This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vdvJUMZIOfCXRvv2h3uZYgaEh_4.roa File: vdvJUMZIOfCXRvv2h3uZYgaEh_4.roa (raw, json) Hash identifier: SXEPI/rdq94tyFApFZz41BTDf39Uh5z8Y8Lktu+QMKY= Subject key identifier: BD:DB:C9:50:C6:48:39:F0:97:46:FB:F6:87:7B:99:62:06:84:87:FE Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82E374B517A1178C7DA091C7F1D8E5 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vdvJUMZIOfCXRvv2h3uZYgaEh_4.roa Signing time: Fri 02 Jan 2026 16:20:42 +0000 ROA not before: Fri 02 Jan 2026 16:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397032 IP address blocks: 78.108.218.0/24 maxlen: 24 193.31.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e3:74:b5:17:a1:17:8c:7d:a0:91:c7:f1:d8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bddbc950c64839f09746fbf6877b9962068487fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:dc:aa:d8:60:50:01:fa:a4:c7:3a:ac:91: f1:92:1f:43:18:a5:3a:4d:fe:33:ce:a4:fc:8f:b4: 1c:02:8d:0e:93:e5:06:50:0e:b0:49:39:f7:80:af: 28:80:dd:ba:21:cb:4d:41:39:52:7f:5e:34:a4:bb: 45:eb:a3:21:ba:b7:67:bf:89:ec:17:53:cd:fb:be: ee:f9:78:bf:f9:0e:f0:d2:dd:67:b3:37:1a:9f:15: bb:2e:ac:1f:84:7b:ad:df:03:3b:67:60:3b:96:d0: f6:6e:46:1b:3e:3f:76:cc:3f:e0:9b:3e:f3:5a:57: e2:ee:7c:81:00:26:5c:a6:0d:ce:53:54:7e:23:53: 89:b9:3c:97:6c:d4:51:84:79:34:31:61:dd:e7:95: ae:1c:81:cd:6d:c0:57:e5:49:08:84:e2:e6:29:bc: 30:ea:b8:97:2a:4f:59:ff:1d:80:6b:61:54:76:f7: 0e:fe:9d:b1:8e:35:ee:30:22:ac:00:77:a1:ad:49: 87:1e:68:f9:72:46:59:df:4b:45:a9:fd:09:e6:d5: ab:9a:3d:7e:d0:05:a9:44:02:d0:68:05:86:d7:d8: 8e:a5:20:e5:f9:78:4c:14:c1:a2:63:84:c7:b9:95: 51:ce:ed:ed:8d:52:38:34:2d:82:49:ca:f8:4a:91: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:C9:50:C6:48:39:F0:97:46:FB:F6:87:7B:99:62:06:84:87:FE X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vdvJUMZIOfCXRvv2h3uZYgaEh_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.218.0/24 193.31.31.0/24 Signature Algorithm: sha256WithRSAEncryption 11:03:6c:68:88:96:32:73:40:3e:25:41:35:67:60:6d:5a:6d: 06:ce:c3:b1:da:d9:f3:5e:08:22:1b:43:38:1e:ea:92:3a:52: 77:11:f7:c9:e3:b3:4b:4b:d5:d9:83:55:e6:71:d5:58:59:d1: ad:07:b7:ea:8b:23:1f:eb:9f:36:36:48:10:f9:60:0a:18:a7: f8:e4:7f:22:75:ab:b1:08:73:4d:67:f0:5e:ef:f2:63:59:53: 0b:2d:c8:8f:f3:80:ff:30:3e:08:92:68:0f:fa:e9:86:71:6d: ed:c7:d7:6f:5a:16:6b:95:f2:3d:27:48:a2:ce:d3:27:bb:4f: e6:f0:ad:d4:92:db:0b:ff:0a:96:14:7a:8b:9d:98:5d:9e:4c: bf:f3:cd:0c:b2:2e:00:23:76:ac:70:0f:5e:3c:ca:dc:26:c4: 2e:77:67:b1:da:ce:97:70:54:a0:53:c0:63:ec:f6:2e:76:09: 29:b4:55:d4:8e:9d:cd:20:cb:3c:84:5f:b4:16:7e:fa:d2:e3: 1e:63:6c:59:f2:c2:a4:17:a8:c5:f9:fb:d7:fe:06:69:0e:57: 74:8f:7b:1e:0b:12:c7:51:12:22:4e:91:69:4f:19:a0:52:75: 3d:97:3c:3c:b0:10:f6:3d:a3:1f:b8:d0:af:39:db:ec:ca:a7: 89:96:77:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/guN0tRehF4x9oJHH8djlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGRiYzk1MGM2NDgzOWYwOTc0NmZiZjY4NzdiOTk2MjA2ODQ4N2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdDcqthgUAH6pMc6rJHxkh9DGKU6 Tf4zzqT8j7QcAo0Ok+UGUA6wSTn3gK8ogN26IctNQTlSf140pLtF66Mhurdnv4ns F1PN+77u+Xi/+Q7w0t1nszcanxW7LqwfhHut3wM7Z2A7ltD2bkYbPj92zD/gmz7z Wlfi7nyBACZcpg3OU1R+I1OJuTyXbNRRhHk0MWHd55WuHIHNbcBX5UkIhOLmKbww 6riXKk9Z/x2Aa2FUdvcO/p2xjjXuMCKsAHehrUmHHmj5ckZZ30tFqf0J5tWrmj1+ 0AWpRALQaAWG19iOpSDl+XhMFMGiY4THuZVRzu3tjVI4NC2CScr4SpGOjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL3byVDGSDnwl0b79od7mWIGhIf+MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvdmR2SlVNWklPZkNYUnZ2MmgzdVpZZ2FFaF80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATmzaAwQA wR8fMA0GCSqGSIb3DQEBCwUAA4IBAQARA2xoiJYyc0A+JUE1Z2BtWm0GzsOx2tnz XggiG0M4HuqSOlJ3EffJ47NLS9XZg1XmcdVYWdGtB7fqiyMf6582NkgQ+WAKGKf4 5H8idauxCHNNZ/Be7/JjWVMLLciP84D/MD4IkmgP+umGcW3tx9dvWhZrlfI9J0ii ztMnu0/m8K3UktsL/wqWFHqLnZhdnky/880Msi4AI3ascA9ePMrcJsQud2ex2s6X cFSgU8Bj7PYudgkptFXUjp3NIMs8hF+0Fn760uMeY2xZ8sKkF6jF+fvX/gZpDld0 j3seCxLHURIiTpFpTxmgUnU9lzw8sBD2PaMfuNCvOdvsyqeJlne1 -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:04 2026 by rpki-client