This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa File: vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa (raw, json) Hash identifier: sq7lKfoyNzXqh8ifJ6Y3jNbECu87UDlvl3/h5jz4zpo= Subject key identifier: BF:1E:30:14:6C:4A:E3:64:7A:A9:ED:8E:8E:39:BE:DD:36:E8:28:A4 Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2 Certificate serial: 019B7C11D066D272A523CA413E7AF96B49E3 Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa Signing time: Fri 02 Jan 2026 00:18:20 +0000 ROA not before: Fri 02 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201755 IP address blocks: 185.64.252.0/22 maxlen: 24 2a03:17a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d0:66:d2:72:a5:23:ca:41:3e:7a:f9:6b:49:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2 Validity Not Before: Jan 2 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf1e30146c4ae3647aa9ed8e8e39bedd36e828a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:e0:45:f9:1a:48:71:15:3c:9b:31:8c:1e: 44:57:34:a0:f2:ca:aa:69:60:16:41:18:63:2a:73: a7:0f:1d:72:49:8c:3f:d3:ae:47:62:25:57:7c:1b: 1b:d7:a2:bd:78:88:3f:1d:b2:c9:fe:6a:47:77:00: 68:ea:b4:0b:05:4d:a7:2b:55:77:38:8d:07:df:c2: 10:26:9c:4a:21:6f:c2:fb:7b:63:ef:fd:62:ea:92: 05:b8:9c:b4:10:bb:b6:39:86:5e:e7:df:a0:99:5e: 8c:5c:3f:f1:bb:04:fe:24:05:22:4b:4e:3e:0c:a1: 3d:91:e1:67:31:1a:1b:30:8b:34:aa:e4:8a:7a:07: de:b7:18:7c:0d:eb:6c:b8:eb:82:70:f1:f5:31:52: 15:b1:92:79:ab:46:00:72:d3:00:b0:e9:97:8b:c5: 73:fb:69:bf:20:64:bf:4c:ee:b8:ee:4e:83:fa:5a: 02:ea:64:f5:be:00:08:83:73:02:f0:c7:68:bc:77: 44:59:65:0c:9e:5e:82:9b:78:92:46:a9:61:64:f8: 18:ca:e2:40:79:41:6d:f9:50:ea:65:9a:30:60:68: d7:03:f5:f7:2f:34:1c:02:2e:b2:f3:19:97:7f:c4: 10:56:ff:2a:d4:8f:90:7e:14:b9:05:7c:7b:1a:1f: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1E:30:14:6C:4A:E3:64:7A:A9:ED:8E:8E:39:BE:DD:36:E8:28:A4 X509v3 Authority Key Identifier: keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.252.0/22 IPv6: 2a03:17a0::/32 Signature Algorithm: sha256WithRSAEncryption 85:a2:1d:02:bd:22:4a:4c:e9:a3:4e:82:d7:ec:90:c1:ef:c4: 3b:bb:42:4e:c7:d8:3c:f0:90:4d:2f:15:27:71:30:43:f7:2e: f4:8a:a6:c9:59:ff:ff:43:3b:c7:a7:20:47:cc:4f:2f:85:a1: 96:f4:66:43:b6:30:3b:55:54:ef:52:36:75:6a:97:04:92:9a: 7a:68:15:1d:8c:97:9f:ac:58:71:89:d0:5f:8f:30:49:35:69: ce:51:da:27:8e:bd:61:2c:50:71:a4:c7:28:3e:fb:82:ff:62: 50:f5:18:6c:92:b5:46:c2:7a:fb:9b:e1:95:17:c7:89:a3:79: c2:6b:a2:16:59:0f:0d:55:94:1f:79:cf:e4:fb:74:37:ca:f6: 64:fe:e6:b4:ac:d0:05:aa:ad:1b:c2:05:16:1e:9d:ee:bb:a5: ea:0d:92:eb:36:d7:56:3c:4a:34:5e:55:1c:dd:89:9c:0c:99: 39:f4:db:2f:19:9e:9f:cd:d2:57:7d:af:35:67:8d:f3:b0:66: 72:d8:9d:3a:70:dc:09:87:67:62:d3:ef:98:f9:60:47:09:47: 70:a3:15:d4:38:4a:f3:e1:45:03:64:10:be:8a:e6:93:17:38: f0:ff:93:3d:da:b7:c9:1d:e6:f3:c0:31:e0:94:cb:c9:07:86: 01:ca:9e:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EdBm0nKlI8pBPnr5a0njMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjIzYmUxMTE1ZjAyMmFhMjY5ZDljZWE0MzliYjhiNDky MzA3ZTIwHhcNMjYwMTAyMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjFlMzAxNDZjNGFlMzY0N2FhOWVkOGU4ZTM5YmVkZDM2ZTgyOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/TgRfkaSHEVPJsxjB5EVzSg8sqq aWAWQRhjKnOnDx1ySYw/065HYiVXfBsb16K9eIg/HbLJ/mpHdwBo6rQLBU2nK1V3 OI0H38IQJpxKIW/C+3tj7/1i6pIFuJy0ELu2OYZe59+gmV6MXD/xuwT+JAUiS04+ DKE9keFnMRobMIs0quSKegfetxh8DetsuOuCcPH1MVIVsZJ5q0YActMAsOmXi8Vz +2m/IGS/TO647k6D+loC6mT1vgAIg3MC8MdovHdEWWUMnl6Cm3iSRqlhZPgYyuJA eUFt+VDqZZowYGjXA/X3LzQcAi6y8xmXf8QQVv8q1I+QfhS5BXx7Gh+fHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL8eMBRsSuNkeqntjo45vt026CikMB8GA1UdIwQY MBaAFMvyO+ERXwIqomnZzqQ5u4tJIwfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgt YmUzMjUyYWM0OTgwLzEvdng0d0ZHeEs0MlI2cWUyT2pqbS0zVGJvS0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgtYmUzMjUyYWM0OTgw LzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUD8MA0E AgACMAcDBQAqAxegMA0GCSqGSIb3DQEBCwUAA4IBAQCFoh0CvSJKTOmjToLX7JDB 78Q7u0JOx9g88JBNLxUncTBD9y70iqbJWf//QzvHpyBHzE8vhaGW9GZDtjA7VVTv UjZ1apcEkpp6aBUdjJefrFhxidBfjzBJNWnOUdonjr1hLFBxpMcoPvuC/2JQ9Rhs krVGwnr7m+GVF8eJo3nCa6IWWQ8NVZQfec/k+3Q3yvZk/ua0rNAFqq0bwgUWHp3u u6XqDZLrNtdWPEo0XlUc3YmcDJk59NsvGZ6fzdJXfa81Z43zsGZy2J06cNwJh2di 0++Y+WBHCUdwoxXUOErz4UUDZBC+iuaTFzjw/5M92rfJHebzwDHglMvJB4YByp6t -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:00 2026 by rpki-client