This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/VFkF_gxwqOLJ92XDVRj4P0SgEao.roa File: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (raw, json) Hash identifier: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw= Subject key identifier: 54:59:05:FE:0C:70:A8:E2:C9:F7:65:C3:55:18:F8:3F:44:A0:11:AA Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Certificate serial: 019B7C125A0106A73E418A399738CFA7FF14 Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/VFkF_gxwqOLJ92XDVRj4P0SgEao.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29314 IP address blocks: 31.41.208.0/21 maxlen: 21 91.226.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5a:01:06:a7:3e:41:8a:39:97:38:cf:a7:ff:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=545905fe0c70a8e2c9f765c35518f83f44a011aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:32:b8:3c:d5:2d:a5:3c:52:0a:16:db:b4: 60:97:0a:23:6a:30:f9:cc:af:10:8c:51:52:df:0a: 8b:6e:d2:cd:4f:42:f2:43:8e:c3:8c:95:ea:4f:5f: ea:84:74:b0:40:4a:f0:df:05:92:7d:c8:c5:33:0a: c1:cc:9f:45:ba:69:46:17:a4:ab:48:fc:f2:55:6e: 1b:1a:ca:c2:1f:70:0e:71:39:98:1b:cf:b4:64:d3: ea:70:fe:87:ba:95:d6:b5:f9:7f:4e:f1:3c:a3:79: 5f:ef:e7:09:70:42:64:00:53:9b:6e:59:da:85:b4: ad:02:bc:57:c5:e8:87:43:8e:2b:32:93:4c:bf:e6: de:e3:73:55:e5:36:49:57:22:50:89:79:0d:41:e0: 8e:33:4b:13:2b:5d:95:e8:0f:e1:8e:be:12:2e:ec: 98:fd:00:1a:72:58:e7:96:b5:64:00:f8:70:71:11: c1:f1:48:5f:0b:f7:e9:a9:28:1f:36:08:00:f7:55: 9b:77:1f:0e:74:a2:ba:46:f1:55:c9:46:92:2e:61: 85:fa:54:aa:62:3b:e5:c6:a0:28:93:19:88:11:e8: e5:22:83:b2:03:0b:b5:b7:2b:98:c0:88:5d:b8:61: ba:fa:35:3e:67:17:f7:b7:38:88:b3:e6:5b:2c:8a: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:59:05:FE:0C:70:A8:E2:C9:F7:65:C3:55:18:F8:3F:44:A0:11:AA X509v3 Authority Key Identifier: keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/VFkF_gxwqOLJ92XDVRj4P0SgEao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.208.0/21 91.226.6.0/23 Signature Algorithm: sha256WithRSAEncryption a1:83:2c:60:40:c4:97:29:57:28:ef:ea:8b:2d:c3:10:70:10: 4b:df:06:06:ee:67:65:76:9e:6a:f6:89:5b:36:ce:f2:ed:ff: 5f:3a:90:27:98:c6:7d:f0:7e:30:f1:d2:09:ea:b8:5c:ac:39: ce:da:32:8b:d5:1f:f5:4e:54:8c:aa:40:6a:6e:b7:5d:80:1d: cf:1b:6f:0f:ee:d7:0c:ad:db:eb:0e:96:12:7c:7c:03:c0:fc: 62:8c:2f:2e:b2:6e:dd:5d:f0:8a:39:f2:fc:ec:37:f0:92:ee: 2a:8e:d1:50:0d:a2:62:4b:76:30:a5:11:4f:b9:60:98:2f:b0: 09:a6:f2:9e:f9:9c:0e:3f:83:af:61:99:88:8a:22:52:70:59: ca:f4:56:8e:e9:ac:e1:2f:e7:64:5e:10:16:98:19:1e:e6:63: c6:5c:bc:4d:2b:ac:84:12:a4:56:21:56:4a:97:28:d5:c5:25: 23:0c:f9:27:e2:2d:ca:1f:45:e6:8c:5e:62:ab:2c:ef:a0:8b: 06:59:22:b1:c3:63:11:66:1a:83:6f:0f:47:e8:0b:96:11:0b: 7d:8e:50:fb:14:a4:67:1c:e7:2b:29:96:89:aa:c2:92:8c:04: 76:e4:f2:c4:76:ce:39:48:48:ab:c0:b0:51:ee:c0:17:d9:41: 1e:d3:2a:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EloBBqc+QYo5lzjPp/8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5 NjdmMDIwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDU5MDVmZTBjNzBhOGUyYzlmNzY1YzM1NTE4ZjgzZjQ0YTAxMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT0yuDzVLaU8UgoW27RglwojajD5 zK8QjFFS3wqLbtLNT0LyQ47DjJXqT1/qhHSwQErw3wWSfcjFMwrBzJ9FumlGF6Sr SPzyVW4bGsrCH3AOcTmYG8+0ZNPqcP6HupXWtfl/TvE8o3lf7+cJcEJkAFObblna hbStArxXxeiHQ44rMpNMv+be43NV5TZJVyJQiXkNQeCOM0sTK12V6A/hjr4SLuyY /QAacljnlrVkAPhwcRHB8UhfC/fpqSgfNggA91Wbdx8OdKK6RvFVyUaSLmGF+lSq YjvlxqAokxmIEejlIoOyAwu1tyuYwIhduGG6+jU+Zxf3tziIs+ZbLIpfFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFRZBf4McKjiyfdlw1UY+D9EoBGqMB8GA1UdIwQY MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt ZTQwOWE4ZWZhZGFjLzEvVkZrRl9neHdxT0xKOTJYRFZSajRQMFNnRWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDHynQAwQB W+IGMA0GCSqGSIb3DQEBCwUAA4IBAQChgyxgQMSXKVco7+qLLcMQcBBL3wYG7mdl dp5q9olbNs7y7f9fOpAnmMZ98H4w8dIJ6rhcrDnO2jKL1R/1TlSMqkBqbrddgB3P G28P7tcMrdvrDpYSfHwDwPxijC8usm7dXfCKOfL87Dfwku4qjtFQDaJiS3YwpRFP uWCYL7AJpvKe+ZwOP4OvYZmIiiJScFnK9FaO6azhL+dkXhAWmBke5mPGXLxNK6yE EqRWIVZKlyjVxSUjDPkn4i3KH0XmjF5iqyzvoIsGWSKxw2MRZhqDbw9H6AuWEQt9 jlD7FKRnHOcrKZaJqsKSjAR25PLEds45SEirwLBR7sAX2UEe0ypa -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:58 2026 by rpki-client