This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa File: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (raw, json) Hash identifier: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8= Subject key identifier: 56:32:DB:D0:57:FD:46:9D:2C:46:D6:77:23:48:60:AF:C0:91:F8:3C Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12C01B02E932AF11D37D43E4AF5006 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198441 IP address blocks: 83.139.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c0:1b:02:e9:32:af:11:d3:7d:43:e4:af:50:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5632dbd057fd469d2c46d677234860afc091f83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0a:5c:58:fc:35:b8:2f:af:b4:f6:6f:d3:e3: 84:19:78:30:1f:48:cc:7b:81:6c:2b:d7:10:82:f4: 0d:92:5f:c7:72:6f:19:34:41:6e:ef:b9:4d:79:96: 4c:17:ae:8c:c2:e5:51:91:14:51:b1:09:0c:75:40: f4:3d:ec:5f:bf:a8:c0:84:ea:fd:fb:38:65:1e:cd: ff:91:a7:38:be:49:eb:04:64:c7:9f:d7:cb:75:7b: 2f:08:bf:27:51:92:c2:a8:11:28:5f:fc:9c:60:45: 69:00:db:ba:07:73:9b:8e:f6:d4:83:20:f9:aa:6b: 2e:ca:eb:a8:95:0a:d6:88:c0:4d:90:ba:dd:2b:2f: 32:c6:eb:c4:c1:76:84:97:1c:63:01:39:8c:b1:ef: d4:60:52:11:3c:4b:4e:5f:f1:fc:dd:ad:96:97:d6: e1:7e:4a:97:a3:f4:de:b7:d8:c0:89:84:ba:e0:f3: 3e:11:f4:f2:60:b2:ed:f5:89:de:c6:36:16:cc:06: 01:ea:49:bb:0f:3b:8d:0d:97:0e:8e:e5:19:0b:86: ed:36:16:a4:c7:dc:3f:73:3f:bb:66:7e:4d:58:e8: fe:79:1f:2d:07:bf:32:0c:1c:46:17:e3:b8:07:85: 3d:8c:f1:30:cb:96:e8:1f:bc:b5:6c:99:c9:cb:a2: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:32:DB:D0:57:FD:46:9D:2C:46:D6:77:23:48:60:AF:C0:91:F8:3C X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.139.23.0/24 Signature Algorithm: sha256WithRSAEncryption 43:49:81:5c:ba:a8:33:05:75:89:4d:32:aa:80:40:f3:74:f0: 9a:01:75:e3:73:31:6e:1b:22:90:e4:4f:8c:dc:29:4a:d2:33: 8f:c6:8f:80:9e:57:5b:e1:f7:dc:22:38:e4:08:d3:cd:d3:f7: 04:77:ce:58:21:53:78:54:f2:f6:86:42:eb:47:3e:e9:15:05: f7:92:c9:15:70:2e:20:ea:df:ec:4b:a0:95:04:cc:e9:39:6b: 1b:b3:78:f0:16:fd:ae:f4:e7:d9:63:89:78:53:2b:89:84:c8: 59:fc:26:69:fa:5e:b4:a6:3d:0e:91:6d:9c:70:ce:d7:8a:99: c0:b7:dc:cb:4b:ad:fc:38:db:7e:f6:88:40:aa:83:e6:1a:47: 3d:a0:da:0d:0e:28:c1:31:34:c1:0e:98:78:8b:82:18:05:34: e6:23:65:04:e7:4f:3b:c0:50:7d:54:56:f7:93:52:45:72:b2: d6:77:f9:af:48:a1:ce:bf:ec:ee:09:e5:4e:6d:e1:05:b3:da: ac:c1:c2:b9:73:59:b5:21:67:10:d7:6a:9c:8a:45:e8:6c:46: b5:53:80:d4:8a:ac:36:bf:66:aa:97:4e:dc:4d:33:2f:ba:39: a1:ae:c6:b5:54:47:3e:37:49:1e:36:c5:43:fb:39:63:70:04: 61:77:a9:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsAbAukyrxHTfUPkr1AGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjMyZGJkMDU3ZmQ0NjlkMmM0NmQ2NzcyMzQ4NjBhZmMwOTFmODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gpcWPw1uC+vtPZv0+OEGXgwH0jM e4FsK9cQgvQNkl/Hcm8ZNEFu77lNeZZMF66MwuVRkRRRsQkMdUD0Pexfv6jAhOr9 +zhlHs3/kac4vknrBGTHn9fLdXsvCL8nUZLCqBEoX/ycYEVpANu6B3ObjvbUgyD5 qmsuyuuolQrWiMBNkLrdKy8yxuvEwXaElxxjATmMse/UYFIRPEtOX/H83a2Wl9bh fkqXo/Tet9jAiYS64PM+EfTyYLLt9YnexjYWzAYB6km7DzuNDZcOjuUZC4btNhak x9w/cz+7Zn5NWOj+eR8tB78yDBxGF+O4B4U9jPEwy5boH7y1bJnJy6JQtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYy29BX/UadLEbWdyNIYK/Akfg8MB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvVmpMYjBGZjlScDBzUnRaM0kwaGdyOENSLUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4sXMA0G CSqGSIb3DQEBCwUAA4IBAQBDSYFcuqgzBXWJTTKqgEDzdPCaAXXjczFuGyKQ5E+M 3ClK0jOPxo+Anldb4ffcIjjkCNPN0/cEd85YIVN4VPL2hkLrRz7pFQX3kskVcC4g 6t/sS6CVBMzpOWsbs3jwFv2u9OfZY4l4UyuJhMhZ/CZp+l60pj0OkW2ccM7XipnA t9zLS638ONt+9ohAqoPmGkc9oNoNDijBMTTBDph4i4IYBTTmI2UE5087wFB9VFb3 k1JFcrLWd/mvSKHOv+zuCeVObeEFs9qswcK5c1m1IWcQ12qcikXobEa1U4DUiqw2 v2aql07cTTMvujmhrsa1VEc+N0keNsVD+zljcARhd6ny -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:16 2026 by rpki-client