This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa File: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (raw, json) Hash identifier: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s= Subject key identifier: 56:A8:E1:BE:D7:C8:03:F8:FD:00:64:BD:C8:9A:43:04:0E:E9:91:32 Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e Certificate serial: 019B7CEDA43FE838203BE6AC818B7E363009 Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa Signing time: Fri 02 Jan 2026 04:18:27 +0000 ROA not before: Fri 02 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29028 IP address blocks: 141.105.120.0/21 maxlen: 24 141.105.120.0/22 maxlen: 24 141.105.124.0/24 maxlen: 24 141.105.126.0/23 maxlen: 24 178.21.112.0/21 maxlen: 24 185.2.44.0/22 maxlen: 24 185.2.45.0/24 maxlen: 24 185.2.46.0/24 maxlen: 24 193.200.132.0/24 maxlen: 24 194.145.200.0/23 maxlen: 24 2a02:2308::/32 maxlen: 32 2a02:2308:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a4:3f:e8:38:20:3b:e6:ac:81:8b:7e:36:30:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e Validity Not Before: Jan 2 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56a8e1bed7c803f8fd0064bdc89a43040ee99132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:46:84:88:b2:48:f5:39:c3:d6:45:42:2d: 75:82:cf:c4:9c:df:e2:93:80:47:70:0f:0c:84:1e: f7:5b:f7:bc:ae:31:41:8d:63:c4:74:54:7a:b0:45: 60:76:5a:99:8e:23:40:71:7c:e3:53:72:44:2d:9f: 64:81:1f:1b:47:f0:e1:a8:8a:2d:ef:ab:49:7d:9e: fe:27:02:c0:e7:82:4f:11:c8:10:2d:d0:7c:af:be: 86:38:93:e5:36:60:74:75:01:96:38:ee:a5:87:77: e3:cf:50:b5:e2:7e:c0:64:87:d6:29:66:74:d0:5d: 71:3d:2c:34:56:e1:bc:79:4a:69:c9:1b:7d:8b:59: 40:7f:ad:d1:57:97:6e:ce:b4:69:45:1c:5d:c6:51: 87:90:2b:67:57:f0:32:e0:45:64:46:7b:5b:5b:ea: 0a:00:21:45:95:b5:9a:b5:32:f8:3c:31:59:bc:24: e2:a9:88:b4:9b:7c:7c:a0:f4:ed:57:a2:9d:88:2e: cc:4b:77:b0:d7:5e:48:12:f7:a5:31:fa:88:3c:f1: 3f:6d:c2:0c:b4:7f:42:62:95:79:1f:76:2b:97:36: 91:83:85:e5:2d:5f:eb:c9:d1:3d:94:2c:4b:95:e8: ed:c7:e8:e9:d5:3f:a5:b1:c7:a0:82:d8:e8:8c:e3: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:E1:BE:D7:C8:03:F8:FD:00:64:BD:C8:9A:43:04:0E:E9:91:32 X509v3 Authority Key Identifier: keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.120.0/21 178.21.112.0/21 185.2.44.0/22 193.200.132.0/24 194.145.200.0/23 IPv6: 2a02:2308::/32 Signature Algorithm: sha256WithRSAEncryption 6f:63:20:67:47:de:66:89:e2:d3:86:53:41:0e:41:30:39:d8: 6a:d8:fb:82:40:c6:92:f5:64:19:a8:34:9d:49:bd:31:8d:98: be:70:e2:15:3a:c6:71:fd:33:73:99:cc:3b:c2:18:69:50:70: 20:03:8a:e6:ac:82:44:e9:11:4f:43:5c:01:cf:12:8d:fd:df: 25:98:9a:91:9f:4c:6d:33:27:04:b9:3a:d7:6e:d2:3c:35:d9: e2:30:24:8b:de:d6:3f:03:40:a3:3a:16:4d:97:0e:6c:ea:ba: 2e:d6:b6:ee:b1:5c:14:46:93:67:1d:ee:3f:f2:0a:3a:ff:be: 31:cb:11:b5:9f:6c:59:5f:ce:2c:3a:e3:2f:0a:87:4b:bd:ff: be:89:27:e1:e6:1b:0a:c8:24:28:af:ef:5c:77:89:1d:64:c6: 7d:f7:80:fb:d6:71:be:79:ef:85:37:9c:90:e9:d5:2a:b2:c9: 0c:bf:bc:bd:72:6e:8e:68:7c:88:43:74:31:f7:45:52:66:d4: 49:a0:73:7f:55:3a:45:62:72:8c:ae:2c:34:54:16:a9:59:88: 3d:3e:03:41:ae:06:02:63:cd:85:69:51:68:8e:b9:8a:ef:56: 13:dd:a5:d9:40:15:15:d6:7e:0c:ce:23:6f:53:c5:aa:6e:f0: a5:69:bb:48 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt87aQ/6DggO+asgYt+NjAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy ODI5NGUwHhcNMjYwMTAyMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmE4ZTFiZWQ3YzgwM2Y4ZmQwMDY0YmRjODlhNDMwNDBlZTk5MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyxGhIiySPU5w9ZFQi11gs/EnN/i k4BHcA8MhB73W/e8rjFBjWPEdFR6sEVgdlqZjiNAcXzjU3JELZ9kgR8bR/DhqIot 76tJfZ7+JwLA54JPEcgQLdB8r76GOJPlNmB0dQGWOO6lh3fjz1C14n7AZIfWKWZ0 0F1xPSw0VuG8eUppyRt9i1lAf63RV5duzrRpRRxdxlGHkCtnV/Ay4EVkRntbW+oK ACFFlbWatTL4PDFZvCTiqYi0m3x8oPTtV6KdiC7MS3ew115IEvelMfqIPPE/bcIM tH9CYpV5H3YrlzaRg4XlLV/rydE9lCxLlejtx+jp1T+lsceggtjojOPikQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFao4b7XyAP4/QBkvciaQwQO6ZEyMB8GA1UdIwQY MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt MWJiMjdjNWQzOTdlLzEvVnFqaHZ0ZklBX2o5QUdTOXlKcERCQTdwa1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDjWl4AwQD shVwAwQCuQIsAwQAwciEAwQBwpHIMA0EAgACMAcDBQAqAiMIMA0GCSqGSIb3DQEB CwUAA4IBAQBvYyBnR95mieLThlNBDkEwOdhq2PuCQMaS9WQZqDSdSb0xjZi+cOIV OsZx/TNzmcw7whhpUHAgA4rmrIJE6RFPQ1wBzxKN/d8lmJqRn0xtMycEuTrXbtI8 NdniMCSL3tY/A0CjOhZNlw5s6rou1rbusVwURpNnHe4/8go6/74xyxG1n2xZX84s OuMvCodLvf++iSfh5hsKyCQor+9cd4kdZMZ994D71nG+ee+FN5yQ6dUqsskMv7y9 cm6OaHyIQ3Qx90VSZtRJoHN/VTpFYnKMriw0VBapWYg9PgNBrgYCY82FaVFojrmK 71YT3aXZQBUV1n4MziNvU8WqbvClabtI -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:28 2026 by rpki-client