This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Vxm6MsF_VrARxiUGnezDgCYmD6o.roa File: Vxm6MsF_VrARxiUGnezDgCYmD6o.roa (raw, json) Hash identifier: 1LWl9QzfdvJH2miBfUZDdWh4QBh1pKg+Pha7Z1knnfc= Subject key identifier: 57:19:BA:32:C1:7F:56:B0:11:C6:25:06:9D:EC:C3:80:26:26:0F:AA Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019BC2E0BFC319E70047C461DDB61BE8492D Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Vxm6MsF_VrARxiUGnezDgCYmD6o.roa Signing time: Thu 15 Jan 2026 18:17:47 +0000 ROA not before: Thu 15 Jan 2026 18:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 178.211.159.0/24 maxlen: 24 2001:3080::/29 maxlen: 29 2a0e:a780::/29 maxlen: 29 2a10:9600::/29 maxlen: 29 2a13:8000::/29 maxlen: 29 2a13:b640::/29 maxlen: 29 2a13:b840::/29 maxlen: 29 2a13:d2c0::/29 maxlen: 29 2a13:de40::/29 maxlen: 29 2a14:6bc0::/29 maxlen: 29 2a14:72c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:e0:bf:c3:19:e7:00:47:c4:61:dd:b6:1b:e8:49:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 15 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5719ba32c17f56b011c625069decc38026260faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:3f:6f:d6:22:5f:4c:f0:54:f5:25:59:bc: 85:a7:38:66:eb:b6:b0:f8:33:c8:c6:9e:80:d8:0e: f6:1c:d2:36:6a:91:d1:2b:33:97:fe:d1:b8:e4:15: 56:bf:c0:0a:3d:ba:ae:25:51:b8:6c:93:99:27:f8: e9:4e:d8:0b:ac:01:ec:cd:ea:58:41:10:8b:97:8e: 6f:a3:e5:1c:73:6c:c6:20:2d:79:71:f8:80:9e:4e: c4:82:54:42:36:6b:16:75:df:1f:bb:08:af:87:ad: 73:dc:d5:7a:83:92:29:e8:26:ce:44:cf:a4:92:93: 9b:ff:c1:e1:aa:d3:f6:ca:98:45:3a:73:7c:6b:f2: 49:62:d9:6b:9f:c1:56:bf:0a:9d:d3:d8:c5:6e:8e: 37:47:3a:af:b5:46:d7:49:ce:d5:3f:30:23:f0:3d: 76:52:96:2e:1f:30:40:4e:97:2a:9c:2c:6b:e5:6e: 7e:b4:9f:63:b1:c5:e8:9d:f6:5b:95:98:70:f3:d9: f0:7a:b5:82:3a:16:a0:26:47:cb:35:33:9e:e0:bb: 9f:0e:22:fa:9b:bf:15:74:6f:ea:de:79:cb:68:5f: cf:b6:97:85:dd:b2:18:53:1f:6d:72:cd:d5:b5:9c: 70:ad:c5:5c:80:2e:4b:9a:0e:c4:af:46:aa:01:d0: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:19:BA:32:C1:7F:56:B0:11:C6:25:06:9D:EC:C3:80:26:26:0F:AA X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Vxm6MsF_VrARxiUGnezDgCYmD6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.159.0/24 IPv6: 2001:3080::/29 2a0e:a780::/29 2a10:9600::/29 2a13:8000::/29 2a13:b640::/29 2a13:b840::/29 2a13:d2c0::/29 2a13:de40::/29 2a14:6bc0::/29 2a14:72c0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:a6:a9:b6:3b:71:ef:87:ff:bd:cb:4d:6a:ff:08:45:d6:31: ca:66:e2:d6:ed:35:e8:8f:1b:a5:d8:10:da:8c:4a:41:1a:3c: 1d:96:34:e8:e7:63:6f:1a:64:fe:42:d9:e1:a1:be:b2:58:7e: 4e:4c:6d:88:96:6d:45:63:a9:d7:5e:1e:26:73:a0:87:9d:4b: 77:93:45:32:0c:af:0b:56:fc:4a:27:79:71:58:14:65:34:1b: e4:29:25:53:fc:39:5d:12:bd:65:72:75:d8:cc:56:d1:13:24: 5b:74:5b:eb:4c:1f:f5:76:87:c7:e3:5e:42:86:e7:34:3a:61: fd:6d:52:e6:b9:d7:63:5a:9c:86:44:df:13:e0:c5:27:4e:93: b4:f2:9c:38:23:f8:42:ec:52:47:c3:cd:38:87:85:a0:14:ac: b4:cd:55:95:4e:c3:b5:92:53:f3:49:82:ab:27:a6:73:4b:a3: c3:cc:25:7a:07:af:cd:59:66:b1:c8:a0:91:d9:00:4f:cd:fb: e2:54:56:54:a2:9c:7c:78:ce:3a:ab:b9:eb:dc:46:f3:1b:6c: cf:ad:41:7b:62:df:89:e7:6c:75:4f:b4:3c:1d:55:dd:c5:55: 08:b2:b4:3a:45:e8:52:2c:13:87:56:be:fd:44:7d:cc:5a:04: 05:c1:71:0d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZvC4L/DGecAR8Rh3bYb6EktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTE1MTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzE5YmEzMmMxN2Y1NmIwMTFjNjI1MDY5ZGVjYzM4MDI2MjYwZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVo/b9YiX0zwVPUlWbyFpzhm67aw +DPIxp6A2A72HNI2apHRKzOX/tG45BVWv8AKPbquJVG4bJOZJ/jpTtgLrAHszepY QRCLl45vo+Ucc2zGIC15cfiAnk7EglRCNmsWdd8fuwivh61z3NV6g5Ip6CbORM+k kpOb/8HhqtP2yphFOnN8a/JJYtlrn8FWvwqd09jFbo43RzqvtUbXSc7VPzAj8D12 UpYuHzBATpcqnCxr5W5+tJ9jscXonfZblZhw89nwerWCOhagJkfLNTOe4LufDiL6 m78VdG/q3nnLaF/PtpeF3bIYUx9tcs3VtZxwrcVcgC5Lmg7Er0aqAdA4LQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFFcZujLBf1awEcYlBp3sw4AmJg+qMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvVnhtNk1zRl9WckFSeGlVR25lekRnQ1ltRDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAMBAIAATAGAwQAstOfMEwE AgACMEYDBQMgATCAAwUDKg6ngAMFAyoQlgADBQMqE4AAAwUDKhO2QAMFAyoTuEAD BQMqE9LAAwUDKhPeQAMFAyoUa8ADBQMqFHLAMA0GCSqGSIb3DQEBCwUAA4IBAQBr pqm2O3Hvh/+9y01q/whF1jHKZuLW7TXojxul2BDajEpBGjwdljTo52NvGmT+Qtnh ob6yWH5OTG2Ilm1FY6nXXh4mc6CHnUt3k0UyDK8LVvxKJ3lxWBRlNBvkKSVT/Dld Er1lcnXYzFbREyRbdFvrTB/1dofH415Chuc0OmH9bVLmuddjWpyGRN8T4MUnTpO0 8pw4I/hC7FJHw804h4WgFKy0zVWVTsO1klPzSYKrJ6ZzS6PDzCV6B6/NWWaxyKCR 2QBPzfviVFZUopx8eM46q7nr3EbzG2zPrUF7Yt+J52x1T7Q8HVXdxVUIsrQ6RehS LBOHVr79RH3MWgQFwXEN -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:30 2026 by rpki-client