This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/VvqzmjNZq8EAn7upk3HKESnO2Sg.roa File: VvqzmjNZq8EAn7upk3HKESnO2Sg.roa (raw, json) Hash identifier: zi8li6T/eNUQAuUi6F1iTu5taSL1qMtfO51QFh76N4Q= Subject key identifier: 56:FA:B3:9A:33:59:AB:C1:00:9F:BB:A9:93:71:CA:11:29:CE:D9:28 Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b Certificate serial: 019B77C7683C97381CCFF4A2400D36465EC0 Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/VvqzmjNZq8EAn7upk3HKESnO2Sg.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208018 IP address blocks: 185.172.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:68:3c:97:38:1c:cf:f4:a2:40:0d:36:46:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56fab39a3359abc1009fbba99371ca1129ced928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dd:09:74:9d:df:02:48:50:9a:fd:03:02:4f: d8:b4:42:58:ef:d6:3c:2e:fe:3b:d9:47:5f:f6:34: 6f:c6:c3:f4:18:17:06:27:99:da:6d:de:65:89:cd: f1:6a:34:3a:92:ec:4a:a6:7c:fc:d3:48:3a:42:58: a3:22:12:1f:ce:41:6f:ae:79:da:33:c1:2a:2e:a9: ec:13:c3:de:03:0f:96:60:55:6b:12:ac:75:2c:91: 6c:69:3e:12:d2:2e:b3:00:da:d0:52:f3:88:da:19: b8:4f:1c:25:1d:a2:32:5e:0b:ad:7c:46:3a:8e:74: 18:d6:63:9a:64:b6:cf:f5:c8:9f:af:98:68:0d:a6: 55:2d:fb:dd:b4:1d:4f:83:c5:79:9f:50:32:6a:df: 0c:4c:d6:6e:a8:28:64:8a:6f:41:89:68:da:c6:a9: a2:02:5d:a5:80:e4:5e:80:df:25:19:e2:b3:a3:c8: 8f:40:31:2f:09:b8:e1:dd:0e:5c:6d:12:82:ab:0f: e9:83:d6:fc:35:e1:05:bd:52:65:3b:76:2f:24:a1: ce:58:41:76:62:f6:30:52:99:33:f9:cd:e3:b2:bc: 2a:00:ee:fd:bd:a0:dc:31:b6:3f:70:1d:32:fd:84: 75:fb:ce:50:6a:7c:5b:49:25:45:32:d3:b1:80:f3: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:B3:9A:33:59:AB:C1:00:9F:BB:A9:93:71:CA:11:29:CE:D9:28 X509v3 Authority Key Identifier: keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/VvqzmjNZq8EAn7upk3HKESnO2Sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.207.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c7:24:80:d3:03:c9:04:18:18:4a:a8:1d:72:99:2a:66:d7: 94:79:44:1d:e0:3e:94:e8:4d:78:64:7c:0d:2f:79:73:32:de: ed:9b:41:da:06:a6:8a:df:bf:ab:06:23:78:68:45:9c:35:fc: 10:f7:04:b9:f2:65:e4:56:94:f6:24:33:60:94:9b:b3:ab:44: c3:24:d8:d5:c3:d0:b6:5f:43:6c:9b:dc:77:e2:c4:75:bb:17: 52:fa:6c:a8:96:ca:03:82:60:4d:d8:88:86:13:ba:da:b9:7d: ee:4a:d1:a4:86:09:53:14:07:18:11:7b:14:81:c0:c1:04:e2: 15:03:25:99:94:2c:5a:d3:89:f9:e2:65:9c:f4:94:62:e7:49: fc:be:fc:f0:0d:6d:e6:25:58:0a:f7:81:2a:d1:49:0a:f8:a9: b4:b7:50:ce:a3:e1:df:15:0a:e8:61:6c:49:cc:43:a9:22:14: b0:da:0d:65:a0:97:c5:6a:23:35:6e:4e:7c:53:0f:ae:7e:3e: 30:f0:da:b7:90:90:26:9a:64:45:ef:e6:30:5f:36:00:7c:73: 67:55:4b:99:99:9c:6f:9f:ff:b3:bb:9d:a7:89:35:9f:35:dd: b8:e2:92:1c:ba:27:f2:62:29:44:8b:f6:94:5b:be:a0:55:c7: 5c:ba:09:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2g8lzgcz/SiQA02Rl7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2 OTY4MWIwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmZhYjM5YTMzNTlhYmMxMDA5ZmJiYTk5MzcxY2ExMTI5Y2VkOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d0JdJ3fAkhQmv0DAk/YtEJY79Y8 Lv472Udf9jRvxsP0GBcGJ5nabd5lic3xajQ6kuxKpnz800g6QlijIhIfzkFvrnna M8EqLqnsE8PeAw+WYFVrEqx1LJFsaT4S0i6zANrQUvOI2hm4TxwlHaIyXgutfEY6 jnQY1mOaZLbP9cifr5hoDaZVLfvdtB1Pg8V5n1Ayat8MTNZuqChkim9BiWjaxqmi Al2lgORegN8lGeKzo8iPQDEvCbjh3Q5cbRKCqw/pg9b8NeEFvVJlO3YvJKHOWEF2 YvYwUpkz+c3jsrwqAO79vaDcMbY/cB0y/YR1+85QanxbSSVFMtOxgPMY4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFb6s5ozWavBAJ+7qZNxyhEpztkoMB8GA1UdIwQY MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct NjNiNTJhYTdmOGRhLzEvVnZxem1qTlpxOEVBbjd1cGszSEtFU25PMlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuazPMA0G CSqGSIb3DQEBCwUAA4IBAQAFxySA0wPJBBgYSqgdcpkqZteUeUQd4D6U6E14ZHwN L3lzMt7tm0HaBqaK37+rBiN4aEWcNfwQ9wS58mXkVpT2JDNglJuzq0TDJNjVw9C2 X0Nsm9x34sR1uxdS+myolsoDgmBN2IiGE7rauX3uStGkhglTFAcYEXsUgcDBBOIV AyWZlCxa04n54mWc9JRi50n8vvzwDW3mJVgK94Eq0UkK+Km0t1DOo+HfFQroYWxJ zEOpIhSw2g1loJfFaiM1bk58Uw+ufj4w8Nq3kJAmmmRF7+YwXzYAfHNnVUuZmZxv n/+zu52niTWfNd244pIcuifyYilEi/aUW76gVcdcugnJ -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:29 2026 by rpki-client