This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/vLzum_3xiySkT3R3o28koRHRvWg.roa File: vLzum_3xiySkT3R3o28koRHRvWg.roa (raw, json) Hash identifier: vj9JWRWLPCy8DDsgu3Xmj2hFdUNWrsZTq4TtJ5bRflE= Subject key identifier: BC:BC:EE:9B:FD:F1:8B:24:A4:4F:74:77:A3:6F:24:A1:11:D1:BD:68 Certificate issuer: /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd Certificate serial: 019BDB8DE90CBA17F3A8B8752C27F1365832 Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/vLzum_3xiySkT3R3o28koRHRvWg.roa Signing time: Tue 20 Jan 2026 13:17:49 +0000 ROA not before: Tue 20 Jan 2026 13:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15623 IP address blocks: 62.12.128.0/17 maxlen: 17 193.246.253.0/24 maxlen: 24 193.247.205.0/24 maxlen: 24 195.144.160.0/19 maxlen: 19 195.226.0.0/19 maxlen: 19 212.45.192.0/19 maxlen: 19 212.55.192.0/19 maxlen: 19 213.158.128.0/19 maxlen: 19 213.189.128.0/19 maxlen: 19 217.14.64.0/20 maxlen: 20 217.75.16.0/21 maxlen: 21 217.75.24.0/21 maxlen: 21 2001:8a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:8d:e9:0c:ba:17:f3:a8:b8:75:2c:27:f1:36:58:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd Validity Not Before: Jan 20 13:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcbcee9bfdf18b24a44f7477a36f24a111d1bd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:f4:a4:2b:54:21:d8:e7:3f:dc:49:a8:63: dd:11:27:2f:93:65:05:39:c8:fd:ca:b1:ae:24:9c: 35:4f:a5:15:a1:8f:82:78:7d:5a:6c:5c:50:f6:82: 69:18:91:d7:d9:a6:c5:a2:87:87:2f:ba:86:3d:66: 09:79:f0:7a:4c:77:c9:cc:7a:34:78:15:92:1b:f0: 40:da:fb:cd:e7:4b:fc:73:4a:11:09:cf:0c:01:c8: 72:28:d9:cf:fb:16:e7:8d:e3:5a:95:fe:0e:4a:15: 0e:8e:4b:a5:a2:cb:6d:27:fe:e6:1e:6e:d0:12:af: f0:55:0e:29:04:f8:75:13:cf:7d:c4:6a:d5:f6:68: bc:0f:66:e8:8d:a9:cb:56:cc:4f:26:17:2b:8a:66: 5f:a6:f8:e2:6d:c8:61:b8:f8:d6:9c:ca:0c:1e:a6: 76:7b:c5:2e:5f:41:74:c0:79:7d:95:22:88:c7:b5: bf:81:19:bd:3d:ae:4c:97:69:af:18:da:4f:4a:00: ab:ca:f1:e4:33:40:53:71:79:c9:75:b8:4c:eb:35: fa:b8:dd:a3:56:f9:e2:dc:98:3c:a1:b6:07:a8:b8: 55:9c:54:ce:d8:00:5b:c7:98:ec:b8:0d:8f:6e:d1: a6:f6:0f:83:f0:08:ce:55:0e:3f:09:8d:9f:b0:f0: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BC:EE:9B:FD:F1:8B:24:A4:4F:74:77:A3:6F:24:A1:11:D1:BD:68 X509v3 Authority Key Identifier: keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/vLzum_3xiySkT3R3o28koRHRvWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.12.128.0/17 193.246.253.0/24 193.247.205.0/24 195.144.160.0/19 195.226.0.0/19 212.45.192.0/19 212.55.192.0/19 213.158.128.0/19 213.189.128.0/19 217.14.64.0/20 217.75.16.0/20 IPv6: 2001:8a8::/32 Signature Algorithm: sha256WithRSAEncryption 31:04:c8:1f:82:71:c9:20:8d:94:44:8c:10:ec:40:e7:a8:01: 7d:fe:19:97:95:da:33:67:58:8e:d7:b8:af:b1:63:9a:d6:29: 31:77:c2:73:cb:8d:f0:c9:87:5c:c3:8a:47:82:d2:f3:aa:5c: 6b:28:61:2c:2d:9d:a4:e5:24:96:b2:09:60:d0:c4:04:84:c4: bc:74:45:48:de:85:cf:da:c1:0b:44:bf:3e:e3:cc:61:ce:6c: 3f:e3:ae:ec:a2:95:9f:5e:e6:d6:41:27:92:90:fe:f5:9d:f6: f4:2b:37:e1:e4:7f:1e:d5:06:77:28:e9:08:98:86:9d:2b:82: 62:9d:f6:a2:bd:13:13:c8:02:27:e7:02:50:79:67:f3:b4:49: 21:e8:4e:3b:2f:f1:bb:c5:97:c3:fb:b1:e7:38:4e:73:5a:38: 58:a4:8b:b5:33:a1:49:f0:b9:a9:54:cd:8d:f6:8f:b6:3c:97: d8:15:92:ae:81:22:d4:f4:7d:61:42:12:a6:77:55:75:2a:67: 52:a4:69:a8:6b:42:81:38:5a:e7:8f:a2:9c:0a:7f:c1:a9:6f: d2:39:d0:b2:7e:ab:9c:b3:53:f0:f3:19:4a:8c:75:b8:ee:cd: 05:c2:26:af:c4:3d:94:23:01:a6:7b:44:14:2e:88:6e:25:24: 25:ae:9a:94 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZvbjekMuhfzqLh1LCfxNlgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjUxODBmOWI5M2FlNzU3M2MwOGE4OTRiZDQ1MmJkNzdj ZTU2Y2QwHhcNMjYwMTIwMTMxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2JjZWU5YmZkZjE4YjI0YTQ0Zjc0NzdhMzZmMjRhMTExZDFiZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmD0pCtUIdjnP9xJqGPdEScvk2UF Ocj9yrGuJJw1T6UVoY+CeH1abFxQ9oJpGJHX2abFooeHL7qGPWYJefB6THfJzHo0 eBWSG/BA2vvN50v8c0oRCc8MAchyKNnP+xbnjeNalf4OShUOjkulosttJ/7mHm7Q Eq/wVQ4pBPh1E899xGrV9mi8D2bojanLVsxPJhcrimZfpvjibchhuPjWnMoMHqZ2 e8UuX0F0wHl9lSKIx7W/gRm9Pa5Ml2mvGNpPSgCryvHkM0BTcXnJdbhM6zX6uN2j Vvni3Jg8obYHqLhVnFTO2ABbx5jsuA2PbtGm9g+D8AjOVQ4/CY2fsPBZ+wIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFLy87pv98YskpE90d6NvJKER0b1oMB8GA1UdIwQY MBaAFCf1GA+bk651c8CKiUvUUr13zlbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMt MzBmZWUyN2U4NGNiLzEvdkx6dW1fM3hpeVNrVDNSM28yOGtvUkhSdldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMtMzBmZWUyN2U4NGNi LzEvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQHPgyAAwQA wfb9AwQAwffNAwQFw5CgAwQFw+IAAwQF1C3AAwQF1DfAAwQF1Z6AAwQF1b2AAwQE 2Q5AAwQE2UsQMA0EAgACMAcDBQAgAQioMA0GCSqGSIb3DQEBCwUAA4IBAQAxBMgf gnHJII2URIwQ7EDnqAF9/hmXldozZ1iO17ivsWOa1ikxd8Jzy43wyYdcw4pHgtLz qlxrKGEsLZ2k5SSWsglg0MQEhMS8dEVI3oXP2sELRL8+48xhzmw/467sopWfXubW QSeSkP71nfb0Kzfh5H8e1QZ3KOkImIadK4JinfaivRMTyAIn5wJQeWfztEkh6E47 L/G7xZfD+7HnOE5zWjhYpIu1M6FJ8LmpVM2N9o+2PJfYFZKugSLU9H1hQhKmd1V1 KmdSpGmoa0KBOFrnj6KcCn/BqW/SOdCyfqucs1Pw8xlKjHW47s0FwiavxD2UIwGm e0QULohuJSQlrpqU -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:40 2026 by rpki-client