This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/VEJFTWLInqVBVVVzjcXE8u0k4jU.roa File: VEJFTWLInqVBVVVzjcXE8u0k4jU.roa (raw, json) Hash identifier: MDCdlTYX/q6OjZDJTysgXveF6ZbyFuxNgUow4xZBH2M= Subject key identifier: 54:42:45:4D:62:C8:9E:A5:41:55:55:73:8D:C5:C4:F2:ED:24:E2:35 Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C1159624F775CF0A438BF07CCB70850 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/VEJFTWLInqVBVVVzjcXE8u0k4jU.roa Signing time: Fri 02 Jan 2026 00:17:50 +0000 ROA not before: Fri 02 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198404 IP address blocks: 89.140.152.0/24 maxlen: 24 95.39.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:59:62:4f:77:5c:f0:a4:38:bf:07:cc:b7:08:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5442454d62c89ea5415555738dc5c4f2ed24e235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:2e:a7:d1:52:cd:f5:3a:69:0a:16:95:d7: 8b:2d:21:2b:02:86:5f:fe:a8:62:64:f0:a3:a6:fc: 5a:88:1f:d5:26:6a:15:8f:eb:f8:b2:76:0b:ce:68: 02:1d:13:72:10:88:f3:67:ba:45:85:85:8e:6d:99: 85:55:66:6b:83:38:58:87:87:b1:5c:b2:c0:88:05: 6a:b0:1d:ef:c5:31:e1:75:9b:19:88:a4:dc:87:81: 6a:5b:eb:d4:c7:5c:9f:dd:53:29:1c:ec:ec:b2:cb: e6:c3:fe:01:af:91:e0:22:4f:05:b2:22:2e:e1:0c: 71:d0:cb:00:0f:b2:41:9f:9b:cd:9f:67:7b:7e:56: a8:dc:e7:41:2a:7f:1d:c2:42:e2:ec:48:1a:0b:d9: bd:b9:96:22:cd:36:49:b0:41:0b:3c:3c:ff:2d:e4: ba:2c:e6:3c:a1:d4:19:38:20:16:b3:70:a9:27:68: 14:cd:36:6a:48:40:36:95:d8:73:a4:6c:83:f1:10: 68:3d:19:a1:f6:11:c6:83:69:46:a8:00:92:d9:31: 7b:67:58:be:a9:53:00:7c:a2:4e:9c:8e:b9:98:8b: a3:24:e8:97:03:93:f5:0a:98:f4:f2:cf:f0:e7:cc: fc:37:93:3d:a4:ba:84:2a:8e:63:8b:0d:92:9c:93: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:45:4D:62:C8:9E:A5:41:55:55:73:8D:C5:C4:F2:ED:24:E2:35 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/VEJFTWLInqVBVVVzjcXE8u0k4jU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.140.152.0/24 95.39.49.0/24 Signature Algorithm: sha256WithRSAEncryption 10:6e:b7:d2:83:0a:1c:85:e5:09:aa:9a:ff:a1:06:19:02:8c: 4b:5f:15:c6:ea:b0:d2:5c:be:fa:ad:93:bc:d4:45:99:f4:f9: 79:65:dc:52:45:8b:0f:37:c8:d9:49:d1:a3:3a:3d:0b:a0:ea: 8f:35:74:bf:34:9b:97:32:ac:df:97:fb:97:fd:f2:4d:f6:0e: f4:c9:c0:c0:1c:6d:13:16:8c:2b:85:2b:f4:19:37:b2:a6:70: 52:3a:d0:c5:98:9d:90:34:65:4e:dd:e0:cc:40:98:c6:cf:ae: 69:07:98:82:7d:26:63:eb:76:a8:31:6b:df:1e:b9:cc:02:09: 75:a8:f7:de:4f:81:72:ac:41:95:31:10:ba:4d:23:28:e1:aa: 8e:73:65:9c:d8:32:5c:98:72:52:80:7b:b0:35:95:69:f3:0c: 5f:c4:cd:40:3f:f3:c3:f8:0d:39:29:e7:8c:2b:2b:3a:37:1f: a5:e7:f5:ca:f6:c8:7b:00:c9:44:73:e9:97:d2:ae:e5:84:fa: d0:eb:ea:95:4c:e4:b8:bc:44:01:a1:e8:fc:44:d3:35:6d:43: 5f:83:2b:bd:a8:7e:e4:fb:40:1c:07:95:d3:04:e0:89:19:b9: c3:da:87:df:62:eb:8b:3d:2c:6b:cd:44:cb:6d:cf:67:0e:f0: 7b:a3:ff:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EVliT3dc8KQ4vwfMtwhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQyNDU0ZDYyYzg5ZWE1NDE1NTU1NzM4ZGM1YzRmMmVkMjRlMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbwup9FSzfU6aQoWldeLLSErAoZf /qhiZPCjpvxaiB/VJmoVj+v4snYLzmgCHRNyEIjzZ7pFhYWObZmFVWZrgzhYh4ex XLLAiAVqsB3vxTHhdZsZiKTch4FqW+vUx1yf3VMpHOzsssvmw/4Br5HgIk8FsiIu 4Qxx0MsAD7JBn5vNn2d7flao3OdBKn8dwkLi7EgaC9m9uZYizTZJsEELPDz/LeS6 LOY8odQZOCAWs3CpJ2gUzTZqSEA2ldhzpGyD8RBoPRmh9hHGg2lGqACS2TF7Z1i+ qVMAfKJOnI65mIujJOiXA5P1Cpj08s/w58z8N5M9pLqEKo5jiw2SnJNRRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFRCRU1iyJ6lQVVVc43FxPLtJOI1MB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvVkVKRlRXTElucVZCVlZWempjWEU4dTBrNGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWYyYAwQA XycxMA0GCSqGSIb3DQEBCwUAA4IBAQAQbrfSgwocheUJqpr/oQYZAoxLXxXG6rDS XL76rZO81EWZ9Pl5ZdxSRYsPN8jZSdGjOj0LoOqPNXS/NJuXMqzfl/uX/fJN9g70 ycDAHG0TFowrhSv0GTeypnBSOtDFmJ2QNGVO3eDMQJjGz65pB5iCfSZj63aoMWvf HrnMAgl1qPfeT4FyrEGVMRC6TSMo4aqOc2Wc2DJcmHJSgHuwNZVp8wxfxM1AP/PD +A05KeeMKys6Nx+l5/XK9sh7AMlEc+mX0q7lhPrQ6+qVTOS4vEQBoej8RNM1bUNf gyu9qH7k+0AcB5XTBOCJGbnD2offYuuLPSxrzUTLbc9nDvB7o/+Q -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:28 2026 by rpki-client