This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/vloaPvYoyY7lftrTQCapPW0IXOY.roa File: vloaPvYoyY7lftrTQCapPW0IXOY.roa (raw, json) Hash identifier: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ= Subject key identifier: BE:5A:1A:3E:F6:28:C9:8E:E5:7E:DA:D3:40:26:A9:3D:6D:08:5C:E6 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F841361734DAA6E23D91D67929C179A Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/vloaPvYoyY7lftrTQCapPW0IXOY.roa Signing time: Fri 02 Jan 2026 16:22:00 +0000 ROA not before: Fri 02 Jan 2026 16:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34088 IP address blocks: 92.204.152.0/21 maxlen: 21 151.106.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:13:61:73:4d:aa:6e:23:d9:1d:67:92:9c:17:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be5a1a3ef628c98ee57edad34026a93d6d085ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:d3:6b:97:5d:a1:27:6b:8a:ec:d0:7d:e8: 54:2e:72:82:dc:36:01:3a:8b:b0:cc:31:fb:c5:f9: 1b:97:6c:28:de:e1:2e:a4:fa:28:f4:83:ec:50:e5: 07:86:0e:1f:fa:0e:e5:e9:c8:99:3c:b5:90:5c:0f: 01:96:77:cc:3c:b9:18:3d:c0:a4:b7:ad:52:06:58: 75:06:c3:4e:19:81:b4:9c:c6:25:37:c2:c2:6a:73: 31:98:59:c9:10:b7:ba:6f:f6:c4:63:59:74:81:28: 2b:ba:10:18:b0:fe:0e:ce:5f:b0:11:b0:d8:19:a5: 5b:c7:51:50:b2:76:90:6b:45:0c:d4:92:3a:e7:e5: 1e:2b:52:40:84:0a:e8:33:1f:3b:1a:d3:f7:d0:ba: db:8f:d5:49:1c:43:84:0e:62:bb:2a:2b:d9:8f:a7: ae:89:55:30:ec:ae:6c:4f:18:91:cb:96:c4:e1:66: aa:9d:68:3a:5c:ff:f8:3a:2b:5f:80:b0:d5:12:e2: 7c:3a:ca:1e:7c:a0:0f:38:77:31:9b:a8:fb:b4:1d: b3:88:35:19:6d:c5:a2:07:81:80:f4:24:1f:97:13: bc:ee:53:13:02:91:f6:8e:9c:42:7e:39:0b:c7:97: af:b7:82:e8:db:be:6f:ec:1e:ed:61:0f:b6:39:50: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5A:1A:3E:F6:28:C9:8E:E5:7E:DA:D3:40:26:A9:3D:6D:08:5C:E6 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/vloaPvYoyY7lftrTQCapPW0IXOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.204.152.0/21 151.106.32.0/20 Signature Algorithm: sha256WithRSAEncryption 17:24:a8:84:db:c3:f6:fa:d4:35:89:d3:0d:32:31:80:6e:f2: 9d:4b:8c:a1:65:41:42:d3:3b:7e:da:55:fc:ff:a3:a7:7b:91: 4b:f5:76:38:1c:c8:0f:01:39:8a:48:d5:89:2a:56:15:cf:0e: d0:58:3f:f1:79:95:ed:db:dd:67:f1:af:71:83:12:89:99:6b: f7:41:42:09:ed:f4:19:26:d8:ba:a3:33:a4:15:9d:d7:e1:19: e4:b2:00:9d:b2:06:ef:e0:a4:f6:d6:38:89:3b:09:eb:6a:8d: 0a:c9:7a:5a:22:23:99:c3:14:2e:52:e0:3f:2d:c3:13:3c:76: 86:9a:6e:a9:ec:b1:23:ec:43:69:5b:a0:d2:21:77:75:d6:aa: 4c:1b:32:99:46:a6:a6:d6:d3:ab:ea:c0:20:a1:20:a5:6e:03: ea:10:d1:87:7f:54:85:ac:31:35:dd:76:a4:17:72:2d:57:2e: ad:38:12:dc:9c:9a:41:9a:ce:66:74:76:b5:e7:b7:a1:19:1f: 35:37:cd:0e:4d:cd:cf:32:92:b3:48:5e:47:96:4c:0e:e1:53: b8:7b:08:0b:a4:95:82:ca:b5:70:77:47:10:96:42:35:ab:a4: 41:6e:59:b1:4b:fa:dc:f2:be:2a:bf:c1:68:65:67:0c:d1:31: 23:d8:49:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hBNhc02qbiPZHWeSnBeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTVhMWEzZWY2MjhjOThlZTU3ZWRhZDM0MDI2YTkzZDZkMDg1Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8/Ta5ddoSdriuzQfehULnKC3DYB OouwzDH7xfkbl2wo3uEupPoo9IPsUOUHhg4f+g7l6ciZPLWQXA8BlnfMPLkYPcCk t61SBlh1BsNOGYG0nMYlN8LCanMxmFnJELe6b/bEY1l0gSgruhAYsP4Ozl+wEbDY GaVbx1FQsnaQa0UM1JI65+UeK1JAhAroMx87GtP30Lrbj9VJHEOEDmK7KivZj6eu iVUw7K5sTxiRy5bE4WaqnWg6XP/4OitfgLDVEuJ8OsoefKAPOHcxm6j7tB2ziDUZ bcWiB4GA9CQflxO87lMTApH2jpxCfjkLx5evt4Lo275v7B7tYQ+2OVBTzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL5aGj72KMmO5X7a00AmqT1tCFzmMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdmxvYVB2WW95WTdsZnRyVFFDYXBQVzBJWE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXMyYAwQE l2ogMA0GCSqGSIb3DQEBCwUAA4IBAQAXJKiE28P2+tQ1idMNMjGAbvKdS4yhZUFC 0zt+2lX8/6One5FL9XY4HMgPATmKSNWJKlYVzw7QWD/xeZXt291n8a9xgxKJmWv3 QUIJ7fQZJti6ozOkFZ3X4RnksgCdsgbv4KT21jiJOwnrao0KyXpaIiOZwxQuUuA/ LcMTPHaGmm6p7LEj7ENpW6DSIXd11qpMGzKZRqam1tOr6sAgoSClbgPqENGHf1SF rDE13XakF3ItVy6tOBLcnJpBms5mdHa157ehGR81N80OTc3PMpKzSF5HlkwO4VO4 ewgLpJWCyrVwd0cQlkI1q6RBblmxS/rc8r4qv8FoZWcM0TEj2El3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:23 2026 by rpki-client