This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VptxbwzXKJqQyLjAtX2teZehsqE.roa File: VptxbwzXKJqQyLjAtX2teZehsqE.roa (raw, json) Hash identifier: DcslDuby0bAKKKb6DpeteuHsFd0PL1RiuU2wjGszdfk= Subject key identifier: 56:9B:71:6F:0C:D7:28:9A:90:C8:B8:C0:B5:7D:AD:79:97:A1:B2:A1 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DF35DA1DDB5203BE5FA923EEF6F6 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VptxbwzXKJqQyLjAtX2teZehsqE.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34383 IP address blocks: 85.117.128.0/19 maxlen: 19 85.192.192.0/18 maxlen: 18 89.170.0.0/16 maxlen: 16 95.136.128.0/17 maxlen: 17 2a00:5e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:df:35:da:1d:db:52:03:be:5f:a9:23:ee:f6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=569b716f0cd7289a90c8b8c0b57dad7997a1b2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:2a:ec:10:3f:f9:8e:70:a2:c5:6c:a3:55: 9c:a6:51:30:b4:dc:51:5c:d1:74:8d:21:67:e0:8e: 8d:c7:ae:34:06:cc:27:17:e1:20:7f:1b:45:dc:d8: e4:aa:ac:cd:53:84:e0:38:27:b0:cd:5e:64:e2:88: b8:66:5a:b8:fb:bc:91:74:e9:11:b3:83:31:d4:e7: 9c:5c:ec:03:dd:33:d3:1a:85:8c:5f:0a:63:b6:f0: 2c:43:c4:54:2f:9a:60:39:0f:cb:8b:1a:47:45:79: e3:5b:37:6e:3c:00:84:fe:26:dd:b8:4b:32:8b:50: cb:4b:78:7f:45:c5:6f:35:96:29:7b:eb:2c:1f:5a: c8:ec:2c:68:f6:5f:5f:1e:01:df:26:b6:99:d5:8d: 6f:9b:b3:ab:4d:15:0b:40:27:71:85:18:7a:06:a7: f5:eb:d6:41:eb:55:0b:c1:33:df:24:ee:5e:66:02: 99:35:3f:c3:00:27:43:61:c5:e4:00:61:e4:a1:b6: 4e:9f:56:84:62:fe:10:b5:5f:8d:20:26:e7:51:96: 03:f5:c7:0b:06:30:3a:e4:50:79:39:46:8c:70:7c: ed:b6:db:9f:6a:b0:4d:dc:c7:70:ec:bc:87:5f:83: 98:2a:d8:db:3b:e0:d2:bf:b2:4b:c6:f7:68:a8:00: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:71:6F:0C:D7:28:9A:90:C8:B8:C0:B5:7D:AD:79:97:A1:B2:A1 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VptxbwzXKJqQyLjAtX2teZehsqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.128.0/19 85.192.192.0/18 89.170.0.0/16 95.136.128.0/17 IPv6: 2a00:5e80::/32 Signature Algorithm: sha256WithRSAEncryption b0:87:78:60:30:cf:99:dc:b0:3e:f7:d1:f0:66:f2:28:db:57: 21:3f:25:8e:f3:b8:29:cb:77:7e:22:59:f5:33:aa:08:9d:8c: 30:0c:d6:4a:82:48:9c:c2:0a:23:e5:f8:05:5e:b3:da:bb:9c: 2c:ad:22:d2:8d:19:fb:60:b8:bd:48:ac:8c:8c:14:dc:c2:4d: 45:b5:37:16:fa:07:19:47:56:ae:20:3f:fc:cd:56:5c:2c:e9: bb:90:f1:39:d8:82:ba:b1:e0:b4:66:a2:8a:43:23:18:80:cc: 53:c2:5f:c1:04:8b:3c:ab:72:21:12:46:fe:b9:64:4f:91:fd: e2:2a:4f:79:85:b1:da:80:e3:f1:9c:50:ff:b8:31:26:c2:9d: ad:6c:b0:a4:13:96:2f:dd:17:0e:1c:35:7c:3c:cf:38:f5:7d: e8:53:8c:e5:29:5d:3b:1d:64:09:36:a8:79:c4:30:38:ae:cd: ca:2d:bd:6f:a8:08:aa:e4:f0:a8:df:05:67:1a:6d:73:41:30: aa:b1:26:3e:c6:95:e7:77:58:77:07:3b:cd:9c:6c:f4:9f:e9: cf:4e:49:89:e4:3f:97:c0:c0:ee:8d:36:02:7e:16:4c:1f:16: e9:e7:60:a6:6f:ef:8e:8a:d9:47:ae:1c:7f:cf:ba:97:71:ad: 51:b5:af:1b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6yN812h3bUgO+X6kj7vb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjliNzE2ZjBjZDcyODlhOTBjOGI4YzBiNTdkYWQ3OTk3YTFiMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBkq7BA/+Y5wosVso1WcplEwtNxR XNF0jSFn4I6Nx640BswnF+EgfxtF3NjkqqzNU4TgOCewzV5k4oi4Zlq4+7yRdOkR s4Mx1OecXOwD3TPTGoWMXwpjtvAsQ8RUL5pgOQ/LixpHRXnjWzduPACE/ibduEsy i1DLS3h/RcVvNZYpe+ssH1rI7Cxo9l9fHgHfJraZ1Y1vm7OrTRULQCdxhRh6Bqf1 69ZB61ULwTPfJO5eZgKZNT/DACdDYcXkAGHkobZOn1aEYv4QtV+NICbnUZYD9ccL BjA65FB5OUaMcHztttufarBN3Mdw7LyHX4OYKtjbO+DSv7JLxvdoqACUzQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFFabcW8M1yiakMi4wLV9rXmXobKhMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvVnB0eGJ3elhLSnFReUxqQXRYMnRlWmVoc3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQFVXWAAwQG VcDAAwMAWaoDBAdfiIAwDQQCAAIwBwMFACoAXoAwDQYJKoZIhvcNAQELBQADggEB ALCHeGAwz5ncsD730fBm8ijbVyE/JY7zuCnLd34iWfUzqgidjDAM1kqCSJzCCiPl +AVes9q7nCytItKNGftguL1IrIyMFNzCTUW1Nxb6BxlHVq4gP/zNVlws6buQ8TnY grqx4LRmoopDIxiAzFPCX8EEizyrciESRv65ZE+R/eIqT3mFsdqA4/GcUP+4MSbC na1ssKQTli/dFw4cNXw8zzj1fehTjOUpXTsdZAk2qHnEMDiuzcotvW+oCKrk8Kjf BWcabXNBMKqxJj7Gled3WHcHO82cbPSf6c9OSYnkP5fAwO6NNgJ+FkwfFunnYKZv 746K2UeuHH/PupdxrVG1rxs= -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:43 2026 by rpki-client