This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VrdgMY_6kOKWpJAXOjF6sCUSgZI.roa File: VrdgMY_6kOKWpJAXOjF6sCUSgZI.roa (raw, json) Hash identifier: pISckTf0LiwLnAYjC8FaEhsB3lMLH3fYkGwtzbMWNZA= Subject key identifier: 56:B7:60:31:8F:FA:90:E2:96:A4:90:17:3A:31:7A:B0:25:12:81:92 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834422DCB58A69CBB4C12FF68093D2B Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VrdgMY_6kOKWpJAXOjF6sCUSgZI.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5411 IP address blocks: 192.36.44.0/23 maxlen: 24 192.71.132.0/23 maxlen: 24 192.71.134.0/23 maxlen: 24 192.71.178.0/23 maxlen: 24 192.121.79.0/24 maxlen: 24 192.165.101.0/24 maxlen: 24 192.165.117.0/24 maxlen: 24 192.165.118.0/24 maxlen: 24 192.176.2.0/24 maxlen: 24 192.176.131.0/24 maxlen: 24 192.176.132.0/23 maxlen: 24 192.176.148.0/23 maxlen: 24 192.176.162.0/23 maxlen: 24 194.14.63.0/24 maxlen: 24 194.14.66.0/23 maxlen: 24 194.14.70.0/23 maxlen: 24 194.68.50.0/24 maxlen: 24 194.132.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:2d:cb:58:a6:9c:bb:4c:12:ff:68:09:3d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56b760318ffa90e296a490173a317ab025128192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:43:32:04:73:d3:f4:8f:f8:c9:18:98:e4: 31:39:d6:a4:bc:03:e2:3c:cd:c9:16:0c:49:a2:5a: 4d:5a:da:37:66:ff:31:6b:a9:28:fd:4b:1f:85:ec: 93:5c:84:50:93:f4:7f:cc:84:99:5b:2a:be:6a:b4: 0b:f1:3c:4d:72:ea:eb:8b:67:b5:0b:b4:04:cd:82: f9:3c:ee:31:a1:07:44:c4:b2:79:80:1c:b9:6c:09: 80:dd:dd:51:82:2f:27:3b:d4:f0:9a:a5:63:66:b5: 92:62:dc:60:9c:e3:e9:b2:bd:20:2b:d1:c6:12:7d: 00:51:64:c0:a5:9a:cc:30:58:f5:5b:4c:3c:dc:1e: 71:50:28:d1:12:d5:1a:db:11:21:c2:2c:8c:ad:74: c1:58:92:5f:4d:e8:2b:29:7d:19:02:7f:90:45:53: dc:d0:e5:15:94:de:d6:e2:bd:c2:bd:5a:7c:65:84: b8:12:c1:42:ef:a4:53:8d:e1:db:e7:ba:57:5a:7c: 58:4c:da:15:ad:ca:bc:34:71:44:a0:39:04:f2:bb: 9d:f7:f1:4f:a5:63:99:2d:da:a2:f2:be:9d:b7:89: aa:74:1c:17:47:3d:b8:04:36:53:55:02:f3:eb:ce: 64:1e:0a:1f:b6:6d:44:1e:c5:62:a4:93:24:1e:21: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B7:60:31:8F:FA:90:E2:96:A4:90:17:3A:31:7A:B0:25:12:81:92 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VrdgMY_6kOKWpJAXOjF6sCUSgZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.44.0/23 192.71.132.0/22 192.71.178.0/23 192.121.79.0/24 192.165.101.0/24 192.165.117.0-192.165.118.255 192.176.2.0/24 192.176.131.0-192.176.133.255 192.176.148.0/23 192.176.162.0/23 194.14.63.0/24 194.14.66.0/23 194.14.70.0/23 194.68.50.0/24 194.132.39.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8a:c7:2e:3e:47:27:29:ba:a3:89:d1:17:73:ff:9a:af:d9: 59:e1:a5:43:09:46:47:b5:4e:e7:1c:40:ad:41:7f:91:2e:aa: a0:33:aa:3b:42:28:65:5f:ad:81:5c:8b:63:b0:c0:e1:3c:8f: 4a:67:1e:f8:e9:8d:14:2b:e8:83:b2:a1:04:37:99:5a:3f:35: 7b:16:c5:c2:b0:b5:00:41:f3:df:b2:6f:15:a6:aa:08:f0:4d: a8:35:93:45:70:0b:2b:6f:63:e0:79:c2:c4:bd:e3:1a:01:59: e0:cd:92:3e:80:9b:72:dc:4e:27:aa:05:e5:3c:b0:ff:7f:2e: cd:b9:c0:10:f8:98:73:ff:29:a5:7e:4a:ad:96:56:61:e6:66: c1:25:7c:b8:cd:a6:3b:70:37:04:ea:f0:95:0e:db:7e:ab:a9: 76:12:74:64:c2:7c:b5:3e:fc:bc:80:f2:e4:a9:d3:fb:1a:34: 87:ac:b5:91:77:9a:4f:71:8c:7d:51:2b:eb:c4:b9:af:ce:1b: 0f:a3:9d:24:8b:be:91:38:70:4c:ee:30:d7:05:73:0f:77:ff: b1:10:85:68:63:f7:95:52:23:b8:df:cb:6c:c7:9b:a3:1d:60: 9c:1d:7f:18:49:23:ea:50:a5:ad:1d:08:40:49:18:3b:0d:d7: ab:f5:dc:c7 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt4NEIty1imnLtMEv9oCT0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmI3NjAzMThmZmE5MGUyOTZhNDkwMTczYTMxN2FiMDI1MTI4MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCxDMgRz0/SP+MkYmOQxOdakvAPi PM3JFgxJolpNWto3Zv8xa6ko/UsfheyTXIRQk/R/zISZWyq+arQL8TxNcurri2e1 C7QEzYL5PO4xoQdExLJ5gBy5bAmA3d1Rgi8nO9TwmqVjZrWSYtxgnOPpsr0gK9HG En0AUWTApZrMMFj1W0w83B5xUCjREtUa2xEhwiyMrXTBWJJfTegrKX0ZAn+QRVPc 0OUVlN7W4r3CvVp8ZYS4EsFC76RTjeHb57pXWnxYTNoVrcq8NHFEoDkE8rud9/FP pWOZLdqi8r6dt4mqdBwXRz24BDZTVQLz685kHgoftm1EHsVipJMkHiEVTwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFFa3YDGP+pDilqSQFzoxerAlEoGSMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvVnJkZ01ZXzZrT0tXcEpBWE9qRjZzQ1VTZ1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAcAkLAME AsBHhAMEAcBHsgMEAMB5TwMEAMClZTAMAwQAwKV1AwQAwKV2AwQAwLACMAwDBADA sIMDBAHAsIQDBAHAsJQDBAHAsKIDBADCDj8DBAHCDkIDBAHCDkYDBADCRDIDBADC hCcwDQYJKoZIhvcNAQELBQADggEBAB2Kxy4+RycpuqOJ0Rdz/5qv2VnhpUMJRke1 TuccQK1Bf5EuqqAzqjtCKGVfrYFci2OwwOE8j0pnHvjpjRQr6IOyoQQ3mVo/NXsW xcKwtQBB89+ybxWmqgjwTag1k0VwCytvY+B5wsS94xoBWeDNkj6Am3LcTieqBeU8 sP9/Ls25wBD4mHP/KaV+Sq2WVmHmZsElfLjNpjtwNwTq8JUO236rqXYSdGTCfLU+ /LyA8uSp0/saNIestZF3mk9xjH1RK+vEua/OGw+jnSSLvpE4cEzuMNcFcw93/7EQ hWhj95VSI7jfy2zHm6MdYJwdfxhJI+pQpa0dCEBJGDsN16v13Mc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:01 2026 by rpki-client