This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VmBRDiYRZh9dapTPVcGUEsz9-KY.roa File: VmBRDiYRZh9dapTPVcGUEsz9-KY.roa (raw, json) Hash identifier: aKrRrm/pKKi0akzMkq9HpBHK4NwSpjNlnS3MZiiPbvU= Subject key identifier: 56:60:51:0E:26:11:66:1F:5D:6A:94:CF:55:C1:94:12:CC:FD:F8:A6 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E7E2131E77F4332D26C388D264E6 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VmBRDiYRZh9dapTPVcGUEsz9-KY.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62366 IP address blocks: 93.171.135.0/24 maxlen: 24 95.46.1.0/24 maxlen: 24 146.158.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e7:e2:13:1e:77:f4:33:2d:26:c3:88:d2:64:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5660510e2611661f5d6a94cf55c19412ccfdf8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:90:60:77:7b:a5:6a:54:fb:ab:e5:bf:99: 98:78:8a:7a:f0:27:16:ed:a8:ad:7a:84:7f:84:e6: 6e:80:15:db:b4:ec:5f:4d:33:be:20:bd:f1:80:a5: 8c:4e:ec:42:1d:1d:94:93:07:83:ca:aa:ab:14:57: 75:60:2c:b0:c4:b4:1b:3f:95:26:5c:81:41:68:84: 76:bf:ab:7f:74:03:48:79:7b:4e:a6:e2:a6:40:8b: 13:90:4c:5b:60:89:04:48:f9:ae:e1:46:7c:5a:00: cb:ff:cf:e8:1c:39:c5:47:ea:b3:5d:6a:29:4f:f9: af:56:e1:56:0f:96:2e:fc:63:e1:66:16:46:a8:2a: 33:2d:8a:40:49:6b:51:c0:15:76:9e:92:46:eb:68: 7c:16:fb:c1:4b:78:63:e0:d3:88:05:6d:56:7c:3a: 69:1e:34:07:df:c3:af:a4:26:4a:e5:2f:ed:bd:17: a7:ae:ea:4e:1b:6c:2c:88:f8:36:7d:5e:dc:30:f0: 75:bf:99:f2:a8:72:50:f4:67:70:2d:3d:18:70:b9: 42:ab:5e:69:34:d4:fe:fe:b8:0f:9d:b8:d9:d5:56: 13:84:85:d1:89:eb:67:e9:45:18:58:9b:9a:68:a5: a9:92:9c:bc:04:af:d9:7e:19:d7:e6:3c:ec:17:7e: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:60:51:0E:26:11:66:1F:5D:6A:94:CF:55:C1:94:12:CC:FD:F8:A6 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VmBRDiYRZh9dapTPVcGUEsz9-KY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.135.0/24 95.46.1.0/24 146.158.76.0/23 Signature Algorithm: sha256WithRSAEncryption 32:b1:1b:e4:b0:a0:35:98:a2:dd:6d:0f:27:62:7e:94:b9:e5: 2a:b4:0d:e9:1a:23:0a:9b:d0:a6:d3:ae:6f:b3:95:26:f8:d2: 6e:e8:4a:08:78:83:f8:fd:cb:e0:b8:44:5e:c8:9a:ad:bf:a9: 5f:76:ac:9f:16:10:4c:28:2a:ab:ae:a7:a4:6b:d7:e2:71:38: e9:71:7d:9c:dd:42:cb:45:bb:eb:44:9c:68:c7:a9:f7:7d:bd: d8:35:9a:a7:ab:cc:f9:25:99:a0:44:a8:8d:c4:53:83:5e:b6: 5d:84:07:46:63:8a:81:26:06:f0:4f:6d:35:03:5d:d3:07:bb: 53:ff:34:95:c3:7e:92:77:69:6e:ff:34:68:4d:19:fe:78:5b: b3:e4:77:c3:36:1a:7e:26:8d:ba:84:c3:a3:b5:b7:5f:8e:b0: ff:df:a8:4f:bd:56:20:78:00:e7:5a:61:88:98:85:9a:2b:6e: 3d:07:4e:ee:c5:3b:a2:70:84:40:cd:49:df:a0:1c:0d:f3:54: e6:7e:e0:f1:03:8b:e5:9b:0c:c6:39:cf:c3:6d:8d:39:6f:64: ab:69:b5:e6:7f:16:bd:25:44:3d:92:1c:22:15:c7:a1:3a:38: b7:40:1a:a9:28:ee:db:33:32:8d:ca:fd:49:61:3a:e2:2a:4e: 71:75:ee:26 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hOfiEx539DMtJsOI0mTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjYwNTEwZTI2MTE2NjFmNWQ2YTk0Y2Y1NWMxOTQxMmNjZmRmOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutWQYHd7pWpU+6vlv5mYeIp68CcW 7aiteoR/hOZugBXbtOxfTTO+IL3xgKWMTuxCHR2UkweDyqqrFFd1YCywxLQbP5Um XIFBaIR2v6t/dANIeXtOpuKmQIsTkExbYIkESPmu4UZ8WgDL/8/oHDnFR+qzXWop T/mvVuFWD5Yu/GPhZhZGqCozLYpASWtRwBV2npJG62h8FvvBS3hj4NOIBW1WfDpp HjQH38OvpCZK5S/tvRenrupOG2wsiPg2fV7cMPB1v5nyqHJQ9GdwLT0YcLlCq15p NNT+/rgPnbjZ1VYThIXRietn6UUYWJuaaKWpkpy8BK/ZfhnX5jzsF37V6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFZgUQ4mEWYfXWqUz1XBlBLM/fimMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVm1CUkRpWVJaaDlkYXBUUFZjR1VFc3o5LUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXauHAwQA Xy4BAwQBkp5MMA0GCSqGSIb3DQEBCwUAA4IBAQAysRvksKA1mKLdbQ8nYn6UueUq tA3pGiMKm9Cm065vs5Um+NJu6EoIeIP4/cvguEReyJqtv6lfdqyfFhBMKCqrrqek a9ficTjpcX2c3ULLRbvrRJxox6n3fb3YNZqnq8z5JZmgRKiNxFODXrZdhAdGY4qB JgbwT201A13TB7tT/zSVw36Sd2lu/zRoTRn+eFuz5HfDNhp+Jo26hMOjtbdfjrD/ 36hPvVYgeADnWmGImIWaK249B07uxTuicIRAzUnfoBwN81TmfuDxA4vlmwzGOc/D bY05b2SrabXmfxa9JUQ9khwiFcehOji3QBqpKO7bMzKNyv1JYTriKk5xde4m -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:05 2026 by rpki-client