This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/rvD1H2sqdAGPbvUz-aE-W8uthR4.roa File: rvD1H2sqdAGPbvUz-aE-W8uthR4.roa (raw, json) Hash identifier: juMyYBUmK38qBTDdYgXD9M03MIicG88Qom1iHTsOvho= Subject key identifier: AE:F0:F5:1F:6B:2A:74:01:8F:6E:F5:33:F9:A1:3E:5B:CB:AD:85:1E Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2 Certificate serial: 019B77C6F563DE0421A45941CB67BBE05B3B Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/rvD1H2sqdAGPbvUz-aE-W8uthR4.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43930 IP address blocks: 185.108.32.0/22 maxlen: 24 185.108.33.0/24 maxlen: 24 185.108.34.0/24 maxlen: 24 185.194.164.0/23 maxlen: 23 185.194.164.0/24 maxlen: 24 185.194.165.0/24 maxlen: 24 193.57.128.0/22 maxlen: 22 193.57.128.0/23 maxlen: 23 2a02:c800::/32 maxlen: 32 2a02:c800:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:63:de:04:21:a4:59:41:cb:67:bb:e0:5b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aef0f51f6b2a74018f6ef533f9a13e5bcbad851e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:d9:06:5e:af:fe:76:9e:9f:eb:28:ff:71: a8:b2:77:5a:17:03:46:17:0f:2b:4b:df:c6:6e:21: d1:8b:cf:a5:18:c6:00:f8:91:e1:2a:ea:3c:6a:84: c3:e8:5e:15:ca:da:0a:88:4a:5c:40:33:56:cb:9e: ce:e6:dd:9a:5f:d0:42:31:c2:64:48:d4:d3:63:07: 5a:a9:35:31:77:29:5a:77:b4:e7:50:1c:a1:ff:90: 09:ce:36:55:39:d0:80:33:0d:c8:b3:39:43:2e:c0: 3d:6f:4c:fb:2f:7f:36:34:6f:3f:9a:55:09:41:1c: 76:b8:8a:c1:16:74:9c:a3:03:1d:4d:1f:fd:b2:55: 5b:4b:5f:c8:5a:85:80:c2:b7:74:3a:e5:d9:35:93: ed:60:b3:a9:eb:04:41:4b:81:14:4e:e9:9c:b9:d2: b9:31:9b:6d:36:51:0e:01:a5:5d:f5:bc:07:7c:05: e8:5d:73:87:00:f3:c7:d3:ee:c3:c4:a5:b0:d0:40: c7:c1:e7:be:08:6a:85:4c:41:25:d8:49:57:1f:4d: 7f:8e:5b:74:8a:36:e8:22:66:89:10:17:52:bb:f2: ca:9e:44:82:8c:9d:0e:a1:9d:39:54:42:a4:75:66: 32:b0:4b:c8:60:77:a1:1b:19:f1:94:62:4c:0e:7d: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:F5:1F:6B:2A:74:01:8F:6E:F5:33:F9:A1:3E:5B:CB:AD:85:1E X509v3 Authority Key Identifier: keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/rvD1H2sqdAGPbvUz-aE-W8uthR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.32.0/22 185.194.164.0/23 193.57.128.0/22 IPv6: 2a02:c800::/32 Signature Algorithm: sha256WithRSAEncryption 28:01:1c:c3:39:e7:a8:4c:a0:63:44:91:2b:fb:7f:12:a5:21: c3:ae:0d:e5:ee:0a:16:0e:3d:17:67:61:08:d4:bf:32:e5:ce: 2e:b3:75:50:24:80:c5:78:14:d4:09:5d:7e:00:39:01:e1:71: 0c:a0:7f:87:de:13:66:f0:2d:d4:3f:cb:ef:fe:61:84:80:99: 03:46:0f:1a:4c:b6:6b:94:d3:bb:73:cd:29:ee:fc:68:52:d4: 4e:9b:1b:a1:59:99:63:dc:60:6a:f2:2b:2e:18:dc:be:59:ea: a3:cb:d4:9a:d5:b2:18:9e:d9:75:ea:54:0a:fe:9f:80:4e:58: ab:61:9c:91:9a:3f:bd:e5:09:f7:36:b2:d9:e2:90:46:d2:6f: 57:57:82:e0:03:23:83:18:db:81:36:5f:9f:b9:c1:7a:0e:3b: 9e:18:84:f7:7d:26:f8:48:ea:2a:ae:61:98:8e:43:9f:cb:b5: 73:ba:ad:02:90:69:c4:7e:e7:9d:fd:00:51:f5:7d:dc:56:93: f4:67:ab:59:c3:ae:a0:ef:09:db:ef:04:db:33:b9:ff:38:05: 6b:f0:86:a8:fb:9b:d0:8c:e8:ae:55:45:3d:40:f8:48:8f:4f: 3e:59:1f:25:57:e2:63:6b:3e:84:9d:87:fd:db:be:7c:68:c5: c5:e7:bd:98 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xvVj3gQhpFlBy2e74Fs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZjM5ZTZlYjMxMzFlY2YzY2RkY2QwYzllMzc4YzM1MmRh NDFmYzIwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWYwZjUxZjZiMmE3NDAxOGY2ZWY1MzNmOWExM2U1YmNiYWQ4NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TTZBl6v/naen+so/3GosndaFwNG Fw8rS9/GbiHRi8+lGMYA+JHhKuo8aoTD6F4VytoKiEpcQDNWy57O5t2aX9BCMcJk SNTTYwdaqTUxdylad7TnUByh/5AJzjZVOdCAMw3IszlDLsA9b0z7L382NG8/mlUJ QRx2uIrBFnScowMdTR/9slVbS1/IWoWAwrd0OuXZNZPtYLOp6wRBS4EUTumcudK5 MZttNlEOAaVd9bwHfAXoXXOHAPPH0+7DxKWw0EDHwee+CGqFTEEl2ElXH01/jlt0 ijboImaJEBdSu/LKnkSCjJ0OoZ05VEKkdWYysEvIYHehGxnxlGJMDn3wPwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFK7w9R9rKnQBj271M/mhPlvLrYUeMB8GA1UdIwQY MBaAFHvznm6zEx7PPN3NDJ43jDUtpB/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYt Yzk2N2M5ZGI1NzUyLzEvcnZEMUgyc3FkQUdQYnZVei1hRS1XOHV0aFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYtYzk2N2M5ZGI1NzUy LzEvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWwgAwQB ucKkAwQCwTmAMA0EAgACMAcDBQAqAsgAMA0GCSqGSIb3DQEBCwUAA4IBAQAoARzD OeeoTKBjRJEr+38SpSHDrg3l7goWDj0XZ2EI1L8y5c4us3VQJIDFeBTUCV1+ADkB 4XEMoH+H3hNm8C3UP8vv/mGEgJkDRg8aTLZrlNO7c80p7vxoUtROmxuhWZlj3GBq 8isuGNy+Weqjy9Sa1bIYntl16lQK/p+ATlirYZyRmj+95Qn3NrLZ4pBG0m9XV4Lg AyODGNuBNl+fucF6DjueGIT3fSb4SOoqrmGYjkOfy7Vzuq0CkGnEfued/QBR9X3c VpP0Z6tZw66g7wnb7wTbM7n/OAVr8Iao+5vQjOiuVUU9QPhIj08+WR8lV+Jjaz6E nYf92758aMXF572Y -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:32 2026 by rpki-client