This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/VZlk3_EL61CYb3RNlcU2J6pWmUI.roa File: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (raw, json) Hash identifier: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo= Subject key identifier: 55:99:64:DF:F1:0B:EB:50:98:6F:74:4D:95:C5:36:27:AA:56:99:42 Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9 Certificate serial: 019B7BA52136CE50B38CA3591BAA7AFC3AD1 Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/VZlk3_EL61CYb3RNlcU2J6pWmUI.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 185.27.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:21:36:ce:50:b3:8c:a3:59:1b:aa:7a:fc:3a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=559964dff10beb50986f744d95c53627aa569942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:6f:e7:54:ee:e7:ff:79:00:5b:0d:0a:47: 0c:4a:0b:d0:13:08:52:61:3a:b9:c6:10:40:11:00: 4e:9d:43:b8:9f:69:e6:b6:86:61:ed:f1:81:48:3e: 46:88:28:07:66:28:cb:ef:42:7e:e5:da:da:d3:0a: 8f:ac:e3:99:dc:eb:85:4e:d0:b4:1d:ce:a9:2b:94: c4:1c:b4:72:1a:f8:70:48:96:12:cc:fc:21:c5:2f: 36:d0:a3:1f:97:66:27:af:eb:3a:cb:dd:11:09:bd: 0a:0d:ca:a6:32:8f:38:f0:3c:d9:3a:41:c2:a6:1f: 45:f3:0d:e0:01:b7:d1:0b:e5:5d:a4:bb:c7:a9:57: 1e:fd:e4:4e:cf:7d:fd:88:10:8f:60:cc:2e:23:6c: 2d:1c:89:4d:7f:f1:be:67:18:90:7b:56:21:3b:36: 38:e2:44:f7:7d:13:34:92:8c:50:4e:ce:7b:06:e2: d3:8b:e4:0c:57:d8:20:90:89:3b:cf:3b:80:79:a7: 6a:3f:99:c9:e5:ab:9b:12:87:6b:cd:a4:30:bc:92: c5:19:d7:56:ca:07:0e:a2:d3:a5:45:22:31:2a:4e: a4:67:65:e7:57:d1:ef:35:d2:4e:0f:7c:f8:65:20: 2f:c5:36:83:de:83:c6:71:be:43:f4:54:c5:d1:52: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:64:DF:F1:0B:EB:50:98:6F:74:4D:95:C5:36:27:AA:56:99:42 X509v3 Authority Key Identifier: keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/VZlk3_EL61CYb3RNlcU2J6pWmUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.44.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:60:90:53:19:dc:8a:8d:e2:7a:d9:42:38:fd:d4:a2:fc:d4: 99:76:3c:00:ae:59:01:d1:7f:c8:79:f1:75:d2:06:75:5f:42: a2:f4:a1:3d:0f:a3:2e:b9:2e:38:77:b6:3a:17:2c:fb:08:91: 88:88:50:2c:41:4e:84:1c:f0:a9:b9:6c:20:d8:43:62:50:b2: 45:c3:2e:c1:e2:a1:6c:85:bb:75:98:29:c7:60:03:b5:8e:f2: ed:f8:4b:d5:56:98:ea:96:15:1c:b7:16:f1:3c:5b:26:98:76: 48:9f:b9:d7:f8:ca:9a:4a:8f:9d:e4:b4:c1:12:b0:b8:4f:76: 40:b2:8a:20:59:1e:db:cf:4f:9d:75:6e:d4:b5:09:e3:13:93: 99:ad:6d:a2:f1:ed:9a:fe:ba:83:61:01:2f:b2:12:2d:35:6f: 9a:f2:e9:c2:fd:e3:ca:fb:df:f9:e3:9b:20:47:96:49:e4:38: ca:37:a1:85:2f:57:f5:0c:8f:53:1b:a5:35:fd:c9:ee:84:07: 62:d8:a3:9a:6a:ec:dc:13:20:e2:75:7c:87:62:4c:18:67:18: c8:18:62:96:08:63:c1:1f:c8:8b:f8:57:27:05:9a:78:94:ad: 3f:15:a6:ae:aa:72:88:50:78:21:4e:a5:54:0d:ba:2d:93:88: cd:ae:9b:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSE2zlCzjKNZG6p6/DrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWZhNzA4ZTA5OGU1Njk0MmIxNjJmMzRlNDYzMzQ5N2Yz YWUyZDkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTk5NjRkZmYxMGJlYjUwOTg2Zjc0NGQ5NWM1MzYyN2FhNTY5OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NFv51Tu5/95AFsNCkcMSgvQEwhS YTq5xhBAEQBOnUO4n2nmtoZh7fGBSD5GiCgHZijL70J+5dra0wqPrOOZ3OuFTtC0 Hc6pK5TEHLRyGvhwSJYSzPwhxS820KMfl2Ynr+s6y90RCb0KDcqmMo848DzZOkHC ph9F8w3gAbfRC+VdpLvHqVce/eROz339iBCPYMwuI2wtHIlNf/G+ZxiQe1YhOzY4 4kT3fRM0koxQTs57BuLTi+QMV9ggkIk7zzuAeadqP5nJ5aubEodrzaQwvJLFGddW ygcOotOlRSIxKk6kZ2XnV9HvNdJOD3z4ZSAvxTaD3oPGcb5D9FTF0VIdawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWZZN/xC+tQmG90TZXFNieqVplCMB8GA1UdIwQY MBaAFICvpwjgmOVpQrFi805GM0l/OuLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUt MmE4YTIyNTNmZTBhLzEvVlpsazNfRUw2MUNZYjNSTmxjVTJKNnBXbVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUtMmE4YTIyNTNmZTBh LzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRssMA0G CSqGSIb3DQEBCwUAA4IBAQBtYJBTGdyKjeJ62UI4/dSi/NSZdjwArlkB0X/IefF1 0gZ1X0Ki9KE9D6MuuS44d7Y6Fyz7CJGIiFAsQU6EHPCpuWwg2ENiULJFwy7B4qFs hbt1mCnHYAO1jvLt+EvVVpjqlhUctxbxPFsmmHZIn7nX+MqaSo+d5LTBErC4T3ZA soogWR7bz0+ddW7UtQnjE5OZrW2i8e2a/rqDYQEvshItNW+a8unC/ePK+9/545sg R5ZJ5DjKN6GFL1f1DI9TG6U1/cnuhAdi2KOaauzcEyDidXyHYkwYZxjIGGKWCGPB H8iL+FcnBZp4lK0/FaauqnKIUHghTqVUDbotk4jNrpsO -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:44 2026 by rpki-client