This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/vc9mebf-t-YuHW3WYa4U6wdKjF4.roa File: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (raw, json) Hash identifier: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974= Subject key identifier: BD:CF:66:79:B7:FE:B7:E6:2E:1D:6D:D6:61:AE:14:EB:07:4A:8C:5E Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B76EADF3C0D91D9B55D5011ACAEBF86D5 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/vc9mebf-t-YuHW3WYa4U6wdKjF4.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 91.206.20.0/24 maxlen: 24 185.68.44.0/22 maxlen: 22 185.68.44.0/24 maxlen: 24 185.68.45.0/24 maxlen: 24 185.68.46.0/24 maxlen: 24 185.161.232.0/22 maxlen: 22 185.161.233.0/24 maxlen: 24 185.161.234.0/24 maxlen: 24 185.161.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:df:3c:0d:91:d9:b5:5d:50:11:ac:ae:bf:86:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdcf6679b7feb7e62e1d6dd661ae14eb074a8c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:70:25:49:75:97:90:6e:3e:22:36:1c:6d: 2c:fa:c5:c1:f2:30:85:0a:c7:e2:43:db:91:35:5a: 7e:aa:65:df:41:88:39:1a:98:a1:0a:80:a5:83:e4: 9c:45:11:64:87:76:a7:fe:4d:6f:e2:8f:91:16:32: 87:ff:44:69:7a:f6:ff:28:f7:dd:d6:be:96:20:b5: 99:d5:9a:66:c8:ca:35:ce:70:8d:da:74:33:20:e7: 86:c0:59:c3:cf:2b:6e:37:46:25:6c:47:8c:eb:de: ea:8e:e9:40:63:78:4e:8b:33:c3:81:d7:1c:1f:b8: ec:bc:2e:8f:0f:67:60:bf:62:dc:61:c1:37:96:02: 57:35:45:c4:c7:89:3d:04:47:64:c9:fc:90:c9:3a: f7:d1:5a:b6:d2:50:7b:8a:bc:bb:bc:b9:b0:f5:8b: 7c:c3:ab:29:e3:69:fd:b3:0c:57:0c:4e:22:ee:5d: d3:7f:50:0b:48:f5:82:17:db:1a:13:21:85:94:b1: b7:b5:14:3c:96:0b:70:cd:6d:08:f7:45:92:4f:62: c2:be:0e:08:8c:ab:e6:6f:85:50:4f:c3:9e:12:b8: 57:86:92:e1:db:56:50:e8:ab:a6:91:7c:a8:e3:35: 5c:c7:03:53:af:a9:3c:9d:99:38:1b:17:48:6d:64: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CF:66:79:B7:FE:B7:E6:2E:1D:6D:D6:61:AE:14:EB:07:4A:8C:5E X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/vc9mebf-t-YuHW3WYa4U6wdKjF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.20.0/24 185.68.44.0/22 185.161.232.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:87:8e:3b:62:f5:d4:7a:59:cc:4b:9a:f5:cd:6c:37:a4:f6: 33:03:78:b6:01:61:71:9e:bf:68:f2:62:d9:05:a5:a6:15:64: d5:00:53:7e:dc:59:89:dc:b6:04:a4:dc:03:f2:0f:93:a5:30: d9:57:6a:86:de:38:97:95:38:f8:bc:ad:9a:2c:8d:4d:40:56: 6c:90:64:68:38:e6:53:1d:2c:3e:b7:22:4a:f6:86:b6:88:5d: 67:57:9f:9e:f2:a3:e4:f7:21:e3:90:54:79:28:5f:f0:0a:a2: f2:8a:0b:e0:b9:cf:b5:36:98:30:ea:b1:af:a5:9c:2e:51:ee: 7d:55:98:5b:07:f5:20:f4:b0:20:df:2e:43:d2:ff:84:f2:8a: 04:f9:75:5e:db:15:e5:8d:13:94:b1:6a:75:55:04:3d:8c:ba: 5a:5a:20:dd:6c:14:17:c5:4d:ad:62:c3:e7:eb:3c:f2:ef:5f: 3c:15:95:b6:24:ec:9e:5a:a3:e1:2b:5e:b1:1f:58:7c:dd:ff: a4:3b:0d:57:03:49:53:38:83:50:de:e0:2f:d8:00:70:9d:23: e6:40:c2:62:1a:60:6d:ca:ac:57:33:20:e5:d9:bd:0f:d0:3b: 2f:a9:74:f7:0f:7e:26:02:09:42:7f:aa:fa:14:09:fc:c5:ad: 14:70:10:2a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26t88DZHZtV1QEayuv4bVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGNmNjY3OWI3ZmViN2U2MmUxZDZkZDY2MWFlMTRlYjA3NGE4YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDZwJUl1l5BuPiI2HG0s+sXB8jCF CsfiQ9uRNVp+qmXfQYg5GpihCoClg+ScRRFkh3an/k1v4o+RFjKH/0Rpevb/KPfd 1r6WILWZ1ZpmyMo1znCN2nQzIOeGwFnDzytuN0YlbEeM697qjulAY3hOizPDgdcc H7jsvC6PD2dgv2LcYcE3lgJXNUXEx4k9BEdkyfyQyTr30Vq20lB7iry7vLmw9Yt8 w6sp42n9swxXDE4i7l3Tf1ALSPWCF9saEyGFlLG3tRQ8lgtwzW0I90WST2LCvg4I jKvmb4VQT8OeErhXhpLh21ZQ6KumkXyo4zVcxwNTr6k8nZk4GxdIbWR/qQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL3PZnm3/rfmLh1t1mGuFOsHSoxeMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvdmM5bWViZi10LVl1SFczV1lhNFU2d2RLakY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW84UAwQC uUQsAwQCuaHoMA0GCSqGSIb3DQEBCwUAA4IBAQANh447YvXUelnMS5r1zWw3pPYz A3i2AWFxnr9o8mLZBaWmFWTVAFN+3FmJ3LYEpNwD8g+TpTDZV2qG3jiXlTj4vK2a LI1NQFZskGRoOOZTHSw+tyJK9oa2iF1nV5+e8qPk9yHjkFR5KF/wCqLyigvguc+1 Npgw6rGvpZwuUe59VZhbB/Ug9LAg3y5D0v+E8ooE+XVe2xXljROUsWp1VQQ9jLpa WiDdbBQXxU2tYsPn6zzy7188FZW2JOyeWqPhK16xH1h83f+kOw1XA0lTOINQ3uAv 2ABwnSPmQMJiGmBtyqxXMyDl2b0P0DsvqXT3D34mAglCf6r6FAn8xa0UcBAq -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:03 2026 by rpki-client