This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/VYo918jh-i7rJwHE82ZPQwc45P0.roa File: VYo918jh-i7rJwHE82ZPQwc45P0.roa (raw, json) Hash identifier: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo= Subject key identifier: 55:8A:3D:D7:C8:E1:FA:2E:EB:27:01:C4:F3:66:4F:43:07:38:E4:FD Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8CC865DBE06005222BBC724CBAFC Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/VYo918jh-i7rJwHE82ZPQwc45P0.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51407 IP address blocks: 84.108.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:c8:65:db:e0:60:05:22:2b:bc:72:4c:ba:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=558a3dd7c8e1fa2eeb2701c4f3664f430738e4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:78:c8:11:d9:2a:82:f2:ab:83:12:36:72: 9e:a7:fd:fe:b1:22:3a:de:fa:43:79:b3:98:f6:84: 90:f7:0b:40:3d:62:a8:7d:42:4d:9d:9b:15:7f:fa: 6d:ff:e1:9f:2c:cd:fd:68:d9:29:b2:34:11:2b:96: fc:ef:21:64:e1:74:53:22:9f:53:b5:01:c0:ce:9e: 09:1a:9a:be:c0:d5:38:e0:12:71:a0:0b:fb:7c:d1: b5:84:67:e8:fb:a0:c5:e2:6a:e0:84:26:7e:81:1a: 3e:37:df:f8:4c:69:ca:b2:06:fb:75:f0:1b:0a:a8: f8:c4:c9:00:8b:7f:29:98:d0:12:f3:2b:e0:e9:60: 40:74:14:f5:a7:33:58:c1:c2:a8:90:a5:09:47:c8: ad:40:c3:9a:7e:8d:bd:4d:a1:1f:05:f7:4e:09:e6: 5e:f4:13:f1:99:03:d4:77:4b:5e:76:79:6e:43:d9: c7:bd:e9:95:91:dc:44:0c:00:36:42:bb:20:6e:2e: 58:1c:af:8a:d8:58:5a:dc:36:29:55:95:39:26:18: ac:e3:9f:6c:cc:de:8c:10:e7:d8:5a:e8:b9:10:35: cf:53:df:59:55:a3:c7:d3:16:f7:76:88:c8:22:59: c0:19:2b:4c:cd:ce:43:15:b8:d1:56:cd:7e:92:a4: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8A:3D:D7:C8:E1:FA:2E:EB:27:01:C4:F3:66:4F:43:07:38:E4:FD X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/VYo918jh-i7rJwHE82ZPQwc45P0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.108.102.0/24 Signature Algorithm: sha256WithRSAEncryption 45:a3:91:01:ba:ba:ca:ce:7a:fe:c9:17:b8:39:57:06:23:b6: c0:98:72:93:e1:63:4b:25:73:52:a5:25:5a:9b:60:14:64:83: 46:5a:ea:e3:40:d2:a9:d2:1b:5e:20:93:48:5b:c6:24:15:5c: 63:92:d6:4e:3b:b6:e8:14:41:f8:33:93:f5:8e:32:90:fc:8c: c0:1f:a1:66:2c:67:09:a7:66:dc:8c:40:08:e0:7a:af:78:ad: ff:79:b4:af:8e:a6:9f:a0:df:c6:fc:61:28:7e:12:dd:14:4e: 36:1a:ea:81:ab:60:a5:1f:b4:9f:33:b0:fc:54:13:23:42:9f: 77:d7:bc:2f:2d:f4:d7:52:81:03:30:1d:dc:a2:eb:93:fe:02: 2c:ae:6e:09:33:fd:fc:ee:26:f2:7f:c1:c6:93:9b:ef:e6:fc: 82:f9:30:df:6d:62:ca:ef:a8:16:6e:37:8a:6f:a5:98:48:a4: 58:ca:af:d6:ae:73:7d:a4:70:69:8a:b7:46:7c:f1:e8:16:be: 12:b3:3c:96:87:98:03:0b:09:6b:da:ef:09:f7:ae:50:cd:cd: fc:46:1d:52:c1:61:64:6e:47:f2:82:9f:e2:95:bd:36:5c:3a: 35:ac:49:d1:f9:71:7e:ca:8e:79:56:31:41:0c:f1:ed:84:34: f3:8a:2c:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264zIZdvgYAUiK7xyTLr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NThhM2RkN2M4ZTFmYTJlZWIyNzAxYzRmMzY2NGY0MzA3MzhlNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfl4yBHZKoLyq4MSNnKep/3+sSI6 3vpDebOY9oSQ9wtAPWKofUJNnZsVf/pt/+GfLM39aNkpsjQRK5b87yFk4XRTIp9T tQHAzp4JGpq+wNU44BJxoAv7fNG1hGfo+6DF4mrghCZ+gRo+N9/4TGnKsgb7dfAb Cqj4xMkAi38pmNAS8yvg6WBAdBT1pzNYwcKokKUJR8itQMOafo29TaEfBfdOCeZe 9BPxmQPUd0tednluQ9nHvemVkdxEDAA2Qrsgbi5YHK+K2Fha3DYpVZU5Jhis459s zN6MEOfYWui5EDXPU99ZVaPH0xb3dojIIlnAGStMzc5DFbjRVs1+kqRqGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWKPdfI4fou6ycBxPNmT0MHOOT9MB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvVllvOTE4amgtaTdySndIRTgyWlBRd2M0NVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVGxmMA0G CSqGSIb3DQEBCwUAA4IBAQBFo5EBurrKznr+yRe4OVcGI7bAmHKT4WNLJXNSpSVa m2AUZINGWurjQNKp0hteIJNIW8YkFVxjktZOO7boFEH4M5P1jjKQ/IzAH6FmLGcJ p2bcjEAI4HqveK3/ebSvjqafoN/G/GEofhLdFE42GuqBq2ClH7SfM7D8VBMjQp93 17wvLfTXUoEDMB3couuT/gIsrm4JM/387ibyf8HGk5vv5vyC+TDfbWLK76gWbjeK b6WYSKRYyq/WrnN9pHBpirdGfPHoFr4SszyWh5gDCwlr2u8J965Qzc38Rh1SwWFk bkfygp/ilb02XDo1rEnR+XF+yo55VjFBDPHthDTziiyC -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:11 2026 by rpki-client