This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/VgvldqKtjL3JnXWY3U87vGb088Y.roa File: VgvldqKtjL3JnXWY3U87vGb088Y.roa (raw, json) Hash identifier: q4+vUn7HZwWlwx8z6DPNF5Pjd3DVOysKNScC0IlpXaY= Subject key identifier: 56:0B:E5:76:A2:AD:8C:BD:C9:9D:75:98:DD:4F:3B:BC:66:F4:F3:C6 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019BE19D71443DFC82D16816029BF6054A31 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/VgvldqKtjL3JnXWY3U87vGb088Y.roa Signing time: Wed 21 Jan 2026 17:32:30 +0000 ROA not before: Wed 21 Jan 2026 17:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398993 IP address blocks: 222.167.208.0/20 maxlen: 24 222.167.210.0/24 maxlen: 24 222.167.212.0/24 maxlen: 24 222.167.216.0/24 maxlen: 24 222.167.217.0/24 maxlen: 24 222.167.218.0/24 maxlen: 24 222.167.219.0/24 maxlen: 24 222.167.220.0/24 maxlen: 24 222.167.221.0/24 maxlen: 24 222.167.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:9d:71:44:3d:fc:82:d1:68:16:02:9b:f6:05:4a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 21 17:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=560be576a2ad8cbdc99d7598dd4f3bbc66f4f3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:6a:94:40:76:69:82:c5:2e:dc:69:10:26: 1d:fc:db:70:d3:90:a9:cc:0d:ca:6f:70:83:e1:fe: 88:f7:64:30:04:ef:c2:45:34:9a:10:11:91:98:26: 8e:61:61:29:5b:ef:3d:75:6d:62:e4:c2:6a:c2:bc: 31:ef:61:82:9a:ff:85:34:a5:39:3a:c7:8a:e8:fc: 47:c5:14:db:b0:c0:a8:59:18:40:ee:4b:25:83:ef: d3:1c:4f:48:90:1f:fa:65:67:40:f4:b6:d5:e7:b1: 37:96:55:f9:ad:24:cd:45:e6:1c:f4:ec:d9:9c:1e: 14:31:19:37:f1:96:4a:b2:04:df:d8:03:92:5f:ff: fc:ae:0c:85:98:d2:b0:48:63:e7:7a:0d:d9:fa:7e: a9:fb:6e:ff:d4:14:37:79:91:23:a5:13:a4:57:3c: b2:61:ab:ad:21:cf:21:65:c6:3d:a8:d1:d2:42:52: 13:19:22:bb:d3:ce:76:b6:83:69:06:2a:53:f1:6f: 68:24:fd:de:8b:bf:af:f6:21:5f:8d:f9:ed:bf:8d: 2d:a9:ef:a4:68:97:a4:d8:6c:98:dd:20:c1:45:d8: f7:52:49:9b:b2:cd:ef:10:90:b7:ec:e9:0d:3f:8d: f2:7a:44:8b:74:5e:18:7e:6b:2c:70:b7:23:c0:d0: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:E5:76:A2:AD:8C:BD:C9:9D:75:98:DD:4F:3B:BC:66:F4:F3:C6 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/VgvldqKtjL3JnXWY3U87vGb088Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.167.208.0/20 Signature Algorithm: sha256WithRSAEncryption 96:dc:b2:1d:1e:95:af:7a:7b:92:a7:5f:de:eb:95:d2:09:a4: 3f:12:98:9d:52:d1:0b:cb:5f:89:92:d5:0d:d1:32:90:63:3f: 1f:58:26:07:47:08:b7:36:f8:c2:6e:b7:73:cf:0d:68:12:5b: 67:75:f3:ea:55:c7:af:39:7a:19:2d:bb:03:59:cd:88:3e:1d: 2f:39:a7:93:fb:4b:54:01:c0:a0:ad:4f:7d:a1:f1:66:f0:9d: 65:a9:16:d8:88:44:34:40:01:17:7c:6e:3e:43:bb:c4:fa:81: 81:4e:07:cf:53:34:b9:56:42:86:08:69:b5:03:c4:bb:4d:d3: 95:a0:e1:b9:5e:87:71:b1:15:0f:94:4b:91:51:e0:ec:b3:4c: 65:c1:fd:a2:09:ad:1f:c6:f5:c0:45:1b:42:fd:db:29:84:ed: e2:a5:c7:a3:bd:a3:0b:f6:7f:2c:0e:b8:51:b1:9e:b3:94:ac: 1b:f0:e9:b9:05:54:43:4f:c9:fb:cd:18:2b:09:d8:40:10:98: 8f:da:ab:98:d1:15:04:c5:85:a8:82:2d:89:4f:e1:b0:db:98: 63:bc:1f:06:b3:2c:a4:ad:a5:ba:11:8a:96:77:a4:4e:19:bd: 4d:6f:4b:5b:a3:4f:ec:a0:c7:9d:02:e7:0b:1c:5d:59:fb:b3: 24:06:90:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvhnXFEPfyC0WgWApv2BUoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTIxMTczMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjBiZTU3NmEyYWQ4Y2JkYzk5ZDc1OThkZDRmM2JiYzY2ZjRmM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYRqlEB2aYLFLtxpECYd/Ntw05Cp zA3Kb3CD4f6I92QwBO/CRTSaEBGRmCaOYWEpW+89dW1i5MJqwrwx72GCmv+FNKU5 OseK6PxHxRTbsMCoWRhA7kslg+/THE9IkB/6ZWdA9LbV57E3llX5rSTNReYc9OzZ nB4UMRk38ZZKsgTf2AOSX//8rgyFmNKwSGPneg3Z+n6p+27/1BQ3eZEjpROkVzyy YautIc8hZcY9qNHSQlITGSK70852toNpBipT8W9oJP3ei7+v9iFfjfntv40tqe+k aJek2GyY3SDBRdj3Ukmbss3vEJC37OkNP43yekSLdF4YfmsscLcjwNAnBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYL5XairYy9yZ11mN1PO7xm9PPGMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvVmd2bGRxS3RqTDNKblhXWTNVODd2R2IwODhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE3qfQMA0G CSqGSIb3DQEBCwUAA4IBAQCW3LIdHpWvenuSp1/e65XSCaQ/EpidUtELy1+JktUN 0TKQYz8fWCYHRwi3NvjCbrdzzw1oEltndfPqVcevOXoZLbsDWc2IPh0vOaeT+0tU AcCgrU99ofFm8J1lqRbYiEQ0QAEXfG4+Q7vE+oGBTgfPUzS5VkKGCGm1A8S7TdOV oOG5XodxsRUPlEuRUeDss0xlwf2iCa0fxvXARRtC/dsphO3ipcejvaML9n8sDrhR sZ6zlKwb8Om5BVRDT8n7zRgrCdhAEJiP2quY0RUExYWogi2JT+Gw25hjvB8Gsyyk raW6EYqWd6ROGb1Nb0tbo0/soMedAucLHF1Z+7MkBpBU -----END CERTIFICATE-----Generated at Sun Jan 25 17:43:13 2026 by rpki-client