This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VpkvFneYkZtrOlTcXNEDLOTuiBo.roa File: VpkvFneYkZtrOlTcXNEDLOTuiBo.roa (raw, json) Hash identifier: U1TXZP+P+R9Rot4yDqY1QfFe+byKf+8Ah3pd3njTY4Q= Subject key identifier: 56:99:2F:16:77:98:91:9B:6B:3A:54:DC:5C:D1:03:2C:E4:EE:88:1A Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB045F219DDE1D32CB0950682C2D67 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VpkvFneYkZtrOlTcXNEDLOTuiBo.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3348 IP address blocks: 85.117.244.0/22 maxlen: 24 93.92.224.0/22 maxlen: 24 93.187.132.0/22 maxlen: 24 185.81.132.0/22 maxlen: 24 185.119.236.0/22 maxlen: 24 188.208.20.0/22 maxlen: 24 193.0.146.0/23 maxlen: 24 193.0.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:04:5f:21:9d:de:1d:32:cb:09:50:68:2c:2d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56992f167798919b6b3a54dc5cd1032ce4ee881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:ad:33:f3:77:8a:21:90:89:17:fc:d0:95: 71:84:71:22:a9:c5:44:67:c7:0b:a9:e1:78:66:5e: ee:94:5a:cf:0c:d5:12:2b:6f:27:a2:d6:f2:fd:97: d5:e9:21:4e:03:b5:8e:fe:8e:ce:77:c7:1e:23:9f: bf:58:47:d9:38:7e:18:3c:8c:a0:9f:b1:a9:f1:62: fb:e9:1a:97:ab:14:ff:da:c4:ea:7d:5a:95:ff:c2: 61:39:3d:3b:87:88:4f:b3:0a:39:b4:18:0e:97:86: 37:be:21:e1:fe:d5:8c:e4:bd:99:9e:58:af:61:16: 66:95:8b:81:4c:e1:91:5e:e6:17:57:1d:1b:62:d1: 9c:97:0a:ef:9c:f0:50:3f:8c:0d:b3:06:cf:af:7f: 02:0c:24:c3:53:da:c3:5e:e6:d7:e6:2c:84:95:75: 37:47:40:8d:2c:e7:c2:de:c8:4c:8a:36:51:1e:93: b5:b2:6c:67:a9:fc:cc:d2:6f:cf:4d:a0:dd:10:85: ab:6c:ff:bb:45:a5:85:47:01:66:32:b4:8d:08:e1: 88:e5:78:30:a3:35:98:9d:ac:69:e1:ba:dd:04:8f: 22:05:a8:b6:ef:1f:1d:17:a1:e2:7c:7e:f8:6b:0e: 3f:64:a1:9c:89:33:0a:e6:55:ac:95:4c:2a:b0:d3: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:99:2F:16:77:98:91:9B:6B:3A:54:DC:5C:D1:03:2C:E4:EE:88:1A X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/VpkvFneYkZtrOlTcXNEDLOTuiBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.244.0/22 93.92.224.0/22 93.187.132.0/22 185.81.132.0/22 185.119.236.0/22 188.208.20.0/22 193.0.146.0/23 193.0.164.0/23 Signature Algorithm: sha256WithRSAEncryption 25:78:d1:1b:ff:40:03:7c:63:34:97:f4:45:bf:34:f8:2e:36: 9a:0b:da:a2:87:7f:a8:de:3d:c2:a5:88:b9:5d:49:af:76:3c: fb:cf:61:83:58:fb:5c:94:9d:22:9e:52:cf:d8:e2:29:f6:ac: 5a:11:59:96:c2:99:b5:a2:a8:51:d6:24:9d:47:d6:d0:d9:1c: b4:9a:ac:47:8b:6b:48:f2:a9:9d:07:28:09:4b:5c:0d:34:03: d4:83:6e:d6:89:0f:9b:fe:2f:34:a9:5b:b7:9b:dc:56:c9:58: 58:0f:8a:f2:d6:be:12:d0:6b:f6:f9:95:23:9b:6f:10:23:5f: 6e:59:0d:60:a2:8f:f2:be:3a:6f:64:c5:3d:68:c3:f2:dd:b7: 7e:97:27:30:42:a9:03:fc:6c:74:c8:78:50:6b:01:53:14:d3: 19:1f:ee:7f:1d:d2:d9:9e:36:3a:0e:0d:9a:af:17:3f:f9:25: b7:2d:9b:20:dd:99:11:91:a6:85:e5:a0:5b:0d:2a:f8:6e:fc: 5b:f5:da:34:80:e4:80:74:ff:0e:df:8f:d0:0e:e1:fc:74:66: af:db:c1:89:5f:70:ac:dc:37:7d:5b:53:0d:a1:c1:00:64:67: 76:b1:1d:d5:5a:b4:74:50:10:ec:26:c2:74:2b:27:9a:f9:e5: dc:ad:e3:c3 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt26wRfIZ3eHTLLCVBoLC1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njk5MmYxNjc3OTg5MTliNmIzYTU0ZGM1Y2QxMDMyY2U0ZWU4ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8mtM/N3iiGQiRf80JVxhHEiqcVE Z8cLqeF4Zl7ulFrPDNUSK28notby/ZfV6SFOA7WO/o7Od8ceI5+/WEfZOH4YPIyg n7Gp8WL76RqXqxT/2sTqfVqV/8JhOT07h4hPswo5tBgOl4Y3viHh/tWM5L2Znliv YRZmlYuBTOGRXuYXVx0bYtGclwrvnPBQP4wNswbPr38CDCTDU9rDXubX5iyElXU3 R0CNLOfC3shMijZRHpO1smxnqfzM0m/PTaDdEIWrbP+7RaWFRwFmMrSNCOGI5Xgw ozWYnaxp4brdBI8iBai27x8dF6HifH74aw4/ZKGciTMK5lWslUwqsNP6swIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFaZLxZ3mJGbazpU3FzRAyzk7ogaMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvVnBrdkZuZVlrWnRyT2xUY1hORURMT1R1aUJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCVXX0AwQC XVzgAwQCXbuEAwQCuVGEAwQCuXfsAwQCvNAUAwQBwQCSAwQBwQCkMA0GCSqGSIb3 DQEBCwUAA4IBAQAleNEb/0ADfGM0l/RFvzT4LjaaC9qih3+o3j3CpYi5XUmvdjz7 z2GDWPtclJ0inlLP2OIp9qxaEVmWwpm1oqhR1iSdR9bQ2Ry0mqxHi2tI8qmdBygJ S1wNNAPUg27WiQ+b/i80qVu3m9xWyVhYD4ry1r4S0Gv2+ZUjm28QI19uWQ1goo/y vjpvZMU9aMPy3bd+lycwQqkD/Gx0yHhQawFTFNMZH+5/HdLZnjY6Dg2arxc/+SW3 LZsg3ZkRkaaF5aBbDSr4bvxb9do0gOSAdP8O34/QDuH8dGav28GJX3Cs3Dd9W1MN ocEAZGd2sR3VWrR0UBDsJsJ0Kyea+eXcrePD -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:35 2026 by rpki-client