This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa File: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (raw, json) Hash identifier: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g= Subject key identifier: BC:9C:DB:A0:6C:38:1E:66:32:41:2B:88:85:FF:E4:2C:B2:79:98:5D Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B7F15135A49E48F22D056221A459B3C2E Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207849 IP address blocks: 89.234.168.0/22 maxlen: 22 2a00:5881:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:13:5a:49:e4:8f:22:d0:56:22:1a:45:9b:3c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9cdba06c381e6632412b8885ffe42cb279985d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:81:86:ff:3e:b7:df:12:10:19:9e:f5:55: 29:bb:de:8a:b3:68:ff:ff:6c:88:f5:20:5b:77:e8: 88:6e:4b:0b:6b:c6:e4:ac:e8:a6:a2:01:bc:01:e4: 28:ec:d0:a2:e1:88:d2:e9:05:93:0a:e5:9b:f9:36: 1c:cf:c2:9e:0f:24:0e:4e:f5:5e:e4:ac:3b:bb:bf: 25:88:48:98:d8:9b:b4:4a:e4:be:1d:d9:ee:f7:44: 46:69:4b:ca:0f:c4:90:f6:53:95:64:5a:60:5e:00: e8:8c:dc:92:70:9a:18:44:b3:e4:4a:90:d8:ed:9d: a5:73:90:e9:aa:13:58:b8:a0:25:d0:b1:4b:11:c1: 39:d1:d8:2a:3d:11:ce:40:0c:8f:0e:2b:ca:c4:05: 92:5f:d7:56:fa:c3:26:ed:70:c7:04:72:93:42:47: d8:9d:5c:63:34:66:65:87:9c:96:cd:cf:0a:26:d4: 92:e8:fd:de:c7:18:f0:82:4b:ec:3b:8a:95:d1:64: 76:50:0c:40:94:42:e0:76:bd:3f:88:c8:5e:ec:73: 8a:e9:88:28:a4:7b:e1:95:7a:4b:75:5e:43:33:9a: 33:99:66:db:36:c4:c7:46:02:d7:af:61:f9:33:3e: 51:42:85:fc:85:f4:0f:3e:3c:a6:22:3c:63:7f:0f: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9C:DB:A0:6C:38:1E:66:32:41:2B:88:85:FF:E4:2C:B2:79:98:5D X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.168.0/22 IPv6: 2a00:5881:b100::/40 Signature Algorithm: sha256WithRSAEncryption 09:5d:83:9b:1e:f6:e4:06:f3:0a:6c:ea:0d:2c:a1:9d:4f:94: 8a:95:b2:0c:7f:fd:84:03:9e:db:52:8e:f6:41:16:35:1a:a1: 96:d4:95:58:c2:21:6e:bc:6e:bd:00:77:4e:f9:49:dc:6a:6d: 4b:67:97:6f:b9:f6:e8:ef:b5:42:26:09:a4:f3:90:7f:31:70: 52:5f:3c:6d:08:80:8a:c9:c0:3d:9d:fa:d5:b6:9e:62:c4:aa: 6d:c0:aa:4b:d7:67:b9:e3:7a:3e:e6:e0:05:e4:d9:b8:34:af: dd:ab:8a:23:b1:45:ab:b4:41:27:e3:c7:5d:3a:81:8f:59:bb: c4:d1:56:7f:75:db:57:a1:d0:41:99:02:cd:26:83:d6:df:b5: 47:26:0d:47:d0:e6:a3:09:9b:56:21:21:70:3a:8d:2d:3f:5f: 84:07:6a:2c:2d:3a:d2:db:5f:24:f1:4f:05:39:79:d2:c6:5c: 4b:d1:00:28:b7:f3:30:c3:28:2e:e4:9f:ff:3a:fa:56:21:fe: 02:e6:aa:64:31:ad:aa:46:9c:d6:a0:35:db:e0:63:b2:67:83: 25:7f:f6:c7:c9:67:76:b6:bb:19:3f:be:cf:22:f2:a6:c7:00: 9b:0a:01:f1:b8:8f:54:74:9c:1e:90:0c:97:20:39:4a:41:45: 56:39:7d:8e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FRNaSeSPItBWIhpFmzwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzljZGJhMDZjMzgxZTY2MzI0MTJiODg4NWZmZTQyY2IyNzk5ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo2Bhv8+t98SEBme9VUpu96Ks2j/ /2yI9SBbd+iIbksLa8bkrOimogG8AeQo7NCi4YjS6QWTCuWb+TYcz8KeDyQOTvVe 5Kw7u78liEiY2Ju0SuS+Hdnu90RGaUvKD8SQ9lOVZFpgXgDojNyScJoYRLPkSpDY 7Z2lc5DpqhNYuKAl0LFLEcE50dgqPRHOQAyPDivKxAWSX9dW+sMm7XDHBHKTQkfY nVxjNGZlh5yWzc8KJtSS6P3exxjwgkvsO4qV0WR2UAxAlELgdr0/iMhe7HOK6Ygo pHvhlXpLdV5DM5ozmWbbNsTHRgLXr2H5Mz5RQoX8hfQPPjymIjxjfw9myQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLyc26BsOB5mMkEriIX/5CyyeZhdMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xL3ZKemJvR3c0SG1ZeVFTdUloZl9rTExKNW1GMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNmLTk2NWQ2ZDYwM2Jm YS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAJZ6qgw DgQCAAIwCAMGACoAWIGxMA0GCSqGSIb3DQEBCwUAA4IBAQAJXYObHvbkBvMKbOoN LKGdT5SKlbIMf/2EA57bUo72QRY1GqGW1JVYwiFuvG69AHdO+Uncam1LZ5dvufbo 77VCJgmk85B/MXBSXzxtCICKycA9nfrVtp5ixKptwKpL12e543o+5uAF5Nm4NK/d q4ojsUWrtEEn48ddOoGPWbvE0VZ/ddtXodBBmQLNJoPW37VHJg1H0OajCZtWISFw Oo0tP1+EB2osLTrS218k8U8FOXnSxlxL0QAot/Mwwygu5J//OvpWIf4C5qpkMa2q RpzWoDXb4GOyZ4Mlf/bHyWd2trsZP77PIvKmxwCbCgHxuI9UdJwekAyXIDlKQUVW OX2O -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:53 2026 by rpki-client