This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/vTRqCtvnjV5ULYp3QVGnOSeLI48.roa File: vTRqCtvnjV5ULYp3QVGnOSeLI48.roa (raw, json) Hash identifier: XZSHqXZ9/2xuTC2yVf4djicrqgDxlpDHvGc8OnjW13s= Subject key identifier: BD:34:6A:0A:DB:E7:8D:5E:54:2D:8A:77:41:51:A7:39:27:8B:23:8F Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc Certificate serial: 019B791093E3330EEFE662805E4DE7EFF6DC Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/vTRqCtvnjV5ULYp3QVGnOSeLI48.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203653 IP address blocks: 185.230.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:93:e3:33:0e:ef:e6:62:80:5e:4d:e7:ef:f6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd346a0adbe78d5e542d8a774151a739278b238f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:59:17:72:c2:08:27:0a:c6:51:31:21:8c: 8e:a9:c1:e6:ab:9c:6c:af:9e:0e:b6:5f:d6:6c:8a: 6b:4a:14:af:77:32:07:49:23:4c:c3:57:5c:c5:27: 03:20:43:cb:75:26:cc:56:77:ad:6e:68:99:d2:15: d9:a0:cc:45:2c:e0:d0:ee:fc:4e:20:5d:35:87:02: c4:bf:1c:1d:bc:e4:ff:61:2c:4b:2d:1b:e7:42:15: ab:96:8d:41:e2:2d:3c:b4:79:45:ca:a4:9e:06:cc: c3:0c:07:c4:69:46:22:e0:bd:ed:9c:ba:bd:94:54: 3f:ee:a9:60:0e:5a:72:98:09:d0:41:ec:56:e6:46: 06:67:36:59:1f:aa:b3:80:15:3d:60:0f:4b:02:98: 99:5c:04:99:06:5a:3d:d4:fa:2d:92:c3:9e:96:fb: 05:fa:bf:d4:c3:37:0f:db:e2:08:88:22:21:52:34: c8:2b:69:5f:99:a2:9f:05:0d:1c:ef:ff:92:d3:70: 34:8d:2c:63:b9:26:79:c5:ef:08:d2:0a:74:6e:b3: 32:b6:f1:76:dd:a1:5e:d9:c4:14:6d:12:da:28:35: fa:0f:3c:30:78:dc:ae:cd:e3:65:69:ce:e0:26:3e: 81:1a:2e:ca:5f:d4:bf:dd:6f:e8:13:ae:a0:6d:61: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:34:6A:0A:DB:E7:8D:5E:54:2D:8A:77:41:51:A7:39:27:8B:23:8F X509v3 Authority Key Identifier: keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/vTRqCtvnjV5ULYp3QVGnOSeLI48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.105.0/24 Signature Algorithm: sha256WithRSAEncryption 31:16:38:1b:45:f8:08:5d:b7:48:66:e8:2a:0a:f2:62:fc:c0: fa:ab:e2:87:95:13:54:5e:da:fe:33:f1:4e:36:88:4e:7a:ec: 4d:01:bc:bc:fd:b3:a6:a3:52:81:ce:2f:3f:c5:80:e6:2e:68: 2a:cf:16:18:0f:db:36:7f:14:14:5f:62:56:ee:a1:dc:d9:ba: dc:ef:97:bb:f0:ba:80:51:c2:70:74:1e:c0:ac:13:e2:8a:24: 1c:7c:50:9c:bb:28:8d:d1:b2:5b:eb:12:07:94:3b:e8:19:1e: fc:39:50:52:52:3f:b4:f9:4f:a1:6b:62:d7:4c:be:35:86:9e: 58:38:3b:de:69:bf:e6:ee:45:ca:d7:a9:e4:a5:97:6f:41:fc: cf:83:d3:28:6c:14:10:2b:4f:f0:b0:30:b8:3d:32:49:f4:94: c5:c7:c5:80:40:9d:f5:39:d9:c3:6e:b0:e8:e5:d2:eb:8d:ad: 68:44:e3:50:7c:f4:88:77:1a:01:a9:aa:3e:2b:15:44:a5:df: 6f:8b:34:75:72:ea:cc:da:99:83:e6:ae:e4:ec:ab:2c:8d:e9: 44:0f:13:e6:c2:de:d0:58:23:1e:5b:20:82:21:65:43:d6:3d: dd:48:88:cc:22:30:6c:ae:e9:b3:5e:c5:0a:ce:57:ea:33:79: d7:5d:93:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJPjMw7v5mKAXk3n7/bcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODgzYmQ0ZWE0ZTNkZWIyOGI4OTRiMTkwZjhlMDhiYWYw NmYxY2MwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM0NmEwYWRiZTc4ZDVlNTQyZDhhNzc0MTUxYTczOTI3OGIyMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7NZF3LCCCcKxlExIYyOqcHmq5xs r54Otl/WbIprShSvdzIHSSNMw1dcxScDIEPLdSbMVnetbmiZ0hXZoMxFLODQ7vxO IF01hwLEvxwdvOT/YSxLLRvnQhWrlo1B4i08tHlFyqSeBszDDAfEaUYi4L3tnLq9 lFQ/7qlgDlpymAnQQexW5kYGZzZZH6qzgBU9YA9LApiZXASZBlo91PotksOelvsF +r/UwzcP2+IIiCIhUjTIK2lfmaKfBQ0c7/+S03A0jSxjuSZ5xe8I0gp0brMytvF2 3aFe2cQUbRLaKDX6DzwweNyuzeNlac7gJj6BGi7KX9S/3W/oE66gbWEz1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL00agrb541eVC2Kd0FRpzkniyOPMB8GA1UdIwQY MBaAFC+IO9TqTj3rKLiUsZD44IuvBvHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUt NzliNjczM2JjNWU2LzEvdlRScUN0dm5qVjVVTFlwM1FWR25PU2VMSTQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUtNzliNjczM2JjNWU2 LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueZpMA0G CSqGSIb3DQEBCwUAA4IBAQAxFjgbRfgIXbdIZugqCvJi/MD6q+KHlRNUXtr+M/FO NohOeuxNAby8/bOmo1KBzi8/xYDmLmgqzxYYD9s2fxQUX2JW7qHc2brc75e78LqA UcJwdB7ArBPiiiQcfFCcuyiN0bJb6xIHlDvoGR78OVBSUj+0+U+ha2LXTL41hp5Y ODveab/m7kXK16nkpZdvQfzPg9MobBQQK0/wsDC4PTJJ9JTFx8WAQJ31OdnDbrDo 5dLrja1oRONQfPSIdxoBqao+KxVEpd9vizR1curM2pmD5q7k7KssjelEDxPmwt7Q WCMeWyCCIWVD1j3dSIjMIjBsrumzXsUKzlfqM3nXXZPE -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:15 2026 by rpki-client