.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 188.255.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:30:b2:e7:3c:50:4a:4d:ba:1a:4a:92:bf:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf133f32bf99a6d110daffd948902fbdc98c0dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:07:c4:a5:5d:54:ad:79:e4:c1:fa:d4:dd:ae: 0a:b0:f9:6b:db:4f:65:5b:b7:a3:03:3a:29:f4:b7: 40:ef:e8:f1:74:eb:3a:a9:7e:9e:b0:81:00:78:dc: 2a:40:ee:95:cb:b7:bc:01:2d:1b:61:fb:58:88:01: e6:f7:53:d4:81:b2:52:3d:3d:ed:93:30:5c:d4:16: ee:a1:e9:f1:38:1d:75:b4:ad:42:5e:17:3f:c5:43: ee:66:ac:5c:ad:e1:c9:d4:22:a6:6c:e1:58:73:d5: e6:05:73:b0:6a:a8:ac:a8:85:7f:f7:7b:35:10:84: eb:e3:2f:69:63:fd:3e:08:52:85:0a:1f:8b:9b:49: f4:cd:0b:fc:9e:04:a0:d7:de:e9:b8:73:e9:f9:b0: f0:c8:6e:d3:73:94:05:2b:8b:92:6d:01:fe:27:91: 66:ca:54:24:88:7a:85:36:17:69:22:89:9c:b5:f4: bf:c1:5f:07:ec:58:1d:1d:7e:3d:ff:99:44:21:fb: 57:7b:2b:07:81:06:08:38:53:47:97:7e:a1:56:2c: 37:ba:92:50:e6:80:54:65:ec:7e:78:db:a1:dd:d9: a2:75:a3:61:99:50:6a:5d:37:dc:28:28:7f:25:aa: 07:0d:bd:e1:c0:e9:b7:ce:68:f2:10:13:63:ba:48: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:3F:32:BF:99:A6:D1:10:DA:FF:D9:48:90:2F:BD:C9:8C:0D:FE X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vxM_Mr-ZptEQ2v_ZSJAvvcmMDf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.216.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:8f:60:41:71:85:b4:67:6d:f1:9f:69:63:06:b6:e9:19:d2: 6d:6a:66:9e:c1:26:de:22:38:27:cc:1c:e1:85:e7:c6:bb:a0: b4:23:30:2d:e0:84:13:c7:b9:ae:77:28:36:8c:25:c6:c8:e8: 3c:cf:49:07:8f:68:0d:d8:87:18:d0:44:d2:49:57:99:ef:32: 63:fc:ec:1e:fd:cc:9e:53:e3:f8:c2:31:e6:e6:79:ea:5d:8d: a8:86:6a:fe:bd:67:98:9b:11:f9:ea:bf:05:6d:92:4c:ec:ce: 34:5c:ae:eb:56:d4:5b:c3:f2:5d:c0:0e:77:fb:70:e7:71:a8: 20:fa:72:9d:94:d1:62:25:80:2a:7a:9e:f1:cf:09:65:38:27: 10:0e:28:3d:df:55:f2:a4:ef:ab:7c:28:b5:3d:5b:70:e7:4f: 74:40:ca:fe:d8:85:bd:f9:93:ca:99:85:71:1e:ae:a2:cd:4c: 79:8b:91:67:8f:16:9f:ee:46:1a:48:5e:8c:60:4b:4a:39:81: 19:cf:11:ea:65:55:f5:45:ad:87:94:cf:e4:3a:e9:30:7d:e8: a2:ff:22:68:6c:ce:63:79:5e:94:f9:40:ba:aa:f6:bc:fe:90: 9a:5c:c0:8b:0a:cd:c5:72:cc:00:f2:13:c5:52:ad:46:11:9a: 2f:b6:97:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftEwsuc8UEpNuhpKkr8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjEzM2YzMmJmOTlhNmQxMTBkYWZmZDk0ODkwMmZiZGM5OGMwZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AfEpV1UrXnkwfrU3a4KsPlr209l W7ejAzop9LdA7+jxdOs6qX6esIEAeNwqQO6Vy7e8AS0bYftYiAHm91PUgbJSPT3t kzBc1BbuoenxOB11tK1CXhc/xUPuZqxcreHJ1CKmbOFYc9XmBXOwaqisqIV/93s1 EITr4y9pY/0+CFKFCh+Lm0n0zQv8ngSg197puHPp+bDwyG7Tc5QFK4uSbQH+J5Fm ylQkiHqFNhdpIomctfS/wV8H7FgdHX49/5lEIftXeysHgQYIOFNHl36hViw3upJQ 5oBUZex+eNuh3dmidaNhmVBqXTfcKCh/JaoHDb3hwOm3zmjyEBNjukhChwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL8TPzK/mabRENr/2UiQL73JjA3+MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvdnhNX01yLVpwdEVRMnZfWlNKQXZ2Y21NRGY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/YMA0G CSqGSIb3DQEBCwUAA4IBAQAvj2BBcYW0Z23xn2ljBrbpGdJtamaewSbeIjgnzBzh hefGu6C0IzAt4IQTx7mudyg2jCXGyOg8z0kHj2gN2IcY0ETSSVeZ7zJj/Owe/cye U+P4wjHm5nnqXY2ohmr+vWeYmxH56r8FbZJM7M40XK7rVtRbw/JdwA53+3Dncagg +nKdlNFiJYAqep7xzwllOCcQDig931XypO+rfCi1PVtw5090QMr+2IW9+ZPKmYVx Hq6izUx5i5Fnjxaf7kYaSF6MYEtKOYEZzxHqZVX1Ra2HlM/kOukwfeii/yJobM5j eV6U+UC6qva8/pCaXMCLCs3FcswA8hPFUq1GEZovtpfH -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:57 2026 by rpki-client