This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/VYoAIFinaQHxNkoLpaPUIWea3QQ.roa File: VYoAIFinaQHxNkoLpaPUIWea3QQ.roa (raw, json) Hash identifier: fC8G8UEbQdEhs80n+8gVQ40HDgx8OQKG34YhOp+AKow= Subject key identifier: 55:8A:00:20:58:A7:69:01:F1:36:4A:0B:A5:A3:D4:21:67:9A:DD:04 Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd Certificate serial: 019B7BA3BADAC86E07FB64A2D049947CCB4A Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/VYoAIFinaQHxNkoLpaPUIWea3QQ.roa Signing time: Thu 01 Jan 2026 22:18:06 +0000 ROA not before: Thu 01 Jan 2026 22:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 130.92.0.0/16 maxlen: 16 192.41.149.0/24 maxlen: 24 192.41.150.0/23 maxlen: 23 192.41.152.0/21 maxlen: 21 192.41.160.0/24 maxlen: 24 192.101.176.0/24 maxlen: 24 193.5.168.0/22 maxlen: 22 193.135.168.0/22 maxlen: 22 193.247.240.0/22 maxlen: 22 194.153.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ba:da:c8:6e:07:fb:64:a2:d0:49:94:7c:cb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd Validity Not Before: Jan 1 22:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=558a002058a76901f1364a0ba5a3d421679add04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:9c:1e:93:8a:19:6a:25:6d:03:00:38:de: 51:de:63:b7:9b:ba:6a:e6:b8:ba:ee:a6:11:64:2d: ba:0f:2e:7b:38:36:48:1a:8a:60:af:93:ca:ba:21: a7:66:5f:36:3d:5c:85:42:33:1f:32:fa:07:d3:70: 14:46:b7:2f:e9:cb:cc:9e:29:98:02:70:60:25:05: d2:96:44:f3:83:78:b6:81:53:1d:17:3b:66:e2:82: eb:81:2c:95:53:18:26:5f:42:c2:5e:b1:a6:c4:81: 5c:1b:ca:2e:f3:4c:e0:c4:79:78:79:93:6f:c8:a6: 78:72:bf:6b:0e:25:2d:d1:cf:6d:1e:53:1a:fa:37: 99:a2:60:8e:6b:d0:04:58:bb:86:42:40:fd:f5:cf: e1:75:cd:02:13:41:d6:36:c4:65:cb:fc:70:c3:05: e5:08:2e:ce:36:b7:e2:b9:d4:cb:1b:7f:7b:89:a2: e3:f0:65:29:98:e0:ce:24:78:fb:98:87:9f:2a:b9: 4e:9c:63:11:4e:26:01:b3:00:27:98:08:d2:15:2d: 6d:26:d5:81:28:13:a7:90:51:6b:48:15:30:2a:55: 38:e3:5e:0f:f5:95:b6:d9:7f:12:7b:d4:ac:42:8b: dd:a3:95:86:cd:a8:b1:cf:b7:72:38:1a:5a:ab:14: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8A:00:20:58:A7:69:01:F1:36:4A:0B:A5:A3:D4:21:67:9A:DD:04 X509v3 Authority Key Identifier: keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/VYoAIFinaQHxNkoLpaPUIWea3QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.92.0.0/16 192.41.149.0-192.41.160.255 192.101.176.0/24 193.5.168.0/22 193.135.168.0/22 193.247.240.0/22 194.153.96.0/24 Signature Algorithm: sha256WithRSAEncryption 47:dc:d5:7e:e9:6f:a4:58:62:ac:36:c7:83:bf:f3:5c:b0:f3: 2d:26:e3:01:7e:96:15:bf:79:d8:c6:ed:8c:0b:30:2e:d0:dd: 71:3f:7d:af:fc:ce:2d:bb:2a:8d:78:bf:2e:03:68:b5:cd:8a: 74:7b:5c:62:83:f8:da:49:f8:5d:13:0a:1f:30:f5:62:ff:4c: 9e:8a:e5:54:24:0f:bc:f6:4a:40:e3:69:45:dd:58:3d:cc:06: 25:2f:0e:35:50:0b:d9:0b:0f:7e:9a:26:07:d6:4f:73:a4:6b: 94:38:bd:da:0e:ec:7e:52:71:7b:e1:48:7a:be:1f:7f:98:45: b2:fb:ff:b6:d2:48:38:f4:dc:3d:ba:ff:d8:48:8e:c3:4a:57: 41:3d:5d:ef:43:04:94:8b:39:63:5e:2d:6a:ca:f7:df:07:3d: 4b:88:c3:89:c3:eb:86:30:91:10:6a:c8:26:6b:3c:73:14:d6: 47:c3:c7:ee:2b:42:c2:f0:df:77:2e:d5:9e:f4:ea:32:16:bc: 6a:1c:ce:ac:b7:13:6b:c2:a5:86:90:5d:c6:e4:24:9e:cb:38: 38:8f:cd:c3:e4:5f:c0:54:d9:5a:b8:5c:86:50:6c:2b:a9:e1: 25:c4:23:73:99:11:34:8a:f6:34:6e:de:36:d0:0e:ce:ab:15: a1:f8:20:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt7o7rayG4H+2Si0EmUfMtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMmI2ZDJhNWQ0MTMwNTYwZjYxNzk2M2Q5ZmJjOTM0NDJk YzFjY2QwHhcNMjYwMTAxMjIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NThhMDAyMDU4YTc2OTAxZjEzNjRhMGJhNWEzZDQyMTY3OWFkZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10+cHpOKGWolbQMAON5R3mO3m7pq 5ri67qYRZC26Dy57ODZIGopgr5PKuiGnZl82PVyFQjMfMvoH03AURrcv6cvMnimY AnBgJQXSlkTzg3i2gVMdFztm4oLrgSyVUxgmX0LCXrGmxIFcG8ou80zgxHl4eZNv yKZ4cr9rDiUt0c9tHlMa+jeZomCOa9AEWLuGQkD99c/hdc0CE0HWNsRly/xwwwXl CC7ONrfiudTLG397iaLj8GUpmODOJHj7mIefKrlOnGMRTiYBswAnmAjSFS1tJtWB KBOnkFFrSBUwKlU4414P9ZW22X8Se9SsQovdo5WGzaixz7dyOBpaqxQtuwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFFWKACBYp2kB8TZKC6Wj1CFnmt0EMB8GA1UdIwQY MBaAFEsrbSpdQTBWD2F5Y9n7yTRC3BzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMt YzU3NDE1ODUwMmM4LzEvVllvQUlGaW5hUUh4TmtvTHBhUFVJV2VhM1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMtYzU3NDE1ODUwMmM4 LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAglwwDAME AMAplQMEAMApoAMEAMBlsAMEAsEFqAMEAsGHqAMEAsH38AMEAMKZYDANBgkqhkiG 9w0BAQsFAAOCAQEAR9zVfulvpFhirDbHg7/zXLDzLSbjAX6WFb952MbtjAswLtDd cT99r/zOLbsqjXi/LgNotc2KdHtcYoP42kn4XRMKHzD1Yv9MnorlVCQPvPZKQONp Rd1YPcwGJS8ONVAL2QsPfpomB9ZPc6RrlDi92g7sflJxe+FIer4ff5hFsvv/ttJI OPTcPbr/2EiOw0pXQT1d70MElIs5Y14tasr33wc9S4jDicPrhjCREGrIJms8cxTW R8PH7itCwvDfdy7VnvTqMha8ahzOrLcTa8KlhpBdxuQknss4OI/Nw+RfwFTZWrhc hlBsK6nhJcQjc5kRNIr2NG7eNtAOzqsVofggVg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:21 2026 by rpki-client