This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/VEt141JORS4uXfTBqMEFS8dl95o.roa File: VEt141JORS4uXfTBqMEFS8dl95o.roa (raw, json) Hash identifier: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts= Subject key identifier: 54:4B:75:E3:52:4E:45:2E:2E:5D:F4:C1:A8:C1:05:4B:C7:65:F7:9A Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Certificate serial: 019B7F832CA5CA21F36ED585820E378AF80F Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/VEt141JORS4uXfTBqMEFS8dl95o.roa Signing time: Fri 02 Jan 2026 16:21:01 +0000 ROA not before: Fri 02 Jan 2026 16:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15704 IP address blocks: 85.85.104.0/21 maxlen: 21 85.85.112.0/20 maxlen: 20 85.85.160.0/20 maxlen: 21 85.85.176.0/20 maxlen: 21 85.85.200.0/21 maxlen: 21 85.85.224.0/20 maxlen: 20 85.86.24.0/21 maxlen: 21 85.86.32.0/21 maxlen: 21 85.86.56.0/21 maxlen: 21 85.86.64.0/21 maxlen: 21 85.86.176.0/21 maxlen: 24 85.86.184.0/21 maxlen: 24 85.86.208.0/21 maxlen: 21 85.86.216.0/22 maxlen: 22 85.86.232.0/21 maxlen: 21 85.86.240.0/21 maxlen: 22 85.86.248.0/21 maxlen: 24 85.87.0.0/16 maxlen: 24 85.87.8.0/21 maxlen: 22 85.87.160.0/21 maxlen: 22 85.87.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2c:a5:ca:21:f3:6e:d5:85:82:0e:37:8a:f8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Validity Not Before: Jan 2 16:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=544b75e3524e452e2e5df4c1a8c1054bc765f79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:09:83:4b:36:90:72:43:09:81:f3:4d:b9: 22:ba:66:92:e9:93:5a:04:01:17:86:50:aa:0d:ea: c8:f6:c0:60:40:a8:ea:df:7d:59:0f:67:71:1d:1c: 67:c8:5d:81:f9:b8:31:c1:91:9a:e4:9d:7f:62:db: ab:8a:fc:c0:11:59:d0:50:fd:de:a9:ba:63:db:4a: 99:49:7b:32:b9:ef:3c:ee:25:84:41:b4:cd:33:1c: 9d:0e:60:90:16:69:ba:77:50:e3:dd:2b:c9:9c:a0: 65:a1:48:2d:b9:01:08:13:30:80:55:c7:37:c8:55: 26:73:89:d5:23:2e:ef:d5:37:67:2a:ce:ab:71:72: e3:a8:2e:01:15:ff:09:de:4b:69:2b:02:57:02:ab: 88:23:e9:68:86:0e:bf:06:17:f4:f1:c4:26:ab:b1: 9f:b6:88:7c:8b:9a:9b:99:fc:f1:c3:6e:4b:de:bf: 94:59:4a:0d:84:4d:af:c3:9c:29:36:c9:73:35:c0: a8:c6:ce:57:31:b9:6f:06:fb:d6:c7:bb:33:9c:5c: 08:62:e7:99:8e:af:a8:cd:37:d4:51:a1:27:b5:bb: 8b:81:b4:e7:ef:33:a3:a8:47:45:35:08:72:d5:e0: 23:fd:66:c6:6b:52:2e:8b:aa:7d:cc:8a:49:89:1c: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4B:75:E3:52:4E:45:2E:2E:5D:F4:C1:A8:C1:05:4B:C7:65:F7:9A X509v3 Authority Key Identifier: keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/VEt141JORS4uXfTBqMEFS8dl95o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.85.104.0-85.85.127.255 85.85.160.0/19 85.85.200.0/21 85.85.224.0/20 85.86.24.0-85.86.39.255 85.86.56.0-85.86.71.255 85.86.176.0/20 85.86.208.0-85.86.219.255 85.86.232.0-85.87.255.255 Signature Algorithm: sha256WithRSAEncryption 76:96:0d:b7:cc:b6:d3:ad:c9:ad:67:7a:d2:2d:b8:f7:31:0d: 57:f0:b0:e1:68:dc:d8:70:65:86:1e:27:8e:64:db:cf:62:18: 84:0c:5c:61:1a:77:d1:90:22:a1:1c:0b:a3:da:cf:08:ae:7a: 0c:0b:7c:ae:5a:f0:3c:ac:6a:fd:4e:2a:f7:2f:bd:3f:ef:87: ab:f1:92:cc:42:1a:76:9b:b7:f6:2d:a3:a8:d7:16:41:ae:0e: 92:02:4c:59:37:77:38:09:cf:c5:de:a3:45:76:1e:65:87:05: 37:ef:8b:6e:74:f0:09:5b:05:62:44:28:32:a1:0d:54:1c:84: f3:2a:a2:6e:fe:9e:01:68:ec:e6:2f:69:00:a7:14:fd:a7:bf: 1f:30:67:03:01:fa:c6:60:10:02:9f:ba:e7:57:59:be:12:2d: e7:4f:33:28:58:88:c4:4f:60:aa:e9:7c:32:14:41:4a:f9:49: 1e:dd:76:d9:4c:23:b3:c3:86:28:47:f7:c0:d9:0c:19:d2:42: 3d:76:ba:b8:4c:76:9e:03:18:7b:74:0b:f4:d3:33:76:f1:62: 24:fe:71:79:d8:4d:c2:50:af:88:35:99:08:6d:ec:7d:81:99: a6:0e:c6:50:ca:ab:a4:b2:70:cd:82:16:08:d0:0d:94:fe:45: 83:4c:52:5b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt/gyylyiHzbtWFgg43ivgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz NTg1ZTkwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDRiNzVlMzUyNGU0NTJlMmU1ZGY0YzFhOGMxMDU0YmM3NjVmNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzroJg0s2kHJDCYHzTbkiumaS6ZNa BAEXhlCqDerI9sBgQKjq331ZD2dxHRxnyF2B+bgxwZGa5J1/YturivzAEVnQUP3e qbpj20qZSXsyue887iWEQbTNMxydDmCQFmm6d1Dj3SvJnKBloUgtuQEIEzCAVcc3 yFUmc4nVIy7v1TdnKs6rcXLjqC4BFf8J3ktpKwJXAquII+lohg6/Bhf08cQmq7Gf toh8i5qbmfzxw25L3r+UWUoNhE2vw5wpNslzNcCoxs5XMblvBvvWx7sznFwIYueZ jq+ozTfUUaEntbuLgbTn7zOjqEdFNQhy1eAj/WbGa1Iui6p9zIpJiRzTeQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFFRLdeNSTkUuLl30wajBBUvHZfeaMB8GA1UdIwQY MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt MDRlODEyZDQ4ZTcyLzEvVkV0MTQxSk9SUzR1WGZUQnFNRUZTOGRsOTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBjBAIAATBdMAwDBANVVWgD BAdVVQADBAVVVaADBANVVcgDBARVVeAwDAMEA1VWGAMEA1VWIDAMAwQDVVY4AwQD VVZAAwQEVVawMAwDBARVVtADBAJVVtgwCwMEA1VW6AMDA1VQMA0GCSqGSIb3DQEB CwUAA4IBAQB2lg23zLbTrcmtZ3rSLbj3MQ1X8LDhaNzYcGWGHieOZNvPYhiEDFxh GnfRkCKhHAuj2s8IrnoMC3yuWvA8rGr9Tir3L70/74er8ZLMQhp2m7f2LaOo1xZB rg6SAkxZN3c4Cc/F3qNFdh5lhwU374tudPAJWwViRCgyoQ1UHITzKqJu/p4BaOzm L2kApxT9p78fMGcDAfrGYBACn7rnV1m+Ei3nTzMoWIjET2Cq6XwyFEFK+Uke3XbZ TCOzw4YoR/fA2QwZ0kI9drq4THaeAxh7dAv00zN28WIk/nF52E3CUK+INZkIbex9 gZmmDsZQyquksnDNghYI0A2U/kWDTFJb -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:10 2026 by rpki-client