This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_vbxvp-HXffJ84Zk1ly9WU2SLGM.roa File: _vbxvp-HXffJ84Zk1ly9WU2SLGM.roa (raw, json) Hash identifier: blhqn5Sm/kEaD4fJ82nY7yN386YyuDXjYrB4i2nbP5g= Subject key identifier: FE:F6:F1:BE:9F:87:5D:F7:C9:F3:86:64:D6:5C:BD:59:4D:92:2C:63 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E696363B0AA9FBBDB862833C5593E Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_vbxvp-HXffJ84Zk1ly9WU2SLGM.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 89.251.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:69:63:63:b0:aa:9f:bb:db:86:28:33:c5:59:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef6f1be9f875df7c9f38664d65cbd594d922c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:ae:6c:20:14:c5:64:67:7c:28:f5:44:5e: db:8e:40:0b:ce:b6:cb:9a:16:5a:21:6f:bc:f5:99: 32:fa:e2:7d:28:83:bc:3b:68:2c:1e:f0:48:fb:d8: b5:86:37:7a:79:a8:12:d0:74:3e:43:cd:1e:8b:78: 89:b0:ef:70:6e:7f:78:e6:50:39:46:8f:a4:b5:d0: 5d:c9:d1:30:be:80:94:98:76:f9:49:59:89:54:4c: b9:02:64:a0:52:0f:3f:52:3d:0f:6d:d1:7e:2e:0f: 30:24:89:93:94:5b:59:b6:54:70:de:cd:88:9d:da: f7:d0:50:b2:66:7c:49:1a:13:20:5c:4a:04:80:66: 4c:08:70:6e:6b:f7:ef:10:44:3c:a2:a8:c6:45:75: 96:3d:17:9b:b2:73:79:9e:ea:c6:ab:5a:e7:d6:a2: a0:a9:1b:ec:97:81:f1:47:8d:60:98:6f:d4:83:e1: 40:2c:55:03:20:1b:b4:33:42:ca:d3:18:c8:2d:23: f3:79:48:5a:2c:f2:fc:1a:c7:b2:82:26:10:21:4c: a2:b3:fe:ec:20:f1:30:de:fc:93:5d:6f:fd:c3:8d: 3e:37:85:77:5c:7e:7b:e3:64:08:1b:e3:ae:2d:2c: cc:81:df:a2:72:7a:be:5e:23:c8:b7:43:95:a1:f3: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F6:F1:BE:9F:87:5D:F7:C9:F3:86:64:D6:5C:BD:59:4D:92:2C:63 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_vbxvp-HXffJ84Zk1ly9WU2SLGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.22.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1e:1f:4a:1b:88:6a:98:c8:39:f3:31:38:56:0d:ca:c0:67: 08:23:3b:55:ed:c7:b7:f8:c5:a4:f5:58:c5:4e:ef:e3:f2:30: c2:65:30:41:91:76:9c:b1:05:30:37:53:fa:ed:01:b2:e5:f0: 78:8d:e2:b1:ae:34:41:04:a7:df:9f:2d:02:fb:80:63:af:6f: fc:37:65:47:21:e4:80:17:03:19:76:cf:40:16:88:69:31:d3: 78:82:26:7d:67:af:64:e6:b8:d0:2c:fb:38:b9:2e:d6:b9:88: 67:34:f7:6d:6c:0d:61:18:c8:18:13:a7:e4:d4:b0:70:b8:8f: 71:f5:3a:9b:08:0e:01:6a:f9:85:ad:72:89:f6:95:94:b9:66: e9:78:39:43:93:d5:8a:bf:94:0d:c8:54:77:59:de:a0:fe:04: 08:6c:a1:6b:4c:b2:84:45:64:9e:27:5d:97:c9:88:de:61:3a: 30:81:1d:c1:9a:9a:f8:73:55:bb:38:c9:d0:5d:bb:2d:5d:e4: 8b:c4:ff:55:42:f7:58:c7:7a:f3:9c:4d:61:4b:d7:ed:13:5b: 07:b9:60:f8:85:ed:fa:c3:2b:4e:1a:8e:57:45:b6:af:dc:68: 51:f7:eb:c9:3a:c6:c2:75:6f:ff:34:46:ae:e3:dd:89:f3:a6: a4:00:ca:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmljY7Cqn7vbhigzxVk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWY2ZjFiZTlmODc1ZGY3YzlmMzg2NjRkNjVjYmQ1OTRkOTIyYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/SubCAUxWRnfCj1RF7bjkALzrbL mhZaIW+89Zky+uJ9KIO8O2gsHvBI+9i1hjd6eagS0HQ+Q80ei3iJsO9wbn945lA5 Ro+ktdBdydEwvoCUmHb5SVmJVEy5AmSgUg8/Uj0PbdF+Lg8wJImTlFtZtlRw3s2I ndr30FCyZnxJGhMgXEoEgGZMCHBua/fvEEQ8oqjGRXWWPRebsnN5nurGq1rn1qKg qRvsl4HxR41gmG/Ug+FALFUDIBu0M0LK0xjILSPzeUhaLPL8GseygiYQIUyis/7s IPEw3vyTXW/9w40+N4V3XH5742QIG+OuLSzMgd+icnq+XiPIt0OVofPjHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP728b6fh133yfOGZNZcvVlNkixjMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvX3ZieHZwLUhYZmZKODRaazFseTlXVTJTTEdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsWMA0G CSqGSIb3DQEBCwUAA4IBAQBUHh9KG4hqmMg58zE4Vg3KwGcIIztV7ce3+MWk9VjF Tu/j8jDCZTBBkXacsQUwN1P67QGy5fB4jeKxrjRBBKffny0C+4Bjr2/8N2VHIeSA FwMZds9AFohpMdN4giZ9Z69k5rjQLPs4uS7WuYhnNPdtbA1hGMgYE6fk1LBwuI9x 9TqbCA4BavmFrXKJ9pWUuWbpeDlDk9WKv5QNyFR3Wd6g/gQIbKFrTLKERWSeJ12X yYjeYTowgR3Bmpr4c1W7OMnQXbstXeSLxP9VQvdYx3rznE1hS9ftE1sHuWD4he36 wytOGo5XRbav3GhR9+vJOsbCdW//NEau492J86akAMo6 -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:16 2026 by rpki-client