This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/VzM1AypggKfmNX2sRS2vbR3TxmA.roa File: VzM1AypggKfmNX2sRS2vbR3TxmA.roa (raw, json) Hash identifier: tqGI7CK0r9DehFNJOqKqldLzD4PgT2jyGQAMyhE+/Zk= Subject key identifier: 57:33:35:03:2A:60:80:A7:E6:35:7D:AC:45:2D:AF:6D:1D:D3:C6:60 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383D311AA411BD12208C302E2324B5 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/VzM1AypggKfmNX2sRS2vbR3TxmA.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 217.114.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3d:31:1a:a4:11:bd:12:20:8c:30:2e:23:24:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=573335032a6080a7e6357dac452daf6d1dd3c660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:56:9a:f9:ca:8e:10:89:4f:ae:d9:a5:ff: 65:44:03:87:ac:a9:4c:d7:06:19:aa:8d:8a:4f:9d: ae:dc:5e:18:4b:00:cc:d5:7a:bd:55:ab:be:5b:fb: a8:82:ce:6b:0d:fd:c0:d0:79:b5:03:a1:91:bd:74: 54:d4:b9:05:ee:64:56:01:65:66:40:49:01:f4:98: c4:c7:f7:86:95:a4:c7:f5:0c:b8:3b:0a:23:6c:6d: 28:af:c9:8a:e5:5c:a2:69:b2:27:22:59:4c:2b:35: 72:71:ed:a8:fc:11:5e:ea:a4:f1:5a:62:57:9a:9e: 07:1e:b5:59:e8:25:02:6f:ba:90:46:88:37:4f:dd: 11:16:6e:21:07:98:4f:3f:68:75:ef:02:3e:40:d6: f4:5a:b6:4f:c2:79:30:9e:a2:0b:8f:86:71:d5:83: b5:c6:3a:3b:33:69:2b:31:ff:f2:f6:26:0a:49:fa: 62:1a:fb:82:ac:61:42:05:0d:65:d2:11:61:67:ab: 56:1a:c4:32:2e:57:23:ed:fb:b4:62:c5:6c:ee:1f: 23:dd:9b:a7:62:62:fd:b2:96:4c:ff:56:40:5e:7b: c7:f1:83:d2:51:5a:1c:ef:89:ce:0c:df:96:d2:fb: 9f:46:37:73:f5:cf:49:f0:6a:1a:02:f4:c2:ca:8e: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:33:35:03:2A:60:80:A7:E6:35:7D:AC:45:2D:AF:6D:1D:D3:C6:60 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/VzM1AypggKfmNX2sRS2vbR3TxmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.114.39.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:1c:0f:6a:7c:74:f0:39:ca:02:5f:f9:10:e8:00:02:51:d5: e3:0e:6c:20:13:5e:f6:bb:07:8a:36:57:dd:00:5c:d7:61:42: b3:55:75:78:05:2b:94:76:cc:db:10:db:1c:21:74:4b:6f:37: 5e:99:24:86:85:a6:89:27:62:36:6b:00:d8:65:ef:c5:97:16: e2:cb:5d:b8:2d:c1:f1:9d:c5:26:62:ed:3d:16:ed:67:46:60: 9c:d1:ce:0a:10:7a:f0:90:99:12:a5:f9:48:ec:13:2c:98:96: 10:08:0f:83:10:99:97:f7:9c:de:43:25:86:fb:18:15:4e:20: 57:ce:5f:3c:10:c0:d5:2f:20:88:08:d6:d5:e5:cc:d4:4b:16: 46:96:9c:03:e3:6b:62:41:e6:57:34:bd:b9:9d:3c:1c:fa:5a: 90:10:cb:fe:6c:c5:ad:ce:8d:98:62:94:dd:d7:e2:94:cb:5f: 89:5a:e7:8a:74:6f:bd:42:d3:aa:2f:86:06:75:c9:ac:97:e2: ef:29:24:81:2a:b1:08:6e:e1:4e:ca:70:9e:db:ba:5a:c9:b3: e1:a3:81:3a:b4:ce:2f:8e:02:7b:4a:30:0d:e6:60:6c:6c:29: 1b:19:85:0c:fd:da:8e:b0:f9:90:83:2e:87:3a:67:10:65:96: c4:6f:f3:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OD0xGqQRvRIgjDAuIyS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzMzMzUwMzJhNjA4MGE3ZTYzNTdkYWM0NTJkYWY2ZDFkZDNjNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hWmvnKjhCJT67Zpf9lRAOHrKlM 1wYZqo2KT52u3F4YSwDM1Xq9Vau+W/uogs5rDf3A0Hm1A6GRvXRU1LkF7mRWAWVm QEkB9JjEx/eGlaTH9Qy4OwojbG0or8mK5VyiabInIllMKzVyce2o/BFe6qTxWmJX mp4HHrVZ6CUCb7qQRog3T90RFm4hB5hPP2h17wI+QNb0WrZPwnkwnqILj4Zx1YO1 xjo7M2krMf/y9iYKSfpiGvuCrGFCBQ1l0hFhZ6tWGsQyLlcj7fu0YsVs7h8j3Zun YmL9spZM/1ZAXnvH8YPSUVoc74nODN+W0vufRjdz9c9J8GoaAvTCyo52lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFczNQMqYICn5jV9rEUtr20d08ZgMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvVnpNMUF5cGdnS2ZtTlgyc1JTMnZiUjNUeG1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XInMA0G CSqGSIb3DQEBCwUAA4IBAQAKHA9qfHTwOcoCX/kQ6AACUdXjDmwgE172uweKNlfd AFzXYUKzVXV4BSuUdszbENscIXRLbzdemSSGhaaJJ2I2awDYZe/Flxbiy124LcHx ncUmYu09Fu1nRmCc0c4KEHrwkJkSpflI7BMsmJYQCA+DEJmX95zeQyWG+xgVTiBX zl88EMDVLyCICNbV5czUSxZGlpwD42tiQeZXNL25nTwc+lqQEMv+bMWtzo2YYpTd 1+KUy1+JWueKdG+9QtOqL4YGdcmsl+LvKSSBKrEIbuFOynCe27paybPho4E6tM4v jgJ7SjAN5mBsbCkbGYUM/dqOsPmQgy6HOmcQZZbEb/My -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:04 2026 by rpki-client