This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VTzEOp78-nS92ZtM1kydKrvIun4.roa File: VTzEOp78-nS92ZtM1kydKrvIun4.roa (raw, json) Hash identifier: 4Oma9YuiIrbxbcepgSl7eoeXLnYb3W8amRa6JbEKrQE= Subject key identifier: 55:3C:C4:3A:9E:FC:FA:74:BD:D9:9B:4C:D6:4C:9D:2A:BB:C8:BA:7E Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F640FBA5A523A3C96D065C4BFC63E Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VTzEOp78-nS92ZtM1kydKrvIun4.roa Signing time: Fri 02 Jan 2026 02:18:02 +0000 ROA not before: Fri 02 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209409 IP address blocks: 77.79.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:64:0f:ba:5a:52:3a:3c:96:d0:65:c4:bf:c6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=553cc43a9efcfa74bdd99b4cd64c9d2abbc8ba7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:ed:a0:fb:f9:f5:e9:08:3b:be:4d:5d:a7: 66:b0:a3:0e:18:16:4a:06:01:4e:5d:27:12:1a:94: 6a:3c:2b:d0:a5:07:d0:69:17:9a:27:b4:9e:93:63: 07:d0:8f:01:b8:7b:76:f9:49:dc:1d:d0:6a:13:3a: 1c:6c:06:e7:e6:4b:74:6a:77:9a:c2:ae:05:53:eb: 20:a9:e4:b4:03:02:f3:1f:b1:d1:c0:f5:58:a5:41: 1f:d3:c4:85:16:7a:dc:61:b2:ac:d8:1d:fb:a6:97: 35:85:52:ab:0d:0b:f4:4b:7b:27:98:12:08:61:18: c6:16:ed:82:0d:a2:ae:be:50:1c:98:95:b2:b6:e4: 58:aa:60:2f:12:1a:e0:97:c6:1b:90:cd:cc:1d:b8: 48:5a:21:2a:1c:c7:0f:72:a5:d1:06:58:c3:ad:e2: 32:e4:73:76:54:50:30:7e:03:9c:71:16:b3:44:7f: 8c:fa:3c:ce:91:f5:b5:ec:d4:ad:b1:6a:a6:37:b7: d0:0f:41:7d:d7:54:3b:7d:03:35:7c:6a:69:18:fb: 2b:36:87:48:d1:31:06:d1:78:dd:29:b3:30:f5:43: 65:c4:f1:c1:3d:e1:fb:74:0a:c9:8c:d7:1f:c7:92: 27:92:f7:c1:5c:a5:9b:67:45:da:04:59:8d:67:0c: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3C:C4:3A:9E:FC:FA:74:BD:D9:9B:4C:D6:4C:9D:2A:BB:C8:BA:7E X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VTzEOp78-nS92ZtM1kydKrvIun4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.79.200.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:45:cd:9f:c3:8e:4d:c7:d7:60:2f:19:55:95:12:49:59:d3: 45:15:a0:f2:e6:24:01:06:bf:7c:fc:fd:67:75:02:30:b3:8f: fa:f8:a3:a2:da:ee:31:5f:1e:df:56:54:f5:13:7d:84:12:90: 7c:27:ea:b7:fa:ac:da:2a:21:00:ad:fa:24:49:1a:ad:2f:79: ed:6f:c9:a1:a9:e2:83:35:f4:c7:56:4b:b4:9b:9f:7d:57:fc: 4b:78:bd:e8:1d:0e:03:c7:c6:ee:28:46:ff:db:b4:62:1f:6d: b4:12:8e:35:57:2a:9e:34:26:b4:59:44:a5:f0:d0:8d:0f:91: 8e:69:77:fa:3c:b3:8d:41:48:bd:67:aa:24:aa:57:df:d8:81: e8:27:bd:ff:6a:84:3c:ee:0c:0d:6a:c7:e9:90:63:30:8f:f7: f8:7c:f5:a2:30:32:bf:2d:0f:56:e6:be:6d:f5:fd:03:79:56: f6:4e:0a:32:27:bb:6d:34:2d:1a:99:d1:c0:b3:55:67:65:91: 14:d4:92:61:7e:29:db:aa:31:42:8a:27:db:27:d8:de:6e:55: f5:10:2f:0d:ca:33:fd:75:94:a1:91:ac:f3:02:cf:d5:40:f4: 49:57:b3:04:cd:09:ac:36:bb:b0:7a:a0:fe:82:33:92:12:11: f8:2b:e1:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2QPulpSOjyW0GXEv8Y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTNjYzQzYTllZmNmYTc0YmRkOTliNGNkNjRjOWQyYWJiYzhiYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4XtoPv59ekIO75NXadmsKMOGBZK BgFOXScSGpRqPCvQpQfQaReaJ7Sek2MH0I8BuHt2+UncHdBqEzocbAbn5kt0anea wq4FU+sgqeS0AwLzH7HRwPVYpUEf08SFFnrcYbKs2B37ppc1hVKrDQv0S3snmBII YRjGFu2CDaKuvlAcmJWytuRYqmAvEhrgl8YbkM3MHbhIWiEqHMcPcqXRBljDreIy 5HN2VFAwfgOccRazRH+M+jzOkfW17NStsWqmN7fQD0F911Q7fQM1fGppGPsrNodI 0TEG0XjdKbMw9UNlxPHBPeH7dArJjNcfx5InkvfBXKWbZ0XaBFmNZwwIBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFU8xDqe/Pp0vdmbTNZMnSq7yLp+MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvVlR6RU9wNzgtblM5Mlp0TTFreWRLcnZJdW40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATU/IMA0G CSqGSIb3DQEBCwUAA4IBAQAsRc2fw45Nx9dgLxlVlRJJWdNFFaDy5iQBBr98/P1n dQIws4/6+KOi2u4xXx7fVlT1E32EEpB8J+q3+qzaKiEArfokSRqtL3ntb8mhqeKD NfTHVku0m599V/xLeL3oHQ4Dx8buKEb/27RiH220Eo41VyqeNCa0WUSl8NCND5GO aXf6PLONQUi9Z6okqlff2IHoJ73/aoQ87gwNasfpkGMwj/f4fPWiMDK/LQ9W5r5t 9f0DeVb2TgoyJ7ttNC0amdHAs1VnZZEU1JJhfinbqjFCiifbJ9jeblX1EC8NyjP9 dZShkazzAs/VQPRJV7MEzQmsNruweqD+gjOSEhH4K+H1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:07 2026 by rpki-client