This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa File: VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa (raw, json) Hash identifier: iduPoCIxSjpp0ZSpvCwLlS/MLtsMgKgNiTHnlQR8wrA= Subject key identifier: 56:A3:4F:D0:89:B5:47:65:E1:73:2D:71:55:6A:2C:F8:E7:EE:10:F1 Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 019B7AC873CF3C93D37042BBF914A9D0D518 Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44090 IP address blocks: 185.129.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:73:cf:3c:93:d3:70:42:bb:f9:14:a9:d0:d5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56a34fd089b54765e1732d71556a2cf8e7ee10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:45:72:d7:55:9b:4d:2d:c3:4e:cf:41:d4: 38:8e:3a:ec:66:13:64:50:49:e6:1e:1a:ce:98:17: 29:24:92:52:c5:e8:69:a5:f2:a6:4e:e1:2f:d9:dd: 4b:49:de:96:8d:0c:08:9a:ba:e1:67:8e:7d:23:35: 7f:72:c0:12:b8:c5:c4:a7:9b:87:13:38:4c:3b:e3: 43:ca:37:f5:5b:7c:94:56:62:36:77:42:01:af:3d: b1:33:d0:72:20:be:84:dd:45:b2:98:86:a8:34:e6: 92:8b:09:7b:d1:f9:54:f4:9e:25:1f:19:2b:11:1f: ed:15:b1:c2:ea:03:e5:bb:d4:e0:21:19:11:ab:c0: a7:82:ae:94:e0:24:c9:ba:0e:bf:26:e6:41:68:51: 7b:80:86:0d:8b:d1:70:d5:f1:a5:05:17:68:20:26: 38:ad:f1:b7:f4:68:24:9e:52:e1:ee:35:59:a2:ab: ba:8e:c3:f7:12:76:cf:76:4e:14:46:e2:5b:c5:f1: a7:75:5e:1c:ec:88:a9:4c:af:5f:8f:77:7b:dc:cb: da:db:a8:ce:03:0f:be:11:ef:98:c9:d4:a1:39:e2: 70:27:7f:98:76:c4:76:27:7b:90:74:20:56:4d:57: e3:83:f0:b3:9e:7c:a8:09:66:bd:a1:6c:23:2c:21: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A3:4F:D0:89:B5:47:65:E1:73:2D:71:55:6A:2C:F8:E7:EE:10:F1 X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.232.0/21 Signature Algorithm: sha256WithRSAEncryption 28:0e:d0:e2:3f:79:ea:3e:e1:9c:c7:16:c4:35:cb:a9:e5:97: d7:a8:22:62:33:b3:be:cf:d3:3f:89:4f:04:41:13:fa:a3:1c: 2a:7c:41:7d:05:de:76:32:00:fe:81:8d:8b:9f:66:ff:fe:75: e1:dd:21:b9:f3:9d:bf:f8:0b:71:c2:e8:76:6b:59:21:05:b9: d6:50:a4:a9:31:2c:07:52:b6:0a:50:1d:8a:60:b3:e0:db:5c: b7:b3:0f:69:6b:65:03:11:18:cf:90:f1:ea:64:4d:20:6b:83: b3:08:b1:dc:4b:b6:f6:2e:a6:6a:0a:e1:df:40:44:d9:6c:c7: 5c:c2:51:2e:af:43:1a:50:a1:8f:74:cb:b6:7e:0d:fc:40:d0: 2a:4e:b1:e7:13:19:60:fa:1f:fe:a9:8e:80:f0:44:e5:7f:9d: eb:0f:6b:73:f6:02:c2:13:6c:d5:09:b1:54:66:a4:7a:c7:71: 5e:f8:e7:47:3d:11:f3:5c:8c:f2:0c:f3:c7:e0:0b:92:73:c7: 0a:85:90:ca:b9:b9:ae:ab:33:6b:94:ab:31:8a:48:7a:33:49: f9:bf:90:a0:55:71:49:a4:cd:62:ce:21:d0:20:bb:81:55:36: e4:10:9b:7b:a1:81:ba:e3:f0:2c:32:42:cf:66:de:0c:cf:38: e8:33:09:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHPPPJPTcEK7+RSp0NUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmEzNGZkMDg5YjU0NzY1ZTE3MzJkNzE1NTZhMmNmOGU3ZWUxMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyxFctdVm00tw07PQdQ4jjrsZhNk UEnmHhrOmBcpJJJSxehppfKmTuEv2d1LSd6WjQwImrrhZ459IzV/csASuMXEp5uH EzhMO+NDyjf1W3yUVmI2d0IBrz2xM9ByIL6E3UWymIaoNOaSiwl70flU9J4lHxkr ER/tFbHC6gPlu9TgIRkRq8Cngq6U4CTJug6/JuZBaFF7gIYNi9Fw1fGlBRdoICY4 rfG39GgknlLh7jVZoqu6jsP3EnbPdk4URuJbxfGndV4c7IipTK9fj3d73Mva26jO Aw++Ee+YydShOeJwJ3+YdsR2J3uQdCBWTVfjg/CznnyoCWa9oWwjLCFXjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFajT9CJtUdl4XMtcVVqLPjn7hDxMB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvVnFOUDBJbTFSMlhoY3kxeFZXb3MtT2Z1RVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuYHoMA0G CSqGSIb3DQEBCwUAA4IBAQAoDtDiP3nqPuGcxxbENcup5ZfXqCJiM7O+z9M/iU8E QRP6oxwqfEF9Bd52MgD+gY2Ln2b//nXh3SG5852/+Atxwuh2a1khBbnWUKSpMSwH UrYKUB2KYLPg21y3sw9pa2UDERjPkPHqZE0ga4OzCLHcS7b2LqZqCuHfQETZbMdc wlEur0MaUKGPdMu2fg38QNAqTrHnExlg+h/+qY6A8ETlf53rD2tz9gLCE2zVCbFU ZqR6x3Fe+OdHPRHzXIzyDPPH4AuSc8cKhZDKubmuqzNrlKsxikh6M0n5v5CgVXFJ pM1iziHQILuBVTbkEJt7oYG64/AsMkLPZt4MzzjoMwnI -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:19 2026 by rpki-client