This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/vhhE0LlaMoAC65mEN3TyEobLF50.roa File: vhhE0LlaMoAC65mEN3TyEobLF50.roa (raw, json) Hash identifier: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0= Subject key identifier: BE:18:44:D0:B9:5A:32:80:02:EB:99:84:37:74:F2:12:86:CB:17:9D Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Certificate serial: 019B7B35A9CF2EDD8C85CA274DB5A547AAFE Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/vhhE0LlaMoAC65mEN3TyEobLF50.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 80.91.58.0/23 maxlen: 24 80.91.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a9:cf:2e:dd:8c:85:ca:27:4d:b5:a5:47:aa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be1844d0b95a328002eb99843774f21286cb179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:72:9f:44:2c:ff:c0:ce:70:c5:fb:91:65: a6:06:38:51:57:5d:6e:3d:9b:bc:50:a3:08:16:0b: 17:6f:7c:4f:75:1d:3d:9f:80:23:bb:90:9e:d4:f2: 1f:c3:9d:52:10:1f:b2:61:4e:f1:4d:aa:23:8c:09: 6b:ea:8a:80:38:3b:58:95:6c:fb:aa:1f:71:12:88: a7:7b:3c:2f:c1:f1:5a:a7:53:77:b5:5f:02:6d:2d: 6a:a9:59:ad:8f:f5:42:51:9a:4d:e7:49:27:fd:53: 35:40:fa:9a:f1:8b:1a:c5:7f:42:fc:f3:a2:33:6d: 4f:07:62:7a:76:d9:9f:32:57:8f:60:e9:df:e6:13: 72:94:91:f3:8a:e4:15:fe:2b:dc:15:28:70:07:e5: 31:f6:57:c5:2c:ce:cc:6f:58:dd:c6:e1:69:65:8a: c9:bc:34:66:2a:7d:18:8a:17:2e:7c:e6:bf:48:4e: b9:f8:81:62:65:68:29:55:58:a1:1d:8b:e4:f2:2d: 8a:9b:a3:ed:c8:ca:03:61:53:d5:72:79:4e:05:92: 89:30:a7:13:84:61:2d:d4:ae:20:6a:81:d2:a8:e7: 0f:8d:0b:25:20:36:c6:9a:c2:00:b8:34:8e:4b:32: fe:86:5c:f8:1e:76:82:a0:8e:16:db:cc:5b:8b:62: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:18:44:D0:B9:5A:32:80:02:EB:99:84:37:74:F2:12:86:CB:17:9D X509v3 Authority Key Identifier: keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/vhhE0LlaMoAC65mEN3TyEobLF50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.58.0/23 80.91.62.0/23 Signature Algorithm: sha256WithRSAEncryption 73:cc:6b:38:9b:a9:0c:c6:7b:95:f1:aa:d2:4c:65:56:3f:b6: d4:88:aa:22:b6:77:9b:36:36:35:c9:ea:91:6a:47:98:18:af: 8a:27:13:5c:41:7e:a0:a8:49:ae:a7:81:c4:5a:ff:c9:b1:36: 3d:c0:fc:06:bd:48:9a:15:b9:e0:ae:4b:57:fa:23:87:5b:86: 33:46:7b:05:57:5b:20:7c:c5:c8:96:14:73:16:5d:cf:ab:ec: 06:07:9f:97:7d:f0:4a:c0:31:8e:22:c6:9b:7d:53:16:b3:a8: b9:1e:aa:38:ba:e3:9a:cd:33:68:bf:1d:7b:0d:b2:30:6d:5e: 9c:99:eb:f6:b0:90:c6:10:95:5b:1e:af:e3:4a:d1:d1:d2:e1: 5c:c9:86:5c:69:4d:8d:1e:b0:c2:93:a0:ea:cd:d4:b8:35:2b: 78:af:b3:6e:81:64:12:f5:20:b9:41:a1:c5:7a:7d:ce:a6:2d: 44:d5:a8:f9:51:57:17:9d:a7:cb:b2:9a:8a:5c:4a:9b:ec:8c: e4:83:42:04:83:7d:ef:2d:ef:22:76:dd:fc:f0:9c:77:92:f3: 65:61:e1:ac:c2:4b:26:1f:01:d5:31:fe:34:82:7b:6e:e5:fa: 7f:6b:62:12:fa:11:26:6e:dc:67:26:74:88:30:94:74:cf:a2: c4:a4:c5:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NanPLt2MhconTbWlR6r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk ZmI5ZmMwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTE4NDRkMGI5NWEzMjgwMDJlYjk5ODQzNzc0ZjIxMjg2Y2IxNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvghyn0Qs/8DOcMX7kWWmBjhRV11u PZu8UKMIFgsXb3xPdR09n4Aju5Ce1PIfw51SEB+yYU7xTaojjAlr6oqAODtYlWz7 qh9xEoinezwvwfFap1N3tV8CbS1qqVmtj/VCUZpN50kn/VM1QPqa8YsaxX9C/POi M21PB2J6dtmfMlePYOnf5hNylJHziuQV/ivcFShwB+Ux9lfFLM7Mb1jdxuFpZYrJ vDRmKn0YihcufOa/SE65+IFiZWgpVVihHYvk8i2Km6PtyMoDYVPVcnlOBZKJMKcT hGEt1K4gaoHSqOcPjQslIDbGmsIAuDSOSzL+hlz4HnaCoI4W28xbi2KL1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL4YRNC5WjKAAuuZhDd08hKGyxedMB8GA1UdIwQY MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt Mzg3OWJkNzAzOTQ2LzEvdmhoRTBMbGFNb0FDNjVtRU4zVHlFb2JMRjUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2 LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUFs6AwQB UFs+MA0GCSqGSIb3DQEBCwUAA4IBAQBzzGs4m6kMxnuV8arSTGVWP7bUiKoitneb NjY1yeqRakeYGK+KJxNcQX6gqEmup4HEWv/JsTY9wPwGvUiaFbngrktX+iOHW4Yz RnsFV1sgfMXIlhRzFl3Pq+wGB5+XffBKwDGOIsabfVMWs6i5Hqo4uuOazTNovx17 DbIwbV6cmev2sJDGEJVbHq/jStHR0uFcyYZcaU2NHrDCk6DqzdS4NSt4r7NugWQS 9SC5QaHFen3Opi1E1aj5UVcXnafLspqKXEqb7Izkg0IEg33vLe8idt388Jx3kvNl YeGswksmHwHVMf40gntu5fp/a2IS+hEmbtxnJnSIMJR0z6LEpMWW -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:08 2026 by rpki-client