This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/vXs00wABeOvYVd4PEbCkjMYfErk.roa File: vXs00wABeOvYVd4PEbCkjMYfErk.roa (raw, json) Hash identifier: S0XBmvPUfYyzedsDU+r8dBCYywLbP6svOqwi8N2av8g= Subject key identifier: BD:7B:34:D3:00:01:78:EB:D8:55:DE:0F:11:B0:A4:8C:C6:1F:12:B9 Certificate issuer: /CN=c3cce1655f3f71e4effea4de73a1aec822829d61 Certificate serial: 019B7758CBE6B3AEBCD5C3E6D6C5687E35E2 Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/vXs00wABeOvYVd4PEbCkjMYfErk.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197497 IP address blocks: 91.221.228.0/23 maxlen: 23 91.221.228.0/24 maxlen: 24 91.221.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cb:e6:b3:ae:bc:d5:c3:e6:d6:c5:68:7e:35:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd7b34d3000178ebd855de0f11b0a48cc61f12b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:76:ce:58:39:78:b9:a9:dd:22:9c:d3:6e: b2:66:76:af:40:34:d1:c4:c2:c7:fa:e0:e6:82:2a: 99:ee:4d:12:79:aa:d6:b6:57:55:c6:af:b9:80:f7: 86:53:d3:80:74:ce:47:ee:63:cd:d9:f7:72:31:85: ec:3c:69:14:8a:4c:27:b3:cd:bd:cf:f9:73:c1:2b: f8:e8:e0:ed:62:9f:08:c8:c4:6a:90:66:cb:49:6e: 27:37:2b:e6:e8:9c:1e:b2:2e:c6:eb:fd:29:40:ef: 27:38:d5:ca:a0:2d:b8:91:bd:0a:b5:49:38:a0:7e: 9c:04:c0:da:7f:c9:2f:46:48:2d:04:95:5c:52:f7: cb:91:c4:b2:16:67:92:98:8f:86:4f:50:79:6f:92: 8a:13:4c:27:b8:30:65:99:c8:22:d6:9d:73:4a:f0: dc:a3:50:61:0a:e0:b7:d9:97:4b:e8:41:41:b5:05: 96:93:63:cb:83:39:ea:e8:4a:64:41:d5:11:43:10: c8:54:fe:73:6a:d4:ff:c0:94:af:3e:b8:73:ef:ff: 21:ef:35:95:28:b5:43:a7:8d:b4:60:36:ca:0f:36: cf:a9:23:d5:d1:ae:ea:90:e4:34:ae:94:eb:37:6d: 4e:f1:a8:85:60:47:37:0a:db:76:78:96:f3:65:f5: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7B:34:D3:00:01:78:EB:D8:55:DE:0F:11:B0:A4:8C:C6:1F:12:B9 X509v3 Authority Key Identifier: keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/vXs00wABeOvYVd4PEbCkjMYfErk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.228.0/23 Signature Algorithm: sha256WithRSAEncryption 80:74:f3:d2:b4:e9:17:49:6c:64:8d:40:c2:70:28:b3:19:c3: 4a:b0:16:5e:68:b5:7f:3b:39:96:b7:b4:eb:29:0c:03:70:a5: 56:80:50:0e:86:10:5e:83:d4:c4:06:e9:1d:25:3f:bb:11:99: cd:71:9c:3b:a2:92:b1:e4:4e:34:ce:4c:ed:81:48:40:04:92: 12:a9:9b:7c:9a:d7:18:42:ea:de:47:c9:83:1f:1e:95:ed:e5: 20:6d:35:77:6e:9a:32:f4:ce:f8:55:7e:bd:71:65:8e:0c:85: 92:e8:00:16:70:7e:2c:b8:02:e3:f6:02:8d:31:85:c5:34:68: 95:1a:6e:02:9b:11:c4:2e:9c:84:ca:a1:58:2a:2a:7d:f0:2b: 99:84:6d:2e:25:a7:4d:c3:56:43:fd:92:f7:0e:a0:e3:9d:9e: 99:85:b8:8d:6a:f6:8a:64:88:8b:e9:d6:86:f6:c4:60:99:8e: 32:b0:5c:43:3e:e4:c2:39:94:5b:0d:18:38:d8:13:8c:3b:c1: 18:c4:b9:3e:92:8b:44:4b:a5:0e:87:bb:f0:1b:08:fa:59:2d: e2:5b:08:f4:5e:dd:69:df:1d:ae:9a:81:26:44:0b:19:88:b5: a0:43:f0:58:67:6a:fe:98:a9:18:0c:63:70:f3:3e:5b:be:3f: 35:46:23:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMvms6681cPm1sVofjXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzY2NlMTY1NWYzZjcxZTRlZmZlYTRkZTczYTFhZWM4MjI4 MjlkNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDdiMzRkMzAwMDE3OGViZDg1NWRlMGYxMWIwYTQ4Y2M2MWYxMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxN2zlg5eLmp3SKc026yZnavQDTR xMLH+uDmgiqZ7k0SearWtldVxq+5gPeGU9OAdM5H7mPN2fdyMYXsPGkUikwns829 z/lzwSv46ODtYp8IyMRqkGbLSW4nNyvm6Jwesi7G6/0pQO8nONXKoC24kb0KtUk4 oH6cBMDaf8kvRkgtBJVcUvfLkcSyFmeSmI+GT1B5b5KKE0wnuDBlmcgi1p1zSvDc o1BhCuC32ZdL6EFBtQWWk2PLgznq6EpkQdURQxDIVP5zatT/wJSvPrhz7/8h7zWV KLVDp420YDbKDzbPqSPV0a7qkOQ0rpTrN21O8aiFYEc3Ctt2eJbzZfUybwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL17NNMAAXjr2FXeDxGwpIzGHxK5MB8GA1UdIwQY MBaAFMPM4WVfP3Hk7/6k3nOhrsgigp1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMt ZDEwYmViZWEzN2QwLzEvdlhzMDB3QUJlT3ZZVmQ0UEViQ2tqTVlmRXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMtZDEwYmViZWEzN2Qw LzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW93kMA0G CSqGSIb3DQEBCwUAA4IBAQCAdPPStOkXSWxkjUDCcCizGcNKsBZeaLV/OzmWt7Tr KQwDcKVWgFAOhhBeg9TEBukdJT+7EZnNcZw7opKx5E40zkztgUhABJISqZt8mtcY QureR8mDHx6V7eUgbTV3bpoy9M74VX69cWWODIWS6AAWcH4suALj9gKNMYXFNGiV Gm4CmxHELpyEyqFYKip98CuZhG0uJadNw1ZD/ZL3DqDjnZ6ZhbiNavaKZIiL6daG 9sRgmY4ysFxDPuTCOZRbDRg42BOMO8EYxLk+kotES6UOh7vwGwj6WS3iWwj0Xt1p 3x2umoEmRAsZiLWgQ/BYZ2r+mKkYDGNw8z5bvj81RiOn -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:20 2026 by rpki-client