This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa File: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (raw, json) Hash identifier: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc= Subject key identifier: BE:5E:7B:1D:D9:3F:53:C6:FD:FD:8D:8F:C4:24:1C:51:14:6F:AD:0C Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79 Certificate serial: 019B775925AE0D99177BBE6E4F9D8A5E9449 Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59908 IP address blocks: 141.170.208.0/21 maxlen: 24 141.170.214.0/24 maxlen: 24 185.67.112.0/24 maxlen: 24 185.67.114.0/24 maxlen: 24 185.67.115.0/24 maxlen: 24 193.164.226.0/23 maxlen: 24 2001:678:930::/48 maxlen: 96 2a00:a3a0::/32 maxlen: 96 2a03:2460::/32 maxlen: 96 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:25:ae:0d:99:17:7b:be:6e:4f:9d:8a:5e:94:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be5e7b1dd93f53c6fdfd8d8fc4241c51146fad0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:4d:ed:a8:b4:6c:c4:fa:bd:a2:8b:17:87: 29:f7:ab:3f:9f:b6:8a:af:5b:75:56:7e:ab:46:bc: e2:b5:73:b8:23:d7:33:73:7f:5c:dc:27:43:3a:b3: 36:86:00:00:5d:a8:f0:64:bc:db:0c:49:52:a4:bb: 2c:d9:6d:3d:3c:6d:d0:55:b5:a9:5c:30:4e:dd:65: 7c:6c:d4:01:f3:fd:56:d7:72:ba:76:1c:f1:55:c8: 7e:79:52:5f:63:b7:a0:55:08:ec:2d:df:5b:dd:75: b8:38:1f:d4:4f:ba:0d:f0:3e:63:9f:49:6c:25:47: 0b:a5:13:1f:cf:d1:3f:86:57:6b:b9:87:6d:45:87: c6:dc:1b:30:d0:b2:c1:ab:c4:fd:1d:64:3c:02:5d: ad:2c:3b:25:ac:7b:75:8a:bc:c2:43:7f:d4:96:ac: 37:56:49:b5:87:81:61:bb:ae:dd:09:58:f8:b8:88: ec:41:2d:ba:6b:10:00:e1:40:ae:1d:a4:34:da:50: 97:35:f8:fd:fb:57:cb:fe:24:d7:8f:bf:28:15:af: 9b:70:58:0b:d2:ff:9b:0c:3b:ff:0b:78:14:97:52: 41:ef:3c:0b:95:90:0f:2f:a3:7b:22:8a:92:ad:55: f5:dc:3d:7e:00:8d:1c:0d:b6:c2:a4:31:42:63:f9: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5E:7B:1D:D9:3F:53:C6:FD:FD:8D:8F:C4:24:1C:51:14:6F:AD:0C X509v3 Authority Key Identifier: keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.170.208.0/21 185.67.112.0/24 185.67.114.0/23 193.164.226.0/23 IPv6: 2001:678:930::/48 2a00:a3a0::/32 2a03:2460::/32 Signature Algorithm: sha256WithRSAEncryption 89:58:38:77:39:f3:40:86:a5:39:cd:6f:64:04:39:c6:3d:5a: 5d:c0:03:12:c7:d6:59:3e:0d:f4:ed:b8:5a:9c:a4:e6:e8:a3: 64:ce:6e:f9:73:aa:38:38:81:ee:81:8c:cc:d5:d9:39:fa:13: 00:06:ed:d7:92:87:5b:bb:d3:a6:9e:72:d3:c8:c4:65:89:a7: 1b:f3:70:d3:bf:92:97:49:73:43:8a:4a:3c:4a:92:ff:5b:05: ec:5e:e9:4f:72:0d:e2:b0:50:e6:94:1b:74:b5:74:b2:79:ed: 62:de:8d:1c:84:61:ae:f2:d8:8a:57:dc:7c:47:cc:7f:8c:81: 7b:aa:de:b5:67:72:63:5f:9a:05:50:ec:97:c3:ab:51:c6:33: 58:bb:23:99:6c:b2:9e:61:48:84:a2:c6:9a:03:67:05:3f:c1: bd:5e:2f:a3:20:cc:7c:76:9a:f0:d9:d5:0f:d8:2d:bf:04:ae: f6:0a:29:3f:9d:7a:90:85:cc:74:c1:63:e8:11:f8:c0:ce:c3: c4:5b:69:c3:9f:83:c3:45:91:94:dd:2d:a2:69:d3:6f:3a:2e: 60:23:63:e7:ea:58:2b:bd:65:8b:73:e6:d3:01:8b:33:85:c7: 2f:48:11:82:62:0a:db:6a:eb:56:34:83:f0:4a:84:a4:9a:b9: 07:54:94:41 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt3WSWuDZkXe75uT52KXpRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1 MDRmNzkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTVlN2IxZGQ5M2Y1M2M2ZmRmZDhkOGZjNDI0MWM1MTE0NmZhZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYhN7ai0bMT6vaKLF4cp96s/n7aK r1t1Vn6rRrzitXO4I9czc39c3CdDOrM2hgAAXajwZLzbDElSpLss2W09PG3QVbWp XDBO3WV8bNQB8/1W13K6dhzxVch+eVJfY7egVQjsLd9b3XW4OB/UT7oN8D5jn0ls JUcLpRMfz9E/hldruYdtRYfG3Bsw0LLBq8T9HWQ8Al2tLDslrHt1irzCQ3/Ulqw3 Vkm1h4Fhu67dCVj4uIjsQS26axAA4UCuHaQ02lCXNfj9+1fL/iTXj78oFa+bcFgL 0v+bDDv/C3gUl1JB7zwLlZAPL6N7IoqSrVX13D1+AI0cDbbCpDFCY/n56wIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFL5eex3ZP1PG/f2Nj8QkHFEUb60MMB8GA1UdIwQY MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt NmJjMzkwOTk1Y2FiLzEvdmw1N0hka19VOGI5X1kyUHhDUWNVUlJ2clF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAeBAIAATAYAwQDjarQAwQA uUNwAwQBuUNyAwQBwaTiMB0EAgACMBcDBwAgAQZ4CTADBQAqAKOgAwUAKgMkYDAN BgkqhkiG9w0BAQsFAAOCAQEAiVg4dznzQIalOc1vZAQ5xj1aXcADEsfWWT4N9O24 Wpyk5uijZM5u+XOqODiB7oGMzNXZOfoTAAbt15KHW7vTpp5y08jEZYmnG/Nw07+S l0lzQ4pKPEqS/1sF7F7pT3IN4rBQ5pQbdLV0snntYt6NHIRhrvLYilfcfEfMf4yB e6retWdyY1+aBVDsl8OrUcYzWLsjmWyynmFIhKLGmgNnBT/BvV4voyDMfHaa8NnV D9gtvwSu9gopP516kIXMdMFj6BH4wM7DxFtpw5+Dw0WRlN0tomnTbzouYCNj5+pY K71li3Pm0wGLM4XHL0gRgmIK22rrVjSD8EqEpJq5B1SUQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:35 2026 by rpki-client