This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/vAqm-n6lOJmboBYQxwCWXscToCI.roa File: vAqm-n6lOJmboBYQxwCWXscToCI.roa (raw, json) Hash identifier: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE= Subject key identifier: BC:0A:A6:FA:7E:A5:38:99:9B:A0:16:10:C7:00:96:5E:C7:13:A0:22 Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Certificate serial: 019B7E3733AF23D0FDCDED371D92C182837E Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/vAqm-n6lOJmboBYQxwCWXscToCI.roa Signing time: Fri 02 Jan 2026 10:18:25 +0000 ROA not before: Fri 02 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48152 IP address blocks: 185.78.140.0/22 maxlen: 22 209.222.77.0/24 maxlen: 24 2a03:5960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:33:af:23:d0:fd:cd:ed:37:1d:92:c1:82:83:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Validity Not Before: Jan 2 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc0aa6fa7ea538999ba01610c700965ec713a022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:3d:b0:3f:0c:97:f2:20:37:65:44:ab:77: 2e:38:e6:ef:b9:ca:f9:11:e9:cc:a3:5a:31:7e:db: 8f:ed:ff:8f:79:a8:36:29:69:a0:89:f0:17:e9:7f: 4e:58:73:8b:5e:d7:fe:86:6f:a3:64:90:fd:c8:66: 99:f6:92:8f:6b:6d:16:e4:b8:ea:8b:2a:a0:9b:99: 7e:52:02:cb:e0:bc:f0:06:79:24:49:a0:f8:22:84: 2b:f1:27:3c:37:5d:96:10:a6:f6:fd:33:59:ac:4c: 4e:c3:0b:a4:4f:a1:4d:94:df:07:71:65:54:65:1a: 8c:f4:1f:93:d4:9d:11:84:f1:5a:3d:bb:c0:d9:e5: a1:2c:6b:09:38:73:64:fa:67:0c:d1:6a:e0:18:0b: 6a:1e:ba:f1:14:8b:b3:2c:40:fb:2b:43:09:04:68: 76:42:ee:ba:48:08:74:04:ca:4e:d0:18:a9:58:17: 2b:e1:81:7a:dd:c5:ce:bc:69:e8:a5:6b:a1:3c:b2: 33:ea:5c:3c:86:bd:2f:cd:71:eb:8c:be:94:53:2a: 2b:2f:73:eb:01:82:85:d4:07:8a:f6:cc:ba:1f:e4: 62:ae:ab:23:ee:60:a1:41:75:6b:5c:03:27:e5:eb: b5:3b:f9:f7:52:f6:c9:42:04:2f:7d:f7:dd:00:e5: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0A:A6:FA:7E:A5:38:99:9B:A0:16:10:C7:00:96:5E:C7:13:A0:22 X509v3 Authority Key Identifier: keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/vAqm-n6lOJmboBYQxwCWXscToCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.140.0/22 209.222.77.0/24 IPv6: 2a03:5960::/32 Signature Algorithm: sha256WithRSAEncryption 34:96:a0:ab:99:ec:34:86:43:4b:b0:a3:e8:32:70:46:94:1e: 02:29:74:38:db:a8:35:bc:ca:98:e0:92:19:5c:00:86:f5:e3: 3d:af:2a:b2:93:60:26:88:08:78:9d:91:80:c6:4b:10:e6:2d: ec:a5:a0:30:60:3d:49:51:9d:e0:f9:0f:58:51:25:b9:bd:6c: 8d:24:2d:b4:fb:d5:95:31:95:7b:77:ae:08:f5:2f:44:32:3a: ca:0e:a7:19:29:ea:c7:c5:38:72:bf:06:cc:45:2b:7d:72:ff: 7c:6d:e2:ce:e3:73:f8:f6:16:ba:72:a7:25:6b:5f:8d:c8:5d: 31:88:d5:95:c9:7b:17:f1:5d:2b:dd:be:59:3f:29:52:af:0b: a5:47:de:6f:09:69:76:0d:32:69:d3:7a:2d:53:45:9d:ad:4d: 07:2f:53:a0:cc:ff:e1:8d:db:ae:16:c2:08:3e:d0:39:8a:b4: a9:93:cb:31:3a:f7:40:67:28:e8:c2:50:4c:f3:dd:56:7b:c5: 88:b5:8e:19:16:7a:da:d6:13:6b:2c:c0:cb:4e:47:5a:32:73: e5:0c:81:67:71:d7:b7:5e:77:0d:c3:c0:ee:72:48:53:47:7b: 5a:1a:84:37:26:17:63:20:16:6b:2e:d5:29:1b:e6:15:35:e0: 7e:ac:21:6c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+NzOvI9D9ze03HZLBgoN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj ZmJmYWYwHhcNMjYwMTAyMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzBhYTZmYTdlYTUzODk5OWJhMDE2MTBjNzAwOTY1ZWM3MTNhMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolc9sD8Ml/IgN2VEq3cuOObvucr5 EenMo1oxftuP7f+Peag2KWmgifAX6X9OWHOLXtf+hm+jZJD9yGaZ9pKPa20W5Ljq iyqgm5l+UgLL4LzwBnkkSaD4IoQr8Sc8N12WEKb2/TNZrExOwwukT6FNlN8HcWVU ZRqM9B+T1J0RhPFaPbvA2eWhLGsJOHNk+mcM0WrgGAtqHrrxFIuzLED7K0MJBGh2 Qu66SAh0BMpO0BipWBcr4YF63cXOvGnopWuhPLIz6lw8hr0vzXHrjL6UUyorL3Pr AYKF1AeK9sy6H+Rirqsj7mChQXVrXAMn5eu1O/n3UvbJQgQvfffdAOW6PQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLwKpvp+pTiZm6AWEMcAll7HE6AiMB8GA1UdIwQY MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et YTczMGNjZmRhZGM1LzEvdkFxbS1uNmxPSm1ib0JZUXh3Q1dYc2NUb0NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1 LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuU6MAwQA 0d5NMA0EAgACMAcDBQAqA1lgMA0GCSqGSIb3DQEBCwUAA4IBAQA0lqCrmew0hkNL sKPoMnBGlB4CKXQ426g1vMqY4JIZXACG9eM9ryqyk2AmiAh4nZGAxksQ5i3spaAw YD1JUZ3g+Q9YUSW5vWyNJC20+9WVMZV7d64I9S9EMjrKDqcZKerHxThyvwbMRSt9 cv98beLO43P49ha6cqcla1+NyF0xiNWVyXsX8V0r3b5ZPylSrwulR95vCWl2DTJp 03otU0WdrU0HL1OgzP/hjduuFsIIPtA5irSpk8sxOvdAZyjowlBM891We8WItY4Z Fnra1hNrLMDLTkdaMnPlDIFncde3XncNw8DuckhTR3taGoQ3JhdjIBZrLtUpG+YV NeB+rCFs -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:45 2026 by rpki-client