This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/vFI_szTdwGut2KUofHDh3zwoi1k.roa File: vFI_szTdwGut2KUofHDh3zwoi1k.roa (raw, json) Hash identifier: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE= Subject key identifier: BC:52:3F:B3:34:DD:C0:6B:AD:D8:A5:28:7C:70:E1:DF:3C:28:8B:59 Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Certificate serial: 019B7C7FDC0E46AEEC5B113A98D6398320D9 Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/vFI_szTdwGut2KUofHDh3zwoi1k.roa Signing time: Fri 02 Jan 2026 02:18:32 +0000 ROA not before: Fri 02 Jan 2026 02:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 91.229.21.0/24 maxlen: 24 193.160.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:dc:0e:46:ae:ec:5b:11:3a:98:d6:39:83:20:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc523fb334ddc06badd8a5287c70e1df3c288b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:e9:03:02:7a:7e:49:37:d1:c0:ce:23:82: 10:40:8c:05:c4:26:3a:44:64:e3:3f:bf:2d:3f:4b: 87:86:17:cf:e5:82:3e:f1:52:26:92:69:8a:32:ff: 9e:fc:82:02:97:7e:e8:29:40:09:d4:2a:08:e5:1c: 77:19:d5:24:f3:fc:6b:5c:ab:9e:22:b9:58:ac:b6: 05:e8:fe:4f:80:e9:dd:3b:14:6a:68:4e:72:b7:ef: 15:1d:2c:39:b4:1e:b1:7c:28:04:8a:e0:eb:4a:69: a0:77:33:a3:48:11:a2:03:09:6f:78:7c:eb:96:f9: e8:bc:62:0d:6f:fe:36:91:e8:e2:b6:55:03:91:7b: f6:d8:df:a5:a2:e9:b9:8c:cd:e4:0f:0c:c8:9c:6b: 44:56:9c:73:93:9d:2b:fa:5c:cf:ca:46:e8:a4:c6: 2b:2d:42:e4:9a:52:88:67:b1:ae:3b:9c:75:ef:e0: 0b:c9:16:c6:de:d0:d0:3f:86:a5:f0:5b:fe:67:00: 96:ce:87:87:b3:ec:13:14:5b:b5:54:ec:2f:0f:be: 3e:32:12:f5:df:85:e4:58:59:f0:d2:d3:86:93:7f: 2f:e6:99:14:1b:30:5d:5a:7d:85:9e:89:58:f5:4e: 4a:a1:f0:8b:4c:e3:94:25:fd:72:96:06:16:04:2a: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:52:3F:B3:34:DD:C0:6B:AD:D8:A5:28:7C:70:E1:DF:3C:28:8B:59 X509v3 Authority Key Identifier: keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/vFI_szTdwGut2KUofHDh3zwoi1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.21.0/24 193.160.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:07:a0:b1:86:4b:80:e3:21:cb:93:3e:d2:b0:3b:bf:4a:83: c4:69:62:c5:c6:49:1c:7e:29:69:c7:51:42:91:76:ae:73:8d: 20:7f:6c:88:61:4d:04:cd:5b:0e:fe:55:ec:11:61:3d:9d:02: 67:ce:fc:59:fe:cc:b0:e4:1f:fd:58:bf:1d:02:33:52:58:f2: 84:4c:1b:ed:30:5e:4a:64:ad:ff:69:c4:4c:47:3a:6c:cf:4c: 1e:cc:da:c5:34:f4:e0:02:3b:e4:00:3a:41:4f:0f:49:70:98: 4f:0e:7d:64:ba:f6:db:c5:53:b9:d4:52:d2:f5:ab:71:06:86: 5a:a9:a2:a0:a7:20:b3:e7:04:98:f6:92:d8:b0:9c:76:f8:9f: 9b:8e:26:c7:d5:7f:59:54:30:d9:ce:f3:04:3f:be:d0:74:a7: 1a:66:c3:24:d4:4f:89:be:c0:23:c3:d4:e5:1d:26:57:3d:7a: 5d:ab:16:dc:02:3c:8a:46:be:74:b5:76:98:c0:61:71:f6:31: af:22:9b:5e:3c:8b:78:29:7f:4d:21:4e:33:bb:8e:b7:f3:49: 76:9a:3b:14:c4:7c:13:d2:77:1d:ce:3c:9f:60:aa:4d:46:9d: 90:7e:60:03:15:a7:94:83:09:80:64:96:e3:3f:8c:8f:88:55: 69:14:dc:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f9wORq7sWxE6mNY5gyDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2 NzRhNTQwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzUyM2ZiMzM0ZGRjMDZiYWRkOGE1Mjg3YzcwZTFkZjNjMjg4YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNDpAwJ6fkk30cDOI4IQQIwFxCY6 RGTjP78tP0uHhhfP5YI+8VImkmmKMv+e/IICl37oKUAJ1CoI5Rx3GdUk8/xrXKue IrlYrLYF6P5PgOndOxRqaE5yt+8VHSw5tB6xfCgEiuDrSmmgdzOjSBGiAwlveHzr lvnovGINb/42kejitlUDkXv22N+loum5jM3kDwzInGtEVpxzk50r+lzPykbopMYr LULkmlKIZ7GuO5x17+ALyRbG3tDQP4al8Fv+ZwCWzoeHs+wTFFu1VOwvD74+MhL1 34XkWFnw0tOGk38v5pkUGzBdWn2FnolY9U5KofCLTOOUJf1ylgYWBCpIywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLxSP7M03cBrrdilKHxw4d88KItZMB8GA1UdIwQY MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt YTliMWRmNDRjZTJmLzEvdkZJX3N6VGR3R3V0MktVb2ZIRGgzendvaTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+UVAwQA waAJMA0GCSqGSIb3DQEBCwUAA4IBAQA6B6CxhkuA4yHLkz7SsDu/SoPEaWLFxkkc filpx1FCkXauc40gf2yIYU0EzVsO/lXsEWE9nQJnzvxZ/syw5B/9WL8dAjNSWPKE TBvtMF5KZK3/acRMRzpsz0wezNrFNPTgAjvkADpBTw9JcJhPDn1kuvbbxVO51FLS 9atxBoZaqaKgpyCz5wSY9pLYsJx2+J+bjibH1X9ZVDDZzvMEP77QdKcaZsMk1E+J vsAjw9TlHSZXPXpdqxbcAjyKRr50tXaYwGFx9jGvIptePIt4KX9NIU4zu46380l2 mjsUxHwT0ncdzjyfYKpNRp2QfmADFaeUgwmAZJbjP4yPiFVpFNxR -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:56 2026 by rpki-client