This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/VIGUNtTXYpclXyZXmVAxQ0EH1q4.roa File: VIGUNtTXYpclXyZXmVAxQ0EH1q4.roa (raw, json) Hash identifier: y5H8XVjLD/jKC2BEOIJM9gDS13dnO296qUWYlA59798= Subject key identifier: 54:81:94:36:D4:D7:62:97:25:5F:26:57:99:50:31:43:41:07:D6:AE Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb Certificate serial: 019B7A5B83F609914F4C802990B1C77F9905 Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/VIGUNtTXYpclXyZXmVAxQ0EH1q4.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34927 IP address blocks: 185.44.82.0/24 maxlen: 24 185.44.83.0/24 maxlen: 24 194.76.231.0/24 maxlen: 24 2a12:f340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:83:f6:09:91:4f:4c:80:29:90:b1:c7:7f:99:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54819436d4d76297255f2657995031434107d6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:dc:bb:d9:7d:d4:f5:24:39:4c:38:95:fb: f2:2e:d2:e1:9a:24:dc:1d:2c:f8:a8:b2:1e:ea:ba: 65:99:3d:09:ee:f7:c1:e5:54:f9:09:53:a8:7f:43: 98:ff:94:e0:cd:e4:7f:00:01:ef:39:f2:f2:2e:b2: 9a:98:16:48:fc:2d:ba:17:9d:6e:c4:1c:0a:2f:07: 8d:8d:a8:69:5f:35:96:6d:9f:77:3f:cf:a4:52:1a: 7a:c4:be:ab:cf:c9:5e:29:f4:99:ab:b3:76:82:ad: 4d:8f:e4:b4:c8:d5:ae:38:1c:85:e3:fc:53:19:5a: b2:cb:7d:fd:95:53:1d:75:d9:0f:d4:55:30:73:31: 21:dc:e9:c1:98:f2:1d:b3:72:77:2e:d2:59:f1:70: 8c:8d:b2:94:dd:65:ec:3c:6b:88:01:e7:3c:70:8e: 9c:59:87:8b:c5:fa:a6:c4:52:d7:79:aa:0d:db:65: 98:a1:c0:88:5a:34:3d:6f:6f:a8:5d:5e:b8:8a:17: f3:e9:65:0a:e2:3d:e6:e2:e3:4c:ce:a1:24:05:f7: 7c:9f:20:bd:a6:9a:7a:f9:56:e9:a7:7b:31:48:1e: ab:89:77:44:d0:dd:0b:aa:b0:d3:8e:73:96:a0:42: 0f:94:4c:30:5b:86:30:3a:9f:4c:07:4b:4b:41:e9: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:81:94:36:D4:D7:62:97:25:5F:26:57:99:50:31:43:41:07:D6:AE X509v3 Authority Key Identifier: keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/VIGUNtTXYpclXyZXmVAxQ0EH1q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.82.0/23 194.76.231.0/24 IPv6: 2a12:f340::/48 Signature Algorithm: sha256WithRSAEncryption e0:0b:5b:64:87:56:2a:3d:5a:0b:f8:23:32:c8:ec:f8:9c:fe: 70:e5:2a:ab:42:0c:4b:bd:c5:3a:d5:ab:45:ce:69:cd:60:f7: 4e:da:08:6d:47:ed:7b:53:1f:fe:f9:83:72:ef:95:91:ce:ee: a9:37:d2:aa:07:fe:2f:6d:4d:3e:3a:65:38:12:46:f0:b6:be: af:5c:ee:1e:8b:95:b3:a8:27:32:87:3c:33:20:52:4a:3e:6c: 65:1a:d9:31:70:be:2a:78:6e:9d:d7:d1:cd:f3:93:62:76:52: 5c:fb:32:41:82:b2:73:4b:df:94:d0:d9:45:03:58:ce:00:7b: bb:ca:47:c2:32:24:5f:ab:32:08:f3:f2:60:a0:3c:fc:11:79: 4c:88:73:dc:2c:55:84:7e:12:7e:35:29:4f:a9:11:30:20:59: b7:77:0e:0a:85:3e:e1:1b:f6:88:88:de:33:3a:ba:18:fb:d4: fa:54:68:fc:a3:a2:da:8f:e6:ce:cd:c9:e4:b9:90:44:12:41: b8:22:f9:9c:91:7e:b6:17:cb:08:2b:58:46:9a:41:09:72:f7: 27:0e:6f:8d:6c:88:b4:70:63:58:71:25:59:ad:83:47:e2:e5: 83:1a:8e:91:a0:1b:3f:3b:22:96:ee:4b:12:bb:f9:5a:33:05: 13:6d:c3:ab -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6W4P2CZFPTIApkLHHf5kFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4 MWYzY2IwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDgxOTQzNmQ0ZDc2Mjk3MjU1ZjI2NTc5OTUwMzE0MzQxMDdkNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknLcu9l91PUkOUw4lfvyLtLhmiTc HSz4qLIe6rplmT0J7vfB5VT5CVOof0OY/5TgzeR/AAHvOfLyLrKamBZI/C26F51u xBwKLweNjahpXzWWbZ93P8+kUhp6xL6rz8leKfSZq7N2gq1Nj+S0yNWuOByF4/xT GVqyy339lVMdddkP1FUwczEh3OnBmPIds3J3LtJZ8XCMjbKU3WXsPGuIAec8cI6c WYeLxfqmxFLXeaoN22WYocCIWjQ9b2+oXV64ihfz6WUK4j3m4uNMzqEkBfd8nyC9 ppp6+Vbpp3sxSB6riXdE0N0LqrDTjnOWoEIPlEwwW4YwOp9MB0tLQelM6QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFSBlDbU12KXJV8mV5lQMUNBB9auMB8GA1UdIwQY MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt YzlkYjk4MWEyYTJmLzEvVklHVU50VFhZcGNsWHlaWG1WQXhRMEVIMXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBuSxSAwQA wkznMA8EAgACMAkDBwAqEvNAAAAwDQYJKoZIhvcNAQELBQADggEBAOALW2SHVio9 Wgv4IzLI7Pic/nDlKqtCDEu9xTrVq0XOac1g907aCG1H7XtTH/75g3LvlZHO7qk3 0qoH/i9tTT46ZTgSRvC2vq9c7h6LlbOoJzKHPDMgUko+bGUa2TFwvip4bp3X0c3z k2J2Ulz7MkGCsnNL35TQ2UUDWM4Ae7vKR8IyJF+rMgjz8mCgPPwReUyIc9wsVYR+ En41KU+pETAgWbd3DgqFPuEb9oiI3jM6uhj71PpUaPyjotqP5s7NyeS5kEQSQbgi +ZyRfrYXywgrWEaaQQly9ycOb41siLRwY1hxJVmtg0fi5YMajpGgGz87IpbuSxK7 +VozBRNtw6s= -----END CERTIFICATE-----Generated at Tue Jan 20 12:10:20 2026 by rpki-client