This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/vQjo3Wxio6bNf-SY7ilrOLyS98k.roa File: vQjo3Wxio6bNf-SY7ilrOLyS98k.roa (raw, json) Hash identifier: s9F1BCbxLOthkzlppFYdSop1NXmGZVrmNaL2rSir5MU= Subject key identifier: BD:08:E8:DD:6C:62:A3:A6:CD:7F:E4:98:EE:29:6B:38:BC:92:F7:C9 Certificate issuer: /CN=134efe7c541f5406dc7e0ff268d05582baefc996 Certificate serial: 019B76EAAB62AD6846840BF92D906760A888 Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/vQjo3Wxio6bNf-SY7ilrOLyS98k.roa Signing time: Thu 01 Jan 2026 00:17:29 +0000 ROA not before: Thu 01 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.91.40.0/22 maxlen: 22 83.229.28.0/23 maxlen: 23 89.35.228.0/24 maxlen: 24 89.147.104.0/22 maxlen: 22 91.208.213.0/24 maxlen: 24 94.140.5.0/24 maxlen: 24 94.140.6.0/23 maxlen: 23 185.126.33.0/24 maxlen: 24 185.212.7.0/24 maxlen: 24 194.127.98.0/23 maxlen: 23 195.85.6.0/23 maxlen: 23 195.158.236.0/23 maxlen: 23 2a10:13c0:da7a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ab:62:ad:68:46:84:0b:f9:2d:90:67:60:a8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996 Validity Not Before: Jan 1 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd08e8dd6c62a3a6cd7fe498ee296b38bc92f7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:f3:ad:23:8f:43:f8:29:6a:fe:9d:77:31: ae:50:6b:93:e9:e9:bd:ef:9a:61:43:59:fb:d0:16: 70:02:06:cc:d1:9f:0f:94:25:4e:44:b8:a7:fb:23: cf:89:26:24:8c:ae:8b:8f:12:ff:20:57:e2:70:68: 0d:99:34:1e:be:83:76:e2:26:15:44:e1:7f:5f:0d: 60:38:b6:28:19:29:a1:17:a6:9a:75:fb:d5:75:72: cc:e9:da:2d:63:84:ad:15:ff:83:86:86:98:81:9d: c7:91:49:35:ca:9e:9e:6c:83:b7:96:94:a6:74:70: 5a:30:14:c3:4a:07:d3:ab:2c:0c:69:da:71:c9:1a: 63:f6:d8:c8:6f:74:d6:03:23:f3:95:bb:a8:ea:1c: e8:de:8e:51:e3:8b:19:ac:39:3a:59:f0:1c:00:f8: 87:72:b0:eb:1c:8b:16:1e:3e:c3:35:70:a8:cc:0a: c8:ff:c4:48:16:6f:78:00:69:e0:4a:60:c0:1f:8e: 42:8b:38:89:bd:fd:ef:5b:ac:a1:0c:39:fa:8b:a2: 68:02:1a:4c:9e:9b:cd:24:05:af:f4:af:89:c2:94: 66:bf:c7:48:1b:c6:29:85:39:3a:83:5d:1d:58:56: 07:77:f8:d5:bd:f1:fb:ea:f1:98:e4:b7:7b:ea:e0: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:08:E8:DD:6C:62:A3:A6:CD:7F:E4:98:EE:29:6B:38:BC:92:F7:C9 X509v3 Authority Key Identifier: keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/vQjo3Wxio6bNf-SY7ilrOLyS98k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.40.0/22 83.229.28.0/23 89.35.228.0/24 89.147.104.0/22 91.208.213.0/24 94.140.5.0-94.140.7.255 185.126.33.0/24 185.212.7.0/24 194.127.98.0/23 195.85.6.0/23 195.158.236.0/23 IPv6: 2a10:13c0:da7a::/48 Signature Algorithm: sha256WithRSAEncryption 6b:65:c5:84:73:cb:29:2e:32:d3:d0:1b:7f:0f:f8:e8:83:38: 47:61:24:41:bc:be:4f:fc:ed:2a:64:8a:a4:da:5b:06:2c:e6: 6d:dc:88:7a:7e:1f:bd:73:82:48:c1:7b:b0:70:70:2b:82:03: db:4e:9f:59:98:30:c1:e0:0f:e1:17:91:d6:05:2b:14:bf:12: 02:d1:93:98:bf:40:a9:c0:d6:dd:74:44:8e:ea:b4:3d:5e:dd: c5:83:98:89:96:46:09:ac:65:b7:fa:80:7d:9b:f0:30:ec:89: d5:7a:37:d6:0a:73:79:ac:cd:87:14:41:3b:37:5f:3b:a1:10: ad:fc:ec:3a:cf:f6:a8:1a:5e:4d:01:7c:d6:2a:c1:12:90:78: 8d:1a:33:6f:06:a1:eb:f1:af:f4:1c:68:c8:bc:f4:c5:c4:7b: b9:83:a5:21:75:31:2f:65:a7:47:00:97:48:e5:b3:65:a5:5d: 68:a9:4d:74:73:30:bc:6b:2e:ca:30:f4:ac:bb:c0:42:d6:79: ba:d0:79:f1:1e:12:dd:47:af:a5:e5:14:08:67:95:dc:88:1c: 72:5a:e4:b3:01:fa:90:b1:a2:a3:79:40:ad:47:91:e4:be:f9: a6:cd:bb:21:7a:a5:e3:69:c6:40:e9:1e:25:f7:e0:01:e3:83: cb:3e:15:3c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt26qtirWhGhAv5LZBnYKiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNGVmZTdjNTQxZjU0MDZkYzdlMGZmMjY4ZDA1NTgyYmFl ZmM5OTYwHhcNMjYwMTAxMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDA4ZThkZDZjNjJhM2E2Y2Q3ZmU0OThlZTI5NmIzOGJjOTJmN2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoujzrSOPQ/gpav6ddzGuUGuT6em9 75phQ1n70BZwAgbM0Z8PlCVORLin+yPPiSYkjK6LjxL/IFficGgNmTQevoN24iYV ROF/Xw1gOLYoGSmhF6aadfvVdXLM6dotY4StFf+DhoaYgZ3HkUk1yp6ebIO3lpSm dHBaMBTDSgfTqywMadpxyRpj9tjIb3TWAyPzlbuo6hzo3o5R44sZrDk6WfAcAPiH crDrHIsWHj7DNXCozArI/8RIFm94AGngSmDAH45CiziJvf3vW6yhDDn6i6JoAhpM npvNJAWv9K+JwpRmv8dIG8YphTk6g10dWFYHd/jVvfH76vGY5Ld76uB5EwIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFL0I6N1sYqOmzX/kmO4pazi8kvfJMB8GA1UdIwQY MBaAFBNO/nxUH1QG3H4P8mjQVYK678mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2It YjM2NDkxZWU2ZWU0LzEvdlFqbzNXeGlvNmJOZi1TWTdpbHJPTHlTOThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2ItYjM2NDkxZWU2ZWU0 LzEvRTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBQBAIAATBKAwQCLVsoAwQB U+UcAwQAWSPkAwQCWZNoAwQAW9DVMAwDBABejAUDBANejAADBAC5fiEDBAC51AcD BAHCf2IDBAHDVQYDBAHDnuwwDwQCAAIwCQMHACoQE8DaejANBgkqhkiG9w0BAQsF AAOCAQEAa2XFhHPLKS4y09Abfw/46IM4R2EkQby+T/ztKmSKpNpbBizmbdyIen4f vXOCSMF7sHBwK4ID206fWZgwweAP4ReR1gUrFL8SAtGTmL9AqcDW3XREjuq0PV7d xYOYiZZGCaxlt/qAfZvwMOyJ1Xo31gpzeazNhxRBOzdfO6EQrfzsOs/2qBpeTQF8 1irBEpB4jRozbwah6/Gv9BxoyLz0xcR7uYOlIXUxL2WnRwCXSOWzZaVdaKlNdHMw vGsuyjD0rLvAQtZ5utB58R4S3UevpeUUCGeV3IgcclrkswH6kLGio3lArUeR5L75 ps27IXql42nGQOkeJffgAeODyz4VPA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:58 2026 by rpki-client