This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/VOtCH4o4J2I_5xCMQITnNsVrQfM.roa File: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (raw, json) Hash identifier: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M= Subject key identifier: 54:EB:42:1F:8A:38:27:62:3F:E7:10:8C:40:84:E7:36:C5:6B:41:F3 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAF8DE5570CB3514247E78407C3F0E Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/VOtCH4o4J2I_5xCMQITnNsVrQfM.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39412 IP address blocks: 95.131.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:de:55:70:cb:35:14:24:7e:78:40:7c:3f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54eb421f8a3827623fe7108c4084e736c56b41f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:78:50:7a:a8:a1:9f:de:10:e5:ac:0f:2c: 74:20:8c:58:0e:1f:f4:be:23:47:77:4b:83:25:22: 18:37:90:fc:36:03:40:65:58:6c:8a:80:7a:3b:e8: 1d:68:f3:66:ca:d4:03:a1:15:d6:6f:a4:58:25:c8: 21:64:e0:f7:4a:57:de:b0:1d:df:b3:24:23:77:e9: 0a:de:66:f0:3a:da:4b:ce:80:5a:43:2f:fe:97:c9: 4c:f2:59:45:42:7c:ac:13:30:e9:f4:a2:24:fe:99: 6e:ef:17:2b:53:96:1d:e8:ff:a9:d3:f4:dd:c7:b3: de:6b:5b:dd:8e:be:1b:5d:51:0d:4b:83:88:09:16: d0:0b:a0:db:3a:4b:ff:6d:be:68:3d:44:ef:15:e7: 1e:00:e2:d3:10:6d:ab:5d:2c:96:01:e1:95:5f:7f: b3:98:e2:a6:3d:9f:fa:7d:f3:75:5e:d7:0e:51:90: 56:e7:cd:c9:11:76:81:c5:4a:28:bd:9a:fc:79:45: ee:cb:7d:fc:ca:ea:e7:0f:6c:0f:df:75:79:54:6d: cd:fe:76:4f:f5:30:24:97:a9:60:52:2b:d5:4d:7b: 21:65:ff:62:9d:7f:82:08:eb:a7:93:11:38:6e:51: 6f:ec:33:5f:76:26:3a:4e:61:7b:e0:36:96:a3:83: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:42:1F:8A:38:27:62:3F:E7:10:8C:40:84:E7:36:C5:6B:41:F3 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/VOtCH4o4J2I_5xCMQITnNsVrQfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.39.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:4b:1b:c7:c2:cf:bb:c6:ce:d1:78:50:84:ed:37:21:43:89: c8:2f:32:20:1a:d2:aa:16:32:31:95:13:2f:63:23:19:73:0b: 25:75:bb:d5:71:bd:cd:73:ba:6b:77:94:10:a9:28:f3:98:59: 3e:f4:36:20:7c:86:16:e8:9b:7b:25:a4:ae:d2:22:b7:99:46: 45:ef:c6:48:e4:a1:82:a3:7e:5a:79:6b:5b:68:99:e0:7c:c0: 10:0d:86:78:24:5a:a7:c3:e4:01:e5:77:e8:f5:41:38:4e:3b: ee:8b:88:0b:e6:b3:8d:d8:f5:90:de:aa:54:bc:81:3e:9c:3b: 36:03:2e:23:29:9d:d0:93:ab:7b:14:7f:cd:3f:ed:a1:9f:5c: 9e:94:02:56:3c:22:3f:a2:3b:68:51:cd:6a:a0:9e:80:ac:6a: d5:d6:9f:ed:9a:ca:3f:01:ed:14:18:53:7e:4a:4c:5d:d5:fb: ac:57:23:51:be:2b:f7:8d:26:15:36:1a:58:64:a4:4e:74:c7: 70:ea:60:ae:d8:ea:68:c4:f9:7c:7f:3b:5d:98:93:f9:f3:b8: 9d:bf:1c:f3:8e:89:3c:52:00:ba:44:71:d4:65:7e:59:a4:88: cf:15:f0:79:0d:ef:3e:bb:67:b1:ce:ea:15:d0:bf:a8:da:8f: a8:dd:68:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vjeVXDLNRQkfnhAfD8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGViNDIxZjhhMzgyNzYyM2ZlNzEwOGM0MDg0ZTczNmM1NmI0MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt94UHqooZ/eEOWsDyx0IIxYDh/0 viNHd0uDJSIYN5D8NgNAZVhsioB6O+gdaPNmytQDoRXWb6RYJcghZOD3SlfesB3f syQjd+kK3mbwOtpLzoBaQy/+l8lM8llFQnysEzDp9KIk/plu7xcrU5Yd6P+p0/Td x7Pea1vdjr4bXVENS4OICRbQC6DbOkv/bb5oPUTvFeceAOLTEG2rXSyWAeGVX3+z mOKmPZ/6ffN1XtcOUZBW583JEXaBxUoovZr8eUXuy338yurnD2wP33V5VG3N/nZP 9TAkl6lgUivVTXshZf9inX+CCOunkxE4blFv7DNfdiY6TmF74DaWo4MZNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTrQh+KOCdiP+cQjECE5zbFa0HzMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvVk90Q0g0bzRKMklfNXhDTVFJVG5Oc1ZyUWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4MnMA0G CSqGSIb3DQEBCwUAA4IBAQAPSxvHws+7xs7ReFCE7TchQ4nILzIgGtKqFjIxlRMv YyMZcwsldbvVcb3Nc7prd5QQqSjzmFk+9DYgfIYW6Jt7JaSu0iK3mUZF78ZI5KGC o35aeWtbaJngfMAQDYZ4JFqnw+QB5Xfo9UE4Tjvui4gL5rON2PWQ3qpUvIE+nDs2 Ay4jKZ3Qk6t7FH/NP+2hn1yelAJWPCI/ojtoUc1qoJ6ArGrV1p/tmso/Ae0UGFN+ Skxd1fusVyNRviv3jSYVNhpYZKROdMdw6mCu2OpoxPl8fztdmJP587idvxzzjok8 UgC6RHHUZX5ZpIjPFfB5De8+u2exzuoV0L+o2o+o3Wj9 -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:43 2026 by rpki-client