This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa File: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (raw, json) Hash identifier: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q= Subject key identifier: 55:D5:EE:93:A4:AB:97:F2:A2:5A:53:C8:5D:59:7D:0A:E4:0E:53:92 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B7DCB0B159D679926A25A743EB936A46D Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202491 IP address blocks: 37.61.148.0/22 maxlen: 22 37.61.154.0/24 maxlen: 24 46.37.87.0/24 maxlen: 24 46.37.95.0/24 maxlen: 24 89.32.114.0/23 maxlen: 23 89.37.75.0/24 maxlen: 24 89.39.18.0/23 maxlen: 23 89.39.20.0/23 maxlen: 23 89.39.152.0/23 maxlen: 23 89.39.157.0/24 maxlen: 24 171.33.238.0/24 maxlen: 24 212.225.228.0/23 maxlen: 23 212.225.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0b:15:9d:67:99:26:a2:5a:74:3e:b9:36:a4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55d5ee93a4ab97f2a25a53c85d597d0ae40e5392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:47:a0:b4:8c:8c:23:95:74:8a:8b:d1:5c:8c: 84:fa:6f:64:10:22:e8:b8:63:e4:ec:13:5a:c4:fa: cb:90:d6:b5:62:d1:08:18:f8:99:2c:6b:e8:52:65: d8:a6:7a:b8:52:a8:10:b3:13:62:17:3b:b0:a0:cb: 9c:82:6d:1a:f9:c9:1c:a0:ea:0b:c2:d2:08:04:6e: 29:81:31:42:68:d5:12:7d:21:94:50:8f:1d:59:24: a4:d7:5b:cf:6a:a4:ce:a2:8d:ee:13:02:df:6e:f7: a3:48:f6:99:3f:1a:c0:c2:ad:3b:db:c8:34:4a:75: a4:3b:ab:33:b9:e9:e6:1d:59:2a:12:76:bb:f5:a3: c8:b9:c2:6b:bd:da:50:7e:79:e9:81:c2:73:d0:4a: 40:83:b2:4c:c2:d4:f7:77:fb:4d:8a:d3:27:11:8e: c1:ee:19:ce:86:2d:0c:2b:10:e1:68:bb:c0:94:17: 28:f0:94:54:6b:ab:df:9f:fb:9d:a8:08:08:de:12: 8b:99:9b:60:75:b1:d5:d8:45:c5:4f:2c:ac:76:ad: 80:b5:93:ae:29:23:4e:d4:40:4a:98:f7:6a:37:42: 1a:5a:ce:3e:d6:12:fa:45:76:95:22:70:b7:59:46: 1a:cd:ef:87:17:e7:d8:75:4b:03:2d:a8:af:d8:1c: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D5:EE:93:A4:AB:97:F2:A2:5A:53:C8:5D:59:7D:0A:E4:0E:53:92 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.148.0/22 37.61.154.0/24 46.37.87.0/24 46.37.95.0/24 89.32.114.0/23 89.37.75.0/24 89.39.18.0-89.39.21.255 89.39.152.0/23 89.39.157.0/24 171.33.238.0/24 212.225.228.0/23 212.225.232.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b7:17:5c:a3:e5:6a:ac:d5:e3:81:9c:7f:aa:98:85:fe:46: b4:62:20:93:9a:9d:ec:87:c5:0f:2a:9e:c3:74:4a:aa:fa:16: 03:8f:6d:b4:88:45:be:91:33:1f:19:15:28:2a:71:52:44:8b: 56:29:f0:08:23:f7:8e:33:70:6e:d3:7c:b2:a4:c4:7c:8a:b5: 3f:5f:8e:39:fe:85:07:51:5f:b5:fb:03:45:94:68:cb:44:dd: 72:26:44:12:7b:24:e5:dc:1a:a4:74:61:67:96:35:f5:b8:75: 65:99:68:08:72:d6:58:2a:e9:cc:24:fc:28:02:61:8a:c4:3a: bf:b6:74:c1:a9:78:1b:a8:3e:2a:e8:50:c4:5d:22:09:45:3a: 96:2a:aa:55:b8:bb:91:8c:44:2a:12:43:3e:d7:02:58:c0:f7: 44:58:94:49:2f:5c:33:17:5e:9a:22:94:10:7e:e9:ad:f4:cd: b4:25:83:38:fb:b6:eb:54:f2:7a:e8:55:5b:50:bc:70:45:40: e7:64:28:a2:6f:18:81:7b:37:87:74:5b:9f:c6:32:ee:13:6a: 90:55:00:cb:01:f8:2e:e0:1f:91:f0:36:8b:21:ae:38:30:19: db:17:f7:72:ad:6b:c8:d4:26:13:ea:25:ee:4b:31:4c:59:ba: 92:66:62:21 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt9ywsVnWeZJqJadD65NqRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWQ1ZWU5M2E0YWI5N2YyYTI1YTUzYzg1ZDU5N2QwYWU0MGU1MzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UegtIyMI5V0iovRXIyE+m9kECLo uGPk7BNaxPrLkNa1YtEIGPiZLGvoUmXYpnq4UqgQsxNiFzuwoMucgm0a+ckcoOoL wtIIBG4pgTFCaNUSfSGUUI8dWSSk11vPaqTOoo3uEwLfbvejSPaZPxrAwq0728g0 SnWkO6szuenmHVkqEna79aPIucJrvdpQfnnpgcJz0EpAg7JMwtT3d/tNitMnEY7B 7hnOhi0MKxDhaLvAlBco8JRUa6vfn/udqAgI3hKLmZtgdbHV2EXFTyysdq2AtZOu KSNO1EBKmPdqN0IaWs4+1hL6RXaVInC3WUYaze+HF+fYdUsDLaiv2Bx4eQIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFFXV7pOkq5fyolpTyF1ZfQrkDlOSMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvVmRYdWs2U3JsX0tpV2xQSVhWbDlDdVFPVTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQCJT2UAwQA JT2aAwQALiVXAwQALiVfAwQBWSByAwQAWSVLMAwDBAFZJxIDBAFZJxQDBAFZJ5gD BABZJ50DBACrIe4DBAHU4eQDBADU4egwDQYJKoZIhvcNAQELBQADggEBAB63F1yj 5Wqs1eOBnH+qmIX+RrRiIJOaneyHxQ8qnsN0Sqr6FgOPbbSIRb6RMx8ZFSgqcVJE i1Yp8Agj944zcG7TfLKkxHyKtT9fjjn+hQdRX7X7A0WUaMtE3XImRBJ7JOXcGqR0 YWeWNfW4dWWZaAhy1lgq6cwk/CgCYYrEOr+2dMGpeBuoPiroUMRdIglFOpYqqlW4 u5GMRCoSQz7XAljA90RYlEkvXDMXXpoilBB+6a30zbQlgzj7tutU8nroVVtQvHBF QOdkKKJvGIF7N4d0W5/GMu4TapBVAMsB+C7gH5HwNoshrjgwGdsX93Kta8jUJhPq Je5LMUxZupJmYiE= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:29 2026 by rpki-client