This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa File: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (raw, json) Hash identifier: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE= Subject key identifier: BE:3D:05:E0:58:1C:36:C9:56:23:92:FC:57:B0:F0:D2:62:0C:7E:7D Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Certificate serial: 019B7CED3638684E320F9AD0DDE44942E749 Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa Signing time: Fri 02 Jan 2026 04:17:59 +0000 ROA not before: Fri 02 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62217 IP address blocks: 185.184.156.0/22 maxlen: 22 185.184.156.0/24 maxlen: 24 185.184.157.0/24 maxlen: 24 185.184.158.0/24 maxlen: 24 185.184.159.0/24 maxlen: 24 2a0b:3880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:36:38:68:4e:32:0f:9a:d0:dd:e4:49:42:e7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Validity Not Before: Jan 2 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be3d05e0581c36c9562392fc57b0f0d2620c7e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:ff:3c:9e:69:4d:3c:85:05:ce:ba:08:6e: ff:cb:3c:4d:97:5b:5e:44:e5:1f:2a:e2:fa:f2:c7: 74:17:5c:fc:5b:32:c6:bc:bf:88:61:72:a5:5b:71: 70:5d:18:28:3d:64:b3:31:37:f6:26:78:9b:8d:ea: a8:ec:fb:9e:61:0b:80:89:0b:4c:5f:a6:6b:33:cf: 12:de:ff:de:fb:08:6c:a4:a1:ad:21:0b:64:04:d3: 7e:23:bd:07:66:6e:38:37:94:f8:b0:b8:a2:7a:d3: c0:8e:45:6d:92:9b:31:c8:54:aa:0a:76:88:c5:c5: 48:b7:49:fe:16:69:0d:da:75:ea:39:00:6b:f4:de: 40:7c:9b:3a:12:1d:83:2d:64:14:80:3f:36:e6:23: a6:19:89:8c:27:9c:3a:af:24:9c:e1:4b:fb:53:58: 50:cf:ca:5b:2f:bd:8e:83:cc:1b:f8:56:64:f3:7c: 6b:a1:7d:9e:0e:f8:30:df:e1:16:6a:44:8b:3e:87: e6:86:30:5d:36:bd:62:fc:d7:2b:b0:a4:82:f7:86: 57:e9:e9:a8:66:6a:6d:b8:c4:ac:82:f3:a0:28:7d: 6f:ed:1b:6a:89:dd:14:dd:b2:5d:32:45:37:d1:a1: 66:a7:4b:68:9d:e5:24:2a:d8:3d:71:e4:de:65:bd: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3D:05:E0:58:1C:36:C9:56:23:92:FC:57:B0:F0:D2:62:0C:7E:7D X509v3 Authority Key Identifier: keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.156.0/22 IPv6: 2a0b:3880::/32 Signature Algorithm: sha256WithRSAEncryption 20:e8:a4:8f:55:df:20:04:dd:c3:d7:e9:ae:b8:40:58:41:42: 51:8a:49:10:58:2a:44:63:cd:e0:67:ae:57:2a:10:66:85:8e: 13:0b:22:a7:3e:89:cc:ef:24:38:ff:e3:d1:8c:01:6f:eb:81: 67:ed:29:34:87:c5:f9:7e:38:19:3b:7c:50:cb:ec:0f:f6:81: 70:f7:59:86:fb:f0:62:d1:23:c0:40:db:54:62:ed:58:75:58: d8:b3:37:ca:bd:bc:b7:c3:af:be:3e:97:3a:e4:a2:a7:bb:35: 20:12:b9:22:a6:ad:c7:be:e1:e5:cc:6f:0c:7c:7d:c2:75:6c: 1e:8a:ec:35:c6:a2:fd:d2:f0:c1:ff:a3:ee:f8:ea:11:1f:fe: c9:4d:24:6b:70:ef:11:29:93:11:ce:6c:aa:10:5d:ff:bf:b3: 80:b9:56:cf:bb:78:d9:96:fd:8a:d7:d8:0a:cd:9c:2f:00:83: 26:cd:70:09:20:0c:61:e7:ae:2b:2b:1d:78:79:5a:70:50:84: 10:0d:16:a7:49:11:cc:8f:93:1a:ac:62:ad:5c:99:bb:89:b0: c5:04:54:9f:17:5c:fc:36:ab:d3:26:9f:be:e1:69:c6:89:c7: 1c:16:1a:5f:bf:96:c5:a7:22:4e:03:0a:8b:92:09:92:f8:65: f4:d4:1b:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87TY4aE4yD5rQ3eRJQudJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1 MjJjN2YwHhcNMjYwMTAyMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTNkMDVlMDU4MWMzNmM5NTYyMzkyZmM1N2IwZjBkMjYyMGM3ZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0X/PJ5pTTyFBc66CG7/yzxNl1te ROUfKuL68sd0F1z8WzLGvL+IYXKlW3FwXRgoPWSzMTf2Jnibjeqo7PueYQuAiQtM X6ZrM88S3v/e+whspKGtIQtkBNN+I70HZm44N5T4sLiietPAjkVtkpsxyFSqCnaI xcVIt0n+FmkN2nXqOQBr9N5AfJs6Eh2DLWQUgD825iOmGYmMJ5w6rySc4Uv7U1hQ z8pbL72Og8wb+FZk83xroX2eDvgw3+EWakSLPofmhjBdNr1i/NcrsKSC94ZX6emo ZmptuMSsgvOgKH1v7Rtqid0U3bJdMkU30aFmp0toneUkKtg9ceTeZb39vQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL49BeBYHDbJViOS/Few8NJiDH59MB8GA1UdIwQY MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt ZjcwZDVlZjg3NWMzLzEvdmowRjRGZ2NOc2xXSTVMOFY3RHcwbUlNZm4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubicMA0E AgACMAcDBQAqCziAMA0GCSqGSIb3DQEBCwUAA4IBAQAg6KSPVd8gBN3D1+muuEBY QUJRikkQWCpEY83gZ65XKhBmhY4TCyKnPonM7yQ4/+PRjAFv64Fn7Sk0h8X5fjgZ O3xQy+wP9oFw91mG+/Bi0SPAQNtUYu1YdVjYszfKvby3w6++Ppc65KKnuzUgErki pq3HvuHlzG8MfH3CdWweiuw1xqL90vDB/6Pu+OoRH/7JTSRrcO8RKZMRzmyqEF3/ v7OAuVbPu3jZlv2K19gKzZwvAIMmzXAJIAxh564rKx14eVpwUIQQDRanSRHMj5Ma rGKtXJm7ibDFBFSfF1z8NqvTJp++4WnGicccFhpfv5bFpyJOAwqLkgmS+GX01Btu -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:18 2026 by rpki-client