This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/vBrlV27V1bfTVLlILh00n20z_uY.roa File: vBrlV27V1bfTVLlILh00n20z_uY.roa (raw, json) Hash identifier: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8= Subject key identifier: BC:1A:E5:57:6E:D5:D5:B7:D3:54:B9:48:2E:1D:34:9F:6D:33:FE:E6 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D26A280F847A2B59022E0184C8E6 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/vBrlV27V1bfTVLlILh00n20z_uY.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31253 IP address blocks: 80.242.222.0/24 maxlen: 24 80.242.223.0/24 maxlen: 24 188.127.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d2:6a:28:0f:84:7a:2b:59:02:2e:01:84:c8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc1ae5576ed5d5b7d354b9482e1d349f6d33fee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:9e:d6:2b:2d:61:e9:c1:15:dc:8e:47:fb: dd:bb:0d:90:0c:76:72:01:2d:dd:45:43:cf:b6:64: 27:c7:e9:f0:c4:00:39:23:93:b4:40:ba:34:5a:bc: 65:b7:fa:b6:86:04:7c:2b:8c:97:2c:7b:11:5d:ec: 46:49:62:bd:70:bf:f1:3b:10:72:cb:8d:74:4e:76: aa:c8:90:5d:9e:87:e7:07:49:3c:d6:96:59:2a:95: d8:65:7d:99:21:52:ad:f8:d6:4e:9d:92:c9:2d:cc: 6d:59:c4:ba:46:70:5a:b4:31:c7:36:2d:36:fe:31: f4:ed:95:de:38:21:a2:e1:b1:26:1f:97:15:20:32: 71:e2:c2:0a:25:b5:72:d4:8b:89:87:c2:b0:e9:69: a5:03:a8:7e:0b:dd:24:cd:bb:5a:e2:c9:63:42:e0: f1:bd:d8:f7:ca:99:86:1f:d6:68:02:c6:34:86:65: 1e:98:34:c1:35:2b:ed:4d:25:5e:3a:b1:e1:93:ec: 1d:80:e9:85:35:c6:64:35:b0:15:d5:68:fb:f3:17: c8:59:8d:e2:2b:86:75:a9:c4:8e:11:90:67:4a:c2: 4a:30:42:40:0b:f1:59:57:9f:a6:74:e3:2d:48:70: d9:df:b4:12:ae:c5:33:0b:1f:f3:67:67:bc:83:3f: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1A:E5:57:6E:D5:D5:B7:D3:54:B9:48:2E:1D:34:9F:6D:33:FE:E6 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/vBrlV27V1bfTVLlILh00n20z_uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.242.222.0/23 188.127.40.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:c4:a3:d8:ef:d6:61:9d:27:87:2f:57:56:33:78:27:f5:b0: fb:72:10:67:1d:74:4f:dc:b4:63:95:08:c8:c4:55:7b:65:9c: 3b:83:4d:a2:df:5e:e2:c9:1d:da:86:48:47:d4:6b:66:f7:12: 78:c3:4e:dc:ba:04:30:5d:63:ed:3d:41:16:c7:0e:dc:3c:9f: 97:70:74:7c:69:54:21:e8:5d:e9:cd:4d:e9:e5:73:ab:60:38: 27:7a:9d:24:5a:bc:37:c0:9c:44:b6:70:4d:c4:29:93:77:ff: e5:37:03:7f:b9:37:8a:b0:18:c8:4d:ba:83:19:18:be:63:f4: 02:e0:a4:94:e5:b0:0a:46:9a:54:06:59:ee:81:f4:1a:fc:4d: 53:8e:07:cd:1b:db:6a:66:3d:d5:5f:4d:d3:4a:2c:7f:0a:f0: 46:66:ec:92:69:92:eb:cb:57:d6:48:27:26:90:46:91:b8:8f: 18:54:3d:f5:61:ad:a4:69:47:fa:3e:30:63:22:44:fd:b6:e7: 0e:38:38:a5:a4:48:a7:92:c0:8f:07:e3:0a:bc:58:3f:5d:7a: 55:d0:69:5a:87:20:c4:dc:c3:70:a9:52:72:ba:64:ce:ba:67: 83:59:16:c6:43:09:f9:b0:ec:b0:66:5d:6b:c3:c1:bf:97:57: c7:84:be:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WNJqKA+EeitZAi4BhMjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzFhZTU1NzZlZDVkNWI3ZDM1NGI5NDgyZTFkMzQ5ZjZkMzNmZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwKe1istYenBFdyOR/vduw2QDHZy AS3dRUPPtmQnx+nwxAA5I5O0QLo0Wrxlt/q2hgR8K4yXLHsRXexGSWK9cL/xOxBy y410TnaqyJBdnofnB0k81pZZKpXYZX2ZIVKt+NZOnZLJLcxtWcS6RnBatDHHNi02 /jH07ZXeOCGi4bEmH5cVIDJx4sIKJbVy1IuJh8Kw6WmlA6h+C90kzbta4sljQuDx vdj3ypmGH9ZoAsY0hmUemDTBNSvtTSVeOrHhk+wdgOmFNcZkNbAV1Wj78xfIWY3i K4Z1qcSOEZBnSsJKMEJAC/FZV5+mdOMtSHDZ37QSrsUzCx/zZ2e8gz88MQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLwa5Vdu1dW301S5SC4dNJ9tM/7mMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvdkJybFYyN1YxYmZUVkxsSUxoMDBuMjB6X3VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUPLeAwQA vH8oMA0GCSqGSIb3DQEBCwUAA4IBAQCPxKPY79ZhnSeHL1dWM3gn9bD7chBnHXRP 3LRjlQjIxFV7ZZw7g02i317iyR3ahkhH1Gtm9xJ4w07cugQwXWPtPUEWxw7cPJ+X cHR8aVQh6F3pzU3p5XOrYDgnep0kWrw3wJxEtnBNxCmTd//lNwN/uTeKsBjITbqD GRi+Y/QC4KSU5bAKRppUBlnugfQa/E1TjgfNG9tqZj3VX03TSix/CvBGZuySaZLr y1fWSCcmkEaRuI8YVD31Ya2kaUf6PjBjIkT9tucOODilpEinksCPB+MKvFg/XXpV 0GlahyDE3MNwqVJyumTOumeDWRbGQwn5sOywZl1rw8G/l1fHhL6T -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:58 2026 by rpki-client