This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VqC3gWVvUzG4eIzPGEN0NCey5As.roa File: VqC3gWVvUzG4eIzPGEN0NCey5As.roa (raw, json) Hash identifier: Hf6PkQig4ZN4NeIeUb2xr20+aOxiqhl1KINp16h9XtU= Subject key identifier: 56:A0:B7:81:65:6F:53:31:B8:78:8C:CF:18:43:74:34:27:B2:E4:0B Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77E6D23AE7CE1F0158C52E36D3600 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VqC3gWVvUzG4eIzPGEN0NCey5As.roa Signing time: Thu 01 Jan 2026 04:18:41 +0000 ROA not before: Thu 01 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211076 IP address blocks: 62.89.204.0/24 maxlen: 24 185.196.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7e:6d:23:ae:7c:e1:f0:15:8c:52:e3:6d:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56a0b781656f5331b8788ccf1843743427b2e40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:f8:30:7d:13:a6:0d:3a:09:eb:4c:09:b8: d8:a6:c0:db:16:6f:03:8d:af:46:0d:0d:c8:73:c1: 75:17:67:1a:1d:d9:8d:fc:1c:9e:96:2d:e1:23:b5: c5:45:06:58:9c:6f:09:02:62:f5:f1:4e:fe:7a:ce: 6b:23:72:2d:9b:72:82:a5:85:45:95:00:87:a0:ee: 0a:ce:4a:19:6e:d7:1a:2f:fa:6c:14:0c:e6:ba:eb: ab:be:f3:4f:4d:cd:16:6c:c4:2b:b8:8e:2f:b6:46: a5:07:5c:a2:ae:4f:9e:f3:8f:97:ff:4c:a5:52:08: 88:e1:92:5d:5c:ae:42:67:1e:4d:6a:0f:05:75:6e: f1:3b:c1:e6:ae:d0:60:72:4a:f3:a6:18:33:85:c6: d3:6d:da:f3:8f:a0:63:34:98:1f:58:d9:ff:e1:d4: 45:27:12:cf:63:2a:7e:0e:d6:32:a9:4f:c9:59:bd: 4d:59:ab:02:36:27:5a:9c:89:a9:9b:30:58:d3:4f: 1c:9d:10:1e:1b:c5:35:4a:bc:a4:89:d5:b8:61:b7: c4:c0:7d:fa:2b:70:6b:1e:31:76:70:f7:65:11:67: 98:47:a6:1e:0d:41:e4:01:ea:aa:72:44:d2:3c:8a: a0:8e:b1:8b:5b:b5:7e:27:97:ad:9d:2c:76:af:c6: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A0:B7:81:65:6F:53:31:B8:78:8C:CF:18:43:74:34:27:B2:E4:0B X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VqC3gWVvUzG4eIzPGEN0NCey5As.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.204.0/24 185.196.245.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b9:bb:07:67:9d:93:3a:a6:4d:b7:b3:6b:66:8c:c7:58:a1: 89:f8:e7:8b:f3:15:6a:03:33:05:6a:3e:a7:85:87:ee:22:69: a9:52:31:bf:ad:ca:2e:96:96:71:32:b2:3c:36:5c:fc:09:91: f5:04:a5:e1:39:d4:90:87:c2:c6:96:f9:42:c0:b4:ca:04:2c: 74:73:1a:be:b3:c1:ea:8f:80:6f:5f:3b:42:24:69:18:19:e2: a2:5a:d3:90:80:31:f9:63:61:41:c7:1f:85:a9:f0:fa:21:a7: b2:7a:ab:69:eb:45:b0:fc:02:cc:78:1d:1d:b0:a4:97:3c:1f: 41:04:ea:23:12:84:c4:b4:3d:9b:6d:d5:8f:73:95:39:0f:77: f2:46:5b:af:73:81:69:7e:76:07:89:c4:ec:b0:07:d4:1a:18: 1b:eb:f8:1d:95:00:6a:93:25:6a:0b:39:e7:dc:70:be:e8:61: e6:7f:9c:96:37:0c:ad:6f:3a:c0:a0:49:cc:68:26:d4:f8:c8: 07:e6:19:de:00:3b:ae:60:83:13:b7:2d:31:bf:9e:4c:47:f8: cc:1c:08:c7:42:80:cd:76:73:1f:95:75:6f:37:94:a2:1d:2b: 3d:39:03:72:4a:be:94:c5:16:09:46:84:77:12:72:f0:5e:16: d8:fe:09:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x35tI6584fAVjFLjbTYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmEwYjc4MTY1NmY1MzMxYjg3ODhjY2YxODQzNzQzNDI3YjJlNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8b4MH0Tpg06CetMCbjYpsDbFm8D ja9GDQ3Ic8F1F2caHdmN/Byeli3hI7XFRQZYnG8JAmL18U7+es5rI3Itm3KCpYVF lQCHoO4KzkoZbtcaL/psFAzmuuurvvNPTc0WbMQruI4vtkalB1yirk+e84+X/0yl UgiI4ZJdXK5CZx5Nag8FdW7xO8HmrtBgckrzphgzhcbTbdrzj6BjNJgfWNn/4dRF JxLPYyp+DtYyqU/JWb1NWasCNidanImpmzBY008cnRAeG8U1SrykidW4YbfEwH36 K3BrHjF2cPdlEWeYR6YeDUHkAeqqckTSPIqgjrGLW7V+J5etnSx2r8bEywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFagt4Flb1MxuHiMzxhDdDQnsuQLMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvVnFDM2dXVnZVekc0ZUl6UEdFTjBOQ2V5NUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPlnMAwQA ucT1MA0GCSqGSIb3DQEBCwUAA4IBAQAtubsHZ52TOqZNt7NrZozHWKGJ+OeL8xVq AzMFaj6nhYfuImmpUjG/rcoulpZxMrI8Nlz8CZH1BKXhOdSQh8LGlvlCwLTKBCx0 cxq+s8Hqj4BvXztCJGkYGeKiWtOQgDH5Y2FBxx+FqfD6Iaeyeqtp60Ww/ALMeB0d sKSXPB9BBOojEoTEtD2bbdWPc5U5D3fyRluvc4FpfnYHicTssAfUGhgb6/gdlQBq kyVqCznn3HC+6GHmf5yWNwytbzrAoEnMaCbU+MgH5hneADuuYIMTty0xv55MR/jM HAjHQoDNdnMflXVvN5SiHSs9OQNySr6UxRYJRoR3EnLwXhbY/gkT -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:46 2026 by rpki-client