This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/VyGXcLXLR7aE-sDxtLP4io6t1tc.roa File: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (raw, json) Hash identifier: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo= Subject key identifier: 57:21:97:70:B5:CB:47:B6:84:FA:C0:F1:B4:B3:F8:8A:8E:AD:D6:D7 Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Certificate serial: 019B7C11D5AAB0CB15B894F857B6C1EC2E48 Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/VyGXcLXLR7aE-sDxtLP4io6t1tc.roa Signing time: Fri 02 Jan 2026 00:18:22 +0000 ROA not before: Fri 02 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57948 IP address blocks: 2.57.40.0/22 maxlen: 22 2.57.40.0/24 maxlen: 24 2.57.41.0/24 maxlen: 24 2.57.42.0/24 maxlen: 24 2.57.43.0/24 maxlen: 24 91.236.244.0/23 maxlen: 23 91.236.244.0/24 maxlen: 24 91.236.245.0/24 maxlen: 24 171.25.229.0/24 maxlen: 24 185.70.44.0/22 maxlen: 22 185.70.44.0/24 maxlen: 24 185.70.45.0/24 maxlen: 24 185.70.46.0/24 maxlen: 24 185.70.47.0/24 maxlen: 24 2a05:2600::/29 maxlen: 29 2a05:2600::/32 maxlen: 32 2a05:2601::/32 maxlen: 32 2a05:2602::/32 maxlen: 32 2a05:2603::/32 maxlen: 32 2a05:2604::/32 maxlen: 32 2a05:2605::/32 maxlen: 32 2a05:2606::/32 maxlen: 32 2a05:2607::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d5:aa:b0:cb:15:b8:94:f8:57:b6:c1:ec:2e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Validity Not Before: Jan 2 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57219770b5cb47b684fac0f1b4b3f88a8eadd6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:8d:32:d4:4d:e5:a7:62:0e:c1:e4:98:ae: 9c:ea:1a:71:04:d3:27:e1:8f:a5:41:a8:76:05:80: 81:27:c5:04:a9:94:5f:19:7f:03:53:a9:d5:8b:c5: f4:3d:41:9d:50:1c:35:68:7f:2d:f9:3a:7f:7b:d2: fe:45:49:63:9c:a2:9d:65:33:1e:6b:f6:b3:d8:da: 75:5c:78:01:b3:3c:03:fd:8c:5c:06:e5:35:54:67: 55:d8:2f:99:7a:20:69:a8:bf:8c:1b:a6:ce:a9:8b: dd:ce:35:6e:7d:12:f9:85:fe:75:23:71:06:34:67: 1e:e2:be:26:43:69:3d:58:15:26:52:e5:82:f2:a1: 9f:58:29:6f:7c:cc:74:e5:9e:23:c1:40:9a:28:91: 52:e3:83:5a:8c:b0:42:c4:50:5d:aa:6c:c4:0b:78: 2b:fc:30:8c:d9:87:86:0f:b6:d0:89:c1:65:b6:85: 3a:18:cb:8b:93:64:f7:ad:17:00:22:95:3c:ef:6a: 42:21:6d:fa:c4:b6:40:c9:0a:2a:bb:ed:df:77:b6: 78:ac:7a:8d:94:72:ea:59:2a:8d:99:bd:57:99:78: be:89:8c:48:6d:09:4f:74:ec:3a:a1:c5:3c:ca:00: 3c:51:7f:79:91:40:6f:e5:86:9f:38:d0:29:99:73: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:97:70:B5:CB:47:B6:84:FA:C0:F1:B4:B3:F8:8A:8E:AD:D6:D7 X509v3 Authority Key Identifier: keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/VyGXcLXLR7aE-sDxtLP4io6t1tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.40.0/22 91.236.244.0/23 171.25.229.0/24 185.70.44.0/22 IPv6: 2a05:2600::/29 Signature Algorithm: sha256WithRSAEncryption 8c:09:ac:f8:a8:2f:d2:3f:9a:c4:55:1d:50:81:e4:50:44:44: 23:42:6f:48:01:5a:45:09:c2:69:a8:57:8d:78:a8:18:da:ce: f6:77:a3:5b:dd:43:d7:33:8b:fe:34:a6:aa:b9:79:cd:b7:02: 52:ca:37:d9:b2:be:4c:43:72:b7:b6:c6:7c:c6:69:1e:38:51: 9e:9d:c9:a3:26:5a:7d:db:50:6d:5d:4a:35:79:d2:33:a0:5e: 55:bc:66:01:c1:de:00:53:8c:ba:e0:b7:46:21:c2:8f:15:01: 26:e3:cd:bd:d3:7f:63:54:59:79:fa:82:48:63:88:9b:96:87: c6:68:40:03:00:1c:89:82:63:59:5a:48:f4:b4:10:c1:d7:bb: a2:7d:f9:54:8d:68:e4:bd:43:43:41:c5:12:2d:5d:61:cd:61: 69:be:6b:a9:75:40:3b:ab:db:bf:86:32:53:ee:c4:a3:1e:94: f5:bf:af:e0:ea:de:b8:17:be:4c:18:25:f9:f4:9a:ae:5b:f7: bc:51:10:dc:af:fa:c1:4c:1e:a1:bd:d6:4d:7c:8d:7f:4d:06: ae:eb:86:be:2b:56:8f:9f:0c:98:12:4f:6b:38:aa:36:4e:d5: e8:1b:c8:f0:ef:eb:26:17:77:68:66:24:86:0e:a1:d3:e5:90: 69:49:08:69 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EdWqsMsVuJT4V7bB7C5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYThjNmU5MzA4YmIwMDA4MzEwMDE3MWUwMGRiYjYxNDBm NGY1ODAwHhcNMjYwMTAyMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzIxOTc3MGI1Y2I0N2I2ODRmYWMwZjFiNGIzZjg4YThlYWRkNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j+NMtRN5adiDsHkmK6c6hpxBNMn 4Y+lQah2BYCBJ8UEqZRfGX8DU6nVi8X0PUGdUBw1aH8t+Tp/e9L+RUljnKKdZTMe a/az2Np1XHgBszwD/YxcBuU1VGdV2C+ZeiBpqL+MG6bOqYvdzjVufRL5hf51I3EG NGce4r4mQ2k9WBUmUuWC8qGfWClvfMx05Z4jwUCaKJFS44NajLBCxFBdqmzEC3gr /DCM2YeGD7bQicFltoU6GMuLk2T3rRcAIpU872pCIW36xLZAyQoqu+3fd7Z4rHqN lHLqWSqNmb1XmXi+iYxIbQlPdOw6ocU8ygA8UX95kUBv5YafONApmXOnAwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFchl3C1y0e2hPrA8bSz+IqOrdbXMB8GA1UdIwQY MBaAFBCoxukwi7AAgxABceANu2FA9PWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYt NmI0OTdiMmMwYjM4LzEvVnlHWGNMWExSN2FFLXNEeHRMUDRpbzZ0MXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYtNmI0OTdiMmMwYjM4 LzEvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCAjkoAwQB W+z0AwQAqxnlAwQCuUYsMA0EAgACMAcDBQMqBSYAMA0GCSqGSIb3DQEBCwUAA4IB AQCMCaz4qC/SP5rEVR1QgeRQREQjQm9IAVpFCcJpqFeNeKgY2s72d6Nb3UPXM4v+ NKaquXnNtwJSyjfZsr5MQ3K3tsZ8xmkeOFGencmjJlp921BtXUo1edIzoF5VvGYB wd4AU4y64LdGIcKPFQEm4829039jVFl5+oJIY4iblofGaEADAByJgmNZWkj0tBDB 17uifflUjWjkvUNDQcUSLV1hzWFpvmupdUA7q9u/hjJT7sSjHpT1v6/g6t64F75M GCX59JquW/e8URDcr/rBTB6hvdZNfI1/TQau64a+K1aPnwyYEk9rOKo2TtXoG8jw 7+smF3doZiSGDqHT5ZBpSQhp -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:57 2026 by rpki-client