This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/VbGADyWv0vsUe4dWuxutjEyIxeY.roa File: VbGADyWv0vsUe4dWuxutjEyIxeY.roa (raw, json) Hash identifier: oK4qNukSP6RXRwPLPWdXs0RlCXjFYHYKyryBPbhLW5M= Subject key identifier: 55:B1:80:0F:25:AF:D2:FB:14:7B:87:56:BB:1B:AD:8C:4C:88:C5:E6 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6BB86071677FDBA48297A8D762C54 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/VbGADyWv0vsUe4dWuxutjEyIxeY.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214367 IP address blocks: 46.8.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:86:07:16:77:fd:ba:48:29:7a:8d:76:2c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55b1800f25afd2fb147b8756bb1bad8c4c88c5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:4b:80:8f:f5:74:19:bc:84:51:79:67:2f: dd:c6:32:49:4c:f1:26:dd:95:5e:df:09:42:11:c9: 8e:19:c9:6f:4f:df:50:f9:5f:4f:9d:94:4f:be:ab: 6e:e4:2c:65:24:e7:55:36:ff:71:1d:96:03:59:80: 9d:15:38:73:78:22:8c:30:ae:b2:f2:42:67:a8:c8: 35:a9:42:38:52:cb:cc:22:2b:47:f6:b4:3a:7d:6b: 21:af:b9:25:ee:b7:94:b8:2f:d0:8d:6b:dc:45:31: 91:eb:7c:c9:88:60:0b:86:5e:49:92:be:13:eb:10: 9d:29:c7:a0:3e:ac:f5:aa:83:72:b9:7e:aa:35:ff: 96:20:4c:2a:2e:fe:cc:9b:c6:ed:66:37:61:e5:67: 70:43:bb:fb:e0:87:67:28:b7:7e:e9:9b:b0:00:b4: 8c:3f:8d:b3:d6:36:01:28:87:0b:a0:0c:e4:41:7c: b6:16:22:d2:86:01:e6:2c:f5:45:ee:73:fe:a0:4c: ed:82:9f:10:92:da:da:5b:0c:b4:59:18:cc:e5:e5: 4f:70:66:6f:84:ab:d6:7b:92:aa:bc:42:33:ac:0e: 28:93:2b:73:08:8a:c2:fe:3a:f1:ec:01:53:8b:7a: 40:8e:46:cd:09:bc:33:46:d9:75:e3:f9:5a:c0:8a: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B1:80:0F:25:AF:D2:FB:14:7B:87:56:BB:1B:AD:8C:4C:88:C5:E6 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/VbGADyWv0vsUe4dWuxutjEyIxeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.207.0/24 Signature Algorithm: sha256WithRSAEncryption 31:b7:49:59:9f:1d:c1:63:20:c7:17:6e:14:e1:88:a3:5a:8d: 28:3a:58:28:b9:5f:31:a8:be:0d:20:82:8a:c6:1b:79:24:72: 56:a4:73:f4:2e:b0:f3:7a:13:bb:a1:4c:e1:56:62:57:9f:3f: 7d:b4:1d:00:5d:d6:18:86:d4:44:29:1b:13:03:ec:2b:4f:19: 8c:84:f1:6f:70:b0:6d:36:ea:d1:3f:3e:85:bc:d4:1b:f8:c1: 96:36:58:d3:5b:94:12:8c:75:90:6b:02:bd:ea:c4:6b:6c:5c: 8e:98:07:6d:35:b0:f5:29:9e:06:49:d5:1b:37:89:64:11:e8: c8:fb:eb:a2:55:fe:50:46:f8:5f:e6:a7:45:12:c7:97:62:24: 9a:92:cb:da:3c:d1:86:cb:34:92:97:05:59:51:56:5d:ca:22: b4:4f:f8:38:f6:d0:6f:18:d6:d1:84:f3:bf:6a:0c:d6:c3:f3: df:54:f5:49:eb:98:db:68:bf:e0:76:87:1f:6a:70:92:e5:bf: 56:55:b8:3d:2e:43:6d:ab:ea:40:5e:85:73:dc:e5:85:62:61: 9c:0f:fa:95:46:d1:07:36:5b:01:cf:dd:64:96:e5:c8:84:a8: 33:1e:b5:72:b9:61:7a:0c:d9:51:0d:49:47:1a:fd:05:a2:8d: f2:8b:84:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xruGBxZ3/bpIKXqNdixUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWIxODAwZjI1YWZkMmZiMTQ3Yjg3NTZiYjFiYWQ4YzRjODhjNWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhxLgI/1dBm8hFF5Zy/dxjJJTPEm 3ZVe3wlCEcmOGclvT99Q+V9PnZRPvqtu5CxlJOdVNv9xHZYDWYCdFThzeCKMMK6y 8kJnqMg1qUI4UsvMIitH9rQ6fWshr7kl7reUuC/QjWvcRTGR63zJiGALhl5Jkr4T 6xCdKcegPqz1qoNyuX6qNf+WIEwqLv7Mm8btZjdh5WdwQ7v74IdnKLd+6ZuwALSM P42z1jYBKIcLoAzkQXy2FiLShgHmLPVF7nP+oEztgp8QktraWwy0WRjM5eVPcGZv hKvWe5KqvEIzrA4okytzCIrC/jrx7AFTi3pAjkbNCbwzRtl14/lawIpDswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWxgA8lr9L7FHuHVrsbrYxMiMXmMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvVmJHQUR5V3YwdnNVZTRkV3V4dXRqRXlJeGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgjPMA0G CSqGSIb3DQEBCwUAA4IBAQAxt0lZnx3BYyDHF24U4YijWo0oOlgouV8xqL4NIIKK xht5JHJWpHP0LrDzehO7oUzhVmJXnz99tB0AXdYYhtREKRsTA+wrTxmMhPFvcLBt NurRPz6FvNQb+MGWNljTW5QSjHWQawK96sRrbFyOmAdtNbD1KZ4GSdUbN4lkEejI ++uiVf5QRvhf5qdFEseXYiSaksvaPNGGyzSSlwVZUVZdyiK0T/g49tBvGNbRhPO/ agzWw/PfVPVJ65jbaL/gdocfanCS5b9WVbg9LkNtq+pAXoVz3OWFYmGcD/qVRtEH NlsBz91kluXIhKgzHrVyuWF6DNlRDUlHGv0Foo3yi4QE -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:33 2026 by rpki-client