This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/vgmDuTwdWYkC7ythBhfv-YfoSo4.roa File: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (raw, json) Hash identifier: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k= Subject key identifier: BE:09:83:B9:3C:1D:59:89:02:EF:2B:61:06:17:EF:F9:87:E8:4A:8E Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B6A346A351A03B105242B647097FE Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/vgmDuTwdWYkC7ythBhfv-YfoSo4.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47628 IP address blocks: 91.224.54.0/24 maxlen: 24 91.224.55.0/24 maxlen: 24 185.57.140.0/24 maxlen: 24 185.57.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6a:34:6a:35:1a:03:b1:05:24:2b:64:70:97:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be0983b93c1d598902ef2b610617eff987e84a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:1e:81:f0:74:9a:7c:4d:32:73:d1:b8:63: 41:05:f9:2f:58:81:5a:fb:39:16:a5:d6:08:77:29: bc:c4:fb:e2:e7:e6:9b:8f:0b:a7:7d:e4:87:07:d6: 0e:32:8e:b0:bf:f2:ec:2c:cd:3a:1f:ab:2c:a3:0b: f7:7f:1a:5e:c6:ea:fb:0b:d1:94:97:b4:b9:ea:46: e2:38:b7:e9:85:a8:df:4d:64:10:21:b5:79:e8:f0: 29:f5:7c:45:db:e8:0a:87:58:8a:74:05:61:2f:52: a8:be:e3:79:f3:47:c4:a2:c8:90:09:18:7e:e8:45: d0:23:88:60:49:68:e5:a1:d2:fb:0c:41:a6:ad:ae: 4a:67:6a:f9:05:de:0c:96:3d:98:fe:83:96:05:40: 6b:1f:71:a6:8a:69:91:80:91:30:02:15:af:69:a5: 08:24:05:fb:07:84:de:43:27:87:a8:d7:91:48:a4: a3:ee:68:bb:e7:ed:b3:a8:2f:c3:b8:cb:ff:dd:5a: 3b:77:10:e7:d0:06:2c:25:b0:63:6d:01:6e:8b:e9: b7:f6:d5:e8:e6:bc:f1:fc:fb:c9:a5:b2:8b:21:12: 8f:b3:50:b2:88:23:d9:0f:68:d5:df:b4:8d:19:e5: fe:0d:57:82:05:97:7d:25:b8:a4:db:6a:18:89:b9: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:09:83:B9:3C:1D:59:89:02:EF:2B:61:06:17:EF:F9:87:E8:4A:8E X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/vgmDuTwdWYkC7ythBhfv-YfoSo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.54.0/23 185.57.140.0/23 Signature Algorithm: sha256WithRSAEncryption 12:75:84:86:09:5d:57:0b:b0:75:5e:9f:f8:d0:eb:55:34:25: b5:20:16:10:5d:90:33:43:7e:da:23:ed:89:9a:ce:02:0a:61: 0c:e2:f6:91:e1:5a:be:9e:7f:10:47:ed:30:cc:bb:b0:b7:de: 57:48:ed:72:dd:d1:1e:84:2d:9e:04:71:68:15:eb:16:5b:73: 7c:06:2f:5f:5f:37:87:7f:55:d7:cc:d9:5f:b7:e4:8a:c5:d9: ca:aa:f9:fa:88:2b:5c:70:51:e7:81:d4:7c:b5:78:1a:55:95: f4:42:7d:1b:34:33:78:aa:c1:1e:cd:cd:22:8e:1d:92:18:57: ff:52:73:a1:4a:96:6b:c6:48:4b:a9:47:84:f6:0a:b0:96:2d: d2:ad:16:be:5b:1d:b9:c0:87:ee:9a:04:f8:0d:f9:f8:f9:0d: 0e:30:de:e5:e7:76:b6:38:f3:06:0e:17:4e:23:57:c3:d2:9c: bc:81:76:ed:13:e4:3b:44:b6:04:c8:7a:95:b9:92:f6:ed:4b: f4:b9:0a:ac:df:46:aa:33:3d:e7:7c:27:38:a9:35:8d:4c:9e: bc:1c:11:83:ba:3f:9a:76:c9:17:91:c8:fa:b5:d3:dd:19:68: 3d:2b:d8:ab:61:d7:e5:b5:29:91:34:3d:93:a7:10:b5:9c:38: 53:0e:df:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W2o0ajUaA7EFJCtkcJf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTA5ODNiOTNjMWQ1OTg5MDJlZjJiNjEwNjE3ZWZmOTg3ZTg0YThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUUegfB0mnxNMnPRuGNBBfkvWIFa +zkWpdYIdym8xPvi5+abjwunfeSHB9YOMo6wv/LsLM06H6ssowv3fxpexur7C9GU l7S56kbiOLfphajfTWQQIbV56PAp9XxF2+gKh1iKdAVhL1KovuN580fEosiQCRh+ 6EXQI4hgSWjlodL7DEGmra5KZ2r5Bd4Mlj2Y/oOWBUBrH3GmimmRgJEwAhWvaaUI JAX7B4TeQyeHqNeRSKSj7mi75+2zqC/DuMv/3Vo7dxDn0AYsJbBjbQFui+m39tXo 5rzx/PvJpbKLIRKPs1CyiCPZD2jV37SNGeX+DVeCBZd9Jbik22oYiblukQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL4Jg7k8HVmJAu8rYQYX7/mH6EqOMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdmdtRHVUd2RXWWtDN3l0aEJoZnYtWWZvU280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+A2AwQB uTmMMA0GCSqGSIb3DQEBCwUAA4IBAQASdYSGCV1XC7B1Xp/40OtVNCW1IBYQXZAz Q37aI+2Jms4CCmEM4vaR4Vq+nn8QR+0wzLuwt95XSO1y3dEehC2eBHFoFesWW3N8 Bi9fXzeHf1XXzNlft+SKxdnKqvn6iCtccFHngdR8tXgaVZX0Qn0bNDN4qsEezc0i jh2SGFf/UnOhSpZrxkhLqUeE9gqwli3SrRa+Wx25wIfumgT4Dfn4+Q0OMN7l53a2 OPMGDhdOI1fD0py8gXbtE+Q7RLYEyHqVuZL27Uv0uQqs30aqMz3nfCc4qTWNTJ68 HBGDuj+adskXkcj6tdPdGWg9K9irYdfltSmRND2TpxC1nDhTDt/0 -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:07 2026 by rpki-client