This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa File: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (raw, json) Hash identifier: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns= Subject key identifier: F9:53:F5:25:36:58:10:45:E3:37:6B:0F:CE:80:C4:96:AA:AA:A4:00 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B76EAEBEA90F7FAC8F40E6F2FB4EF3EBD Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216248 IP address blocks: 89.188.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:eb:ea:90:f7:fa:c8:f4:0e:6f:2f:b4:ef:3e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f953f52536581045e3376b0fce80c496aaaaa400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:c8:52:d4:e5:68:38:c1:1c:dd:07:e3:e7: cc:76:6c:f2:26:47:b0:12:d4:96:0f:57:d7:0b:3d: ed:7d:8e:31:99:30:4d:23:0c:a7:7f:11:e4:fa:5f: b4:2f:68:25:42:bb:b4:d5:38:ab:7c:f5:29:49:30: ec:ef:40:84:c1:2e:0b:8e:66:ef:a0:f7:eb:0b:ab: d9:36:55:af:77:4c:0c:ba:65:fb:99:96:49:20:fa: 8f:20:fe:14:a7:49:51:37:52:3a:cf:16:86:07:2c: 09:ea:30:f7:c0:ab:f8:40:17:5c:d5:c6:d7:f1:f1: da:78:d6:95:25:53:0b:56:ca:fb:eb:4f:69:ad:21: c8:13:0f:8e:db:22:3c:18:8d:a8:90:38:cb:4d:e0: cb:29:dd:8d:a5:af:10:a3:cb:6e:fc:06:d6:24:15: 93:7a:0f:d6:1c:ba:43:fc:9d:b3:64:e4:c1:e5:1d: 05:6b:d3:23:44:0f:ea:96:5c:1e:14:9d:72:41:0f: b4:52:c0:e9:fa:27:53:a8:47:c6:90:e4:d4:4b:ac: 6e:09:d3:9f:80:3f:87:58:a3:03:57:cf:87:23:95: f2:f9:29:af:6f:8a:6c:2c:77:d4:54:46:66:d9:91: ef:82:f3:ec:9c:e4:bb:9f:d8:e0:dd:cf:a2:f1:f8: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:53:F5:25:36:58:10:45:E3:37:6B:0F:CE:80:C4:96:AA:AA:A4:00 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.188.164.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:c1:24:14:fd:1a:0d:c6:e3:1f:18:1d:b5:65:fc:c7:4f:32: b6:3d:44:dd:fe:28:eb:33:b0:2b:89:5b:07:62:e5:81:ef:f5: 22:7b:12:e6:8c:3f:16:16:74:6f:8d:1a:fc:6e:0e:4b:07:7c: 7e:2d:c4:a3:cf:ea:af:8b:d3:b4:e9:33:bb:5d:d8:f6:5e:ff: 6c:0f:45:ae:5a:51:25:bd:04:43:40:71:27:d8:b7:45:08:5b: 05:1f:a3:5b:12:16:35:5c:5e:4b:c3:79:9e:6e:2c:87:70:fb: 1b:36:1f:05:32:dd:58:58:d0:99:63:fd:36:47:92:a3:5d:cd: 6c:a0:9e:5d:f1:d9:6f:e6:46:26:33:87:1e:0b:5b:19:79:f7: e2:3f:90:40:33:26:9d:0f:c6:c4:74:40:2b:79:51:73:a3:0f: 45:0d:7b:c4:dc:54:b9:ae:78:c0:e7:b8:22:77:c2:d9:75:a8: 4d:c0:5c:b4:0e:ad:a0:c9:49:39:fe:b6:cb:a3:ac:7e:4f:e9: 4d:5a:d8:e9:e8:2c:17:8e:7a:0e:7c:aa:8e:08:56:71:e7:62: ab:32:52:d8:6f:87:9a:68:39:80:74:3b:bb:57:c2:1c:a1:6b: 16:7a:64:ae:0b:21:e8:e3:af:ea:67:2c:61:fb:a5:0e:21:97: 2c:b5:03:ba -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26uvqkPf6yPQOby+07z69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTUzZjUyNTM2NTgxMDQ1ZTMzNzZiMGZjZTgwYzQ5NmFhYWFhNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFTIUtTlaDjBHN0H4+fMdmzyJkew EtSWD1fXCz3tfY4xmTBNIwynfxHk+l+0L2glQru01TirfPUpSTDs70CEwS4Ljmbv oPfrC6vZNlWvd0wMumX7mZZJIPqPIP4Up0lRN1I6zxaGBywJ6jD3wKv4QBdc1cbX 8fHaeNaVJVMLVsr7609prSHIEw+O2yI8GI2okDjLTeDLKd2Npa8Qo8tu/AbWJBWT eg/WHLpD/J2zZOTB5R0Fa9MjRA/qllweFJ1yQQ+0UsDp+idTqEfGkOTUS6xuCdOf gD+HWKMDV8+HI5Xy+Smvb4psLHfUVEZm2ZHvgvPsnOS7n9jg3c+i8fhtpQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlT9SU2WBBF4zdrD86AxJaqqqQAMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvMS1WUDFKVFpZRUVYak4yc1B6b0RFbHFxcXBBQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjAvOWMyYzkwLWM3ZDQtNDhiNy05YmFmLWYxYmYwYzMzYTkw OC8xL0ktUFpLXzRXWVp5bEFNQXlaLV82bXFmS0RFYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVm8pDAN BgkqhkiG9w0BAQsFAAOCAQEAH8EkFP0aDcbjHxgdtWX8x08ytj1E3f4o6zOwK4lb B2Llge/1InsS5ow/FhZ0b40a/G4OSwd8fi3Eo8/qr4vTtOkzu13Y9l7/bA9FrlpR Jb0EQ0BxJ9i3RQhbBR+jWxIWNVxeS8N5nm4sh3D7GzYfBTLdWFjQmWP9NkeSo13N bKCeXfHZb+ZGJjOHHgtbGXn34j+QQDMmnQ/GxHRAK3lRc6MPRQ17xNxUua54wOe4 InfC2XWoTcBctA6toMlJOf62y6Osfk/pTVrY6egsF456DnyqjghWcediqzJS2G+H mmg5gHQ7u1fCHKFrFnpkrgsh6OOv6mcsYfulDiGXLLUDug== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:34 2026 by rpki-client