This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/VBhBA4HiRVMlJSOniY0KYh9CTd0.roa File: VBhBA4HiRVMlJSOniY0KYh9CTd0.roa (raw, json) Hash identifier: HSJ8X00wLW6S9kJDTwwCoC+4KhX2XIDhiS0S4EkH16Y= Subject key identifier: 54:18:41:03:81:E2:45:53:25:25:23:A7:89:8D:0A:62:1F:42:4D:DD Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842D000CC692C9AD2181760350456A Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/VBhBA4HiRVMlJSOniY0KYh9CTd0.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 89.107.10.0/24 maxlen: 24 146.19.207.0/24 maxlen: 24 176.126.103.0/24 maxlen: 24 178.250.186.0/24 maxlen: 24 178.250.191.0/24 maxlen: 24 217.114.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2d:00:0c:c6:92:c9:ad:21:81:76:03:50:45:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5418410381e24553252523a7898d0a621f424ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:09:99:7d:52:b6:a0:f8:13:85:c0:9c:36: c5:1e:2f:9c:ad:02:4f:ad:eb:6c:f5:61:ca:65:09: ea:12:bf:26:ba:92:e1:e9:83:1d:e4:c1:1e:e1:65: 56:7a:5d:76:bd:0c:5a:71:6d:eb:21:a1:ba:46:d1: 88:b0:1b:ba:e1:63:3d:86:de:f0:5f:cd:6e:70:0e: e1:87:86:bc:c6:c0:de:d8:8d:f1:59:71:83:c7:a1: ec:94:db:a7:66:3c:7c:bf:14:c5:fb:f2:84:52:26: 92:81:cd:09:51:1f:5e:97:7a:ba:50:99:dc:3e:c9: ae:c4:00:ed:de:9e:02:1b:cd:a6:ed:fa:04:2a:8a: 09:f0:c6:a8:28:5f:da:80:c1:c2:23:a1:05:ba:a1: a7:d6:28:e2:0c:ea:ce:da:5c:c9:10:ef:07:9e:99: fe:c5:f5:b0:cb:6e:7c:a0:b8:f2:f1:22:5a:1a:14: 67:bc:7c:f0:bb:8f:dc:d1:d3:0f:10:5a:2d:8a:2d: 75:73:25:92:0c:fb:75:3b:8e:71:c2:3a:40:e5:2e: e9:20:ee:51:6d:0a:38:0c:dd:8a:43:05:ec:17:a6: 61:f0:46:2a:1a:a3:76:2f:f7:bd:4f:90:22:a0:a3: 43:d7:4e:9e:6f:ec:de:98:7d:bd:03:87:09:90:fb: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:41:03:81:E2:45:53:25:25:23:A7:89:8D:0A:62:1F:42:4D:DD X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/VBhBA4HiRVMlJSOniY0KYh9CTd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.10.0/24 146.19.207.0/24 176.126.103.0/24 178.250.186.0/24 178.250.191.0/24 217.114.43.0/24 Signature Algorithm: sha256WithRSAEncryption 76:a4:e3:84:7c:c9:21:c3:0f:b8:b1:7e:64:a5:bc:f3:97:0b: 67:a9:cf:89:1a:4a:41:46:47:a8:8a:9d:5f:ce:bb:ad:a0:df: e1:48:d2:08:cf:23:67:a3:e8:15:a9:66:ff:cf:b7:6e:a2:20: 36:06:45:a6:ce:31:d4:d4:9a:3a:92:71:07:17:68:4a:22:93: f5:96:bf:ca:fc:a6:a9:4e:c9:1f:7e:8f:fa:c1:12:73:7a:a2: 12:54:e6:dd:34:e9:dd:3b:e5:99:f7:6c:e8:5c:51:2e:67:63: 37:fa:ef:99:d2:ca:d1:0c:29:b1:68:71:ed:43:03:04:cb:5e: 97:2c:19:5e:cc:b8:6e:a1:e7:f6:dc:ab:4e:a4:5d:cb:35:d1: ce:9d:12:28:68:f9:1e:05:11:20:d6:5a:30:64:a4:51:ef:a8: 23:df:69:1b:8b:90:45:7c:80:c3:36:79:cb:94:88:6d:e4:12: a9:cf:f3:15:58:09:3d:75:5f:da:2f:cb:cb:db:fc:d8:90:76: 4b:ac:e4:6b:dc:30:71:8e:44:4f:f4:04:f5:d6:cd:67:f6:7a: 72:a3:e7:85:02:89:5e:63:92:97:d2:e0:34:d4:ac:b9:3d:46: 4e:d1:28:a3:90:10:3c:f5:93:f2:4a:0c:66:67:94:73:96:55: c7:34:2e:c7 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hC0ADMaSya0hgXYDUEVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDE4NDEwMzgxZTI0NTUzMjUyNTIzYTc4OThkMGE2MjFmNDI0ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WMJmX1StqD4E4XAnDbFHi+crQJP rets9WHKZQnqEr8mupLh6YMd5MEe4WVWel12vQxacW3rIaG6RtGIsBu64WM9ht7w X81ucA7hh4a8xsDe2I3xWXGDx6HslNunZjx8vxTF+/KEUiaSgc0JUR9el3q6UJnc PsmuxADt3p4CG82m7foEKooJ8MaoKF/agMHCI6EFuqGn1ijiDOrO2lzJEO8Hnpn+ xfWwy258oLjy8SJaGhRnvHzwu4/c0dMPEFotii11cyWSDPt1O45xwjpA5S7pIO5R bQo4DN2KQwXsF6Zh8EYqGqN2L/e9T5AioKND106eb+zemH29A4cJkPv1ZwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFQYQQOB4kVTJSUjp4mNCmIfQk3dMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvVkJoQkE0SGlSVk1sSlNPbmlZMEtZaDlDVGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWWsKAwQA khPPAwQAsH5nAwQAsvq6AwQAsvq/AwQA2XIrMA0GCSqGSIb3DQEBCwUAA4IBAQB2 pOOEfMkhww+4sX5kpbzzlwtnqc+JGkpBRkeoip1fzrutoN/hSNIIzyNno+gVqWb/ z7duoiA2BkWmzjHU1Jo6knEHF2hKIpP1lr/K/KapTskffo/6wRJzeqISVObdNOnd O+WZ92zoXFEuZ2M3+u+Z0srRDCmxaHHtQwMEy16XLBlezLhuoef23KtOpF3LNdHO nRIoaPkeBREg1lowZKRR76gj32kbi5BFfIDDNnnLlIht5BKpz/MVWAk9dV/aL8vL 2/zYkHZLrORr3DBxjkRP9AT11s1n9npyo+eFAoleY5KX0uA01Ky5PUZO0SijkBA8 9ZPySgxmZ5RzllXHNC7H -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:28 2026 by rpki-client