This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa File: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (raw, json) Hash identifier: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o= Subject key identifier: 55:F7:64:83:C2:6B:47:FF:A8:61:35:CA:A6:FD:D9:16:F6:4B:35:A4 Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Certificate serial: 019BA1DE88898F9A9B5BF6FDA2E32681BDF3 Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa Signing time: Fri 09 Jan 2026 08:27:54 +0000 ROA not before: Fri 09 Jan 2026 08:27:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 37.44.160.0/19 maxlen: 19 83.243.128.0/19 maxlen: 19 83.243.160.0/19 maxlen: 19 83.243.192.0/20 maxlen: 20 83.243.208.0/20 maxlen: 20 83.243.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:de:88:89:8f:9a:9b:5b:f6:fd:a2:e3:26:81:bd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Validity Not Before: Jan 9 08:27:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55f76483c26b47ffa86135caa6fdd916f64b35a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:56:a8:ca:d0:09:df:1a:2b:89:da:77:3a: b8:7f:9c:16:be:09:97:28:45:a0:a4:30:a7:dd:7f: 88:05:13:d6:bc:7b:74:69:55:84:6e:b6:b1:01:3d: b2:29:15:6f:fd:90:a7:19:f9:f9:d4:34:d2:24:3e: c0:48:67:33:94:62:f2:19:32:f8:73:b1:cf:8d:76: bd:a7:5f:01:09:b6:e2:7d:c6:ff:43:97:9d:6c:9a: 08:ee:8c:e7:ed:a7:85:c9:2f:50:cc:ce:1f:93:90: 52:19:8e:3a:d2:8a:9f:d2:6d:7d:ec:45:f2:6c:a3: 76:fe:c4:d7:3a:56:24:53:76:db:e8:51:01:c9:f8: a2:25:17:e2:84:f6:c7:ba:f4:f0:61:d7:45:f2:bf: e3:6e:6a:b3:4b:63:04:da:82:2f:d5:bb:65:1e:0f: 20:ae:89:41:fa:9d:64:f6:f4:3c:fb:04:1c:7d:22: 6a:5d:ac:16:ac:89:1e:2d:00:9a:2e:b4:4b:ab:5d: 20:c6:91:81:99:3b:5e:84:79:68:42:94:4d:ea:69: d4:72:ef:b2:36:4b:c5:74:d8:a4:3e:b2:9d:5c:3f: d8:97:1b:24:65:35:aa:8c:c2:45:4d:12:0e:eb:3c: 70:db:56:15:cd:37:cb:42:85:d3:5c:c5:37:3c:c0: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F7:64:83:C2:6B:47:FF:A8:61:35:CA:A6:FD:D9:16:F6:4B:35:A4 X509v3 Authority Key Identifier: keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.160.0/19 83.243.128.0/17 Signature Algorithm: sha256WithRSAEncryption 69:68:a3:5a:74:01:37:06:6d:ae:03:a8:e4:4d:bf:7f:5b:2f: 46:6f:e2:80:fc:6f:a9:84:a8:d6:bb:49:d0:6e:1f:8b:c9:25: 85:4c:43:90:68:3d:ba:c9:71:24:fa:c4:fb:b2:35:92:b6:33: aa:4a:ab:4d:d3:ed:78:a8:3b:24:c5:c4:70:56:76:b2:5a:aa: 4a:db:5a:e3:be:f3:73:39:5b:07:35:31:10:3c:2b:7a:a3:0e: 0b:cc:cf:d2:e7:bf:15:29:12:7b:fa:18:dc:4d:53:63:c6:2d: af:c0:6e:a8:c1:d3:67:be:e0:78:81:57:43:f7:72:17:90:42: 94:6e:1f:cd:c6:a1:bf:69:55:1c:3b:d7:93:6a:8f:af:fc:3f: e9:77:d7:c8:4b:d7:1c:c0:e7:9a:75:e7:fc:3a:c4:e1:74:48: 30:7b:39:48:14:82:c3:fb:06:39:30:6b:db:49:8e:d6:a4:44: f5:e9:7a:a0:19:de:ba:66:15:61:97:b9:9e:61:de:7d:60:f0: b8:c0:7d:97:5e:5a:94:d3:a6:6b:99:f1:6c:11:f3:a9:b6:f8: 05:60:70:44:15:40:26:48:14:65:0d:9c:6c:bb:4b:48:a8:a4: e6:b3:80:17:c9:73:fd:95:85:54:c5:14:97:35:42:c5:fa:08: e2:22:a2:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuh3oiJj5qbW/b9ouMmgb3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy ZGYwN2QwHhcNMjYwMTA5MDgyNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWY3NjQ4M2MyNmI0N2ZmYTg2MTM1Y2FhNmZkZDkxNmY2NGIzNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwilWqMrQCd8aK4nadzq4f5wWvgmX KEWgpDCn3X+IBRPWvHt0aVWEbraxAT2yKRVv/ZCnGfn51DTSJD7ASGczlGLyGTL4 c7HPjXa9p18BCbbifcb/Q5edbJoI7ozn7aeFyS9QzM4fk5BSGY460oqf0m197EXy bKN2/sTXOlYkU3bb6FEByfiiJRfihPbHuvTwYddF8r/jbmqzS2ME2oIv1btlHg8g rolB+p1k9vQ8+wQcfSJqXawWrIkeLQCaLrRLq10gxpGBmTtehHloQpRN6mnUcu+y NkvFdNikPrKdXD/YlxskZTWqjMJFTRIO6zxw21YVzTfLQoXTXMU3PMAwQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFX3ZIPCa0f/qGE1yqb92Rb2SzWkMB8GA1UdIwQY MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt YjE1NTI0MDliNmQxLzEvVmZka2c4SnJSXy1vWVRYS3B2M1pGdlpMTmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJSygAwQH U/OAMA0GCSqGSIb3DQEBCwUAA4IBAQBpaKNadAE3Bm2uA6jkTb9/Wy9Gb+KA/G+p hKjWu0nQbh+LySWFTEOQaD26yXEk+sT7sjWStjOqSqtN0+14qDskxcRwVnayWqpK 21rjvvNzOVsHNTEQPCt6ow4LzM/S578VKRJ7+hjcTVNjxi2vwG6owdNnvuB4gVdD 93IXkEKUbh/NxqG/aVUcO9eTao+v/D/pd9fIS9ccwOeadef8OsThdEgwezlIFILD +wY5MGvbSY7WpET16XqgGd66ZhVhl7meYd59YPC4wH2XXlqU06ZrmfFsEfOptvgF YHBEFUAmSBRlDZxsu0tIqKTms4AXyXP9lYVUxRSXNULF+gjiIqJ9 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:40 2026 by rpki-client