This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VdNiyBTNLP0hxdVWgblf808PR6Q.roa File: VdNiyBTNLP0hxdVWgblf808PR6Q.roa (raw, json) Hash identifier: b0TF5folKN7zXjRCmCKkB9rk4cn3L/tdaHd7F0edmTA= Subject key identifier: 55:D3:62:C8:14:CD:2C:FD:21:C5:D5:56:81:B9:5F:F3:4F:0F:47:A4 Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a Certificate serial: 019B7BA3F5F98B7E3D0A56D3D393A77694A6 Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VdNiyBTNLP0hxdVWgblf808PR6Q.roa Signing time: Thu 01 Jan 2026 22:18:21 +0000 ROA not before: Thu 01 Jan 2026 22:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49420 IP address blocks: 91.212.242.0/24 maxlen: 24 91.231.221.0/24 maxlen: 24 185.42.185.0/24 maxlen: 24 2001:67c:24c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f5:f9:8b:7e:3d:0a:56:d3:d3:93:a7:76:94:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a Validity Not Before: Jan 1 22:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55d362c814cd2cfd21c5d55681b95ff34f0f47a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:99:d1:03:e1:b9:dd:e4:af:eb:ad:15:9f:40: 7c:6d:f3:a2:18:1a:ee:77:c7:1d:c7:99:04:af:7b: 53:de:cc:d6:4e:7c:0a:f6:00:22:1d:d0:17:bd:34: 8c:a6:3b:3a:5a:67:ac:f7:76:45:db:48:5e:01:6c: e2:4e:a8:d7:be:b4:cf:a0:4f:70:a9:93:f0:f0:70: a4:14:80:f7:bf:c3:a1:2b:27:b9:b0:81:fb:0c:73: 12:64:b8:28:da:ed:93:d6:19:e0:f7:5f:27:a7:30: 41:da:a6:2b:43:11:db:ac:59:fa:b1:ab:1c:a3:25: fc:97:cb:32:c1:64:6b:1e:18:d6:3a:cd:2d:d3:39: 8b:6c:0d:57:e0:cc:f8:a3:be:bd:08:c0:0e:39:6f: 22:08:1d:67:40:c0:0c:64:98:10:3e:04:0a:ac:79: 8e:ca:f6:cb:4c:9e:39:d9:01:7a:56:1c:b4:7b:59: d6:18:b7:7c:3a:07:d7:7b:31:a8:69:55:f9:21:d3: e5:c3:d2:e2:11:54:c0:dc:4c:cf:97:62:e1:57:6d: 29:3f:11:49:4a:71:0b:a7:58:2c:71:97:cd:d7:49: ab:2b:d1:4d:ba:c6:7f:72:14:7b:ee:79:e4:6e:5f: d4:54:83:49:ef:04:a6:03:fd:7b:15:10:f1:d2:68: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D3:62:C8:14:CD:2C:FD:21:C5:D5:56:81:B9:5F:F3:4F:0F:47:A4 X509v3 Authority Key Identifier: keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VdNiyBTNLP0hxdVWgblf808PR6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.242.0/24 91.231.221.0/24 185.42.185.0/24 IPv6: 2001:67c:24c::/48 Signature Algorithm: sha256WithRSAEncryption 7c:38:4b:f0:2e:aa:63:18:9d:98:cc:7a:f2:6c:b4:e5:60:9c: cb:5d:23:19:58:41:9b:9c:16:28:5e:f6:5f:ed:02:10:52:f6: 56:7c:c2:74:40:5a:1e:10:99:e0:3d:8a:13:a5:d9:b5:a7:b9: 83:31:3e:16:54:6c:d8:75:09:af:8d:84:28:33:67:b2:60:11: e0:b6:d6:65:4f:ed:33:15:6d:6b:ab:b0:b3:23:0d:6c:ea:93: ae:f6:e0:d7:22:ad:ea:e3:7b:11:e3:58:e4:6a:2c:fb:94:03: f8:23:64:98:fc:8a:22:28:b5:c8:a8:0c:c9:df:7a:96:b5:10: a7:43:f1:c4:36:39:2f:1d:30:e6:d3:bc:0a:e2:63:ba:02:09: 65:e8:d7:91:e4:77:2b:b2:4b:62:c0:bc:0b:84:bb:34:81:5d: 89:91:80:57:55:b7:4a:4f:22:32:05:db:dc:39:75:94:92:5a: 12:1b:b2:14:5f:81:38:a5:2b:0c:4f:04:c7:e0:18:49:d1:af: 5d:73:93:ee:77:f7:b3:cb:c2:1c:36:a5:05:3e:f4:84:96:66: b9:9c:31:f5:70:fb:96:ac:7c:31:0e:60:69:10:e2:d4:f6:f3: b8:4c:18:54:45:82:01:fd:4a:a8:86:6a:18:a4:2e:8a:b7:41: 46:90:71:4c -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7o/X5i349ClbT05OndpSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NTg0YTIxOWY2ZjUwNjZkODQ4ZWQyYWI5NjRkYTg5NjZk NDBhMmEwHhcNMjYwMTAxMjIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWQzNjJjODE0Y2QyY2ZkMjFjNWQ1NTY4MWI5NWZmMzRmMGY0N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85nRA+G53eSv660Vn0B8bfOiGBru d8cdx5kEr3tT3szWTnwK9gAiHdAXvTSMpjs6Wmes93ZF20heAWziTqjXvrTPoE9w qZPw8HCkFID3v8OhKye5sIH7DHMSZLgo2u2T1hng918npzBB2qYrQxHbrFn6sasc oyX8l8sywWRrHhjWOs0t0zmLbA1X4Mz4o769CMAOOW8iCB1nQMAMZJgQPgQKrHmO yvbLTJ452QF6Vhy0e1nWGLd8OgfXezGoaVX5IdPlw9LiEVTA3EzPl2LhV20pPxFJ SnELp1gscZfN10mrK9FNusZ/chR77nnkbl/UVINJ7wSmA/17FRDx0mjngwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFFXTYsgUzSz9IcXVVoG5X/NPD0ekMB8GA1UdIwQY MBaAFFRYSiGfb1Bm2EjtKrlk2olm1AoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAt OWZiMWNlNGQ3MjBiLzEvVmROaXlCVE5MUDBoeGRWV2dibGY4MDhQUjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAtOWZiMWNlNGQ3MjBi LzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW9TyAwQA W+fdAwQAuSq5MA8EAgACMAkDBwAgAQZ8AkwwDQYJKoZIhvcNAQELBQADggEBAHw4 S/AuqmMYnZjMevJstOVgnMtdIxlYQZucFihe9l/tAhBS9lZ8wnRAWh4QmeA9ihOl 2bWnuYMxPhZUbNh1Ca+NhCgzZ7JgEeC21mVP7TMVbWursLMjDWzqk6724Ncirerj exHjWORqLPuUA/gjZJj8iiIotcioDMnfepa1EKdD8cQ2OS8dMObTvAriY7oCCWXo 15HkdyuyS2LAvAuEuzSBXYmRgFdVt0pPIjIF29w5dZSSWhIbshRfgTilKwxPBMfg GEnRr11zk+5397PLwhw2pQU+9ISWZrmcMfVw+5asfDEOYGkQ4tT287hMGFRFggH9 SqiGahikLoq3QUaQcUw= -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:02 2026 by rpki-client