This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa File: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (raw, json) Hash identifier: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s= Subject key identifier: BE:A2:D8:F0:02:51:77:00:4D:66:9D:6F:30:02:81:CE:3E:E1:60:C9 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B34F2630C07A697264473E3784EC5 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa Signing time: Thu 01 Jan 2026 16:19:16 +0000 ROA not before: Thu 01 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57728 IP address blocks: 81.25.16.0/21 maxlen: 21 81.25.24.0/21 maxlen: 21 109.234.40.0/21 maxlen: 21 185.255.116.0/22 maxlen: 22 2a00:1800::/32 maxlen: 32 2a00:1807::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:34:f2:63:0c:07:a6:97:26:44:73:e3:78:4e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea2d8f0025177004d669d6f300281ce3ee160c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:1f:3e:d0:a1:8c:34:53:78:95:cf:4a:7a: eb:7d:b3:4c:c6:4a:2a:ec:df:c3:1e:55:a8:dd:d5: ec:7b:fd:17:24:69:78:4b:5b:0a:5e:35:28:41:94: 09:7a:3c:ea:16:8e:ad:b9:3d:b3:5a:84:43:41:bc: a1:e3:74:00:21:f2:88:4b:af:b1:cb:c4:2e:96:09: 76:ad:0b:1a:6f:4d:0e:f9:3b:2d:13:26:e5:28:10: 70:95:e5:08:e4:23:da:a2:aa:dc:be:df:90:96:63: ea:b0:56:3b:92:77:13:1d:25:d9:46:44:a4:06:1c: 2d:4c:f3:18:6e:25:e4:e3:d8:f7:d9:ee:64:2d:47: 74:64:b2:df:a4:e9:18:0c:eb:b8:76:68:cc:e3:e8: 4a:12:2f:56:14:1f:71:f7:f5:48:2f:7f:4c:c4:23: 01:db:ea:52:c4:31:30:38:17:24:4c:fd:53:7f:e3: c4:e3:25:d0:87:eb:e2:0a:95:a2:e6:77:81:43:fe: 0b:5e:c1:6c:bc:f0:d8:07:b7:f0:c8:1f:28:5e:87: 4c:60:8b:e7:cf:48:0b:bb:d1:15:5a:5c:94:02:4a: 59:82:42:73:f1:a5:5d:b5:7b:c7:dd:90:61:1a:d6: 52:5b:a5:b3:4e:5c:55:89:bd:f7:5b:a8:ef:ed:ba: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:D8:F0:02:51:77:00:4D:66:9D:6F:30:02:81:CE:3E:E1:60:C9 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.16.0/20 109.234.40.0/21 185.255.116.0/22 IPv6: 2a00:1800::/32 2a00:1807::/32 Signature Algorithm: sha256WithRSAEncryption 5c:64:bc:9c:ee:ee:85:99:de:f2:67:a9:f2:f8:44:4a:2e:55: de:69:e9:23:69:a9:d2:24:e8:22:ee:c4:47:5f:ca:fc:0f:81: 15:b3:5b:24:19:ec:2a:44:2d:2f:a9:7d:cb:29:4a:51:a1:05: 17:c9:67:56:6c:fc:b2:78:11:a3:70:4c:ae:9d:08:9c:8b:61: c2:86:50:90:84:be:20:70:c0:60:3c:7f:7a:ec:5e:70:44:3b: 90:f5:1c:7d:1d:16:c0:49:08:63:15:d1:95:7a:e6:ce:86:0c: 40:70:96:b5:33:e8:1a:89:04:69:2d:bf:6b:fc:21:1f:f9:fd: a6:be:b0:42:be:69:41:19:71:35:b9:bf:01:f1:73:d8:3c:dd: 5f:ff:4f:74:91:68:c0:01:9c:9b:96:ae:0c:38:90:71:27:ca: 08:52:17:a2:1a:45:de:12:9a:a1:0b:6d:0e:01:9d:97:dd:bc: f0:e9:8d:8f:84:ec:c3:92:2f:25:52:8e:8f:de:f3:5d:95:c2: e2:31:48:88:cf:b1:ba:d4:61:e6:fc:17:13:7c:2d:66:b1:6f: 2e:54:06:04:d9:94:c5:83:61:47:30:ce:35:ac:0c:54:4b:e9: ee:11:98:71:2f:3d:a6:28:c8:c3:34:43:a4:76:bc:88:e4:3e: a9:22:88:e2 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt6WzTyYwwHppcmRHPjeE7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWEyZDhmMDAyNTE3NzAwNGQ2NjlkNmYzMDAyODFjZTNlZTE2MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ofPtChjDRTeJXPSnrrfbNMxkoq 7N/DHlWo3dXse/0XJGl4S1sKXjUoQZQJejzqFo6tuT2zWoRDQbyh43QAIfKIS6+x y8Qulgl2rQsab00O+TstEyblKBBwleUI5CPaoqrcvt+QlmPqsFY7kncTHSXZRkSk BhwtTPMYbiXk49j32e5kLUd0ZLLfpOkYDOu4dmjM4+hKEi9WFB9x9/VIL39MxCMB 2+pSxDEwOBckTP1Tf+PE4yXQh+viCpWi5neBQ/4LXsFsvPDYB7fwyB8oXodMYIvn z0gLu9EVWlyUAkpZgkJz8aVdtXvH3ZBhGtZSW6WzTlxVib33W6jv7brxgwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFL6i2PACUXcATWadbzACgc4+4WDJMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvdnFMWThBSlJkd0JOWnAxdk1BS0J6ajdoWU1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQEURkQAwQD beooAwQCuf90MBQEAgACMA4DBQAqABgAAwUAKgAYBzANBgkqhkiG9w0BAQsFAAOC AQEAXGS8nO7uhZne8mep8vhESi5V3mnpI2mp0iToIu7ER1/K/A+BFbNbJBnsKkQt L6l9yylKUaEFF8lnVmz8sngRo3BMrp0InIthwoZQkIS+IHDAYDx/euxecEQ7kPUc fR0WwEkIYxXRlXrmzoYMQHCWtTPoGokEaS2/a/whH/n9pr6wQr5pQRlxNbm/AfFz 2DzdX/9PdJFowAGcm5auDDiQcSfKCFIXohpF3hKaoQttDgGdl9288OmNj4Tsw5Iv JVKOj97zXZXC4jFIiM+xutRh5vwXE3wtZrFvLlQGBNmUxYNhRzDONawMVEvp7hGY cS89pijIwzRDpHa8iOQ+qSKI4g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:05 2026 by rpki-client