This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa File: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (raw, json) Hash identifier: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw= Subject key identifier: 55:2E:8C:2D:54:29:91:D6:A2:00:8C:58:EE:42:69:A0:1A:FA:C6:BE Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Certificate serial: 019B7A5A6C264AF2EA65F416FD8B9EE702D6 Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa Signing time: Thu 01 Jan 2026 16:18:24 +0000 ROA not before: Thu 01 Jan 2026 16:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34783 IP address blocks: 85.118.48.0/23 maxlen: 23 85.118.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6c:26:4a:f2:ea:65:f4:16:fd:8b:9e:e7:02:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Validity Not Before: Jan 1 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=552e8c2d542991d6a2008c58ee4269a01afac6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:d6:99:ba:48:7c:66:ba:56:ee:aa:19:8e: fd:41:96:da:2d:ae:1a:68:28:79:5a:ed:e9:94:52: 3a:57:45:a9:23:35:7e:c4:f4:df:95:ea:c7:6e:39: 49:cc:1d:b5:f3:2f:70:92:ab:ae:e1:85:f7:62:32: 22:97:d5:87:d9:5b:20:cd:8b:6c:57:9f:6c:fd:64: 4c:89:1c:29:7e:4e:c4:a1:8a:fa:19:ac:f9:57:db: fc:b8:9a:e2:c1:80:6e:a2:96:83:49:fd:f2:be:63: 35:3e:2d:7b:cc:f3:ca:e7:d6:d5:96:dd:c1:64:c2: a2:4d:00:2a:84:87:de:28:1e:31:a2:4e:26:68:ae: af:87:08:78:1e:83:d7:ba:97:04:f6:46:e3:c8:e8: c8:52:b0:8b:09:55:5d:56:13:1c:d3:64:56:98:4c: fe:cc:96:1f:42:1f:3c:c3:df:97:c0:f3:fd:3a:d4: 45:87:9e:9d:51:1b:aa:32:39:93:5e:5e:63:79:1e: a0:95:da:a0:63:cf:b5:54:f5:9d:bc:70:c3:32:a7: 39:1b:a5:41:c6:5f:13:e4:12:b0:6e:20:51:8e:65: 61:bc:62:54:ad:e6:22:d7:ac:e3:b7:37:19:48:85: c3:15:db:3f:55:15:25:ab:68:f5:16:6f:04:78:ed: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:8C:2D:54:29:91:D6:A2:00:8C:58:EE:42:69:A0:1A:FA:C6:BE X509v3 Authority Key Identifier: keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.48.0/23 85.118.60.0/22 Signature Algorithm: sha256WithRSAEncryption 51:e9:f6:1d:9d:da:74:56:d0:a6:c5:8e:e9:e9:ad:aa:c0:20: 13:47:62:06:81:1c:8a:b0:7c:73:23:07:0d:83:3f:e0:0c:89: 0a:b2:10:0a:b7:cc:11:c7:da:71:c6:14:e2:91:2e:b5:0d:39: 9f:83:34:e5:72:06:80:b6:28:0b:a6:40:f6:4b:f2:c9:18:2a: 23:37:c0:49:5a:46:6c:b6:f6:86:77:77:58:25:2c:80:bb:03: b4:35:d3:cd:68:c2:9f:a5:44:3d:0f:67:52:3a:1a:93:cd:a8: 94:b2:37:80:2b:5f:15:32:9a:10:33:87:97:18:52:45:ce:bb: a7:80:72:17:9d:32:3a:e3:59:ff:d3:f8:77:75:ac:0d:27:ca: bd:dd:d1:8a:c0:bb:21:a3:07:b9:9e:7d:2d:58:ed:ff:2f:c8: 08:92:ba:1e:b5:6b:c5:17:1d:5a:ed:8d:d9:e0:c2:32:79:c2: 4e:6a:1d:7a:76:2e:28:b9:79:1f:bc:2f:b2:7a:39:be:03:86: bd:dc:47:b4:f2:0e:c4:3c:b2:ea:c6:8b:77:56:d2:ab:cf:8c: 6e:84:54:6f:34:37:cf:69:73:32:b6:fb:5b:37:86:c9:19:f4: 33:e0:fb:65:a5:cf:63:c6:1a:94:6e:ee:8f:81:d4:54:a1:85: 43:b4:f9:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WmwmSvLqZfQW/Yue5wLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw NjIxMGUwHhcNMjYwMTAxMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTJlOGMyZDU0Mjk5MWQ2YTIwMDhjNThlZTQyNjlhMDFhZmFjNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro3WmbpIfGa6Vu6qGY79QZbaLa4a aCh5Wu3plFI6V0WpIzV+xPTflerHbjlJzB218y9wkquu4YX3YjIil9WH2VsgzYts V59s/WRMiRwpfk7EoYr6Gaz5V9v8uJriwYBuopaDSf3yvmM1Pi17zPPK59bVlt3B ZMKiTQAqhIfeKB4xok4maK6vhwh4HoPXupcE9kbjyOjIUrCLCVVdVhMc02RWmEz+ zJYfQh88w9+XwPP9OtRFh56dURuqMjmTXl5jeR6gldqgY8+1VPWdvHDDMqc5G6VB xl8T5BKwbiBRjmVhvGJUreYi16zjtzcZSIXDFds/VRUlq2j1Fm8EeO2JawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFUujC1UKZHWogCMWO5CaaAa+sa+MB8GA1UdIwQY MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt NDA0Nzk4NzA5NzZlLzEvVlM2TUxWUXBrZGFpQUl4WTdrSnBvQnI2eHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVXYwAwQC VXY8MA0GCSqGSIb3DQEBCwUAA4IBAQBR6fYdndp0VtCmxY7p6a2qwCATR2IGgRyK sHxzIwcNgz/gDIkKshAKt8wRx9pxxhTikS61DTmfgzTlcgaAtigLpkD2S/LJGCoj N8BJWkZstvaGd3dYJSyAuwO0NdPNaMKfpUQ9D2dSOhqTzaiUsjeAK18VMpoQM4eX GFJFzrungHIXnTI641n/0/h3dawNJ8q93dGKwLshowe5nn0tWO3/L8gIkroetWvF Fx1a7Y3Z4MIyecJOah16di4ouXkfvC+yejm+A4a93Ee08g7EPLLqxot3VtKrz4xu hFRvNDfPaXMytvtbN4bJGfQz4Ptlpc9jxhqUbu6PgdRUoYVDtPl2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:30 2026 by rpki-client