This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/vEyryzZmLmy5e_SCQuhE5ah3ENs.roa File: vEyryzZmLmy5e_SCQuhE5ah3ENs.roa (raw, json) Hash identifier: UeJhL1uDVJLS7FiZvcP0hdB/8vYlDU9nlK+dE3afAYU= Subject key identifier: BC:4C:AB:CB:36:66:2E:6C:B9:7B:F4:82:42:E8:44:E5:A8:77:10:DB Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C686ADE6FE8D1F1D75EDFDACA7843D Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/vEyryzZmLmy5e_SCQuhE5ah3ENs.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43402 IP address blocks: 84.232.59.0/24 maxlen: 24 94.76.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:ad:e6:fe:8d:1f:1d:75:ed:fd:ac:a7:84:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc4cabcb36662e6cb97bf48242e844e5a87710db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:81:ed:38:71:0e:54:5c:15:9c:e4:fe:0d: 15:af:eb:06:d4:54:30:1b:f9:00:18:6d:4d:55:ad: 0b:46:62:a5:d6:4b:8f:3b:3f:ff:46:2d:8b:d7:a3: 8e:88:78:48:91:8c:8a:14:82:00:3a:c6:54:51:74: 83:73:fc:c9:d6:c0:8a:64:4e:ba:80:60:95:49:90: 74:e3:d8:af:42:bf:78:80:d0:c6:91:66:29:6d:0c: 76:6b:0d:75:5f:87:2b:84:fe:c7:16:82:23:fb:71: 46:5f:93:48:8f:8d:7e:ab:59:61:8d:3d:61:a1:64: b0:df:52:62:4a:10:b6:04:5b:6b:c1:28:5f:41:c1: 37:0e:d2:b7:21:f8:8a:11:e5:14:8a:4b:2c:5a:7e: b1:5a:06:de:b6:de:2f:67:5b:9e:22:6d:3f:93:94: c4:a6:b9:1d:09:42:4a:d9:52:18:0e:44:0b:99:97: 5c:b7:14:f9:39:03:17:88:a8:fa:1a:5b:ef:32:be: 8c:6e:72:c0:bf:cf:43:98:a5:2d:f1:42:a2:c8:cc: 75:9f:52:91:15:96:b6:bb:21:7d:40:7a:8d:55:e2: b8:e3:27:98:3a:0a:2b:d5:db:94:3f:d6:49:2d:cf: 7c:7a:90:2a:18:5b:cc:9b:f5:0a:04:c7:41:7b:34: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4C:AB:CB:36:66:2E:6C:B9:7B:F4:82:42:E8:44:E5:A8:77:10:DB X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/vEyryzZmLmy5e_SCQuhE5ah3ENs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.59.0/24 94.76.189.0/24 Signature Algorithm: sha256WithRSAEncryption b3:6e:51:95:7b:12:ff:1c:82:21:4b:8b:74:35:94:d3:ce:26: 57:84:89:c9:29:ca:57:70:fa:03:fe:00:13:0d:e5:e6:ed:2e: 78:dd:ab:e8:1e:08:23:ab:29:04:e6:04:1f:79:a8:e4:8f:90: 8f:5f:4c:6d:86:a6:0b:a7:57:d5:cf:40:ea:76:7c:fe:14:31: 0e:cc:24:f6:d5:8c:b6:5f:de:ee:ac:c8:a7:b8:b6:34:27:43: c5:cc:3e:50:f1:cd:e3:d0:35:9b:62:6c:19:84:07:11:02:4e: 98:76:da:7b:07:63:21:c3:14:f3:64:67:a5:21:ed:77:e0:5d: 53:de:88:6a:d3:21:1d:74:34:e1:c8:00:03:da:61:9c:94:f7: 96:9d:61:70:51:30:a7:ac:3c:76:44:2d:2f:0c:c4:d8:6d:39: d5:4b:e9:80:77:1b:4b:a8:2a:45:10:dd:93:65:7e:e9:89:92: ca:57:11:1b:cd:53:ba:89:b7:6b:d3:2c:d5:15:91:47:e9:1a: 3b:ad:c7:d3:7a:d1:3d:b3:90:01:d9:c9:a4:5f:b4:9a:1c:d6: 28:7a:3e:a4:f3:87:b6:60:7a:9d:58:f4:a1:d5:1d:df:58:d0: 0d:2b:ff:0e:93:07:0c:d8:e2:1d:71:06:de:c5:7e:bc:7b:72: 52:9b:57:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xoat5v6NHx117f2sp4Q9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzRjYWJjYjM2NjYyZTZjYjk3YmY0ODI0MmU4NDRlNWE4NzcxMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LOB7ThxDlRcFZzk/g0Vr+sG1FQw G/kAGG1NVa0LRmKl1kuPOz//Ri2L16OOiHhIkYyKFIIAOsZUUXSDc/zJ1sCKZE66 gGCVSZB049ivQr94gNDGkWYpbQx2aw11X4crhP7HFoIj+3FGX5NIj41+q1lhjT1h oWSw31JiShC2BFtrwShfQcE3DtK3IfiKEeUUikssWn6xWgbett4vZ1ueIm0/k5TE prkdCUJK2VIYDkQLmZdctxT5OQMXiKj6GlvvMr6MbnLAv89DmKUt8UKiyMx1n1KR FZa2uyF9QHqNVeK44yeYOgor1duUP9ZJLc98epAqGFvMm/UKBMdBezSV1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLxMq8s2Zi5suXv0gkLoROWodxDbMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvdkV5cnl6Wm1MbXk1ZV9TQ1F1aEU1YWgzRU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOg7AwQA Xky9MA0GCSqGSIb3DQEBCwUAA4IBAQCzblGVexL/HIIhS4t0NZTTziZXhInJKcpX cPoD/gATDeXm7S543avoHggjqykE5gQfeajkj5CPX0xthqYLp1fVz0Dqdnz+FDEO zCT21Yy2X97urMinuLY0J0PFzD5Q8c3j0DWbYmwZhAcRAk6Ydtp7B2MhwxTzZGel Ie134F1T3ohq0yEddDThyAAD2mGclPeWnWFwUTCnrDx2RC0vDMTYbTnVS+mAdxtL qCpFEN2TZX7piZLKVxEbzVO6ibdr0yzVFZFH6Ro7rcfTetE9s5AB2cmkX7SaHNYo ej6k84e2YHqdWPSh1R3fWNANK/8OkwcM2OIdcQbexX68e3JSm1d1 -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:53 2026 by rpki-client