This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/vFoLoBh7oWb6usXmjNjvyipGBRI.roa File: vFoLoBh7oWb6usXmjNjvyipGBRI.roa (raw, json) Hash identifier: 0j1EDxGflRhorx1jgVNGqb1+St0JzyMh9AI0pVLut9s= Subject key identifier: BC:5A:0B:A0:18:7B:A1:66:FA:BA:C5:E6:8C:D8:EF:CA:2A:46:05:12 Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d Certificate serial: 019B7DC9F7CB3061B6684A9A09414E752BE7 Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/vFoLoBh7oWb6usXmjNjvyipGBRI.roa Signing time: Fri 02 Jan 2026 08:19:06 +0000 ROA not before: Fri 02 Jan 2026 08:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142275 IP address blocks: 84.33.12.0/23 maxlen: 24 84.33.15.0/24 maxlen: 24 84.33.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f7:cb:30:61:b6:68:4a:9a:09:41:4e:75:2b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc5a0ba0187ba166fabac5e68cd8efca2a460512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:ef:23:00:ed:76:96:08:dd:cc:6a:ac:14: dc:c5:cf:42:33:be:e8:ab:f5:76:61:c0:cf:56:93: 0f:ec:6e:dd:c7:73:fb:c2:23:ed:cb:fc:2a:e5:28: fe:97:69:69:28:a1:f0:74:22:4e:a8:53:dd:97:f4: 62:37:02:82:e5:99:aa:28:63:a4:2f:bf:e4:0a:51: cb:20:f3:81:6b:3c:98:87:7a:b9:66:08:74:a5:9b: ad:d2:7d:51:68:4a:cc:c5:ed:98:29:19:06:40:bf: 64:2c:a7:d6:b0:50:dc:97:20:1d:f3:73:f6:5c:ac: 50:58:43:e7:73:fa:9d:17:c9:b3:1b:84:61:14:a1: b8:fc:ef:50:2e:cf:76:6b:c3:2c:73:53:27:96:7d: 1a:aa:44:ed:ba:28:27:74:1b:a2:42:0f:d7:c2:c8: dc:f6:5c:1c:fd:1a:84:5c:6d:c2:f2:1a:d0:05:f0: 9f:5a:cd:3f:1c:16:17:41:77:aa:f4:65:fa:4e:f0: 60:b5:b7:36:1d:be:1b:45:79:db:12:45:ad:be:f2: 41:ae:ad:6c:24:56:e4:b9:f5:49:d5:55:d6:fa:66: 37:6c:a5:b4:95:0e:29:5a:7a:8c:49:7f:21:b5:80: 1e:40:67:86:78:ee:13:f3:03:25:7f:96:16:2e:7d: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5A:0B:A0:18:7B:A1:66:FA:BA:C5:E6:8C:D8:EF:CA:2A:46:05:12 X509v3 Authority Key Identifier: keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/vFoLoBh7oWb6usXmjNjvyipGBRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.33.12.0/23 84.33.15.0-84.33.17.255 Signature Algorithm: sha256WithRSAEncryption ab:a2:1a:4b:b6:d0:e8:39:07:a7:ad:de:f0:af:6f:b8:a8:e3: 72:89:9a:80:df:a4:d0:15:1e:a9:3f:9e:47:87:df:38:1c:c0: bc:80:f5:68:b7:43:15:75:bc:15:d0:f1:e0:88:8a:43:73:30: 84:36:24:e3:05:8a:8b:f9:11:db:8e:90:fe:81:45:67:0f:b3: 16:99:1b:f9:1d:32:cb:a2:e1:fd:b9:33:0a:43:10:d6:3e:ea: ff:75:2a:04:1f:d0:b7:e1:22:98:55:2d:65:8a:82:0d:8f:4d: b5:10:df:2f:77:b7:ac:20:4b:27:7e:89:c0:f9:e4:c3:39:c4: c5:f5:a9:49:f3:a3:2b:98:21:4f:c0:e3:84:88:27:5b:a0:59: e2:2b:07:86:6a:4c:e7:21:d3:03:d1:30:16:29:19:93:7b:ad: d0:31:bb:d2:1c:bd:56:29:d2:5c:b0:de:cc:b5:d2:ea:9f:d9: f5:1f:13:18:71:0a:8b:a3:55:5d:e4:7b:37:06:ef:c0:8c:e5: c4:61:fa:3c:cd:40:1c:89:44:25:17:6b:7d:9b:fe:a3:c9:6a: ff:72:1a:c9:8f:39:f2:2d:a3:3c:0e:29:69:8b:f9:d9:45:e6: e3:66:b8:13:76:8c:ba:63:b5:7f:52:6d:84:41:dc:6f:35:f2: 77:04:39:40 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yffLMGG2aEqaCUFOdSvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZWJjOWJmZWYyYjRkMjNmMTk1MTNiZmQ0ZDYwYmI3OThm NWE1OWQwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzVhMGJhMDE4N2JhMTY2ZmFiYWM1ZTY4Y2Q4ZWZjYTJhNDYwNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJXvIwDtdpYI3cxqrBTcxc9CM77o q/V2YcDPVpMP7G7dx3P7wiPty/wq5Sj+l2lpKKHwdCJOqFPdl/RiNwKC5ZmqKGOk L7/kClHLIPOBazyYh3q5Zgh0pZut0n1RaErMxe2YKRkGQL9kLKfWsFDclyAd83P2 XKxQWEPnc/qdF8mzG4RhFKG4/O9QLs92a8Msc1Mnln0aqkTtuigndBuiQg/Xwsjc 9lwc/RqEXG3C8hrQBfCfWs0/HBYXQXeq9GX6TvBgtbc2Hb4bRXnbEkWtvvJBrq1s JFbkufVJ1VXW+mY3bKW0lQ4pWnqMSX8htYAeQGeGeO4T8wMlf5YWLn1XNQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLxaC6AYe6Fm+rrF5ozY78oqRgUSMB8GA1UdIwQY MBaAFKrryb/vK00j8ZUTv9TWC7eY9aWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2Nzkt MTFhZmI0OTkyZWVmLzEvdkZvTG9CaDdvV2I2dXNYbWpOanZ5aXBHQlJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2NzktMTFhZmI0OTkyZWVm LzEvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBVCEMMAwD BABUIQ8DBAFUIRAwDQYJKoZIhvcNAQELBQADggEBAKuiGku20Og5B6et3vCvb7io 43KJmoDfpNAVHqk/nkeH3zgcwLyA9Wi3QxV1vBXQ8eCIikNzMIQ2JOMFiov5EduO kP6BRWcPsxaZG/kdMsui4f25MwpDENY+6v91KgQf0LfhIphVLWWKgg2PTbUQ3y93 t6wgSyd+icD55MM5xMX1qUnzoyuYIU/A44SIJ1ugWeIrB4ZqTOch0wPRMBYpGZN7 rdAxu9IcvVYp0lyw3sy10uqf2fUfExhxCoujVV3kezcG78CM5cRh+jzNQByJRCUX a32b/qPJav9yGsmPOfItozwOKWmL+dlF5uNmuBN2jLpjtX9SbYRB3G818ncEOUA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:06 2026 by rpki-client