This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/VNBOO8P6mkX9aew0cn-Kdehk6rE.roa File: VNBOO8P6mkX9aew0cn-Kdehk6rE.roa (raw, json) Hash identifier: b079DtAWi+r0sT4AC8Tk8haPaIa/jl6bQiwLRkAOdcE= Subject key identifier: 54:D0:4E:3B:C3:FA:9A:45:FD:69:EC:34:72:7F:8A:75:E8:64:EA:B1 Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf Certificate serial: 019B7834F163EC768FF360A42038657942EC Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/VNBOO8P6mkX9aew0cn-Kdehk6rE.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216422 IP address blocks: 158.94.216.0/24 maxlen: 24 176.97.219.0/24 maxlen: 24 217.11.164.0/24 maxlen: 24 217.11.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f1:63:ec:76:8f:f3:60:a4:20:38:65:79:42:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54d04e3bc3fa9a45fd69ec34727f8a75e864eab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:47:21:ec:e7:9c:b0:2d:0a:d6:b2:c0:74: a1:89:da:77:dc:cc:37:dd:8c:b0:6e:a8:cf:a6:46: b4:0f:41:87:b2:49:7a:7b:28:c7:bb:f4:b7:dc:c4: 22:4a:3c:96:70:29:0f:77:cb:84:f6:47:26:e0:b8: 43:e5:85:e3:9a:20:af:76:40:ae:31:f3:76:f8:b8: 1e:99:f6:f5:d6:1f:6d:f7:7c:99:3b:66:7a:89:df: 57:2e:5a:d0:2c:5f:4d:7f:26:35:45:71:46:3b:f3: ec:ad:73:33:ff:43:9f:8c:41:3a:99:ab:56:74:20: b3:ed:bc:43:0d:60:60:1b:ef:34:ba:2a:ed:0d:9c: f7:09:f2:2e:49:ab:65:05:a9:b0:bb:5b:09:30:ac: 77:a3:0e:52:b8:3c:45:b8:65:e5:27:43:61:ef:bc: a5:1b:ea:a0:da:61:44:74:84:5f:1a:ba:4d:18:f0: 57:ca:85:b2:d1:e1:00:7d:5a:9d:75:49:50:60:7f: 5a:98:6c:4a:8b:4c:90:cc:d8:fc:1e:b9:02:cb:ca: 3c:2e:f2:63:b6:4e:83:9f:11:cf:5a:16:a9:2e:9e: 38:c0:bf:7d:0c:33:9c:73:68:c6:5a:a2:96:87:0e: fc:1f:8b:82:4d:28:3c:c5:40:69:78:79:76:62:2a: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:4E:3B:C3:FA:9A:45:FD:69:EC:34:72:7F:8A:75:E8:64:EA:B1 X509v3 Authority Key Identifier: keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/VNBOO8P6mkX9aew0cn-Kdehk6rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.216.0/24 176.97.219.0/24 217.11.164.0/23 Signature Algorithm: sha256WithRSAEncryption 80:9f:ef:43:01:72:5a:22:c7:93:10:cc:33:88:dd:dd:7c:a1: 57:25:74:46:e4:c7:fa:ad:cf:57:03:06:46:d0:2c:7f:7e:a8: c6:50:4a:f1:42:8a:31:60:79:93:c3:5d:5f:82:b7:89:86:5e: 69:ea:d4:bc:0d:5d:fe:1e:12:b3:74:00:b4:94:74:c4:64:bd: 65:f1:de:88:ed:53:76:6c:0c:a5:ff:81:ae:19:54:67:fd:fc: fc:41:e8:9e:88:c6:ad:e7:fa:b5:de:84:8a:ea:e4:da:b1:13: 62:ea:61:f2:bb:7f:60:64:45:6f:8a:68:e2:3f:7f:ca:91:0b: 57:7e:3a:e5:e7:fb:9d:79:36:74:97:89:91:ce:c7:98:5e:4e: 44:99:4c:d9:60:cf:a6:5d:da:ef:f3:b6:76:ba:e6:6b:66:ac: 15:19:f2:62:7d:dd:6a:85:71:11:1c:2c:fb:f6:c7:b4:3a:77: 60:f4:ba:f8:be:55:f6:b1:b6:47:99:30:15:25:35:a3:ac:97: 9e:08:5e:ac:b8:e3:58:b4:33:ca:b2:15:63:06:b5:d0:31:d0: 23:48:cd:0b:8b:cc:43:7b:c9:95:2f:bb:eb:71:f2:b3:90:9e: 3b:9b:dd:66:da:9e:33:72:72:d4:1d:b7:85:a4:40:28:37:d6: 22:bf:01:23 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NPFj7HaP82CkIDhleULsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4 MmFjYmYwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGQwNGUzYmMzZmE5YTQ1ZmQ2OWVjMzQ3MjdmOGE3NWU4NjRlYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1RHIeznnLAtCtaywHShidp33Mw3 3YywbqjPpka0D0GHskl6eyjHu/S33MQiSjyWcCkPd8uE9kcm4LhD5YXjmiCvdkCu MfN2+Lgemfb11h9t93yZO2Z6id9XLlrQLF9NfyY1RXFGO/PsrXMz/0OfjEE6matW dCCz7bxDDWBgG+80uirtDZz3CfIuSatlBamwu1sJMKx3ow5SuDxFuGXlJ0Nh77yl G+qg2mFEdIRfGrpNGPBXyoWy0eEAfVqddUlQYH9amGxKi0yQzNj8HrkCy8o8LvJj tk6DnxHPWhapLp44wL99DDOcc2jGWqKWhw78H4uCTSg8xUBpeHl2YipXhQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFTQTjvD+ppF/WnsNHJ/inXoZOqxMB8GA1UdIwQY MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt YTE5Y2M4YTc2ZDA0LzEvVk5CT084UDZta1g5YWV3MGNuLUtkZWhrNnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0 LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnl7YAwQA sGHbAwQB2QukMA0GCSqGSIb3DQEBCwUAA4IBAQCAn+9DAXJaIseTEMwziN3dfKFX JXRG5Mf6rc9XAwZG0Cx/fqjGUErxQooxYHmTw11fgreJhl5p6tS8DV3+HhKzdAC0 lHTEZL1l8d6I7VN2bAyl/4GuGVRn/fz8QeieiMat5/q13oSK6uTasRNi6mHyu39g ZEVvimjiP3/KkQtXfjrl5/udeTZ0l4mRzseYXk5EmUzZYM+mXdrv87Z2uuZrZqwV GfJifd1qhXERHCz79se0Ondg9Lr4vlX2sbZHmTAVJTWjrJeeCF6suONYtDPKshVj BrXQMdAjSM0Li8xDe8mVL7vrcfKzkJ47m91m2p4zcnLUHbeFpEAoN9YivwEj -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:49 2026 by rpki-client