This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VqrS9UH_9bM-7YeSSJqd250eE6Y.roa File: VqrS9UH_9bM-7YeSSJqd250eE6Y.roa (raw, json) Hash identifier: x5PG6QO+pwMXgJPxLieb9CeBKi9c2swU+rzVZNxqEbI= Subject key identifier: 56:AA:D2:F5:41:FF:F5:B3:3E:ED:87:92:48:9A:9D:DB:9D:1E:13:A6 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C062A237B390936D532E324B8D85C046F Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VqrS9UH_9bM-7YeSSJqd250eE6Y.roa Signing time: Wed 28 Jan 2026 19:52:30 +0000 ROA not before: Wed 28 Jan 2026 19:52:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 150.241.121.0/24 maxlen: 24 185.229.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:2a:23:7b:39:09:36:d5:32:e3:24:b8:d8:5c:04:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 28 19:52:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56aad2f541fff5b33eed8792489a9ddb9d1e13a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:6e:2c:e8:1b:24:97:8a:6e:44:0e:c2:df: 75:7c:7a:c5:69:cf:b0:3d:a7:5c:ef:cd:77:b8:ff: 6b:99:9e:e7:9c:56:f2:58:a4:1e:24:74:d3:f1:c3: d2:07:d7:6f:c9:09:c3:6e:4f:f8:d2:c6:23:8c:1e: 39:85:03:35:3c:01:7d:e4:3f:e5:c5:b6:ec:6f:fb: e0:d5:95:c7:0e:af:87:18:7b:42:02:32:18:d9:5f: 77:5b:41:ad:bc:34:7b:85:24:6d:83:d2:c9:81:0c: 97:2a:0d:b2:3e:6a:c6:ef:99:63:3e:15:da:77:48: 91:e7:1c:f4:b7:91:fa:60:6d:15:93:9d:c2:72:19: 66:f5:58:b3:dc:ac:f5:9b:e7:8a:6a:df:fb:8c:b4: 27:f0:d9:f3:fe:02:8f:4f:2a:5e:42:26:f8:4b:5d: b8:29:ee:ea:c6:34:ad:f3:ee:ea:57:6d:6d:bd:5a: 96:8c:08:bb:7c:da:49:cc:c6:cf:f7:05:3e:5a:14: e3:61:27:27:12:f2:7c:65:59:2a:de:d3:ab:85:c1: 7a:b1:b1:02:90:3f:4d:f5:87:ee:54:4e:1d:44:e4: 83:25:ad:14:7c:c8:7e:ce:3b:1d:73:57:b9:c2:c2: 94:8f:e3:ec:2b:f2:d8:1c:18:13:e4:b2:1f:69:99: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AA:D2:F5:41:FF:F5:B3:3E:ED:87:92:48:9A:9D:DB:9D:1E:13:A6 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VqrS9UH_9bM-7YeSSJqd250eE6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.121.0/24 185.229.222.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:84:37:fa:90:c5:2b:38:4f:aa:25:67:a5:e0:60:72:02:10: 76:c5:ba:36:f3:89:48:a2:6e:f7:9d:d5:cd:fd:37:fd:7e:e3: 87:e5:2f:b1:5d:41:33:bb:8b:45:5d:6b:d8:d6:21:9b:bc:ac: d0:0c:38:e4:c0:8c:eb:42:73:d9:45:1c:0b:d3:76:8b:1c:ee: f3:49:b2:dd:f2:b9:21:fd:11:9e:57:68:3b:6a:3f:3e:c9:0d: 75:36:92:e6:c8:55:aa:66:2a:c4:1a:a0:a5:1a:48:30:b8:af: db:8c:ab:28:4a:b8:43:65:d5:e4:b5:f2:19:ed:46:14:5e:c3: 7d:32:7c:e1:23:34:be:e2:8b:c8:59:4f:99:55:41:ef:9e:16: 01:77:7b:8b:89:cf:ee:d4:0f:94:b6:7c:9b:ff:d7:70:3e:72: c6:bf:8e:ea:21:9c:aa:80:b1:86:c8:d5:68:bc:b6:28:54:1c: d9:05:5d:99:81:10:ce:8e:88:4c:e8:9a:72:fd:6e:cc:60:bd: 5d:1c:47:a3:12:47:ea:37:db:83:68:a6:84:bd:df:70:94:41: b3:e9:5c:ee:0b:7f:dc:d8:b5:9e:e6:00:f0:b8:44:2d:84:d8: 3f:4d:a6:80:1a:bc:fe:f8:70:ee:2a:19:67:c3:a8:b9:0b:99: d0:95:6f:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwGKiN7OQk21TLjJLjYXARvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTI4MTk1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmFhZDJmNTQxZmZmNWIzM2VlZDg3OTI0ODlhOWRkYjlkMWUxM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3luLOgbJJeKbkQOwt91fHrFac+w Padc7813uP9rmZ7nnFbyWKQeJHTT8cPSB9dvyQnDbk/40sYjjB45hQM1PAF95D/l xbbsb/vg1ZXHDq+HGHtCAjIY2V93W0GtvDR7hSRtg9LJgQyXKg2yPmrG75ljPhXa d0iR5xz0t5H6YG0Vk53Cchlm9Viz3Kz1m+eKat/7jLQn8Nnz/gKPTypeQib4S124 Ke7qxjSt8+7qV21tvVqWjAi7fNpJzMbP9wU+WhTjYScnEvJ8ZVkq3tOrhcF6sbEC kD9N9YfuVE4dROSDJa0UfMh+zjsdc1e5wsKUj+PsK/LYHBgT5LIfaZn0hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFaq0vVB//WzPu2HkkiandudHhOmMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvVnFyUzlVSF85Yk0tN1llU1NKcWQyNTBlRTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlvF5AwQA ueXeMA0GCSqGSIb3DQEBCwUAA4IBAQB8hDf6kMUrOE+qJWel4GByAhB2xbo284lI om73ndXN/Tf9fuOH5S+xXUEzu4tFXWvY1iGbvKzQDDjkwIzrQnPZRRwL03aLHO7z SbLd8rkh/RGeV2g7aj8+yQ11NpLmyFWqZirEGqClGkgwuK/bjKsoSrhDZdXktfIZ 7UYUXsN9MnzhIzS+4ovIWU+ZVUHvnhYBd3uLic/u1A+Utnyb/9dwPnLGv47qIZyq gLGGyNVovLYoVBzZBV2ZgRDOjohM6Jpy/W7MYL1dHEejEkfqN9uDaKaEvd9wlEGz 6VzuC3/c2LWe5gDwuEQthNg/TaaAGrz++HDuKhlnw6i5C5nQlW+y -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:15 2026 by rpki-client