This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/vdJ29u1tc-6bL_YeRHVr5jRPoPw.roa File: vdJ29u1tc-6bL_YeRHVr5jRPoPw.roa (raw, json) Hash identifier: alQwgWwGlibpxpbojaUMP10rKWh8tqsvUWobaSvbHIw= Subject key identifier: BD:D2:76:F6:ED:6D:73:EE:9B:2F:F6:1E:44:75:6B:E6:34:4F:A0:FC Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Certificate serial: 019B7DCB4BF62CAEF13E3AD77E8BEF031CC6 Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/vdJ29u1tc-6bL_YeRHVr5jRPoPw.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50418 IP address blocks: 185.84.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4b:f6:2c:ae:f1:3e:3a:d7:7e:8b:ef:03:1c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd276f6ed6d73ee9b2ff61e44756be6344fa0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:57:a1:a5:84:69:b7:51:7f:3e:59:05:58: db:b3:56:70:11:21:8e:2a:f2:5a:cc:47:d7:e5:77: 95:ed:96:5c:0f:95:c6:16:7b:63:14:a2:c9:0f:bc: 1e:15:6d:a4:d5:5c:e7:ef:3d:90:43:2f:f2:4c:5d: ff:0a:49:70:51:8e:04:b5:54:7e:c1:d7:84:9d:5e: 41:a1:f6:6f:09:57:3d:c1:c1:fc:3e:1b:93:92:78: 58:58:c1:42:0d:22:a9:28:97:69:d1:85:cc:36:32: 5f:34:78:cd:36:3e:a5:d1:67:e0:0c:01:f8:af:0c: 79:f4:8d:04:35:09:00:21:b7:95:aa:b3:8f:e1:6b: ff:5e:58:c7:bb:6f:60:a4:b4:1b:01:d9:ef:1a:80: dc:51:cc:fc:42:26:15:18:53:c0:85:b9:01:7f:b5: 6f:7d:7e:5d:8c:21:c1:dd:90:62:0f:6d:38:ba:70: a1:cd:3e:cd:6f:20:ae:20:ee:63:94:0a:96:b7:f5: 4b:ca:35:05:dd:87:52:93:93:c1:a7:66:e0:ae:69: 88:ce:7a:c2:eb:6d:06:c5:d3:ed:f3:ca:87:ca:1d: 1f:dc:33:d4:86:fe:7c:a7:ce:d7:41:ab:62:9a:1c: c0:da:73:a6:81:b7:b6:aa:0b:7e:ad:16:37:b1:48: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:76:F6:ED:6D:73:EE:9B:2F:F6:1E:44:75:6B:E6:34:4F:A0:FC X509v3 Authority Key Identifier: keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/vdJ29u1tc-6bL_YeRHVr5jRPoPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.32.0/22 Signature Algorithm: sha256WithRSAEncryption 69:7f:fc:6c:c1:77:e7:1c:8d:27:35:c4:8d:a9:7e:6a:63:74: 22:10:24:a5:50:2f:c5:f1:01:f1:0d:d8:7c:dc:82:bc:2f:da: 45:bd:76:d6:94:f1:80:53:9b:b6:aa:c7:f9:c8:24:b1:ca:45: 77:61:4c:43:ab:78:f3:16:f4:1b:10:5c:47:d1:f9:6f:39:74: f0:60:2e:27:1d:07:6c:ed:a0:d4:c8:cc:53:35:29:c4:b4:9d: 3f:27:ee:4a:51:fb:7e:a5:72:37:87:6a:86:c4:ad:a3:6b:ef: f7:64:e2:dc:7c:19:e3:0e:3c:05:5c:0e:5b:27:35:48:53:a0: 3c:bd:53:e8:7f:92:7a:aa:68:9a:56:10:01:83:ae:8f:64:53: 4a:d6:f3:1b:35:fc:fa:5d:c9:89:84:2e:34:e1:74:7c:7f:52: 09:fa:39:d3:9d:a4:da:c3:31:9a:3f:81:a2:48:56:5b:40:07: ba:22:47:6f:df:b9:28:21:d6:d2:c8:19:7c:98:4b:6c:b4:da: 1e:ce:b7:81:04:6c:ac:f6:3e:a3:e7:91:f7:f9:d8:d2:d1:fe: 4e:00:f6:15:d0:36:b7:46:5e:87:89:f5:d8:6a:3a:a0:94:0a: 2f:8d:aa:e3:37:e1:32:01:00:f8:1e:43:d8:5c:6f:b9:19:74: ee:06:0d:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0v2LK7xPjrXfovvAxzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc5YmY0YzYyN2Q4NWZlZTJjZTEzYTUzYzQ0ODUxYjlk ZjA1NjMwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQyNzZmNmVkNmQ3M2VlOWIyZmY2MWU0NDc1NmJlNjM0NGZhMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRlXoaWEabdRfz5ZBVjbs1ZwESGO KvJazEfX5XeV7ZZcD5XGFntjFKLJD7weFW2k1Vzn7z2QQy/yTF3/CklwUY4EtVR+ wdeEnV5BofZvCVc9wcH8PhuTknhYWMFCDSKpKJdp0YXMNjJfNHjNNj6l0WfgDAH4 rwx59I0ENQkAIbeVqrOP4Wv/XljHu29gpLQbAdnvGoDcUcz8QiYVGFPAhbkBf7Vv fX5djCHB3ZBiD204unChzT7NbyCuIO5jlAqWt/VLyjUF3YdSk5PBp2bgrmmIznrC 620GxdPt88qHyh0f3DPUhv58p87XQatimhzA2nOmgbe2qgt+rRY3sUh3owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3SdvbtbXPumy/2HkR1a+Y0T6D8MB8GA1UdIwQY MBaAFKNnm/TGJ9hf7izhOlPESFG53wVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjct NTU2NzI2MzRjYmMxLzEvdmRKMjl1MXRjLTZiTF9ZZVJIVnI1alJQb1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjctNTU2NzI2MzRjYmMx LzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVQgMA0G CSqGSIb3DQEBCwUAA4IBAQBpf/xswXfnHI0nNcSNqX5qY3QiECSlUC/F8QHxDdh8 3IK8L9pFvXbWlPGAU5u2qsf5yCSxykV3YUxDq3jzFvQbEFxH0flvOXTwYC4nHQds 7aDUyMxTNSnEtJ0/J+5KUft+pXI3h2qGxK2ja+/3ZOLcfBnjDjwFXA5bJzVIU6A8 vVPof5J6qmiaVhABg66PZFNK1vMbNfz6XcmJhC404XR8f1IJ+jnTnaTawzGaP4Gi SFZbQAe6Ikdv37koIdbSyBl8mEtstNoezreBBGys9j6j55H3+djS0f5OAPYV0Da3 Rl6HifXYajqglAovjarjN+EyAQD4HkPYXG+5GXTuBg0b -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:01 2026 by rpki-client