This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/vfBrVCvOjOOjTm3hg97tbYnhT5k.roa File: vfBrVCvOjOOjTm3hg97tbYnhT5k.roa (raw, json) Hash identifier: LvYwloOQk30G/nGe6G5gZw9LB5sqdDCE9E/0Nh0GcR8= Subject key identifier: BD:F0:6B:54:2B:CE:8C:E3:A3:4E:6D:E1:83:DE:ED:6D:89:E1:4F:99 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B783499B61A67B9F68F29E5AFDED51464 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/vfBrVCvOjOOjTm3hg97tbYnhT5k.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31736 IP address blocks: 77.37.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:99:b6:1a:67:b9:f6:8f:29:e5:af:de:d5:14:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdf06b542bce8ce3a34e6de183deed6d89e14f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:88:8a:55:1f:4c:d2:f9:c5:6a:57:9a:2f: e7:0b:98:55:a9:92:57:57:5f:d5:e0:8c:16:3f:e6: 3e:36:51:35:a6:d3:67:9b:15:15:52:65:7f:9c:e1: 78:24:2e:ae:4f:f3:c9:63:03:5d:c8:c7:d3:19:1c: de:64:c2:3a:1d:6b:38:45:1f:a8:ad:a1:48:ab:e8: e0:af:0b:02:bf:47:05:97:d9:61:7d:32:6e:c2:77: 26:73:ff:96:42:9d:e2:12:2b:52:a7:42:22:b6:47: 2c:39:08:c4:f4:b3:f4:17:e1:03:b7:05:24:42:f8: c5:a0:86:87:f6:1e:7a:bd:63:51:ff:97:d0:7f:ee: 7f:96:a7:87:9b:7e:dc:e3:ae:9d:16:ee:87:9e:fa: 68:a0:61:67:02:07:bf:80:96:a4:f1:42:7a:5d:24: 7c:ea:b4:d2:49:1c:09:52:d7:25:43:bc:09:a1:54: b5:cc:05:15:46:60:6a:c6:79:4f:6a:94:3b:92:34: 56:27:4e:9f:df:23:0d:02:8b:7b:6b:95:e3:01:64: 0e:20:92:62:2e:61:4e:18:70:2d:0a:23:fd:f3:47: e1:23:0e:bf:3b:7d:75:aa:02:f3:d6:df:a0:4e:bd: 0d:74:38:c8:0e:54:2b:fe:5f:af:93:67:94:cf:54: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F0:6B:54:2B:CE:8C:E3:A3:4E:6D:E1:83:DE:ED:6D:89:E1:4F:99 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/vfBrVCvOjOOjTm3hg97tbYnhT5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.37.8.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a1:cc:df:86:d2:33:ad:a6:30:a1:28:3d:74:3d:9d:21:dc: 85:51:23:d4:43:0b:2a:37:77:48:08:d0:b8:e7:e5:40:59:b9: d8:f6:4d:05:1f:77:af:78:ee:13:17:95:35:1a:37:00:01:57: 9d:d7:9c:d5:56:07:47:91:e0:6f:4c:1b:3a:db:d0:ff:3b:0e: 94:a6:26:36:6b:66:d0:bc:9b:21:3d:8f:93:c0:0e:8c:06:05: 74:3c:dc:91:93:59:f1:22:dc:dd:cb:e9:cc:ac:0d:98:29:55: cf:ed:c6:27:95:23:88:d9:6f:26:e8:34:62:44:17:c3:e8:ec: fe:5e:5f:d9:48:f1:77:10:8a:73:43:f9:a2:7d:f7:f4:6e:e6: 2e:86:5a:4f:cc:6d:22:26:9f:88:a0:bc:b4:da:80:37:3a:e0: d3:c4:fe:52:25:30:e2:93:56:97:40:d0:56:73:ad:e3:28:bf: 0a:24:b6:6f:eb:3a:e3:8d:47:ff:75:18:dd:51:75:3d:97:8b: c6:ba:af:1d:71:f4:d5:50:ac:f6:10:0b:c1:fb:2f:83:08:03: 63:49:e4:c0:be:40:f2:c1:09:4f:e7:6a:47:c0:49:5e:dd:49: 0f:8a:b7:2f:8d:76:fc:6e:1f:65:a1:b6:ad:18:d6:e5:64:65: 29:b3:05:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJm2Gme59o8p5a/e1RRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGYwNmI1NDJiY2U4Y2UzYTM0ZTZkZTE4M2RlZWQ2ZDg5ZTE0Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiCIilUfTNL5xWpXmi/nC5hVqZJX V1/V4IwWP+Y+NlE1ptNnmxUVUmV/nOF4JC6uT/PJYwNdyMfTGRzeZMI6HWs4RR+o raFIq+jgrwsCv0cFl9lhfTJuwncmc/+WQp3iEitSp0IitkcsOQjE9LP0F+EDtwUk QvjFoIaH9h56vWNR/5fQf+5/lqeHm37c466dFu6HnvpooGFnAge/gJak8UJ6XSR8 6rTSSRwJUtclQ7wJoVS1zAUVRmBqxnlPapQ7kjRWJ06f3yMNAot7a5XjAWQOIJJi LmFOGHAtCiP980fhIw6/O311qgLz1t+gTr0NdDjIDlQr/l+vk2eUz1Rn5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3wa1Qrzozjo05t4YPe7W2J4U+ZMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvdmZCclZDdk9qT09qVG0zaGc5N3RiWW5oVDVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSUIMA0G CSqGSIb3DQEBCwUAA4IBAQCGoczfhtIzraYwoSg9dD2dIdyFUSPUQwsqN3dICNC4 5+VAWbnY9k0FH3eveO4TF5U1GjcAAVed15zVVgdHkeBvTBs629D/Ow6UpiY2a2bQ vJshPY+TwA6MBgV0PNyRk1nxItzdy+nMrA2YKVXP7cYnlSOI2W8m6DRiRBfD6Oz+ Xl/ZSPF3EIpzQ/mifff0buYuhlpPzG0iJp+IoLy02oA3OuDTxP5SJTDik1aXQNBW c63jKL8KJLZv6zrjjUf/dRjdUXU9l4vGuq8dcfTVUKz2EAvB+y+DCANjSeTAvkDy wQlP52pHwEle3UkPircvjXb8bh9lobatGNblZGUpswUX -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:18 2026 by rpki-client