This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VpZc_tGbUtP7GGi0UxfkkoWvFL4.roa File: VpZc_tGbUtP7GGi0UxfkkoWvFL4.roa (raw, json) Hash identifier: fmoPvuTN/1bqE6T/TODrukV/SRc7ZMGNSKtVRnDZwo0= Subject key identifier: 56:96:5C:FE:D1:9B:52:D3:FB:18:68:B4:53:17:E4:92:85:AF:14:BE Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345EF369599286D12DDDAF6099CC4F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VpZc_tGbUtP7GGi0UxfkkoWvFL4.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43893 IP address blocks: 192.71.58.0/24 maxlen: 24 192.121.13.0/24 maxlen: 24 192.121.62.0/24 maxlen: 24 192.165.66.0/24 maxlen: 24 193.234.52.0/24 maxlen: 24 193.234.53.0/24 maxlen: 24 194.71.161.0/24 maxlen: 24 194.71.162.0/24 maxlen: 24 194.71.224.0/24 maxlen: 24 194.103.221.0/24 maxlen: 24 194.132.30.0/24 maxlen: 24 194.132.80.0/24 maxlen: 24 194.132.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5e:f3:69:59:92:86:d1:2d:dd:af:60:99:cc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56965cfed19b52d3fb1868b45317e49285af14be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:61:5e:6a:78:aa:a6:1f:e6:63:09:dc:55: 23:a4:7c:6c:4a:f8:e9:95:4e:80:17:8e:cf:79:81: 2c:b2:42:b4:32:83:e4:9c:84:da:c4:7c:3a:0f:fc: db:77:ad:3d:bd:26:5a:d1:b5:e2:83:59:a0:e6:03: c9:61:0d:15:04:58:2d:1a:2a:c7:8b:cf:c4:c2:87: b7:a9:e9:6c:fd:6c:e5:53:06:58:69:dd:97:35:7c: 91:20:65:20:0f:98:75:96:9e:c5:77:f7:11:ca:bc: 0b:56:eb:13:bf:83:16:35:90:2c:4f:5c:cf:c8:6e: 30:26:aa:60:c7:46:5e:9b:fc:39:67:62:03:8c:e6: 67:fd:cd:c2:bd:6d:f2:8f:35:fd:7d:42:89:f3:60: 5a:ed:7f:a9:18:36:1a:c0:3e:27:10:46:d6:7a:b5: 89:7d:fa:ac:4b:4a:4f:22:90:84:6e:79:32:4a:52: 36:e4:6d:f9:c4:d5:fa:ed:ef:6f:1d:25:ca:50:04: a3:4e:67:d5:3d:07:ab:f8:cc:b8:b2:e8:6c:b4:86: 59:26:f9:d9:4c:0e:e9:7d:df:21:45:72:49:f3:b6: 8c:00:1a:42:85:7e:b2:89:27:05:3a:64:6f:c4:b6: df:99:48:47:fa:b0:9d:9e:0b:84:c6:ec:80:cf:63: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:96:5C:FE:D1:9B:52:D3:FB:18:68:B4:53:17:E4:92:85:AF:14:BE X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VpZc_tGbUtP7GGi0UxfkkoWvFL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.58.0/24 192.121.13.0/24 192.121.62.0/24 192.165.66.0/24 193.234.52.0/23 194.71.161.0-194.71.162.255 194.71.224.0/24 194.103.221.0/24 194.132.30.0/24 194.132.80.0/24 194.132.82.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:64:98:11:66:5d:6e:a0:c0:eb:98:dd:2f:21:74:09:4d:15: d4:4d:47:8a:4e:b0:86:05:b0:e1:0d:c3:3a:a8:14:04:fe:d1: b5:ba:25:ac:9f:7b:4e:a2:e6:48:a4:72:42:91:df:0f:95:4d: 57:84:db:7a:c6:c6:a2:e9:ba:b5:f3:2f:21:0a:26:ba:f1:9a: b0:54:6b:4c:0d:68:57:20:2c:ee:25:1c:7f:c4:08:d2:12:2c: b9:ba:fc:41:95:66:40:83:30:6b:84:de:ea:2e:0e:71:d5:7b: 23:91:2c:0e:e6:ea:c9:67:60:bf:2e:9d:f4:41:c8:c1:c1:06: af:eb:17:ae:62:af:8d:be:c5:32:bb:97:2c:08:75:68:f5:03: e2:66:d0:75:65:9c:53:e4:ab:db:a1:4a:09:a9:0c:c8:1c:c4: fd:6c:46:45:ab:d6:b7:36:01:a1:7c:df:62:5d:99:16:ac:b7: 67:6e:bd:f5:7b:c4:8b:7c:c5:70:58:9c:dc:61:85:05:1a:a5: 43:5b:38:6d:00:96:75:c8:b1:e0:e7:a0:0e:d3:00:28:b7:60: 16:f5:d5:4f:01:b8:09:22:bb:e3:82:ca:4f:5a:92:b7:2d:f6: 24:ff:57:9f:f4:8a:b4:14:71:1f:81:77:71:e9:e5:d9:f7:8a: 15:51:bc:5e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt4NF7zaVmShtEt3a9gmcxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njk2NWNmZWQxOWI1MmQzZmIxODY4YjQ1MzE3ZTQ5Mjg1YWYxNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthlhXmp4qqYf5mMJ3FUjpHxsSvjp lU6AF47PeYEsskK0MoPknITaxHw6D/zbd609vSZa0bXig1mg5gPJYQ0VBFgtGirH i8/Ewoe3qels/WzlUwZYad2XNXyRIGUgD5h1lp7Fd/cRyrwLVusTv4MWNZAsT1zP yG4wJqpgx0Zem/w5Z2IDjOZn/c3CvW3yjzX9fUKJ82Ba7X+pGDYawD4nEEbWerWJ ffqsS0pPIpCEbnkySlI25G35xNX67e9vHSXKUASjTmfVPQer+My4suhstIZZJvnZ TA7pfd8hRXJJ87aMABpChX6yiScFOmRvxLbfmUhH+rCdnguExuyAz2NnLwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFFaWXP7Rm1LT+xhotFMX5JKFrxS+MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvVnBaY190R2JVdFA3R0dpMFV4Zmtrb1d2Rkw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAwEc6AwQA wHkNAwQAwHk+AwQAwKVCAwQBweo0MAwDBADCR6EDBADCR6IDBADCR+ADBADCZ90D BADChB4DBADChFADBAHChFIwDQYJKoZIhvcNAQELBQADggEBAJ5kmBFmXW6gwOuY 3S8hdAlNFdRNR4pOsIYFsOENwzqoFAT+0bW6Jayfe06i5kikckKR3w+VTVeE23rG xqLpurXzLyEKJrrxmrBUa0wNaFcgLO4lHH/ECNISLLm6/EGVZkCDMGuE3uouDnHV eyORLA7m6slnYL8unfRByMHBBq/rF65ir42+xTK7lywIdWj1A+Jm0HVlnFPkq9uh SgmpDMgcxP1sRkWr1rc2AaF832JdmRast2duvfV7xIt8xXBYnNxhhQUapUNbOG0A lnXIseDnoA7TACi3YBb11U8BuAkiu+OCyk9akrct9iT/V5/0irQUcR+Bd3Hp5dn3 ihVRvF4= -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:44 2026 by rpki-client