This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa File: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (raw, json) Hash identifier: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo= Subject key identifier: 56:F8:3F:79:13:17:C7:5C:0C:D3:29:1F:6B:BB:6E:65:3D:89:6E:25 Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019B7BA4AFC14C85B248DA418111B36B0453 Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207990 IP address blocks: 37.61.226.0/24 maxlen: 32 43.252.28.0/22 maxlen: 32 45.114.240.0/22 maxlen: 32 45.130.120.0/22 maxlen: 32 85.208.148.0/22 maxlen: 32 89.223.14.0/23 maxlen: 32 89.223.18.0/23 maxlen: 32 92.255.32.0/21 maxlen: 32 92.255.86.0/23 maxlen: 32 94.176.48.0/20 maxlen: 32 94.176.80.0/20 maxlen: 32 103.30.12.0/22 maxlen: 32 103.207.152.0/23 maxlen: 32 103.211.184.0/23 maxlen: 32 103.225.128.0/22 maxlen: 32 116.212.188.0/22 maxlen: 32 139.5.104.0/22 maxlen: 32 180.94.216.0/22 maxlen: 32 193.151.52.0/22 maxlen: 32 203.78.168.0/21 maxlen: 32 206.204.0.0/20 maxlen: 32 206.204.16.0/20 maxlen: 32 206.204.32.0/20 maxlen: 32 206.204.48.0/20 maxlen: 32 213.188.64.0/22 maxlen: 32 213.188.80.0/20 maxlen: 32 216.194.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:af:c1:4c:85:b2:48:da:41:81:11:b3:6b:04:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56f83f791317c75c0cd3291f6bbb6e653d896e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:1d:45:c3:bd:cc:65:40:b8:2f:67:ee:ef: 96:d9:37:38:9c:aa:68:43:8f:e8:2e:75:e2:27:90: 2d:ff:21:5d:04:92:48:98:36:9b:9f:83:db:f3:4e: dd:49:79:23:23:c0:1d:e3:6a:b3:79:a3:40:d3:aa: 7d:c2:16:03:d5:55:4b:6d:d5:27:dd:a8:d9:9b:9a: 81:12:42:55:96:9d:74:ed:76:bb:b0:ae:90:7a:06: 5e:f6:f6:51:c4:1a:99:be:d7:80:f2:43:65:6e:20: c8:da:4d:6d:c1:df:36:7c:1c:85:a1:40:81:1a:2c: cf:dc:de:97:7f:df:99:e2:11:13:71:47:ab:00:93: b4:fe:20:4b:38:8e:9b:a3:aa:fa:da:e6:54:47:cb: ec:3f:be:97:02:63:e1:13:17:36:94:03:4d:2a:9b: 19:ae:89:aa:1d:6b:6b:ab:05:cc:a8:5d:5d:26:ea: b8:43:4e:71:5f:a9:8a:63:16:36:a2:d1:a2:ad:31: 0e:0a:ab:e2:70:f2:1f:16:2c:cc:f6:0d:fd:9e:b7: 9f:34:73:91:92:73:70:8b:4e:cb:88:97:f5:9e:f0: dc:d9:55:fe:e5:72:db:25:62:e6:37:cd:a9:06:07: 49:d8:72:ac:cd:a4:0f:c1:a8:f0:1c:2c:34:7f:b6: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F8:3F:79:13:17:C7:5C:0C:D3:29:1F:6B:BB:6E:65:3D:89:6E:25 X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.226.0/24 43.252.28.0/22 45.114.240.0/22 45.130.120.0/22 85.208.148.0/22 89.223.14.0/23 89.223.18.0/23 92.255.32.0/21 92.255.86.0/23 94.176.48.0/20 94.176.80.0/20 103.30.12.0/22 103.207.152.0/23 103.211.184.0/23 103.225.128.0/22 116.212.188.0/22 139.5.104.0/22 180.94.216.0/22 193.151.52.0/22 203.78.168.0/21 206.204.0.0/18 213.188.64.0/22 213.188.80.0/20 216.194.80.0/20 Signature Algorithm: sha256WithRSAEncryption 06:59:1e:0e:93:ea:2c:3c:f6:5b:72:ae:06:6e:78:d6:3b:a8: e9:00:09:a6:f5:c0:ee:47:48:8e:69:fc:49:6b:39:40:da:f7: 9f:bc:cb:06:15:41:e4:5d:28:ad:cd:55:94:be:59:e8:5d:21: 9e:92:7a:8f:9c:9c:c4:3a:a9:77:f3:9e:95:76:5a:17:10:f7: f3:17:92:a3:0c:f7:c0:b9:9d:83:09:28:9d:80:5c:a9:4a:ca: 99:d8:2c:ff:fd:74:84:90:e5:c5:65:bf:66:a9:94:23:58:e2: b0:41:55:a2:b2:89:86:8d:51:2b:7b:4a:92:28:81:b4:93:48: 93:8a:ec:5b:35:22:db:50:8f:6c:c1:47:e9:a2:2e:a5:25:6f: f6:c5:1e:77:b9:37:c1:09:01:65:43:f0:7a:c5:2e:42:76:6d: 5f:1f:15:23:db:4c:01:7c:df:cd:13:85:52:c2:f8:00:75:17: 35:48:d1:a7:97:2f:5e:75:d1:18:5d:06:d7:73:f9:c0:21:ff: e0:7e:9d:2b:3c:4b:7c:27:f8:3e:a9:a4:9a:af:c0:19:a3:24: 2f:2a:ac:a1:19:35:e3:fd:7f:58:ba:2a:83:ad:3a:60:7c:d8: 66:90:2f:8c:3b:71:87:e9:3b:13:8e:ea:78:7c:45:31:05:a4: fd:ec:eb:39 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt7pK/BTIWySNpBgRGzawRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmY4M2Y3OTEzMTdjNzVjMGNkMzI5MWY2YmJiNmU2NTNkODk2ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6EdRcO9zGVAuC9n7u+W2Tc4nKpo Q4/oLnXiJ5At/yFdBJJImDabn4Pb807dSXkjI8Ad42qzeaNA06p9whYD1VVLbdUn 3ajZm5qBEkJVlp107Xa7sK6QegZe9vZRxBqZvteA8kNlbiDI2k1twd82fByFoUCB GizP3N6Xf9+Z4hETcUerAJO0/iBLOI6bo6r62uZUR8vsP76XAmPhExc2lANNKpsZ romqHWtrqwXMqF1dJuq4Q05xX6mKYxY2otGirTEOCqvicPIfFizM9g39nrefNHOR knNwi07LiJf1nvDc2VX+5XLbJWLmN82pBgdJ2HKszaQPwajwHCw0f7ZwcQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFFb4P3kTF8dcDNMpH2u7bmU9iW4lMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvVnZnX2VSTVh4MXdNMHlrZmE3dHVaVDJKYmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAl PeIDBAIr/BwDBAItcvADBAItgngDBAJV0JQDBAFZ3w4DBAFZ3xIDBANc/yADBAFc /1YDBAResDADBAResFADBAJnHgwDBAFnz5gDBAFn07gDBAJn4YADBAJ01LwDBAKL BWgDBAK0XtgDBALBlzQDBAPLTqgDBAbOzAADBALVvEADBATVvFADBATYwlAwDQYJ KoZIhvcNAQELBQADggEBAAZZHg6T6iw89ltyrgZueNY7qOkACab1wO5HSI5p/Elr OUDa95+8ywYVQeRdKK3NVZS+WehdIZ6Seo+cnMQ6qXfznpV2WhcQ9/MXkqMM98C5 nYMJKJ2AXKlKypnYLP/9dISQ5cVlv2aplCNY4rBBVaKyiYaNUSt7SpIogbSTSJOK 7Fs1IttQj2zBR+miLqUlb/bFHne5N8EJAWVD8HrFLkJ2bV8fFSPbTAF8380ThVLC +AB1FzVI0aeXL1510RhdBtdz+cAh/+B+nSs8S3wn+D6ppJqvwBmjJC8qrKEZNeP9 f1i6KoOtOmB82GaQL4w7cYfpOxOO6nh8RTEFpP3s6zk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:31 2026 by rpki-client