This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VKXxOgyJHe3appcdWiLeWe8_fUo.roa File: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (raw, json) Hash identifier: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY= Subject key identifier: 54:A5:F1:3A:0C:89:1D:ED:DA:A6:97:1D:5A:22:DE:59:EF:3F:7D:4A Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019BF5359DD513266DEFA28320E2E8796353 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VKXxOgyJHe3appcdWiLeWe8_fUo.roa Signing time: Sun 25 Jan 2026 12:51:30 +0000 ROA not before: Sun 25 Jan 2026 12:51:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60077 IP address blocks: 78.110.112.0/21 maxlen: 32 78.110.112.0/22 maxlen: 32 78.110.112.0/24 maxlen: 24 78.110.116.0/22 maxlen: 32 78.110.118.0/24 maxlen: 32 85.198.8.0/21 maxlen: 32 85.198.8.0/22 maxlen: 32 85.198.12.0/22 maxlen: 32 85.198.16.0/21 maxlen: 32 85.198.16.0/22 maxlen: 32 85.198.16.0/23 maxlen: 32 85.198.18.0/23 maxlen: 32 85.198.18.0/24 maxlen: 32 85.198.19.0/24 maxlen: 32 85.198.20.0/22 maxlen: 32 85.198.20.0/23 maxlen: 32 85.198.20.0/24 maxlen: 24 85.198.21.0/24 maxlen: 24 85.198.22.0/23 maxlen: 23 85.198.22.0/24 maxlen: 24 193.151.128.0/19 maxlen: 32 193.151.128.0/20 maxlen: 32 193.151.128.0/22 maxlen: 32 193.151.132.0/22 maxlen: 32 193.151.136.0/22 maxlen: 32 193.151.140.0/22 maxlen: 32 193.151.144.0/20 maxlen: 32 193.151.144.0/21 maxlen: 32 193.151.144.0/22 maxlen: 32 193.151.148.0/22 maxlen: 32 193.151.152.0/22 maxlen: 32 193.151.156.0/23 maxlen: 32 193.151.156.0/24 maxlen: 32 193.151.157.0/24 maxlen: 32 193.151.158.0/24 maxlen: 32 193.151.159.0/24 maxlen: 32 2a05:1a30::/34 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:35:9d:d5:13:26:6d:ef:a2:83:20:e2:e8:79:63:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 25 12:51:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54a5f13a0c891deddaa6971d5a22de59ef3f7d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:97:e9:b5:4e:56:0b:f4:ee:53:21:56:bb: ee:2a:e4:13:14:15:8e:65:78:e6:88:ba:f0:e1:28: 4b:3b:37:92:90:31:f5:9f:db:d5:0c:dc:20:0e:fb: 97:08:12:17:a2:76:2a:76:bc:08:13:76:2e:1b:13: 72:4c:d2:21:0f:ab:db:62:44:7e:dc:32:f9:22:eb: 73:6c:c9:36:57:6f:bd:48:e0:85:5c:19:ad:a3:e7: 9c:ba:b2:f6:6a:bf:f9:9f:cf:fd:dd:42:72:21:c8: c1:8b:89:a6:eb:23:da:cb:e0:8a:84:68:25:a6:60: aa:a0:45:70:d3:e3:54:1b:12:8c:ae:87:9a:7c:b3: 0d:e9:d4:fa:e7:db:5e:83:a1:a4:00:a1:ec:1e:70: a0:82:6b:5d:13:ba:6a:ef:66:66:76:b7:75:aa:b9: 7a:c3:8b:bd:f9:c8:44:8b:26:c7:86:de:d6:3a:36: c6:95:e0:d9:5a:83:c6:5b:12:fc:3b:f1:70:07:bd: ed:f6:c8:1a:ca:d7:4d:2e:e1:d8:b6:e8:85:07:72: 1a:6d:d4:f5:57:42:bb:9d:35:65:18:55:b6:34:ca: 8d:47:fd:b2:fe:46:6c:25:34:8b:6a:fd:38:96:18: af:a7:0b:72:2b:94:4d:f7:12:85:b4:f9:43:03:04: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A5:F1:3A:0C:89:1D:ED:DA:A6:97:1D:5A:22:DE:59:EF:3F:7D:4A X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VKXxOgyJHe3appcdWiLeWe8_fUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.112.0/21 85.198.8.0-85.198.23.255 193.151.128.0/19 IPv6: 2a05:1a30::/34 Signature Algorithm: sha256WithRSAEncryption 00:ee:c7:a8:de:79:77:61:1e:68:87:64:77:e4:86:c8:e5:b0: 0b:88:4a:b2:11:23:4c:a3:d8:1d:8b:17:77:f1:0a:31:03:2f: 8d:20:c8:96:09:c7:ed:c2:2e:ba:4a:e7:21:44:19:96:b0:5b: 0c:7b:8e:5f:4b:5d:ff:4c:68:fe:49:09:ba:a7:73:fd:fd:a4: b3:09:b2:53:b2:ce:4d:c1:8a:8a:ec:38:65:4a:7f:9c:e5:cc: 6b:b1:0c:99:4c:20:39:5b:92:92:16:da:e7:15:a2:58:16:06: 60:9d:23:ee:41:71:95:f7:e4:72:fc:28:99:37:fa:d9:98:68: 7a:87:70:aa:cf:c4:0f:71:13:e6:dc:e7:a7:3e:d0:a7:79:82: 43:d8:e2:0c:0c:a4:7d:0e:0e:2e:c3:a6:de:82:39:18:de:96: e3:8a:d4:b7:fa:c3:dc:23:12:b3:19:d5:ea:0b:12:c9:49:13: 83:b4:2f:c1:65:f2:06:85:63:4c:e4:be:dd:cd:04:00:01:69: 36:e7:bd:2d:5f:c6:96:15:bc:91:85:bc:a1:88:74:d6:a0:6a: 39:66:c3:d3:5a:04:f1:0a:c7:0a:17:5a:e6:b1:76:53:a8:ca: 5b:16:48:06:85:89:5d:08:ae:ad:22:45:4f:13:b6:42:33:77: 18:19:e1:62 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZv1NZ3VEyZt76KDIOLoeWNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTI1MTI1MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGE1ZjEzYTBjODkxZGVkZGFhNjk3MWQ1YTIyZGU1OWVmM2Y3ZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIeX6bVOVgv07lMhVrvuKuQTFBWO ZXjmiLrw4ShLOzeSkDH1n9vVDNwgDvuXCBIXonYqdrwIE3YuGxNyTNIhD6vbYkR+ 3DL5IutzbMk2V2+9SOCFXBmto+ecurL2ar/5n8/93UJyIcjBi4mm6yPay+CKhGgl pmCqoEVw0+NUGxKMroeafLMN6dT659teg6GkAKHsHnCggmtdE7pq72Zmdrd1qrl6 w4u9+chEiybHht7WOjbGleDZWoPGWxL8O/FwB73t9sgaytdNLuHYtuiFB3IabdT1 V0K7nTVlGFW2NMqNR/2y/kZsJTSLav04lhivpwtyK5RN9xKFtPlDAwSzrQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFSl8ToMiR3t2qaXHVoi3lnvP31KMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVktYeE9neUpIZTNhcHBjZFdpTGVXZThfZlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAgBAIAATAaAwQDTm5wMAwD BANVxggDBANVxhADBAXBl4AwDgQCAAIwCAMGBioFGjAAMA0GCSqGSIb3DQEBCwUA A4IBAQAA7seo3nl3YR5oh2R35IbI5bALiEqyESNMo9gdixd38QoxAy+NIMiWCcft wi66SuchRBmWsFsMe45fS13/TGj+SQm6p3P9/aSzCbJTss5NwYqK7DhlSn+c5cxr sQyZTCA5W5KSFtrnFaJYFgZgnSPuQXGV9+Ry/CiZN/rZmGh6h3Cqz8QPcRPm3Oen PtCneYJD2OIMDKR9Dg4uw6begjkY3pbjitS3+sPcIxKzGdXqCxLJSRODtC/BZfIG hWNM5L7dzQQAAWk2570tX8aWFbyRhbyhiHTWoGo5ZsPTWgTxCscKF1rmsXZTqMpb FkgGhYldCK6tIkVPE7ZCM3cYGeFi -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:35 2026 by rpki-client