This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/VDLlDzAUnpp3yY9jYEhslsSDEio.roa File: VDLlDzAUnpp3yY9jYEhslsSDEio.roa (raw, json) Hash identifier: U4N6I7gKlIzNINdJyuTqu3g1hmT4TUUCZ4OMW8ayoD4= Subject key identifier: 54:32:E5:0F:30:14:9E:9A:77:C9:8F:63:60:48:6C:96:C4:83:12:2A Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Certificate serial: 019B7F15E4BC911981FBD86BC8853C5CBC48 Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/VDLlDzAUnpp3yY9jYEhslsSDEio.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51862 IP address blocks: 185.122.180.0/22 maxlen: 24 185.122.180.0/24 maxlen: 24 185.122.181.0/24 maxlen: 24 185.122.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:bc:91:19:81:fb:d8:6b:c8:85:3c:5c:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5432e50f30149e9a77c98f6360486c96c483122a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:87:3a:c2:1d:a8:55:d7:78:3c:2f:37:87:6e: f4:30:34:7f:81:a3:74:da:8e:1e:46:18:0b:94:d2: 1c:3f:c0:c4:e3:0b:0c:1b:b9:e2:df:63:66:ce:06: da:df:90:25:3d:09:8b:86:53:e2:49:5d:88:0f:11: a6:57:76:66:93:50:c9:a3:9a:67:87:23:0c:15:86: 8f:98:5d:f5:e3:1c:5c:4d:f6:39:15:fa:32:93:89: 9a:f2:96:56:6f:af:53:47:3a:23:2e:9e:d6:24:af: e6:83:09:a7:f5:8e:8c:1c:48:36:32:90:62:0b:e5: c9:ec:74:59:a5:78:ae:11:ff:b7:3b:1e:43:cd:01: 5b:cc:15:3b:ec:b2:0b:fe:00:9b:c1:65:e8:04:38: 77:2f:21:59:f0:50:47:d4:20:63:3b:f7:28:f0:29: a9:0a:ff:1a:cb:97:d5:25:26:0f:70:78:ef:59:c6: f1:16:e5:9a:fc:15:9a:7b:25:4f:98:bc:00:33:b1: 15:6a:a2:e6:99:98:24:d2:fc:94:f7:63:d8:ef:d1: 38:2a:25:e8:74:80:ab:52:40:8f:41:8c:f0:8e:c2: 5b:2f:92:2e:60:c0:86:ed:98:35:b4:8a:9a:71:94: 7c:a2:1a:da:2f:8d:f0:07:f1:0b:dc:fd:30:a6:6e: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:32:E5:0F:30:14:9E:9A:77:C9:8F:63:60:48:6C:96:C4:83:12:2A X509v3 Authority Key Identifier: keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/VDLlDzAUnpp3yY9jYEhslsSDEio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.180.0/22 Signature Algorithm: sha256WithRSAEncryption d1:65:83:23:d5:69:eb:b3:17:7f:71:ab:b2:bc:35:1e:3b:cd: de:21:9a:60:df:e5:92:69:58:fb:cf:e3:d7:12:f9:6b:fb:f8: e9:bf:5c:ee:25:29:5f:8a:ef:63:84:e5:de:16:7c:f7:9d:3e: 6a:ae:4e:71:d3:75:7a:63:fa:97:f8:e5:63:f5:67:b3:5c:ee: 96:9b:28:51:96:e9:77:03:7a:b6:fa:45:69:19:e0:f4:44:cc: bf:e3:2d:a1:e2:3d:04:fa:49:7e:d4:35:1a:80:ae:f5:04:ea: 68:14:57:90:14:bf:30:e3:98:6e:9e:fa:cd:f2:76:92:85:86: f6:d9:c6:5d:d0:69:67:e7:c9:4a:8d:86:47:a0:c6:d8:a6:ec: 3d:78:f4:5b:20:71:9c:90:06:ab:0e:4f:1c:3e:c7:2f:53:7b: 59:72:78:af:46:2e:2e:6b:7a:19:63:c3:2e:10:53:99:c3:20: 76:1e:30:39:ef:45:5a:d9:5a:a2:97:9f:e8:b2:ab:df:4c:d0: be:0c:f4:9b:a7:cc:0e:32:70:4c:dc:8a:a9:b3:7a:ed:aa:37: 23:75:05:d3:d7:87:b4:98:5b:4b:f5:e8:b2:56:20:5a:3a:66: 78:4c:54:3b:e2:23:f0:29:f3:1e:02:76:50:e2:b2:0d:63:02: a6:df:ab:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeS8kRmB+9hryIU8XLxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3 ZTZjOTgwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDMyZTUwZjMwMTQ5ZTlhNzdjOThmNjM2MDQ4NmM5NmM0ODMxMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Yc6wh2oVdd4PC83h270MDR/gaN0 2o4eRhgLlNIcP8DE4wsMG7ni32Nmzgba35AlPQmLhlPiSV2IDxGmV3Zmk1DJo5pn hyMMFYaPmF314xxcTfY5Ffoyk4ma8pZWb69TRzojLp7WJK/mgwmn9Y6MHEg2MpBi C+XJ7HRZpXiuEf+3Ox5DzQFbzBU77LIL/gCbwWXoBDh3LyFZ8FBH1CBjO/co8Cmp Cv8ay5fVJSYPcHjvWcbxFuWa/BWaeyVPmLwAM7EVaqLmmZgk0vyU92PY79E4KiXo dICrUkCPQYzwjsJbL5IuYMCG7Zg1tIqacZR8ohraL43wB/EL3P0wpm57VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQy5Q8wFJ6ad8mPY2BIbJbEgxIqMB8GA1UdIwQY MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt MzhhMzkyNDc3NmU5LzEvVkRMbER6QVVucHAzeVk5allFaHNsc1NERWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5 LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXq0MA0G CSqGSIb3DQEBCwUAA4IBAQDRZYMj1Wnrsxd/cauyvDUeO83eIZpg3+WSaVj7z+PX Evlr+/jpv1zuJSlfiu9jhOXeFnz3nT5qrk5x03V6Y/qX+OVj9WezXO6WmyhRlul3 A3q2+kVpGeD0RMy/4y2h4j0E+kl+1DUagK71BOpoFFeQFL8w45hunvrN8naShYb2 2cZd0Gln58lKjYZHoMbYpuw9ePRbIHGckAarDk8cPscvU3tZcnivRi4ua3oZY8Mu EFOZwyB2HjA570Va2Vqil5/osqvfTNC+DPSbp8wOMnBM3Iqps3rtqjcjdQXT14e0 mFtL9eiyViBaOmZ4TFQ74iPwKfMeAnZQ4rINYwKm36vt -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:55 2026 by rpki-client