This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/vLmFVJoGXbf4msEHmhGFGYuX8dg.roa File: vLmFVJoGXbf4msEHmhGFGYuX8dg.roa (raw, json) Hash identifier: n8fdqUNj4S1lmCWx+9/Hc98igGcxsB3tlE/lQdSemvc= Subject key identifier: BC:B9:85:54:9A:06:5D:B7:F8:9A:C1:07:9A:11:85:19:8B:97:F1:D8 Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Certificate serial: 019B7CEE13C719DCE123AB86937C7C3E8FE8 Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/vLmFVJoGXbf4msEHmhGFGYuX8dg.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394434 IP address blocks: 185.194.136.0/23 maxlen: 24 185.194.138.0/23 maxlen: 24 2a0a:4bc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:13:c7:19:dc:e1:23:ab:86:93:7c:7c:3e:8f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcb985549a065db7f89ac1079a1185198b97f1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a7:41:eb:fc:fa:8d:b3:4e:15:ed:ef:11:94: 4c:ba:2a:90:78:65:4b:94:c5:43:6a:63:dd:54:ba: 9f:db:01:d5:44:0b:19:71:09:3b:9a:18:1f:bc:35: 8d:36:2d:31:d3:d3:a0:79:26:ce:b1:5d:4a:15:6b: 93:46:9d:37:c0:dd:57:43:59:07:7b:33:a8:32:17: 28:79:fd:e3:de:ae:09:6b:c8:b9:dd:60:7f:ac:04: 83:4a:ff:3c:f4:51:1a:7a:47:69:5c:df:e6:22:2e: a3:9b:da:da:21:12:0b:9a:c2:e9:59:4b:de:9b:68: e3:21:00:4d:1d:0d:d8:5b:70:c3:d9:5f:18:04:7d: b8:36:de:e3:b8:87:be:79:7c:d7:7f:3c:b4:cf:2a: c0:14:f7:3a:83:f6:32:c9:70:b9:7f:e9:ea:3e:47: 6d:9a:37:ab:a4:88:63:5f:52:95:1c:5f:d5:dc:60: 5a:4d:e8:28:f6:c3:ec:1a:2f:3d:fb:c3:6b:2d:6f: e5:f6:3f:84:c8:30:d3:c8:29:a4:f6:2b:d3:41:88: d8:ef:36:47:85:57:a6:aa:a2:a9:44:01:d4:40:f1: 53:f9:18:c2:42:1f:42:b1:b6:65:e2:42:f8:d4:4a: e1:da:05:6f:03:ab:04:af:d0:1e:0a:9c:98:40:1a: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:85:54:9A:06:5D:B7:F8:9A:C1:07:9A:11:85:19:8B:97:F1:D8 X509v3 Authority Key Identifier: keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/vLmFVJoGXbf4msEHmhGFGYuX8dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.136.0/22 IPv6: 2a0a:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption a2:e0:90:04:54:f9:75:53:10:aa:8c:68:57:9e:4a:07:78:bf: 82:af:bc:0e:c8:d7:3f:7c:44:d1:05:8b:78:32:3c:83:83:64: 26:eb:58:10:2c:87:45:b5:82:8f:ea:fa:34:fc:3a:e5:a4:01: 89:70:3e:9a:d1:40:54:cb:af:5b:61:5c:e8:0b:22:7e:8f:10: 7e:25:e6:1b:66:64:5f:35:4d:18:bb:39:70:cf:03:ca:20:89: 33:bd:f0:7e:e3:9c:6c:f1:ed:57:7b:2b:06:ac:97:37:42:7e: c9:76:19:d5:e9:f2:f3:ed:46:89:b4:e9:8a:67:22:34:69:aa: 36:99:ca:f5:28:c9:8c:51:ae:b9:6b:96:82:dc:19:94:10:ae: 0b:1a:96:80:61:44:f2:d9:85:41:d7:30:2c:1a:37:b2:0a:e8: 0d:a5:be:eb:c6:06:18:0e:21:73:16:9f:49:88:4e:b0:9a:06: cd:e6:84:f3:17:7e:ba:cf:5a:5e:ce:60:cc:d5:bf:e0:57:a9: d4:2c:75:da:86:96:28:2a:16:7c:5e:e9:89:20:b4:96:b4:38: fd:02:9d:5a:46:15:9b:e1:e4:42:9f:b4:5e:ca:5e:76:ec:3c: 13:93:a5:ba:1d:65:68:91:32:9f:23:64:f8:c6:fd:2b:cf:ac: 13:83:8b:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87hPHGdzhI6uGk3x8Po/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTAxMDE5NDQ0MGVlNDBmNWRlNDJmMGMxYjJiM2QzNzFi Y2Q4NjMwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2I5ODU1NDlhMDY1ZGI3Zjg5YWMxMDc5YTExODUxOThiOTdmMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KdB6/z6jbNOFe3vEZRMuiqQeGVL lMVDamPdVLqf2wHVRAsZcQk7mhgfvDWNNi0x09OgeSbOsV1KFWuTRp03wN1XQ1kH ezOoMhcoef3j3q4Ja8i53WB/rASDSv889FEaekdpXN/mIi6jm9raIRILmsLpWUve m2jjIQBNHQ3YW3DD2V8YBH24Nt7juIe+eXzXfzy0zyrAFPc6g/YyyXC5f+nqPkdt mjerpIhjX1KVHF/V3GBaTego9sPsGi89+8NrLW/l9j+EyDDTyCmk9ivTQYjY7zZH hVemqqKpRAHUQPFT+RjCQh9CsbZl4kL41Erh2gVvA6sEr9AeCpyYQBrv8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLy5hVSaBl23+JrBB5oRhRmLl/HYMB8GA1UdIwQY MBaAFARQEBlEQO5A9d5C8MGys9NxvNhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTkt YjdiZDEwZTQ0ODlmLzEvdkxtRlZKb0dYYmY0bXNFSG1oR0ZHWXVYOGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ODI2ZjUtZjk3ZS00MzllLWIxOTktYjdiZDEwZTQ0ODlm LzEvQkZBUUdVUkE3a0QxM2tMd3diS3owM0c4MkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucKIMA0E AgACMAcDBQMqCkvAMA0GCSqGSIb3DQEBCwUAA4IBAQCi4JAEVPl1UxCqjGhXnkoH eL+Cr7wOyNc/fETRBYt4MjyDg2Qm61gQLIdFtYKP6vo0/DrlpAGJcD6a0UBUy69b YVzoCyJ+jxB+JeYbZmRfNU0YuzlwzwPKIIkzvfB+45xs8e1XeysGrJc3Qn7JdhnV 6fLz7UaJtOmKZyI0aao2mcr1KMmMUa65a5aC3BmUEK4LGpaAYUTy2YVB1zAsGjey CugNpb7rxgYYDiFzFp9JiE6wmgbN5oTzF366z1pezmDM1b/gV6nULHXahpYoKhZ8 XumJILSWtDj9Ap1aRhWb4eRCn7Reyl527DwTk6W6HWVokTKfI2T4xv0rz6wTg4tJ -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:00 2026 by rpki-client