This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa File: vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa (raw, json) Hash identifier: 6/LxhvXlOR/ty2sj2ZAK5GVcT8Qr18RlIGwO+dZwois= Subject key identifier: BE:B1:F1:0D:07:43:BC:3E:45:90:92:7D:1D:72:B1:21:E5:D2:0F:A8 Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Certificate serial: 019B7C1274CC8EFEEB13A6EC3FD0C157A11C Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41678 IP address blocks: 89.185.128.0/21 maxlen: 21 89.185.129.0/24 maxlen: 24 89.185.136.0/21 maxlen: 21 89.185.143.0/24 maxlen: 24 89.185.144.0/20 maxlen: 20 89.185.154.0/24 maxlen: 24 89.185.157.0/24 maxlen: 24 194.46.0.0/19 maxlen: 19 194.46.96.0/20 maxlen: 20 194.46.112.0/21 maxlen: 21 194.46.112.0/22 maxlen: 22 194.46.132.0/22 maxlen: 22 194.46.152.0/22 maxlen: 22 194.46.160.0/24 maxlen: 24 194.46.161.0/24 maxlen: 24 194.46.164.0/22 maxlen: 22 194.46.168.0/21 maxlen: 21 194.46.176.0/20 maxlen: 20 212.108.64.0/20 maxlen: 20 212.108.77.0/24 maxlen: 24 212.108.92.0/22 maxlen: 22 212.108.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:74:cc:8e:fe:eb:13:a6:ec:3f:d0:c1:57:a1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beb1f10d0743bc3e4590927d1d72b121e5d20fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fd:08:60:db:e3:f1:ac:ce:5a:c5:b6:d5:0e: 8b:54:c1:aa:3c:a8:26:0c:2d:bb:b2:a0:00:f4:f9: f1:67:f6:94:98:ea:e0:db:d9:75:a7:ba:05:66:cf: a8:bc:5d:c3:95:12:3d:8f:12:f5:a9:79:1a:e3:32: fc:ad:82:39:f2:68:05:69:71:d2:63:eb:66:c4:fa: 72:a0:b1:ea:fe:5a:15:1c:99:58:e4:18:fe:22:96: 1b:ab:00:02:a0:5b:9c:39:b0:83:bc:07:ed:72:fd: 0d:d9:3a:37:ad:60:7f:96:60:84:ce:a9:ef:37:3f: 75:54:65:1f:a7:86:79:99:59:6f:de:22:9f:54:00: 2f:1c:21:15:bb:77:e2:cf:fa:2a:c4:37:00:fb:99: 36:94:3a:96:e7:a1:be:23:47:29:ff:72:ee:bc:7c: 78:d3:8c:79:45:11:2e:c2:66:ce:61:76:b5:1f:65: f1:fd:b8:6a:8c:34:46:20:c8:fb:e8:02:f5:44:51: 88:47:bc:dd:d4:db:c8:84:64:f2:86:5c:7d:33:d2: 99:8f:fc:29:92:33:7f:89:5a:c6:3b:89:cd:c6:00: a1:2a:6e:ff:be:44:2f:ee:c2:76:ec:93:94:74:08: 21:85:03:7f:c5:40:c2:60:dc:4b:b1:67:3d:e5:af: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B1:F1:0D:07:43:BC:3E:45:90:92:7D:1D:72:B1:21:E5:D2:0F:A8 X509v3 Authority Key Identifier: keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.128.0/19 194.46.0.0/19 194.46.96.0-194.46.119.255 194.46.132.0/22 194.46.152.0/22 194.46.160.0/23 194.46.164.0-194.46.191.255 212.108.64.0/20 212.108.92.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:70:e0:04:c4:20:65:d6:be:d2:95:82:51:5d:05:bc:40:35: 41:43:7f:18:da:67:26:77:b2:5b:5b:e5:fe:74:9e:2e:25:6d: 33:78:f9:0c:3d:f8:2f:5b:47:e9:37:4f:bc:50:4b:f7:6c:fe: 83:7f:5c:49:2e:cb:23:37:4d:76:62:3d:f7:9e:a9:00:79:42: f8:e7:39:dc:50:51:a5:08:c2:fd:48:a4:c7:ad:47:89:27:61: 04:e2:c5:5f:bc:b5:51:7c:61:15:0f:98:79:0d:aa:24:ec:02: 90:1c:e6:18:dd:6b:f1:89:4f:36:f6:91:28:54:0a:60:0d:98: e7:f5:ce:1e:93:d7:83:39:d3:ae:7b:ef:0b:c8:e1:55:3f:ee: 67:a3:e9:fd:36:7e:02:44:ea:ad:0b:54:b7:0d:9d:95:ee:ea: 4b:1e:a1:f5:09:62:44:b9:1e:d1:65:1d:fe:23:50:2b:1a:93: 1e:27:e4:dd:58:9d:75:a0:c3:dd:e1:f7:57:93:ae:ab:ce:56: 06:14:54:43:17:f6:52:45:94:2c:85:2e:27:0a:5f:43:61:78: ae:81:11:49:fb:6f:eb:bb:0c:a5:75:cf:fe:ac:a4:78:4c:6e: d4:a4:c5:83:f9:44:f2:6c:c5:76:fb:ee:1e:31:33:1d:73:b9: d8:e2:90:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt8EnTMjv7rE6bsP9DBV6EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2 ZjYzMzEwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWIxZjEwZDA3NDNiYzNlNDU5MDkyN2QxZDcyYjEyMWU1ZDIwZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/0IYNvj8azOWsW21Q6LVMGqPKgm DC27sqAA9PnxZ/aUmOrg29l1p7oFZs+ovF3DlRI9jxL1qXka4zL8rYI58mgFaXHS Y+tmxPpyoLHq/loVHJlY5Bj+IpYbqwACoFucObCDvAftcv0N2To3rWB/lmCEzqnv Nz91VGUfp4Z5mVlv3iKfVAAvHCEVu3fiz/oqxDcA+5k2lDqW56G+I0cp/3LuvHx4 04x5RREuwmbOYXa1H2Xx/bhqjDRGIMj76AL1RFGIR7zd1NvIhGTyhlx9M9KZj/wp kjN/iVrGO4nNxgChKm7/vkQv7sJ27JOUdAghhQN/xUDCYNxLsWc95a9iEQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFL6x8Q0HQ7w+RZCSfR1ysSHl0g+oMB8GA1UdIwQY MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt N2Q3ZjRiNjM0ODQ5LzEvdnJIeERRZER2RDVGa0pKOUhYS3hJZVhTRDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5 LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQFWbmAAwQF wi4AMAwDBAXCLmADBAPCLnADBALCLoQDBALCLpgDBAHCLqAwDAMEAsIupAMEBsIu gAMEBNRsQAMEAtRsXDANBgkqhkiG9w0BAQsFAAOCAQEAXHDgBMQgZda+0pWCUV0F vEA1QUN/GNpnJneyW1vl/nSeLiVtM3j5DD34L1tH6TdPvFBL92z+g39cSS7LIzdN dmI9956pAHlC+Oc53FBRpQjC/Uikx61HiSdhBOLFX7y1UXxhFQ+YeQ2qJOwCkBzm GN1r8YlPNvaRKFQKYA2Y5/XOHpPXgznTrnvvC8jhVT/uZ6Pp/TZ+AkTqrQtUtw2d le7qSx6h9QliRLke0WUd/iNQKxqTHifk3ViddaDD3eH3V5Ouq85WBhRUQxf2UkWU LIUuJwpfQ2F4roERSftv67sMpXXP/qykeExu1KTFg/lE8mzFdvvuHjEzHXO52OKQ AQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:03 2026 by rpki-client