This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/vjXTFvPzZIb1zeRSL_kprTEdqbI.roa File: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (raw, json) Hash identifier: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0= Subject key identifier: BE:35:D3:16:F3:F3:64:86:F5:CD:E4:52:2F:F9:29:AD:31:1D:A9:B2 Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F09403634C9942DE2F2F7D41204AE Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/vjXTFvPzZIb1zeRSL_kprTEdqbI.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205766 IP address blocks: 82.98.82.0/24 maxlen: 24 82.98.87.0/24 maxlen: 24 212.19.38.240/28 maxlen: 28 212.19.62.160/27 maxlen: 27 2a02:2e0:3fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:09:40:36:34:c9:94:2d:e2:f2:f7:d4:12:04:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be35d316f3f36486f5cde4522ff929ad311da9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:e4:45:06:e9:d3:09:2e:c6:d9:60:8e:77: bc:cb:09:58:01:b0:6a:dd:c9:e3:38:58:8f:22:7c: 6f:90:3e:e6:7f:79:89:bb:64:78:4d:94:df:08:03: 69:c1:91:f6:6e:af:c4:22:ff:d1:0f:cd:e9:48:5d: c5:1f:0f:21:b0:cd:e4:a5:a5:5e:08:d1:d2:61:59: 9f:2d:ae:1c:1b:ec:b6:40:c4:6c:d5:1e:4c:82:46: ca:99:30:fd:14:96:de:b8:96:fa:9c:3c:48:a7:a5: fe:3a:bf:82:75:03:ce:f7:0f:22:8d:77:78:a1:aa: b6:6d:f9:02:d1:72:19:8d:a3:d3:b0:18:e9:d4:0d: 31:b3:30:f4:9a:f6:0d:51:d4:66:05:c4:e8:b3:c3: 61:ba:2c:72:74:85:7b:6c:1a:80:a8:06:7b:4d:77: 6b:1a:f0:e6:99:03:08:24:22:13:a6:98:bb:2d:cb: 8c:ab:62:47:2e:e3:12:b3:6e:af:41:2b:fd:f5:f9: 98:c4:89:79:12:8c:03:21:e0:54:8a:72:80:a6:de: e0:e1:ae:b2:f8:c0:e8:5b:7e:26:15:8d:92:3b:81: ed:f2:00:a8:15:58:fb:7c:3c:f4:a9:00:84:2f:17: 23:d4:df:4e:b0:e2:4a:62:de:40:bb:ac:d7:6e:2d: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:D3:16:F3:F3:64:86:F5:CD:E4:52:2F:F9:29:AD:31:1D:A9:B2 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/vjXTFvPzZIb1zeRSL_kprTEdqbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.82.0/24 82.98.87.0/24 212.19.38.240/28 212.19.62.160/27 IPv6: 2a02:2e0:3fc::/48 Signature Algorithm: sha256WithRSAEncryption 48:fd:8a:06:f0:9e:72:fc:c2:67:cb:78:c5:2b:a1:ed:37:87: 10:ff:93:f5:7b:d0:10:68:10:9d:db:90:2f:d6:11:dc:13:bc: 0b:f2:c6:30:e0:92:13:c0:6f:85:44:f1:89:24:2a:44:ae:26: 4a:8e:4c:72:ca:3c:99:11:dd:fa:35:49:5c:4e:54:f0:1b:b6: 7b:f2:ed:e6:81:93:3d:aa:c2:ac:3a:c9:72:7c:1a:3a:17:05: c8:e5:31:c9:7b:1c:8b:09:0f:8e:c0:ce:12:4d:17:8e:10:a7: 76:ac:c6:80:71:0c:0e:fe:ed:7f:6e:62:4c:00:e6:ee:65:39: 05:a1:2c:34:b7:80:1a:7d:84:1e:dc:03:ec:96:80:0b:ee:40: 0b:19:35:9b:e9:a2:41:a6:7e:99:b7:eb:5f:2c:0e:5c:18:72: 17:a0:c3:e6:e7:7f:50:96:ea:63:7a:60:e5:02:6e:36:cd:c2: 2c:5f:2b:28:cf:f1:88:96:9a:5f:18:b0:f2:42:ca:a6:0e:de: b8:ed:3c:de:5b:0e:a9:0c:0c:f6:76:d8:9a:29:09:a4:f9:25: 97:13:f4:a7:ce:cf:0c:f9:e5:3d:2e:ba:fd:a5:16:1b:f9:b4: b1:09:ff:f7:8d:0d:c9:4c:67:c4:6a:b6:dd:6d:f2:24:1d:eb: 3f:a6:27:63 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt5fwlANjTJlC3i8vfUEgSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTM1ZDMxNmYzZjM2NDg2ZjVjZGU0NTIyZmY5MjlhZDMxMWRhOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvzkRQbp0wkuxtlgjne8ywlYAbBq 3cnjOFiPInxvkD7mf3mJu2R4TZTfCANpwZH2bq/EIv/RD83pSF3FHw8hsM3kpaVe CNHSYVmfLa4cG+y2QMRs1R5MgkbKmTD9FJbeuJb6nDxIp6X+Or+CdQPO9w8ijXd4 oaq2bfkC0XIZjaPTsBjp1A0xszD0mvYNUdRmBcTos8NhuixydIV7bBqAqAZ7TXdr GvDmmQMIJCITppi7LcuMq2JHLuMSs26vQSv99fmYxIl5EowDIeBUinKApt7g4a6y +MDoW34mFY2SO4Ht8gCoFVj7fDz0qQCELxcj1N9OsOJKYt5Au6zXbi0HpwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFL410xbz82SG9c3kUi/5Ka0xHamyMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvdmpYVEZ2UHpaSWIxemVSU0xfa3ByVEVkcWJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQAUmJSAwQA UmJXAwUE1BMm8AMFBdQTPqAwDwQCAAIwCQMHACoCAuAD/DANBgkqhkiG9w0BAQsF AAOCAQEASP2KBvCecvzCZ8t4xSuh7TeHEP+T9XvQEGgQnduQL9YR3BO8C/LGMOCS E8BvhUTxiSQqRK4mSo5Mcso8mRHd+jVJXE5U8Bu2e/Lt5oGTParCrDrJcnwaOhcF yOUxyXsciwkPjsDOEk0XjhCndqzGgHEMDv7tf25iTADm7mU5BaEsNLeAGn2EHtwD 7JaAC+5ACxk1m+miQaZ+mbfrXywOXBhyF6DD5ud/UJbqY3pg5QJuNs3CLF8rKM/x iJaaXxiw8kLKpg7euO083lsOqQwM9nbYmikJpPkllxP0p87PDPnlPS66/aUWG/m0 sQn/940NyUxnxGq23W3yJB3rP6YnYw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:55 2026 by rpki-client