This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/VjhD-33L8agb2sUN7_8E1MUQu30.roa File: VjhD-33L8agb2sUN7_8E1MUQu30.roa (raw, json) Hash identifier: +is+iqqsPVQNtEF4G99dNd9M/DNhLlbQFjjY7fXbc8w= Subject key identifier: 56:38:43:FB:7D:CB:F1:A8:1B:DA:C5:0D:EF:FF:04:D4:C5:10:BB:7D Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Certificate serial: 019B7C1276304252BB36EF25B408527F0DA5 Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/VjhD-33L8agb2sUN7_8E1MUQu30.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51007 IP address blocks: 80.84.134.0/23 maxlen: 23 80.84.135.0/24 maxlen: 24 80.84.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:76:30:42:52:bb:36:ef:25:b4:08:52:7f:0d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=563843fb7dcbf1a81bdac50defff04d4c510bb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:d4:c6:b1:06:ed:b1:2c:a7:b0:a0:5d:73: 3d:ce:7e:78:ec:5b:56:22:1a:d3:24:08:4f:b0:63: 5a:06:13:86:ee:02:fa:19:58:32:92:72:86:33:3d: ab:d5:65:88:b1:ab:80:ad:f0:aa:f9:40:b7:b5:a4: 17:4a:ce:79:39:21:de:7a:bd:2d:5c:af:6b:e3:43: d5:b5:b2:52:2a:5a:c4:27:88:7c:d7:f4:17:19:c5: 8f:86:34:9d:83:82:c4:c3:7c:c3:69:85:4e:52:6a: b6:47:5a:16:a4:39:e5:f3:f0:8e:a9:c6:56:00:f8: de:b9:1c:e8:8e:d8:d1:5c:38:68:f6:30:fb:34:e4: 38:cf:65:e8:3f:66:b8:dd:ab:56:69:28:c8:9a:a7: 41:f9:dd:38:df:e0:da:8c:4a:8e:a9:88:5e:3f:e1: cf:34:bc:f9:22:22:9a:a8:aa:25:98:f3:cb:2f:33: 0d:ae:82:7c:50:4e:63:7d:a5:57:ef:1c:55:06:7f: 73:d5:9a:7c:f1:71:ab:9e:eb:ee:36:5c:98:df:7b: 5c:20:47:ac:58:5a:59:1d:44:89:4f:f6:5e:4f:7d: 05:fe:7f:11:50:97:95:45:2c:8e:75:01:9d:af:96: d5:c6:8c:91:25:9c:76:2d:be:53:b5:d7:90:9a:b9: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:38:43:FB:7D:CB:F1:A8:1B:DA:C5:0D:EF:FF:04:D4:C5:10:BB:7D X509v3 Authority Key Identifier: keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/VjhD-33L8agb2sUN7_8E1MUQu30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.134.0/23 80.84.148.0/24 Signature Algorithm: sha256WithRSAEncryption 58:f5:ed:f3:3d:dd:e3:83:2e:b0:fa:23:f4:cc:99:78:09:93: bd:bc:df:38:3b:25:bc:41:ed:7f:3c:4a:04:f2:dd:02:16:2b: c8:c2:97:0d:7c:4d:85:8a:88:b3:fa:a3:49:c6:b3:74:f6:af: 51:9e:cb:8c:01:3e:82:f0:99:07:55:6c:9f:75:b3:b5:8c:5c: 84:c8:06:45:9f:7f:32:f0:16:64:df:79:18:02:48:2b:08:0a: 5a:c0:63:e8:8c:35:1a:54:54:13:13:9e:e1:80:9e:0e:53:7b: 17:19:6c:69:ec:b2:9a:32:44:ef:ca:1d:86:19:98:de:25:ef: 8e:43:d2:d1:49:db:a8:d0:10:3b:fc:57:b8:c1:be:45:30:9b: 03:bd:f9:fe:f0:72:49:40:00:be:40:85:86:fb:b5:a5:cf:59: 2a:c4:27:39:a4:b6:19:42:dc:a6:60:62:c9:1d:55:08:3d:f5: d8:77:e5:46:94:3d:38:ac:9e:c9:3c:a9:92:a6:00:a3:d9:c0: b9:50:c8:9c:5e:02:ed:4b:25:bf:15:a8:08:07:f5:86:8a:7b: 73:38:f4:fa:0a:23:ed:26:0a:5b:bf:35:0b:0f:71:de:02:a5: 48:61:23:38:8a:a3:e5:22:25:cd:55:bf:af:1a:e3:a9:b2:44: 3d:ba:4a:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EnYwQlK7Nu8ltAhSfw2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2 NDE2ZjkwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjM4NDNmYjdkY2JmMWE4MWJkYWM1MGRlZmZmMDRkNGM1MTBiYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5PUxrEG7bEsp7CgXXM9zn547FtW IhrTJAhPsGNaBhOG7gL6GVgyknKGMz2r1WWIsauArfCq+UC3taQXSs55OSHeer0t XK9r40PVtbJSKlrEJ4h81/QXGcWPhjSdg4LEw3zDaYVOUmq2R1oWpDnl8/COqcZW APjeuRzojtjRXDho9jD7NOQ4z2XoP2a43atWaSjImqdB+d043+DajEqOqYheP+HP NLz5IiKaqKolmPPLLzMNroJ8UE5jfaVX7xxVBn9z1Zp88XGrnuvuNlyY33tcIEes WFpZHUSJT/ZeT30F/n8RUJeVRSyOdQGdr5bVxoyRJZx2Lb5TtdeQmrmyzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFY4Q/t9y/GoG9rFDe//BNTFELt9MB8GA1UdIwQY MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt MzkyYjg2M2M5ZjAzLzEvVmpoRC0zM0w4YWdiMnNVTjdfOEUxTVVRdTMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUFSGAwQA UFSUMA0GCSqGSIb3DQEBCwUAA4IBAQBY9e3zPd3jgy6w+iP0zJl4CZO9vN84OyW8 Qe1/PEoE8t0CFivIwpcNfE2Fioiz+qNJxrN09q9RnsuMAT6C8JkHVWyfdbO1jFyE yAZFn38y8BZk33kYAkgrCApawGPojDUaVFQTE57hgJ4OU3sXGWxp7LKaMkTvyh2G GZjeJe+OQ9LRSduo0BA7/Fe4wb5FMJsDvfn+8HJJQAC+QIWG+7Wlz1kqxCc5pLYZ QtymYGLJHVUIPfXYd+VGlD04rJ7JPKmSpgCj2cC5UMicXgLtSyW/FagIB/WGintz OPT6CiPtJgpbvzULD3HeAqVIYSM4iqPlIiXNVb+vGuOpskQ9ukp/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:01 2026 by rpki-client