This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/VHl37ymtX_2i6CyUoQNBTqA5Q14.roa File: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (raw, json) Hash identifier: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o= Subject key identifier: 54:79:77:EF:29:AD:5F:FD:A2:E8:2C:94:A1:03:41:4E:A0:39:43:5E Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada Certificate serial: 019B79EBB6400BA6A923C821FFC5584D60B2 Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/VHl37ymtX_2i6CyUoQNBTqA5Q14.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 130.37.0.0/16 maxlen: 24 192.31.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b6:40:0b:a6:a9:23:c8:21:ff:c5:58:4d:60:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=547977ef29ad5ffda2e82c94a103414ea039435e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:0e:1a:60:71:fe:6b:ac:98:70:e7:af:ff: b1:84:67:af:d8:53:81:55:20:8a:b6:90:0f:5b:1e: c5:99:c6:31:4f:e2:bd:0e:24:c2:f6:d3:d8:b7:9b: 8a:3e:55:ef:f8:81:87:d0:78:eb:86:d3:93:bc:8a: 28:59:17:84:58:36:78:56:b4:38:80:34:62:8a:40: a8:e3:f8:d2:3b:ef:8e:92:35:4f:2e:5c:b6:5b:87: b4:9c:00:8c:ec:d6:5f:9b:24:85:ad:4b:51:c1:49: 86:2f:c7:27:1a:4a:47:a8:9a:f5:47:21:4b:46:0e: ec:33:76:8f:18:5e:47:7b:ea:7c:f5:bd:25:18:79: b8:dc:dc:ed:c2:c0:c9:d9:f3:51:26:05:87:b7:7c: 94:96:4a:7a:06:31:cc:17:51:0a:40:d7:f8:83:f1: 41:7b:16:40:a5:52:93:cc:f4:4d:4e:7a:37:6a:7b: 7a:de:0f:7a:b2:3b:ec:be:55:c1:09:4e:5d:04:8c: dd:82:08:cd:dc:95:0e:42:72:68:4c:bd:af:df:c2: 77:a0:38:83:80:f0:65:fd:73:89:e4:a3:2e:4a:ed: 80:c1:1f:73:bc:49:5a:3e:41:ce:3e:d0:7f:bf:8e: 84:ec:e4:19:fe:b5:2c:44:b3:e0:58:5d:c7:ca:9b: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:79:77:EF:29:AD:5F:FD:A2:E8:2C:94:A1:03:41:4E:A0:39:43:5E X509v3 Authority Key Identifier: keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/VHl37ymtX_2i6CyUoQNBTqA5Q14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.37.0.0/16 192.31.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:7b:76:5b:9b:c5:32:77:1f:1a:54:62:40:f2:33:ad:01:b7: aa:4d:01:c3:d1:7f:cd:bc:9e:75:55:63:e0:ba:98:9c:f1:72: 25:b9:48:31:13:e7:72:23:2a:aa:a3:aa:53:bb:a8:9b:63:10: 22:89:35:c9:b9:17:a6:70:72:a1:b1:0d:1f:fb:87:af:d9:3e: e9:5d:ce:ce:e0:b0:cd:93:5c:16:47:a5:04:9f:50:de:7a:15: 94:a4:c0:26:2a:bf:d2:56:5e:72:d1:a9:73:4d:87:98:3a:c2: cb:3e:d7:20:e2:de:a6:e8:ab:14:2b:e8:80:1c:35:cf:29:02: ad:e0:3b:53:53:f2:7e:7e:8b:0b:d7:9e:f4:97:fa:34:c0:a5: 63:64:1f:07:6e:a2:94:b9:bc:fc:eb:fb:08:59:f2:e0:88:0f: 98:90:57:88:05:c0:14:a3:37:52:1b:62:05:3b:aa:9b:03:75: 15:26:5b:b9:37:02:ca:d5:a0:9f:53:b6:54:f6:ee:12:d5:9a: 0d:d4:17:6d:6a:02:c9:bf:9a:8e:ec:34:f3:5e:73:01:77:46: 84:e9:e8:c2:14:05:d6:61:26:88:32:c4:da:b0:38:08:45:77: 39:c7:69:fb:4b:f4:83:cf:e4:01:77:44:cb:35:1e:14:7a:24: a1:82:f8:92 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt567ZAC6apI8gh/8VYTWCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm ZTJhZGEwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDc5NzdlZjI5YWQ1ZmZkYTJlODJjOTRhMTAzNDE0ZWEwMzk0MzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsOGmBx/musmHDnr/+xhGev2FOB VSCKtpAPWx7FmcYxT+K9DiTC9tPYt5uKPlXv+IGH0HjrhtOTvIooWReEWDZ4VrQ4 gDRiikCo4/jSO++OkjVPLly2W4e0nACM7NZfmySFrUtRwUmGL8cnGkpHqJr1RyFL Rg7sM3aPGF5He+p89b0lGHm43NztwsDJ2fNRJgWHt3yUlkp6BjHMF1EKQNf4g/FB exZApVKTzPRNTno3ant63g96sjvsvlXBCU5dBIzdggjN3JUOQnJoTL2v38J3oDiD gPBl/XOJ5KMuSu2AwR9zvElaPkHOPtB/v46E7OQZ/rUsRLPgWF3HypsDpQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFFR5d+8prV/9ougslKEDQU6gOUNeMB8GA1UdIwQY MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt YTMyOTM5NDY5OGQyLzEvVkhsMzd5bXRYXzJpNkN5VW9RTkJUcUE1UTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgiUDBADA H+cwDQYJKoZIhvcNAQELBQADggEBAH57dlubxTJ3HxpUYkDyM60Bt6pNAcPRf828 nnVVY+C6mJzxciW5SDET53IjKqqjqlO7qJtjECKJNcm5F6ZwcqGxDR/7h6/ZPuld zs7gsM2TXBZHpQSfUN56FZSkwCYqv9JWXnLRqXNNh5g6wss+1yDi3qboqxQr6IAc Nc8pAq3gO1NT8n5+iwvXnvSX+jTApWNkHwduopS5vPzr+whZ8uCID5iQV4gFwBSj N1IbYgU7qpsDdRUmW7k3AsrVoJ9TtlT27hLVmg3UF21qAsm/mo7sNPNecwF3RoTp 6MIUBdZhJogyxNqwOAhFdznHaftL9IPP5AF3RMs1HhR6JKGC+JI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:13 2026 by rpki-client