This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa File: VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa (raw, json) Hash identifier: MN3OM8Px4rr+GRLiVct7muu1ZFs7Cc/Qcnx5KlMSz48= Subject key identifier: 54:AB:CB:AA:D5:F5:A6:95:C4:89:75:5A:F2:C7:15:F6:B7:36:0A:2F Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Certificate serial: 019B7C11108F0B59AF56D5FA820BB2A86E5B Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa Signing time: Fri 02 Jan 2026 00:17:31 +0000 ROA not before: Fri 02 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60522 IP address blocks: 37.131.179.0/24 maxlen: 24 37.131.180.0/22 maxlen: 24 185.212.52.0/22 maxlen: 24 2a0b:72c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:10:8f:0b:59:af:56:d5:fa:82:0b:b2:a8:6e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Validity Not Before: Jan 2 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54abcbaad5f5a695c489755af2c715f6b7360a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:e7:fb:ef:83:f6:bf:a3:17:2e:77:18:b6: d4:17:6c:67:a1:31:ac:9e:2c:ae:24:b2:90:a5:3f: 0e:8c:b2:fe:08:3a:7a:36:7f:34:00:55:22:ba:e3: 91:6b:c7:1d:d3:c5:86:d1:f6:ef:d9:17:f2:43:c7: be:40:a2:9e:6d:e5:05:50:e9:4f:e7:8a:de:40:fa: 2f:43:aa:d6:39:e9:b2:44:36:5a:10:2c:75:0c:f1: cd:fc:ab:e3:d3:1d:a9:2b:49:86:5d:a8:26:96:6e: 1d:79:fc:aa:cd:59:59:f7:2b:bc:3c:d3:3e:de:57: 31:34:68:b7:b6:6c:16:c8:b8:83:d9:8c:6d:3b:23: bc:bd:c3:90:79:28:37:2c:d9:63:bb:fa:51:6c:65: c9:83:c6:c6:57:91:d6:9f:cb:5e:87:65:bf:f0:56: fa:2e:a3:a3:0e:0a:9c:6b:d0:3e:7b:9c:da:5b:21: c8:a0:d1:07:19:cf:c1:02:de:b0:33:c3:30:e7:64: c3:d0:a6:12:c7:34:c5:59:2e:a0:01:42:5b:16:25: 33:20:85:9d:1c:78:08:1f:4d:34:2b:f2:61:42:5d: 38:1e:63:a3:d8:3f:6d:99:ae:33:a1:1d:6f:70:93: f2:e4:6c:9b:cc:46:1c:67:0d:7e:cd:bf:0e:a6:15: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AB:CB:AA:D5:F5:A6:95:C4:89:75:5A:F2:C7:15:F6:B7:36:0A:2F X509v3 Authority Key Identifier: keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/VKvLqtX1ppXEiXVa8scV9rc2Ci8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.131.179.0-37.131.183.255 185.212.52.0/22 IPv6: 2a0b:72c0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:52:bf:af:0f:1f:09:0f:5c:77:7f:74:1c:ed:ff:cb:dc:90: 8e:c2:97:b8:63:0c:e4:5a:94:35:c5:1b:37:36:00:44:a8:d9: 7a:96:d1:c3:1c:aa:ec:6b:7a:e0:21:fa:a6:24:61:03:87:47: 35:f5:96:8c:84:75:39:ed:2a:96:f4:d9:e7:9a:4b:8c:4f:de: 44:89:72:48:63:9a:54:b1:e6:1e:ce:a4:b0:74:1c:79:8f:d9: 42:c5:4a:4a:97:6f:5c:a7:d1:78:ac:fa:a9:29:a1:42:38:bb: c1:91:eb:0f:b9:22:14:7c:17:29:ce:19:d4:a7:c3:c0:dc:83: 16:7b:ff:57:fd:06:a7:4e:de:18:00:53:90:29:a3:0f:26:c0: cd:07:c6:b1:d2:cf:09:ad:38:6a:1a:79:d9:a8:70:bc:02:7f: ae:5e:f1:9a:7e:b7:a0:5d:74:18:de:dc:a5:f2:ab:32:57:90: 7d:c0:3b:10:26:5b:38:3c:d1:7b:6b:ab:5d:83:7d:f8:44:29: 76:2e:94:eb:b1:a0:bc:e8:04:92:a0:0d:11:1a:22:c2:13:f3: d4:5c:a2:84:06:9d:e6:71:05:01:c8:f0:eb:9b:22:5e:71:4e: 43:5e:2b:7e:96:17:14:ce:e3:93:b7:8e:1e:c7:1f:ce:b8:74: 4a:67:e2:12 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8ERCPC1mvVtX6gguyqG5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzQxNWFlNjM0ZDYxMzE1OWNiZDJjZTc0YWMyNjFhN2Q1 YWM0ZDQwHhcNMjYwMTAyMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGFiY2JhYWQ1ZjVhNjk1YzQ4OTc1NWFmMmM3MTVmNmI3MzYwYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeHn+++D9r+jFy53GLbUF2xnoTGs niyuJLKQpT8OjLL+CDp6Nn80AFUiuuORa8cd08WG0fbv2RfyQ8e+QKKebeUFUOlP 54reQPovQ6rWOemyRDZaECx1DPHN/Kvj0x2pK0mGXagmlm4defyqzVlZ9yu8PNM+ 3lcxNGi3tmwWyLiD2YxtOyO8vcOQeSg3LNlju/pRbGXJg8bGV5HWn8teh2W/8Fb6 LqOjDgqca9A+e5zaWyHIoNEHGc/BAt6wM8Mw52TD0KYSxzTFWS6gAUJbFiUzIIWd HHgIH000K/JhQl04HmOj2D9tma4zoR1vcJPy5GybzEYcZw1+zb8OphWSHQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFFSry6rV9aaVxIl1WvLHFfa3NgovMB8GA1UdIwQY MBaAFIp0Fa5jTWExWcvSznSsJhp9WsTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMt ZWY3ZjU2ODQyNTQ2LzEvVkt2THF0WDFwcFhFaVhWYThzY1Y5cmMyQ2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMtZWY3ZjU2ODQyNTQ2 LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAAlg7MD BAMlg7ADBAK51DQwDQQCAAIwBwMFACoLcsAwDQYJKoZIhvcNAQELBQADggEBAG1S v68PHwkPXHd/dBzt/8vckI7Cl7hjDORalDXFGzc2AESo2XqW0cMcquxreuAh+qYk YQOHRzX1loyEdTntKpb02eeaS4xP3kSJckhjmlSx5h7OpLB0HHmP2ULFSkqXb1yn 0Xis+qkpoUI4u8GR6w+5IhR8FynOGdSnw8DcgxZ7/1f9BqdO3hgAU5Apow8mwM0H xrHSzwmtOGoaedmocLwCf65e8Zp+t6BddBje3KXyqzJXkH3AOxAmWzg80Xtrq12D ffhEKXYulOuxoLzoBJKgDREaIsIT89RcooQGneZxBQHI8OubIl5xTkNeK36WFxTO 45O3jh7HH864dEpn4hI= -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:23 2026 by rpki-client