This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/vVDi20bHMoC03V5FcKtnGRsb-n4.roa File: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (raw, json) Hash identifier: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA= Subject key identifier: BD:50:E2:DB:46:C7:32:80:B4:DD:5E:45:70:AB:67:19:1B:1B:FA:7E Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Certificate serial: 019B7BA4B564DD8BFC1E48234C933771CA0B Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/vVDi20bHMoC03V5FcKtnGRsb-n4.roa Signing time: Thu 01 Jan 2026 22:19:10 +0000 ROA not before: Thu 01 Jan 2026 22:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8315 IP address blocks: 91.223.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b5:64:dd:8b:fc:1e:48:23:4c:93:37:71:ca:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Validity Not Before: Jan 1 22:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd50e2db46c73280b4dd5e4570ab67191b1bfa7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:51:3f:b4:59:08:e5:e9:d1:8a:c6:b6:ed: b8:91:20:76:ac:e1:5b:71:44:6c:31:17:f7:32:bf: 0a:58:b0:a2:2b:15:ef:82:3c:22:bd:c1:60:a8:e2: cb:98:07:74:41:ab:f2:63:24:b8:7d:55:94:87:d1: a1:8b:7a:0c:24:a0:a0:69:e2:0e:84:44:2f:49:bf: 42:9d:95:4c:85:1f:82:7f:a3:54:2a:c1:fe:e3:1e: 99:5f:6c:8e:ef:1e:d9:21:9f:3f:6d:ed:ba:4b:53: bb:93:bf:18:56:8f:79:24:8a:e9:d3:99:6d:db:3d: 8e:ec:84:b7:24:9b:e6:1a:c8:cb:9d:2b:58:bb:bb: c7:0f:3a:03:98:ba:0c:1f:7c:59:0d:46:e5:c6:cc: db:83:b5:a1:2c:dd:83:71:f5:0c:77:5d:d9:5f:c4: 0e:39:d8:00:d2:de:06:f3:36:47:ee:44:8c:c6:45: d9:9f:5b:e8:1b:0e:0e:26:ec:c7:48:31:dc:73:91: 4b:8f:9c:44:9a:46:c1:ee:e9:9c:73:88:74:26:b5: 5a:5c:3a:55:e2:79:6a:9c:b4:d2:9f:04:a2:af:91: 05:2c:00:f7:97:3c:bb:d8:88:b9:ef:ad:a2:36:83: c2:a8:ed:16:cd:76:f2:20:b1:c5:90:9f:9f:5d:31: 24:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:E2:DB:46:C7:32:80:B4:DD:5E:45:70:AB:67:19:1B:1B:FA:7E X509v3 Authority Key Identifier: keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/vVDi20bHMoC03V5FcKtnGRsb-n4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.124.0/24 Signature Algorithm: sha256WithRSAEncryption cd:29:40:6e:58:85:ee:28:cd:63:ca:71:ae:f9:1f:b9:37:8d: 48:90:50:e2:7a:2e:f5:62:56:f5:9a:75:ba:75:0c:23:10:ac: fd:b6:f0:3d:c6:ca:08:de:d5:87:95:e9:80:c2:99:12:bb:d6: 73:86:68:fd:3a:2d:60:5a:dc:84:15:b6:8e:88:4d:56:ef:2b: 2f:01:ae:43:8d:88:4f:38:d4:6f:16:9b:e6:c3:e4:30:2a:30: e8:ec:0e:01:58:27:9f:25:f6:f7:9d:74:bf:0c:7d:e9:0c:5c: 66:c0:de:a1:33:f9:fb:76:55:ec:c0:83:be:24:a4:4b:af:a1: 98:25:0a:f4:97:77:35:50:99:3e:77:5a:23:1b:d7:8c:55:ed: fb:f3:4f:1b:d3:f3:5a:1f:3f:75:8c:bc:d5:18:ac:be:88:82: 8f:83:ef:12:31:3a:f2:70:0c:27:a0:f6:12:c8:b3:88:14:9d: 8d:5c:01:59:8b:65:34:48:12:1b:53:d8:0d:7f:d6:dd:c0:fe: 33:cd:72:15:5a:cc:b1:91:d5:ce:f8:f6:2b:e8:b2:84:01:a1: 55:36:d1:8c:f6:20:b4:22:69:57:34:61:b0:3e:c4:4b:5d:54: 32:37:2b:46:37:73:23:02:ef:e2:43:f4:e9:6f:79:f2:84:e5: 34:21:c3:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLVk3Yv8HkgjTJM3ccoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh MzIyNDYwHhcNMjYwMTAxMjIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDUwZTJkYjQ2YzczMjgwYjRkZDVlNDU3MGFiNjcxOTFiMWJmYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MtRP7RZCOXp0YrGtu24kSB2rOFb cURsMRf3Mr8KWLCiKxXvgjwivcFgqOLLmAd0QavyYyS4fVWUh9Ghi3oMJKCgaeIO hEQvSb9CnZVMhR+Cf6NUKsH+4x6ZX2yO7x7ZIZ8/be26S1O7k78YVo95JIrp05lt 2z2O7IS3JJvmGsjLnStYu7vHDzoDmLoMH3xZDUblxszbg7WhLN2DcfUMd13ZX8QO OdgA0t4G8zZH7kSMxkXZn1voGw4OJuzHSDHcc5FLj5xEmkbB7umcc4h0JrVaXDpV 4nlqnLTSnwSir5EFLAD3lzy72Ii5762iNoPCqO0WzXbyILHFkJ+fXTEkuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1Q4ttGxzKAtN1eRXCrZxkbG/p+MB8GA1UdIwQY MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt MDYxZmMxYWViMTU4LzEvdlZEaTIwYkhNb0MwM1Y1RmNLdG5HUnNiLW40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4 LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW998MA0G CSqGSIb3DQEBCwUAA4IBAQDNKUBuWIXuKM1jynGu+R+5N41IkFDiei71Ylb1mnW6 dQwjEKz9tvA9xsoI3tWHlemAwpkSu9Zzhmj9Oi1gWtyEFbaOiE1W7ysvAa5DjYhP ONRvFpvmw+QwKjDo7A4BWCefJfb3nXS/DH3pDFxmwN6hM/n7dlXswIO+JKRLr6GY JQr0l3c1UJk+d1ojG9eMVe37808b0/NaHz91jLzVGKy+iIKPg+8SMTrycAwnoPYS yLOIFJ2NXAFZi2U0SBIbU9gNf9bdwP4zzXIVWsyxkdXO+PYr6LKEAaFVNtGM9iC0 ImlXNGGwPsRLXVQyNytGN3MjAu/iQ/Tpb3nyhOU0IcO8 -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:04 2026 by rpki-client