This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa File: vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa (raw, json) Hash identifier: rnnb+NddXrEWMTYiz1zv6rkvP1op88gCRHr3DNzUUbI= Subject key identifier: BC:BE:D9:8B:FD:BA:C0:F3:20:72:FE:CD:72:66:10:56:B1:BC:F7:E6 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019B76EB0A0EDB744CD77D271E93E210B127 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 185.239.136.0/22 maxlen: 24 185.240.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:0e:db:74:4c:d7:7d:27:1e:93:e2:10:b1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcbed98bfdbac0f32072fecd72661056b1bcf7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:7e:4b:e2:6f:61:fa:6c:4d:f0:9a:1b:e2: 87:89:ad:e4:c5:cf:e9:1b:25:eb:e0:d6:5a:ec:22: 81:76:3a:9c:fd:a8:55:54:99:53:27:a8:67:25:96: 5f:cd:f0:06:6e:d5:83:b9:01:a0:0d:b7:54:a6:fc: 96:29:9d:7b:ad:61:2e:ac:91:9f:f7:0a:26:8d:26: dc:7d:71:85:c2:ed:d8:13:bd:63:d5:04:af:6e:b1: 4d:62:2a:6a:f7:b6:a0:ee:b5:75:ab:77:eb:cb:1a: 91:1b:68:de:96:9e:c8:30:ea:f6:ee:1b:c6:e5:b1: 59:09:8a:f3:b9:92:3d:5e:27:75:40:64:f3:9e:43: b6:e5:f3:67:3f:fd:04:a0:d5:71:06:cd:13:93:be: 9f:bb:62:4e:21:6b:4f:8a:ab:5e:98:99:08:8c:09: 4e:2c:69:44:ed:b8:e6:41:8a:b4:2f:dc:3e:82:7a: e5:d1:7d:da:9f:97:8b:12:ed:ba:63:39:c7:d0:12: 7f:9e:05:ae:24:b8:75:6c:c1:41:df:03:57:1f:0a: 5b:0e:86:3c:de:e8:ad:b8:7b:2b:f1:33:3c:b2:57: 43:71:db:25:76:4a:89:d3:70:c4:4b:3f:09:1c:ad: b7:8c:4d:71:bc:e8:5b:9c:06:2b:f9:c0:f2:57:6b: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BE:D9:8B:FD:BA:C0:F3:20:72:FE:CD:72:66:10:56:B1:BC:F7:E6 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/vL7Zi_26wPMgcv7NcmYQVrG89-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.136.0/22 185.240.92.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:65:5a:39:19:18:06:a8:bd:1f:78:28:4e:bc:60:c8:3f:56: 80:04:d8:22:1e:48:3d:75:6c:ca:41:af:ee:e6:2e:2c:51:4c: f7:6b:ff:c7:f1:e0:8b:75:c1:68:45:b9:37:5c:f6:f2:ac:d3: 40:e2:c2:59:94:d4:e7:26:55:f1:aa:95:f9:6a:0a:80:44:52: 4a:0d:05:06:a7:e6:ed:dd:27:a6:2a:12:fb:e6:ea:62:f5:f6: 77:31:7c:26:fa:de:c1:ca:21:28:f4:27:0e:17:7a:25:38:76: b9:92:b6:43:f6:16:66:dc:ae:21:e5:22:2f:f7:b7:27:ce:89: dc:6d:b6:8c:de:e3:09:e7:99:d6:20:ef:8c:33:84:d4:86:b6: ba:d0:5f:76:9e:17:e2:88:dc:eb:76:dd:db:cc:c1:52:6d:45: 55:63:e4:cd:6f:2c:b2:77:c3:e8:a1:d6:7e:dd:0b:d7:c8:e1: d0:ff:d3:b9:a6:78:36:d8:f3:6f:a5:7f:4f:8a:49:53:fe:1f: 1f:a8:e8:7a:f7:e0:5b:45:6d:88:d0:e2:9f:13:07:5c:0c:d7: ae:66:db:b9:6c:43:b9:c6:21:7c:dc:8a:fb:1d:77:d8:50:48: 00:18:8b:72:68:2f:21:2c:75:6d:e4:b9:dd:1f:38:8d:b5:fa: 66:12:f9:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26woO23RM130nHpPiELEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2JlZDk4YmZkYmFjMGYzMjA3MmZlY2Q3MjY2MTA1NmIxYmNmN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMV+S+JvYfpsTfCaG+KHia3kxc/p GyXr4NZa7CKBdjqc/ahVVJlTJ6hnJZZfzfAGbtWDuQGgDbdUpvyWKZ17rWEurJGf 9womjSbcfXGFwu3YE71j1QSvbrFNYipq97ag7rV1q3fryxqRG2jelp7IMOr27hvG 5bFZCYrzuZI9Xid1QGTznkO25fNnP/0EoNVxBs0Tk76fu2JOIWtPiqtemJkIjAlO LGlE7bjmQYq0L9w+gnrl0X3an5eLEu26YznH0BJ/ngWuJLh1bMFB3wNXHwpbDoY8 3uituHsr8TM8sldDcdsldkqJ03DESz8JHK23jE1xvOhbnAYr+cDyV2uoFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLy+2Yv9usDzIHL+zXJmEFaxvPfmMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvdkw3WmlfMjZ3UE1nY3Y3TmNtWVFWckc4OS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCue+IAwQC ufBcMA0GCSqGSIb3DQEBCwUAA4IBAQB7ZVo5GRgGqL0feChOvGDIP1aABNgiHkg9 dWzKQa/u5i4sUUz3a//H8eCLdcFoRbk3XPbyrNNA4sJZlNTnJlXxqpX5agqARFJK DQUGp+bt3SemKhL75upi9fZ3MXwm+t7ByiEo9CcOF3olOHa5krZD9hZm3K4h5SIv 97cnzoncbbaM3uMJ55nWIO+MM4TUhra60F92nhfiiNzrdt3bzMFSbUVVY+TNbyyy d8PoodZ+3QvXyOHQ/9O5png22PNvpX9PiklT/h8fqOh69+BbRW2I0OKfEwdcDNeu Ztu5bEO5xiF83Ir7HXfYUEgAGItyaC8hLHVt5LndHziNtfpmEvlK -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:19 2026 by rpki-client