This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vNX-V2d-7LexHRAFJVqsEIQtlTo.roa File: vNX-V2d-7LexHRAFJVqsEIQtlTo.roa (raw, json) Hash identifier: VludWbLFTlg7LVyj9zJez3XOQfxnhEWwM0+zSHmr4kc= Subject key identifier: BC:D5:FE:57:67:7E:EC:B7:B1:1D:10:05:25:5A:AC:10:84:2D:95:3A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3141D780ABD6DE7B10C227588D79D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vNX-V2d-7LexHRAFJVqsEIQtlTo.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61071 IP address blocks: 85.217.164.0/23 maxlen: 32 85.217.166.0/24 maxlen: 24 85.217.176.0/21 maxlen: 24 87.120.246.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:14:1d:78:0a:bd:6d:e7:b1:0c:22:75:88:d7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcd5fe57677eecb7b11d1005255aac10842d953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:a6:88:70:bd:fc:c7:a4:a6:88:b5:83:92: 7f:bb:66:17:90:cd:4a:b6:04:dd:ea:08:f5:cc:0b: bc:6f:ff:f5:68:e6:0e:10:90:ff:85:ba:de:39:d1: 44:4e:44:c1:57:9e:04:67:de:fa:41:88:b4:3c:fd: fa:e0:5d:d2:52:28:30:7a:82:57:44:eb:07:c8:f5: 14:f9:66:0b:e0:40:a0:7d:fa:26:01:fa:31:28:1f: 43:24:5c:65:f7:ec:68:54:b9:cd:8e:bd:65:42:92: 88:14:57:f5:03:70:71:27:40:78:9e:1f:46:bc:00: e6:80:69:8c:fa:86:02:5c:91:46:b3:ed:4f:ef:12: 5b:a7:69:e5:13:18:e0:6a:4d:3b:5b:51:39:21:d5: 61:83:52:75:3d:a5:f4:0d:83:28:5b:39:42:33:27: cc:2e:76:a2:2d:38:43:c1:e1:7d:1b:d6:49:1e:07: a4:c6:39:3f:06:c8:a3:93:1c:e5:b6:7c:5f:5b:1a: 36:e2:ce:47:40:18:7a:2f:73:d6:db:d1:12:07:90: ac:58:ae:55:fa:55:86:eb:7a:f2:2f:d5:91:f1:b0: 0e:70:38:5a:88:02:4c:6d:e0:12:ff:63:a3:73:c2: 45:26:d6:51:81:e5:df:b9:59:d5:ca:83:58:91:84: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D5:FE:57:67:7E:EC:B7:B1:1D:10:05:25:5A:AC:10:84:2D:95:3A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vNX-V2d-7LexHRAFJVqsEIQtlTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.164.0-85.217.166.255 85.217.176.0/21 87.120.246.0/24 Signature Algorithm: sha256WithRSAEncryption 12:52:99:7c:56:c0:47:eb:c7:05:4f:da:dc:8b:b8:5d:47:e4: 14:11:18:8b:24:49:a0:e8:a7:e1:ef:17:f4:5b:45:0c:a6:de: 51:a9:9d:26:df:c0:91:f6:f6:ac:70:05:69:d7:77:6a:84:2d: 0c:0e:92:40:8b:88:12:35:19:de:e5:26:49:7f:df:41:3f:1c: e4:96:48:42:d7:d1:0d:7d:30:4d:16:04:91:12:62:14:48:33: 96:e4:85:ba:85:c7:19:87:82:04:8b:20:1c:6c:85:9a:d0:1f: dc:b2:59:07:98:8f:c2:93:57:c3:74:c0:a8:b4:ce:81:28:57: 37:8f:c1:d2:d4:e0:d2:e4:e3:6f:69:7b:59:9e:0a:56:03:6c: a2:05:4b:0d:ea:07:61:cf:af:98:90:dc:10:6b:c6:b0:1f:b9: d2:89:17:66:c5:9a:b9:f6:f2:f1:80:93:6b:53:eb:fc:6b:eb: 59:73:40:c4:35:df:fa:41:35:4a:7a:05:67:e8:ef:ea:a6:fb: ab:01:fa:bb:ae:ee:51:3c:d2:a8:c3:1c:4e:06:91:65:9f:df: 1b:18:c9:f4:90:d7:cf:0f:7d:da:6a:bb:a6:4d:85:23:03:03: 3d:03:ce:92:a5:ca:c0:e2:d8:6a:66:c4:66:14:f3:85:3e:71: f8:e7:e9:d8 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4oxQdeAq9beexDCJ1iNedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2Q1ZmU1NzY3N2VlY2I3YjExZDEwMDUyNTVhYWMxMDg0MmQ5NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0WmiHC9/Mekpoi1g5J/u2YXkM1K tgTd6gj1zAu8b//1aOYOEJD/hbreOdFETkTBV54EZ976QYi0PP364F3SUigweoJX ROsHyPUU+WYL4ECgffomAfoxKB9DJFxl9+xoVLnNjr1lQpKIFFf1A3BxJ0B4nh9G vADmgGmM+oYCXJFGs+1P7xJbp2nlExjgak07W1E5IdVhg1J1PaX0DYMoWzlCMyfM LnaiLThDweF9G9ZJHgekxjk/BsijkxzltnxfWxo24s5HQBh6L3PW29ESB5CsWK5V +lWG63ryL9WR8bAOcDhaiAJMbeAS/2Ojc8JFJtZRgeXfuVnVyoNYkYTuVwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLzV/ldnfuy3sR0QBSVarBCELZU6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdk5YLVYyZC03TGV4SFJBRkpWcXNFSVF0bFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJV2aQD BABV2aYDBANV2bADBABXePYwDQYJKoZIhvcNAQELBQADggEBABJSmXxWwEfrxwVP 2tyLuF1H5BQRGIskSaDop+HvF/RbRQym3lGpnSbfwJH29qxwBWnXd2qELQwOkkCL iBI1Gd7lJkl/30E/HOSWSELX0Q19ME0WBJESYhRIM5bkhbqFxxmHggSLIBxshZrQ H9yyWQeYj8KTV8N0wKi0zoEoVzePwdLU4NLk429pe1meClYDbKIFSw3qB2HPr5iQ 3BBrxrAfudKJF2bFmrn28vGAk2tT6/xr61lzQMQ13/pBNUp6BWfo7+qm+6sB+ruu 7lE80qjDHE4GkWWf3xsYyfSQ188Pfdpqu6ZNhSMDAz0DzpKlysDi2GpmxGYU84U+ cfjn6dg= -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:03 2026 by rpki-client