This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/v_OXt8Z9bxxVYhgYnrkDGSyM54I.roa File: v_OXt8Z9bxxVYhgYnrkDGSyM54I.roa (raw, json) Hash identifier: ATsBe22vKVETJCP8w9d7eB+q/lzN6NyzL4OSGucH4dw= Subject key identifier: BF:F3:97:B7:C6:7D:6F:1C:55:62:18:18:9E:B9:03:19:2C:8C:E7:82 Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc Certificate serial: 019B79ECD9B23010985C8B35A03B04EF4F10 Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/v_OXt8Z9bxxVYhgYnrkDGSyM54I.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34309 IP address blocks: 91.197.228.0/22 maxlen: 24 185.181.116.0/22 maxlen: 24 2a0a:cb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d9:b2:30:10:98:5c:8b:35:a0:3b:04:ef:4f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff397b7c67d6f1c556218189eb903192c8ce782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:72:e5:c3:d1:90:c5:72:5b:c0:3b:21:6b: b1:23:e6:b6:8a:18:85:1f:8f:c5:85:11:fa:5f:20: 45:f2:7d:a7:a8:2f:21:ab:d5:39:8f:b2:f0:bb:61: 87:5e:d1:22:91:24:58:06:97:a2:2e:a7:81:09:0d: 19:4d:e5:7d:66:75:73:67:88:fb:07:8d:ab:26:1b: f9:af:16:95:28:22:be:c6:67:44:a3:c7:de:de:dc: 00:03:c2:a8:25:79:0c:8c:9a:c8:45:c6:33:2e:78: c0:b2:59:58:de:f4:1d:af:bf:bc:5c:5d:75:e3:ee: 96:61:3f:bb:8b:d0:b1:46:70:d3:e3:2a:1b:b3:9f: 9a:e2:8d:87:91:bb:99:4a:89:98:c8:29:b5:ff:3d: 01:07:f4:c4:4d:89:d9:c6:34:11:29:05:b2:f9:8a: f0:40:77:b0:18:ca:da:ec:02:1f:79:ca:4a:c8:f2: f8:94:d3:7e:d4:bf:75:9c:c6:68:b8:ea:ae:dc:f6: 10:18:b9:a2:e9:7a:f2:68:f0:db:53:95:4d:d0:a1: d0:c2:00:3f:5c:f0:ad:55:a0:ec:fc:9a:05:20:6e: 5d:ce:c7:08:bf:6c:4c:b8:9b:9f:c2:5e:19:75:ea: de:fe:87:22:af:ed:94:cb:79:6b:00:96:bd:bc:42: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:97:B7:C6:7D:6F:1C:55:62:18:18:9E:B9:03:19:2C:8C:E7:82 X509v3 Authority Key Identifier: keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/v_OXt8Z9bxxVYhgYnrkDGSyM54I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.228.0/22 185.181.116.0/22 IPv6: 2a0a:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 84:7a:ca:1c:6e:9b:19:26:ec:ae:e6:12:77:36:42:e1:0e:d0: 9a:7e:a2:8a:da:76:5a:57:7b:4d:24:bb:56:e1:7a:54:42:3c: 84:a6:43:8b:4c:4f:11:7e:f9:85:d9:33:39:5d:83:29:0a:22: af:42:b5:f8:93:97:3d:ff:20:e1:5b:fd:71:c3:b3:05:3f:01: 55:dc:8d:f0:9e:57:b3:d7:5f:02:88:98:56:aa:71:2c:b0:42: 32:77:75:2c:38:99:f8:a0:da:6d:01:b9:d7:e1:2c:42:53:8b: 20:65:48:9f:8b:a2:09:9b:66:01:a5:3e:aa:1b:58:86:cf:69: ee:02:28:b7:83:ce:0d:30:09:f8:35:d6:54:11:44:43:ed:1f: 07:10:86:f6:9c:0e:9c:c0:77:b8:8a:c5:35:1d:7e:a0:67:8d: bc:ab:b3:3d:23:aa:f6:79:69:a3:f1:e7:e7:48:c2:55:5f:8b: 3e:e2:72:5d:61:04:7c:63:f3:f3:c7:81:31:20:0f:d0:65:7e: 52:2f:39:81:59:85:44:0e:a3:ad:3b:aa:af:38:5a:2f:96:ff: 56:c0:55:69:82:77:fe:e6:d8:7c:79:11:ec:60:22:bd:2e:29: 27:8e:27:96:cc:a9:d8:34:9d:c1:4e:ce:a1:d8:55:56:83:72: 80:32:18:96 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57NmyMBCYXIs1oDsE708QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTI4OWViZTkzMzUxMjM2YTU1ODBlYjViNzAxMDJjZjNm MTFkZmMwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmYzOTdiN2M2N2Q2ZjFjNTU2MjE4MTg5ZWI5MDMxOTJjOGNlNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJy5cPRkMVyW8A7IWuxI+a2ihiF H4/FhRH6XyBF8n2nqC8hq9U5j7Lwu2GHXtEikSRYBpeiLqeBCQ0ZTeV9ZnVzZ4j7 B42rJhv5rxaVKCK+xmdEo8fe3twAA8KoJXkMjJrIRcYzLnjAsllY3vQdr7+8XF11 4+6WYT+7i9CxRnDT4yobs5+a4o2HkbuZSomYyCm1/z0BB/TETYnZxjQRKQWy+Yrw QHewGMra7AIfecpKyPL4lNN+1L91nMZouOqu3PYQGLmi6XryaPDbU5VN0KHQwgA/ XPCtVaDs/JoFIG5dzscIv2xMuJufwl4Zdere/ocir+2Uy3lrAJa9vEJEXQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL/zl7fGfW8cVWIYGJ65AxksjOeCMB8GA1UdIwQY MBaAFHuiievpM1EjalWA61twECzz8R38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMt ZDE2M2I1NDk5ZTY4LzEvdl9PWHQ4WjlieHhWWWhnWW5ya0RHU3lNNTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMtZDE2M2I1NDk5ZTY4 LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8XkAwQC ubV0MA0EAgACMAcDBQAqCsuAMA0GCSqGSIb3DQEBCwUAA4IBAQCEesocbpsZJuyu 5hJ3NkLhDtCafqKK2nZaV3tNJLtW4XpUQjyEpkOLTE8RfvmF2TM5XYMpCiKvQrX4 k5c9/yDhW/1xw7MFPwFV3I3wnlez118CiJhWqnEssEIyd3UsOJn4oNptAbnX4SxC U4sgZUifi6IJm2YBpT6qG1iGz2nuAii3g84NMAn4NdZUEURD7R8HEIb2nA6cwHe4 isU1HX6gZ428q7M9I6r2eWmj8efnSMJVX4s+4nJdYQR8Y/Pzx4ExIA/QZX5SLzmB WYVEDqOtO6qvOFovlv9WwFVpgnf+5th8eRHsYCK9LiknjieWzKnYNJ3BTs6h2FVW g3KAMhiW -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:49 2026 by rpki-client