This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/vulmYW4p9PU9wnTvn-jVp44qOCM.roa File: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (raw, json) Hash identifier: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY= Subject key identifier: BE:E9:66:61:6E:29:F4:F5:3D:C2:74:EF:9F:E8:D5:A7:8E:2A:38:23 Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B7B365825516B2CB0F5D589D5F883635B Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/vulmYW4p9PU9wnTvn-jVp44qOCM.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2876 IP address blocks: 91.195.195.0/24 maxlen: 24 195.245.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:58:25:51:6b:2c:b0:f5:d5:89:d5:f8:83:63:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bee966616e29f4f53dc274ef9fe8d5a78e2a3823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:b4:4e:98:18:f1:1d:c2:4f:7f:eb:a8:6c: 47:20:68:88:ee:66:a5:57:38:9a:bc:25:73:0e:c9: ba:39:80:a8:33:ba:d3:3d:9b:a3:59:f5:f4:0a:20: 7c:37:cf:94:03:73:08:d6:7e:b9:3a:ad:6d:64:01: 03:e6:93:e0:19:e2:b6:03:a1:76:3c:62:5f:4a:3a: 6a:b2:00:c1:10:e3:fa:a0:5a:fd:35:a1:4f:64:e7: a9:30:5a:8f:f0:27:0d:b8:f4:2e:6a:a9:b4:29:a2: dc:7d:5c:96:79:23:90:8c:74:4c:d6:ff:01:f7:f0: 06:8c:31:0f:8d:80:43:0e:0f:1e:e1:ba:c7:0d:e1: dd:65:60:fe:94:1a:e9:c0:ad:e3:29:58:f0:8c:2a: 59:cb:4c:51:79:c7:f0:e0:72:c0:78:73:f6:63:5d: 6c:db:94:fd:bf:eb:54:cb:e6:64:8a:de:82:e3:ec: 3b:92:9e:49:d7:71:64:79:dc:cb:c5:f9:cb:45:88: 94:fd:b2:c7:66:fd:aa:24:8e:d7:92:b0:e0:40:38: 14:90:9c:2d:5d:ac:57:d6:c9:bf:ae:b9:0e:ea:16: 7a:8e:49:a5:27:f4:f7:47:f6:0f:4d:9a:a2:50:87: e6:54:94:b8:86:d7:c4:fa:c0:02:ee:48:e1:a0:35: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E9:66:61:6E:29:F4:F5:3D:C2:74:EF:9F:E8:D5:A7:8E:2A:38:23 X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/vulmYW4p9PU9wnTvn-jVp44qOCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.195.0/24 195.245.83.0/24 Signature Algorithm: sha256WithRSAEncryption 52:fb:89:0c:8d:99:06:fd:21:5a:bd:c7:43:2f:c7:22:77:43: ee:db:42:a4:94:6a:ff:13:f6:0c:dc:a0:ad:d6:24:21:50:b8: 28:fe:2b:c3:60:4f:f5:24:6b:34:ee:88:6e:67:28:b1:a3:48: 58:6f:82:71:11:2b:e8:2f:03:12:0a:5b:3b:d1:80:7f:aa:a5: 0a:3a:fe:58:73:82:10:53:2c:63:bf:b0:00:40:17:73:8b:d2: 9a:8e:10:1f:fb:b7:e6:97:26:ab:93:06:85:32:b0:5a:0e:fd: e6:c0:d4:53:4c:8c:26:9d:c2:2e:46:ea:58:74:94:98:6a:8f: cf:4f:63:d1:7a:0f:d7:87:dc:de:6c:dc:f7:a6:bc:6f:0a:62: ee:6d:16:15:1b:d8:fa:61:d2:eb:ed:82:75:2b:34:8b:d6:05: b2:45:df:a9:cd:be:06:77:21:c1:93:70:b7:ad:36:be:5a:89: 2b:d3:e1:11:14:f1:ac:19:83:aa:7e:8b:3d:36:5c:c7:f1:2f: 21:2e:38:9b:1d:56:1a:17:0e:53:82:7a:00:25:6e:fb:9e:86: b0:27:69:6f:7e:91:b3:f9:fe:bd:cf:6c:3e:a8:98:75:36:25: 93:fe:aa:bc:a1:11:c5:c2:3c:b9:6e:1c:2b:a2:8b:c6:d1:b7: 01:15:83:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NlglUWsssPXVidX4g2NbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWU5NjY2MTZlMjlmNGY1M2RjMjc0ZWY5ZmU4ZDVhNzhlMmEzODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqW0TpgY8R3CT3/rqGxHIGiI7mal VziavCVzDsm6OYCoM7rTPZujWfX0CiB8N8+UA3MI1n65Oq1tZAED5pPgGeK2A6F2 PGJfSjpqsgDBEOP6oFr9NaFPZOepMFqP8CcNuPQuaqm0KaLcfVyWeSOQjHRM1v8B 9/AGjDEPjYBDDg8e4brHDeHdZWD+lBrpwK3jKVjwjCpZy0xRecfw4HLAeHP2Y11s 25T9v+tUy+Zkit6C4+w7kp5J13FkedzLxfnLRYiU/bLHZv2qJI7XkrDgQDgUkJwt XaxX1sm/rrkO6hZ6jkmlJ/T3R/YPTZqiUIfmVJS4htfE+sAC7kjhoDXBwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL7pZmFuKfT1PcJ075/o1aeOKjgjMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvdnVsbVlXNHA5UFU5d25Udm4talZwNDRxT0NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8PDAwQA w/VTMA0GCSqGSIb3DQEBCwUAA4IBAQBS+4kMjZkG/SFavcdDL8cid0Pu20KklGr/ E/YM3KCt1iQhULgo/ivDYE/1JGs07ohuZyixo0hYb4JxESvoLwMSCls70YB/qqUK Ov5Yc4IQUyxjv7AAQBdzi9KajhAf+7fmlyarkwaFMrBaDv3mwNRTTIwmncIuRupY dJSYao/PT2PReg/Xh9zebNz3prxvCmLubRYVG9j6YdLr7YJ1KzSL1gWyRd+pzb4G dyHBk3C3rTa+Wokr0+ERFPGsGYOqfos9NlzH8S8hLjibHVYaFw5TgnoAJW77noaw J2lvfpGz+f69z2w+qJh1NiWT/qq8oRHFwjy5bhwroovG0bcBFYPZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client