This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/VAvUr1f-cH2wVMGQJ7gXcOubzkw.roa File: VAvUr1f-cH2wVMGQJ7gXcOubzkw.roa (raw, json) Hash identifier: wf7BIMcrMEI40pV4LBSertjbA6/RgKL8Q4IuVS5+68E= Subject key identifier: 54:0B:D4:AF:57:FE:70:7D:B0:54:C1:90:27:B8:17:70:EB:9B:CE:4C Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd Certificate serial: 019B7DCB55958A148E8E0FC6DBD62D99BB29 Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/VAvUr1f-cH2wVMGQJ7gXcOubzkw.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28847 IP address blocks: 80.245.224.0/20 maxlen: 20 81.94.64.0/19 maxlen: 19 185.145.92.0/22 maxlen: 22 2001:1630::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:55:95:8a:14:8e:8e:0f:c6:db:d6:2d:99:bb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=540bd4af57fe707db054c19027b81770eb9bce4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:9c:ac:1e:3c:bd:86:3c:06:44:f4:50:b6: 53:ef:05:0d:c5:7a:f2:3e:f5:89:0f:9f:00:0c:0c: 6c:cf:9e:93:b3:10:cd:15:a6:29:5a:fc:58:71:0f: dd:b8:ba:a7:91:7b:43:ae:aa:ae:37:65:f2:80:59: 6c:c3:1d:20:d3:29:0d:fb:6f:8d:a4:52:9a:7b:2a: 7c:bf:cd:e1:f6:0e:1a:8d:b7:b3:48:a9:94:ce:95: 32:0f:4a:03:38:04:29:07:45:cd:bb:c6:c7:03:42: e3:53:12:57:ee:7c:09:de:d2:7e:31:03:8f:bc:30: 94:47:e0:5d:26:3c:67:75:ab:d0:9c:b9:96:1f:c6: 04:4e:78:8a:3c:27:21:5e:92:c5:bb:18:f3:76:6d: 32:9f:6a:25:13:29:1c:9b:61:75:35:5f:3e:4e:19: b4:4c:89:5e:8e:e7:b5:ac:06:fc:06:f4:2a:5c:4e: af:d2:64:fa:cf:09:f3:1b:0a:ac:b3:82:be:1d:86: a3:f2:5f:7f:30:d2:22:b9:22:4a:6b:c6:d0:58:3a: fe:40:6c:1d:06:fb:c0:10:ad:c2:81:b3:34:33:18: 33:74:75:47:a0:b6:ab:c1:25:39:9b:b1:d3:ce:61: 6f:6a:2e:e1:8d:dd:24:86:f3:d9:1f:db:e3:67:53: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0B:D4:AF:57:FE:70:7D:B0:54:C1:90:27:B8:17:70:EB:9B:CE:4C X509v3 Authority Key Identifier: keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/VAvUr1f-cH2wVMGQJ7gXcOubzkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.224.0/20 81.94.64.0/19 185.145.92.0/22 IPv6: 2001:1630::/29 Signature Algorithm: sha256WithRSAEncryption 30:07:dc:ce:12:f2:9d:d8:4a:f0:fa:70:f2:64:73:f8:22:9b: 2e:9e:48:2c:90:c8:57:9c:de:49:a6:ed:09:93:b8:24:3f:ae: ae:0f:4d:04:ce:c7:3e:ac:66:35:2f:d0:15:d9:f1:12:65:be: 38:11:4c:5e:14:fb:ae:05:5b:fb:66:58:da:7b:50:66:57:4d: 63:63:d6:43:38:7c:f7:2b:4b:e2:eb:90:87:19:ee:a3:57:73: d3:d9:90:22:c1:fa:6b:4f:46:c5:53:28:80:88:27:87:e4:ed: 4b:2a:2d:4e:cd:87:c8:19:e3:63:8c:91:8a:dd:50:e3:5e:7d: 6d:35:3b:f9:c6:e5:d0:b8:b5:75:9d:b4:a1:21:48:5d:bb:a6: bc:50:64:c5:94:46:17:28:90:83:ac:54:f3:62:54:b7:61:7e: 43:03:39:3b:e0:8e:ee:5a:e6:50:29:cf:ac:e7:74:0a:1e:0e: ce:0a:a5:d0:0f:05:5e:35:a1:04:f6:41:3b:44:1c:34:e1:18: 8b:3c:7b:4d:26:ba:f7:77:8a:9a:86:9f:b7:73:50:f7:e6:86: fc:10:a4:80:37:10:1f:e3:50:b2:b0:f1:24:b1:46:93:5e:95: 85:80:a3:59:b0:2d:7d:89:02:33:32:b9:98:1d:c0:d0:db:e1: 7e:5f:11:6e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9y1WVihSOjg/G29YtmbspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3 MmVkZGQwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDBiZDRhZjU3ZmU3MDdkYjA1NGMxOTAyN2I4MTc3MGViOWJjZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXacrB48vYY8BkT0ULZT7wUNxXry PvWJD58ADAxsz56TsxDNFaYpWvxYcQ/duLqnkXtDrqquN2XygFlswx0g0ykN+2+N pFKaeyp8v83h9g4ajbezSKmUzpUyD0oDOAQpB0XNu8bHA0LjUxJX7nwJ3tJ+MQOP vDCUR+BdJjxndavQnLmWH8YETniKPCchXpLFuxjzdm0yn2olEykcm2F1NV8+Thm0 TIlejue1rAb8BvQqXE6v0mT6zwnzGwqss4K+HYaj8l9/MNIiuSJKa8bQWDr+QGwd BvvAEK3CgbM0MxgzdHVHoLarwSU5m7HTzmFvai7hjd0khvPZH9vjZ1OaWQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFQL1K9X/nB9sFTBkCe4F3Drm85MMB8GA1UdIwQY MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct ZGUwMjVlNmY4NTg5LzEvVkF2VXIxZi1jSDJ3Vk1HUUo3Z1hjT3Viemt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5 LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPXgAwQF UV5AAwQCuZFcMA0EAgACMAcDBQMgARYwMA0GCSqGSIb3DQEBCwUAA4IBAQAwB9zO EvKd2Erw+nDyZHP4IpsunkgskMhXnN5Jpu0Jk7gkP66uD00Ezsc+rGY1L9AV2fES Zb44EUxeFPuuBVv7Zljae1BmV01jY9ZDOHz3K0vi65CHGe6jV3PT2ZAiwfprT0bF UyiAiCeH5O1LKi1OzYfIGeNjjJGK3VDjXn1tNTv5xuXQuLV1nbShIUhdu6a8UGTF lEYXKJCDrFTzYlS3YX5DAzk74I7uWuZQKc+s53QKHg7OCqXQDwVeNaEE9kE7RBw0 4RiLPHtNJrr3d4qahp+3c1D35ob8EKSANxAf41CysPEksUaTXpWFgKNZsC19iQIz MrmYHcDQ2+F+XxFu -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:53 2026 by rpki-client