This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/VlpI70dDa3SXtasYtMfEiBmSD6c.roa File: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (raw, json) Hash identifier: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ= Subject key identifier: 56:5A:48:EF:47:43:6B:74:97:B5:AB:18:B4:C7:C4:88:19:92:0F:A7 Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Certificate serial: 019B7CEE6EDB2522C06DD0EDBD6EDCBF0F3D Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/VlpI70dDa3SXtasYtMfEiBmSD6c.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28905 IP address blocks: 46.30.64.0/21 maxlen: 21 185.174.44.0/22 maxlen: 22 213.226.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6e:db:25:22:c0:6d:d0:ed:bd:6e:dc:bf:0f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=565a48ef47436b7497b5ab18b4c7c48819920fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:61:42:6a:16:d0:9c:e8:a6:96:6e:b0:16: ba:03:a6:a3:73:0c:ce:74:36:cb:57:87:e8:f3:d9: f6:ef:72:6e:89:d8:df:d4:23:22:f1:fa:1e:72:3e: d4:32:6b:1d:98:76:07:2a:42:34:06:ba:8d:1a:9f: 4f:9f:aa:fd:1b:20:b7:18:37:ed:67:d1:45:c9:21: c8:9f:dd:c9:75:d5:c0:cd:7e:b2:d8:25:4e:22:90: 79:4c:cc:16:33:04:e5:f3:93:11:fc:f9:7b:68:9f: e6:ee:5a:42:1e:3e:93:b6:ab:c7:3c:a1:cb:ee:81: 2c:28:45:5b:24:ea:57:a9:54:4d:fd:6a:f2:ab:23: 97:b1:cf:03:97:df:ba:15:29:37:12:a2:ec:7e:a7: 1f:7d:19:db:06:6b:89:a2:fb:19:c9:e7:0f:50:1a: 38:6b:e8:25:6b:53:93:b8:3c:2e:09:cb:6c:42:92: 05:bc:1f:2e:19:8b:a5:36:5a:49:c4:73:4d:6b:5b: b2:fb:5d:a0:8c:0b:1e:46:07:54:0e:b6:fa:fb:d4: 5a:7f:be:c1:ad:d4:ee:6c:c5:bd:d7:13:62:58:58: 81:bc:ef:2f:db:b3:ce:4d:2b:99:b5:28:96:35:af: 92:f3:e0:29:90:c9:eb:b6:99:86:bf:7f:35:ad:e4: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5A:48:EF:47:43:6B:74:97:B5:AB:18:B4:C7:C4:88:19:92:0F:A7 X509v3 Authority Key Identifier: keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/VlpI70dDa3SXtasYtMfEiBmSD6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.64.0/21 185.174.44.0/22 213.226.192.0/20 Signature Algorithm: sha256WithRSAEncryption 40:94:35:1b:2e:84:59:a9:e2:ac:fc:36:68:37:49:39:3e:0f: d9:4d:c1:84:ab:e0:27:b7:1d:ff:36:89:13:54:c3:64:c2:05: a5:2e:92:c3:b7:ae:5a:2a:d9:07:a0:ea:98:80:cd:77:68:d6: 27:25:15:c2:35:1d:e7:e7:83:6f:c9:22:da:20:13:f0:3e:6f: 71:05:71:aa:0e:b7:2b:4e:1f:5a:64:98:c7:2e:ce:9d:26:1b: 20:b8:60:4d:6e:32:43:ee:a6:8b:c6:e1:17:50:38:11:5a:cc: 20:bc:a0:d5:dc:53:a4:45:f7:0b:df:6d:17:64:2d:1f:f3:55: 80:ab:99:f5:b8:9d:76:c0:84:fd:77:4d:9d:51:ee:58:15:60: f3:ef:5c:a1:8c:db:4d:90:4c:13:38:cd:58:ee:6e:f8:53:5b: f4:a6:ab:d5:b7:99:0f:32:38:54:04:87:86:57:0a:4b:d4:6c: 84:86:40:c5:36:5a:2d:8e:6e:0d:5e:97:7f:8e:85:44:5f:74: 49:85:db:6f:de:52:7a:11:5a:25:0f:93:a8:c1:bd:12:63:45: db:0d:6c:98:39:fc:28:96:77:02:be:08:5a:04:16:2e:ac:92: b5:48:29:6d:59:08:d7:80:99:6d:23:60:c8:42:b7:47:4f:be: 28:bf:53:93 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87m7bJSLAbdDtvW7cvw89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy ZThjNDcwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjVhNDhlZjQ3NDM2Yjc0OTdiNWFiMThiNGM3YzQ4ODE5OTIwZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonJhQmoW0JzoppZusBa6A6ajcwzO dDbLV4fo89n273Juidjf1CMi8foecj7UMmsdmHYHKkI0BrqNGp9Pn6r9GyC3GDft Z9FFySHIn93JddXAzX6y2CVOIpB5TMwWMwTl85MR/Pl7aJ/m7lpCHj6TtqvHPKHL 7oEsKEVbJOpXqVRN/WryqyOXsc8Dl9+6FSk3EqLsfqcffRnbBmuJovsZyecPUBo4 a+gla1OTuDwuCctsQpIFvB8uGYulNlpJxHNNa1uy+12gjAseRgdUDrb6+9Raf77B rdTubMW91xNiWFiBvO8v27POTSuZtSiWNa+S8+ApkMnrtpmGv381reTRtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFZaSO9HQ2t0l7WrGLTHxIgZkg+nMB8GA1UdIwQY MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct MWJlNjljYTM5M2JhLzEvVmxwSTcwZERhM1NYdGFzWXRNZkVpQm1TRDZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLh5AAwQC ua4sAwQE1eLAMA0GCSqGSIb3DQEBCwUAA4IBAQBAlDUbLoRZqeKs/DZoN0k5Pg/Z TcGEq+Antx3/NokTVMNkwgWlLpLDt65aKtkHoOqYgM13aNYnJRXCNR3n54NvySLa IBPwPm9xBXGqDrcrTh9aZJjHLs6dJhsguGBNbjJD7qaLxuEXUDgRWswgvKDV3FOk RfcL320XZC0f81WAq5n1uJ12wIT9d02dUe5YFWDz71yhjNtNkEwTOM1Y7m74U1v0 pqvVt5kPMjhUBIeGVwpL1GyEhkDFNlotjm4NXpd/joVEX3RJhdtv3lJ6EVolD5Oo wb0SY0XbDWyYOfwolncCvghaBBYurJK1SCltWQjXgJltI2DIQrdHT74ov1OT -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:35 2026 by rpki-client