This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/vP7G0LDj9js2uqV_dVx329H3yeM.roa File: vP7G0LDj9js2uqV_dVx329H3yeM.roa (raw, json) Hash identifier: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g= Subject key identifier: BC:FE:C6:D0:B0:E3:F6:3B:36:BA:A5:7F:75:5C:77:DB:D1:F7:C9:E3 Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069 Certificate serial: 019B7A5B9D4A1D72083C10E3FAA884426781 Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/vP7G0LDj9js2uqV_dVx329H3yeM.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 194.182.152.0/23 maxlen: 23 194.182.152.0/24 maxlen: 24 194.182.153.0/24 maxlen: 24 2a10:cf80:1001::/48 maxlen: 48 2a10:cf80:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9d:4a:1d:72:08:3c:10:e3:fa:a8:84:42:67:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcfec6d0b0e3f63b36baa57f755c77dbd1f7c9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:8e:0c:61:b2:82:29:46:7f:5c:57:58:19: 79:5c:38:1f:e3:df:98:35:f4:4f:f3:1f:44:4f:93: ac:b1:81:2e:83:2f:b6:cf:ca:db:b5:27:6c:e5:85: fb:c4:a9:e6:d5:c4:2e:28:67:20:26:66:1d:65:3d: de:e1:41:8f:a8:1a:60:3e:6b:d2:6a:4b:81:6f:e7: 36:e9:05:fd:38:7c:ec:f9:58:2d:3d:61:e8:81:27: 29:f7:4b:88:72:95:d0:c7:4e:a7:db:f4:7a:53:8b: 31:4c:36:29:74:a0:70:02:80:42:18:86:c5:87:b2: be:33:1e:0a:87:98:1c:26:8b:13:39:c2:34:fe:1f: 84:a4:80:66:15:b5:c3:1b:dc:a6:5f:6b:fc:fd:1f: a4:10:74:59:94:82:1a:9d:76:45:1b:39:46:61:e9: 6c:04:91:ac:2a:90:70:bf:bd:07:9a:04:ab:61:e9: 2d:91:de:5d:e4:20:eb:80:7e:02:92:9b:f6:cc:2f: 23:21:26:1f:fc:8d:51:fd:59:ea:18:80:66:36:dc: 4c:d9:8a:dd:e7:bb:96:5a:f0:f6:5b:43:f0:3a:ba: 6c:ab:97:b0:99:dc:b7:8b:54:ec:8b:84:2f:78:85: 5c:90:61:0e:82:80:b2:2e:93:93:b1:cc:ca:ca:5a: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FE:C6:D0:B0:E3:F6:3B:36:BA:A5:7F:75:5C:77:DB:D1:F7:C9:E3 X509v3 Authority Key Identifier: keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/vP7G0LDj9js2uqV_dVx329H3yeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.182.152.0/23 IPv6: 2a10:cf80:1001::/48 2a10:cf80:2001::/48 Signature Algorithm: sha256WithRSAEncryption a8:30:e3:c9:cf:cf:56:25:56:69:5d:2b:a9:e0:a2:ff:3b:3f: 42:bc:11:ba:28:6c:c3:7f:e4:81:f6:c3:eb:ab:1b:8d:44:5d: e7:a1:26:bd:1b:29:bd:83:ba:97:01:6e:0f:ce:1c:e5:fb:f0: 75:49:04:7d:05:90:24:a2:3a:e8:3e:d2:7a:4e:cc:3f:14:14: a4:c3:8f:92:25:a0:56:b7:c5:fd:02:ec:b3:de:97:0a:dd:49: 78:41:1c:f2:58:39:fb:89:1c:fe:6c:5b:41:ee:5b:ca:33:ee: 02:69:f3:3b:98:86:b7:10:f4:fa:aa:ed:d7:e5:7e:cb:b3:18: 06:22:12:85:79:63:21:a3:b6:e2:77:5c:7f:ea:ca:04:c8:84: 7b:80:ab:46:b1:5e:06:c6:cb:6b:79:82:0c:d2:1e:a7:0f:23: d5:9f:6b:0a:b7:90:42:dc:ac:e3:72:ba:c7:4c:af:bd:42:ef: f5:70:40:67:fc:3a:0a:49:1e:da:1b:23:cf:f2:a3:7a:6c:18: f6:59:8e:a7:cf:b2:4e:bb:d1:22:c8:71:0e:f5:82:57:1a:77: 16:1f:41:4e:56:a5:14:ef:fd:67:ad:7c:f3:54:1c:af:84:a3: 33:98:38:4f:45:5e:1f:fa:2f:a7:41:eb:ca:9d:60:78:1d:43: b1:9f:aa:07 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6W51KHXIIPBDj+qiEQmeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4 NTEwNjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ZlYzZkMGIwZTNmNjNiMzZiYWE1N2Y3NTVjNzdkYmQxZjdjOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+WODGGygilGf1xXWBl5XDgf49+Y NfRP8x9ET5OssYEugy+2z8rbtSds5YX7xKnm1cQuKGcgJmYdZT3e4UGPqBpgPmvS akuBb+c26QX9OHzs+VgtPWHogScp90uIcpXQx06n2/R6U4sxTDYpdKBwAoBCGIbF h7K+Mx4Kh5gcJosTOcI0/h+EpIBmFbXDG9ymX2v8/R+kEHRZlIIanXZFGzlGYels BJGsKpBwv70HmgSrYektkd5d5CDrgH4Ckpv2zC8jISYf/I1R/VnqGIBmNtxM2Yrd 57uWWvD2W0PwOrpsq5ewmdy3i1Tsi4QveIVckGEOgoCyLpOTsczKylqXPQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLz+xtCw4/Y7Nrqlf3Vcd9vR98njMB8GA1UdIwQY MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct ZDk2MzkzYWYyZjIwLzEvdlA3RzBMRGo5anMydXFWX2RWeDMyOUgzeWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBwraYMBgE AgACMBIDBwAqEM+AEAEDBwAqEM+AIAEwDQYJKoZIhvcNAQELBQADggEBAKgw48nP z1YlVmldK6ngov87P0K8EboobMN/5IH2w+urG41EXeehJr0bKb2DupcBbg/OHOX7 8HVJBH0FkCSiOug+0npOzD8UFKTDj5IloFa3xf0C7LPelwrdSXhBHPJYOfuJHP5s W0HuW8oz7gJp8zuYhrcQ9Pqq7dflfsuzGAYiEoV5YyGjtuJ3XH/qygTIhHuAq0ax XgbGy2t5ggzSHqcPI9Wfawq3kELcrONyusdMr71C7/VwQGf8OgpJHtobI8/yo3ps GPZZjqfPsk670SLIcQ71glcadxYfQU5WpRTv/WetfPNUHK+EozOYOE9FXh/6L6dB 68qdYHgdQ7Gfqgc= -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:08 2026 by rpki-client