This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/VvoXFYloIw56OORF7POt2lchZ40.roa File: VvoXFYloIw56OORF7POt2lchZ40.roa (raw, json) Hash identifier: uadIBdI3Ro8wlViMRq6xH1nYBbcZvBWd7sfgcpoMqFo= Subject key identifier: 56:FA:17:15:89:68:23:0E:7A:38:E4:45:EC:F3:AD:DA:57:21:67:8D Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8472D657E27995FADED88033E7D134 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/VvoXFYloIw56OORF7POt2lchZ40.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204348 IP address blocks: 176.236.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:72:d6:57:e2:79:95:fa:de:d8:80:33:e7:d1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56fa17158968230e7a38e445ecf3adda5721678d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:38:d1:a0:7c:e1:0c:4a:56:a6:c0:d5:9c: 17:b6:f0:2a:f4:bc:94:45:e1:27:00:ab:b1:75:f4: 8f:be:a1:ab:07:9d:0e:ea:0a:30:0b:2d:89:95:81: 0a:d7:a1:f8:71:a2:8c:0c:24:88:69:1f:93:a3:bf: 14:66:9b:d9:29:c4:21:5c:38:d9:56:ab:3a:75:d4: cc:51:14:c1:f3:78:c3:e5:b9:11:d3:63:9f:dc:85: 42:28:02:63:70:b6:1b:25:66:1d:f6:1e:bd:a2:06: 9c:a7:b0:a6:d0:27:ce:6e:da:6a:ca:ea:2f:9c:db: a2:20:24:f6:5f:4c:ea:bd:9e:73:d6:a7:18:40:d8: f0:f4:23:c3:29:30:86:47:ca:02:20:63:73:60:3b: e4:ef:47:52:cb:2d:16:42:5e:1c:66:e0:d8:2e:be: eb:a8:bd:14:5d:a3:5d:93:93:64:2d:26:73:16:27: 09:4d:93:e8:a2:9d:3c:8c:8d:0b:e6:fd:ed:f7:a6: 33:36:09:33:1c:b8:1e:55:57:87:e7:25:71:86:55: f7:c6:7e:06:89:28:12:88:35:27:34:1b:a8:16:0b: 32:94:e0:25:69:f2:97:c6:42:61:ac:7f:cf:ff:18: bf:53:06:38:1d:27:f6:93:2e:a4:df:5b:d5:c3:2d: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:17:15:89:68:23:0E:7A:38:E4:45:EC:F3:AD:DA:57:21:67:8D X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/VvoXFYloIw56OORF7POt2lchZ40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.236.249.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:81:9b:b1:47:3d:5d:d2:62:17:66:28:a3:ae:5c:eb:0c:1a: 89:7f:6f:cb:5e:1f:fb:a7:c1:56:8f:7b:cb:a3:07:0c:f0:64: ec:56:e1:66:a4:04:a4:b1:dc:02:77:f6:ab:3e:8b:da:3b:59: 4f:e1:ce:ea:6b:a8:67:a4:4b:5a:71:5d:8c:aa:00:4d:da:74: 91:2d:0e:3b:5a:22:5c:d8:7e:25:f7:a2:34:3b:fd:2a:6d:12: df:34:5a:fa:ce:ab:80:13:5e:84:0d:71:3f:bb:ad:87:68:f7: f1:58:6e:d3:48:5e:7d:61:a7:f7:a9:67:37:11:df:d5:ee:72: 6d:b9:a0:be:ff:a5:42:b1:18:a2:5e:bd:04:dc:6f:d5:ec:da: a1:41:5b:10:c6:bd:27:b8:9d:a4:58:31:e8:0f:77:25:0b:56: f3:b9:a0:37:25:88:30:a4:57:00:87:09:e0:2f:7f:d4:1a:88: 40:e0:44:b7:a1:79:35:a9:04:a5:81:d0:51:d0:52:da:66:e5: fa:07:e7:87:2b:b8:4f:6d:31:92:05:ad:26:bc:be:e5:e7:9b: 3a:da:53:38:d1:6f:49:b6:af:54:6d:e4:8e:bf:b5:be:18:f2: 01:7f:9d:dd:28:9a:5c:0e:18:c7:44:11:e3:47:19:5b:af:d9: 49:17:63:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHLWV+J5lfre2IAz59E0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmZhMTcxNTg5NjgyMzBlN2EzOGU0NDVlY2YzYWRkYTU3MjE2NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47I40aB84QxKVqbA1ZwXtvAq9LyU ReEnAKuxdfSPvqGrB50O6gowCy2JlYEK16H4caKMDCSIaR+To78UZpvZKcQhXDjZ Vqs6ddTMURTB83jD5bkR02Of3IVCKAJjcLYbJWYd9h69ogacp7Cm0CfObtpqyuov nNuiICT2X0zqvZ5z1qcYQNjw9CPDKTCGR8oCIGNzYDvk70dSyy0WQl4cZuDYLr7r qL0UXaNdk5NkLSZzFicJTZPoop08jI0L5v3t96YzNgkzHLgeVVeH5yVxhlX3xn4G iSgSiDUnNBuoFgsylOAlafKXxkJhrH/P/xi/UwY4HSf2ky6k31vVwy0JqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFb6FxWJaCMOejjkRezzrdpXIWeNMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvVnZvWEZZbG9JdzU2T09SRjdQT3QybGNoWjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsOz5MA0G CSqGSIb3DQEBCwUAA4IBAQCKgZuxRz1d0mIXZiijrlzrDBqJf2/LXh/7p8FWj3vL owcM8GTsVuFmpASksdwCd/arPovaO1lP4c7qa6hnpEtacV2MqgBN2nSRLQ47WiJc 2H4l96I0O/0qbRLfNFr6zquAE16EDXE/u62HaPfxWG7TSF59Yaf3qWc3Ed/V7nJt uaC+/6VCsRiiXr0E3G/V7NqhQVsQxr0nuJ2kWDHoD3clC1bzuaA3JYgwpFcAhwng L3/UGohA4ES3oXk1qQSlgdBR0FLaZuX6B+eHK7hPbTGSBa0mvL7l55s62lM40W9J tq9UbeSOv7W+GPIBf53dKJpcDhjHRBHjRxlbr9lJF2M7 -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:46 2026 by rpki-client