This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VTZXPqu-YHVrkBM5J_sDHcc6cmk.roa File: VTZXPqu-YHVrkBM5J_sDHcc6cmk.roa (raw, json) Hash identifier: 9FtFccFLbb90OL6PE7iXEnmQ/ubAwEpovCT/9R+lJC0= Subject key identifier: 55:36:57:3E:AB:BE:60:75:6B:90:13:39:27:FB:03:1D:C7:3A:72:69 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C682794B5C13E29B8602BB54A81AE6 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VTZXPqu-YHVrkBM5J_sDHcc6cmk.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36620 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:82:79:4b:5c:13:e2:9b:86:02:bb:54:a8:1a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5536573eabbe60756b90133927fb031dc73a7269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:2c:d0:83:d7:58:68:40:87:ee:37:63:2f: c9:d6:2a:8c:e0:43:a6:26:6d:26:88:39:55:83:d1: fd:65:e6:11:3c:d6:ff:66:f7:ad:48:f5:f6:1d:90: d0:30:29:ac:c9:8e:40:5e:78:69:7c:dc:40:53:05: b5:e8:d4:62:29:22:22:8b:64:cf:a9:21:3c:64:f7: d6:b2:af:62:b5:3f:42:7f:f1:c9:b3:5b:88:95:38: e5:db:4d:30:4c:75:04:94:81:a5:d1:2d:40:09:f0: 0d:0e:8b:de:98:f0:4f:6f:d1:bc:ee:84:c5:38:9d: a1:b7:f1:ac:31:58:7f:b4:68:03:34:d7:20:d8:0f: 60:af:6a:05:30:3d:5f:cf:c0:9a:60:4b:99:4e:4f: 68:e1:b6:46:93:af:29:7e:b8:c7:3c:f3:7a:bf:53: 06:83:41:32:e4:f4:2a:50:b3:b3:c6:d3:d7:74:4c: 41:f8:b2:88:5f:48:54:f0:f7:10:15:31:d6:03:ef: 08:52:3a:ba:32:c8:38:0f:e9:c9:9b:06:3a:22:4f: ca:a6:57:ad:5f:a4:bf:cb:72:c5:12:c9:87:f5:5a: 16:ee:63:73:9e:a5:98:bf:5b:dd:58:e5:c5:13:42: 18:d3:8b:ca:f9:fd:76:e3:da:2a:77:9a:d9:28:fa: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:36:57:3E:AB:BE:60:75:6B:90:13:39:27:FB:03:1D:C7:3A:72:69 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VTZXPqu-YHVrkBM5J_sDHcc6cmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption a6:65:7e:a7:ee:3f:a1:2b:a9:8d:4a:6d:e5:5d:90:57:c9:c7: 90:c8:58:03:df:8d:e8:f7:aa:3d:28:62:73:a2:b2:e0:79:fd: 38:47:e0:5f:d8:f6:70:e6:eb:dc:bd:ed:ae:c1:3a:f4:89:f1: 17:6d:13:82:ff:c4:2e:54:ce:4f:d6:7a:22:cd:f6:9c:83:6b: 7a:e8:f7:97:98:42:3f:ea:f0:4a:c9:a4:2f:2c:ed:fc:df:0c: 12:9a:fc:28:27:77:a5:c8:96:b3:64:07:70:23:3e:a0:27:72: 9a:b6:d3:02:98:46:57:0b:3e:f9:1c:ab:28:8d:fc:f2:3c:7a: a2:71:96:3a:de:23:d1:3e:fc:46:17:52:71:ab:75:6e:c3:85: 75:25:2d:b3:93:d5:6b:d4:6a:a2:9d:6d:a4:0b:22:21:17:c7: c5:7f:38:7d:0d:c1:f8:ac:76:6d:2d:4b:cf:54:b0:50:28:c3: 5b:f0:92:9f:27:ca:88:84:cd:fe:f7:24:ed:f7:37:d7:a7:e3: 1e:7d:54:66:4c:a8:82:2c:26:6c:64:65:2a:2d:17:85:77:f7: 08:30:85:d8:09:6f:53:80:ae:80:14:b1:25:8a:a9:77:20:6a: 66:c7:b3:5b:ae:fc:52:8f:ea:90:5d:b3:0e:36:de:b8:d1:5f: 30:8c:8b:bb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoJ5S1wT4puGArtUqBrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTM2NTczZWFiYmU2MDc1NmI5MDEzMzkyN2ZiMDMxZGM3M2E3MjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxcs0IPXWGhAh+43Yy/J1iqM4EOm Jm0miDlVg9H9ZeYRPNb/ZvetSPX2HZDQMCmsyY5AXnhpfNxAUwW16NRiKSIii2TP qSE8ZPfWsq9itT9Cf/HJs1uIlTjl200wTHUElIGl0S1ACfANDovemPBPb9G87oTF OJ2ht/GsMVh/tGgDNNcg2A9gr2oFMD1fz8CaYEuZTk9o4bZGk68pfrjHPPN6v1MG g0Ey5PQqULOzxtPXdExB+LKIX0hU8PcQFTHWA+8IUjq6Msg4D+nJmwY6Ik/Kplet X6S/y3LFEsmH9VoW7mNznqWYv1vdWOXFE0IY04vK+f1249oqd5rZKPr1iwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFU2Vz6rvmB1a5ATOSf7Ax3HOnJpMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvVlRaWFBxdS1ZSFZya0JNNUpfc0RIY2M2Y21rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAKZlfqfuP6ErqY1KbeVdkFfJx5DIWAPf jej3qj0oYnOisuB5/ThH4F/Y9nDm69y97a7BOvSJ8RdtE4L/xC5Uzk/WeiLN9pyD a3ro95eYQj/q8ErJpC8s7fzfDBKa/Cgnd6XIlrNkB3AjPqAncpq20wKYRlcLPvkc qyiN/PI8eqJxljreI9E+/EYXUnGrdW7DhXUlLbOT1WvUaqKdbaQLIiEXx8V/OH0N wfisdm0tS89UsFAow1vwkp8nyoiEzf73JO33N9en4x59VGZMqIIsJmxkZSotF4V3 9wgwhdgJb1OAroAUsSWKqXcgambHs1uu/FKP6pBdsw423rjRXzCMi7s= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:51 2026 by rpki-client