This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/v-yW23PUKxeOnQqPJF0a9ieiqkY.roa File: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (raw, json) Hash identifier: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8= Subject key identifier: BF:EC:96:DB:73:D4:2B:17:8E:9D:0A:8F:24:5D:1A:F6:27:A2:AA:46 Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f Certificate serial: 019B7DCAD7DE316483FF0B40C2623CA3D266 Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/v-yW23PUKxeOnQqPJF0a9ieiqkY.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215566 IP address blocks: 109.175.218.0/24 maxlen: 24 109.175.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d7:de:31:64:83:ff:0b:40:c2:62:3c:a3:d2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfec96db73d42b178e9d0a8f245d1af627a2aa46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:f9:c7:6e:e4:de:a1:e0:5c:4e:97:66:46: 94:16:eb:fb:3a:56:87:92:27:3b:75:a9:2b:de:18: b7:79:53:ac:87:03:83:85:74:23:70:78:9e:6b:86: 17:d8:84:1f:f1:16:53:c6:57:20:27:4b:35:05:23: a4:9b:85:bb:4d:97:ac:17:1c:f4:e8:33:2d:50:3a: f5:65:9a:7a:5c:f6:1d:8e:41:9f:e0:6e:85:a8:c8: 80:fb:4b:72:51:0d:7a:42:2f:7b:17:70:9a:30:17: af:d1:0d:31:d5:a3:c8:94:ce:ae:81:9e:f2:94:36: de:81:42:8b:cb:75:d2:dd:3e:75:fa:76:ce:75:b9: 82:d0:8d:96:87:09:d2:24:f0:4e:0b:3a:f8:87:c7: b2:f6:b0:51:b7:1b:61:6d:50:d8:5b:08:f8:01:9a: 0b:f7:7f:9b:4c:f2:03:99:f0:d7:d3:87:07:28:e6: 35:c2:65:0b:61:39:78:d7:c3:ce:3f:ba:05:3e:f0: 6f:7a:f8:5c:68:f0:e1:77:32:f3:95:3b:d3:e1:a5: 94:02:8f:04:d3:3a:9d:cd:e3:93:cc:95:ea:28:79: 70:d5:a8:d8:9b:5e:df:4d:91:f8:58:46:c1:de:b9: 54:01:88:92:0c:c2:c3:7e:8c:6a:9d:fc:a7:a7:03: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EC:96:DB:73:D4:2B:17:8E:9D:0A:8F:24:5D:1A:F6:27:A2:AA:46 X509v3 Authority Key Identifier: keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/v-yW23PUKxeOnQqPJF0a9ieiqkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.218.0/24 109.175.222.0/24 Signature Algorithm: sha256WithRSAEncryption 76:9f:68:7b:9d:7f:11:1f:52:fb:1b:7d:37:03:2c:51:32:be: 86:c7:cf:8f:14:c8:dc:61:b8:52:2c:24:f6:95:2d:56:c8:f4: db:8c:1e:f0:52:13:66:74:bb:8a:24:8c:2d:58:c2:35:fd:8b: 5a:0e:43:f7:9e:3b:27:f9:4c:03:b4:2b:61:70:f7:85:f9:de: 2c:f2:ef:85:5b:88:33:f7:fa:d3:55:e0:7e:5c:33:d1:03:ee: 9f:53:22:3f:06:8b:3b:13:c4:57:69:44:a5:bd:f8:16:01:db: e3:3c:7b:0b:36:a8:b4:f3:df:7e:30:70:b0:8c:d6:8b:41:8d: be:fe:0d:ff:bf:4a:07:46:1a:23:e8:0a:0e:2c:79:3d:21:58: 8f:48:2d:d9:00:7b:f9:0f:01:be:3d:15:63:82:45:5a:a8:aa: e5:5b:1a:c0:dd:09:d9:4d:a6:88:c8:91:25:3d:7c:b5:d8:bc: 75:8c:9f:7a:a6:82:83:15:a9:f9:ff:98:2f:0f:fa:0a:f9:32: 71:4b:8b:fe:cd:2d:43:d7:c2:b3:8c:86:45:60:75:57:d6:1b: 1b:6a:36:9b:e3:ce:80:3e:19:31:e4:9f:5a:d1:88:dd:da:91: aa:a0:35:8b:ae:15:91:cc:a4:21:64:9d:8d:d6:f8:31:04:68: a9:68:2d:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ytfeMWSD/wtAwmI8o9JmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi ZmJjN2YwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmVjOTZkYjczZDQyYjE3OGU5ZDBhOGYyNDVkMWFmNjI3YTJhYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+H5x27k3qHgXE6XZkaUFuv7OlaH kic7dakr3hi3eVOshwODhXQjcHiea4YX2IQf8RZTxlcgJ0s1BSOkm4W7TZesFxz0 6DMtUDr1ZZp6XPYdjkGf4G6FqMiA+0tyUQ16Qi97F3CaMBev0Q0x1aPIlM6ugZ7y lDbegUKLy3XS3T51+nbOdbmC0I2WhwnSJPBOCzr4h8ey9rBRtxthbVDYWwj4AZoL 93+bTPIDmfDX04cHKOY1wmULYTl418POP7oFPvBvevhcaPDhdzLzlTvT4aWUAo8E 0zqdzeOTzJXqKHlw1ajYm17fTZH4WEbB3rlUAYiSDMLDfoxqnfynpwNuKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL/slttz1CsXjp0KjyRdGvYnoqpGMB8GA1UdIwQY MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt OTg0ZWVjM2Y3YTNlLzEvdi15VzIzUFVLeGVPblFxUEpGMGE5aWVpcWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAba/aAwQA ba/eMA0GCSqGSIb3DQEBCwUAA4IBAQB2n2h7nX8RH1L7G303AyxRMr6Gx8+PFMjc YbhSLCT2lS1WyPTbjB7wUhNmdLuKJIwtWMI1/YtaDkP3njsn+UwDtCthcPeF+d4s 8u+FW4gz9/rTVeB+XDPRA+6fUyI/Bos7E8RXaUSlvfgWAdvjPHsLNqi0899+MHCw jNaLQY2+/g3/v0oHRhoj6AoOLHk9IViPSC3ZAHv5DwG+PRVjgkVaqKrlWxrA3QnZ TaaIyJElPXy12Lx1jJ96poKDFan5/5gvD/oK+TJxS4v+zS1D18KzjIZFYHVX1hsb ajab486APhkx5J9a0Yjd2pGqoDWLrhWRzKQhZJ2N1vgxBGipaC1J -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:58 2026 by rpki-client