This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa File: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (raw, json) Hash identifier: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs= Subject key identifier: 54:A8:3D:04:71:FC:55:0F:0E:11:88:12:B1:5F:F0:79:DF:30:DA:1E Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07 Certificate serial: 019B77587DDC3C3EDAFC5A29321473E85787 Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212285 IP address blocks: 91.243.116.0/24 maxlen: 24 188.125.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7d:dc:3c:3e:da:fc:5a:29:32:14:73:e8:57:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54a83d0471fc550f0e118812b15ff079df30da1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:a7:c8:ce:f3:84:46:a4:10:62:87:30:de: 0b:c3:d7:63:ee:76:7c:45:b8:6d:e2:00:80:e4:87: 12:e3:2d:a7:20:dc:ad:3d:89:c8:cb:b5:53:29:d5: ca:82:9b:e4:5a:8d:a3:21:99:24:31:93:e0:df:38: 87:fa:63:6b:5b:eb:07:07:75:ee:70:10:f0:a7:6e: 85:27:83:90:d8:2c:0d:15:8c:89:c8:7b:54:9a:dd: d9:8a:8a:ed:2e:9d:85:9f:d4:68:86:b5:16:8c:2d: 68:10:32:8a:ae:1d:c4:9a:fe:50:10:f4:7e:73:01: 22:6d:8f:7b:4c:c0:d7:cf:57:7c:85:48:96:9f:ee: 4e:f1:00:80:a4:02:f8:29:9c:84:a9:ab:45:05:71: b3:1b:13:86:fb:c2:4f:c5:d3:d3:80:90:df:e1:73: 89:18:c6:7f:ac:b4:1a:82:2f:56:c9:f6:52:17:62: 06:f7:12:fe:b0:1a:b8:8a:5f:35:13:7b:17:6a:73: c2:7d:38:7b:85:27:90:f6:88:51:23:0d:d1:97:10: 21:f5:7d:3b:5e:43:8a:a4:71:e8:17:02:10:2d:ec: a4:b2:41:2d:23:e5:36:fc:c1:39:13:83:79:46:ed: f6:1c:25:6d:c0:18:11:38:fd:eb:1a:fb:0d:6e:97: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:3D:04:71:FC:55:0F:0E:11:88:12:B1:5F:F0:79:DF:30:DA:1E X509v3 Authority Key Identifier: keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.116.0/24 188.125.164.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5f:d8:48:16:94:fb:9e:26:53:ec:7c:34:39:4c:e3:6f:c9: 80:0b:67:3c:5a:47:87:f0:69:59:69:14:cf:bd:e8:7c:f8:12: 4c:e1:53:1a:aa:63:d2:4f:1d:71:79:cf:ef:03:1b:49:78:0b: 36:f3:29:27:e0:4d:16:74:96:f8:f0:5e:e9:58:0e:b9:24:e2: fa:e2:7b:3a:0d:e1:11:29:96:2d:47:ed:03:e7:74:02:57:ad: 46:c0:da:ec:e3:04:6a:0b:ff:8c:17:4f:c6:fb:fa:f6:ac:52: 3a:30:1b:95:a0:9f:42:05:cf:81:00:fa:f6:91:ec:27:a5:78: a8:f0:35:62:a5:cf:a4:e3:c1:46:ea:22:7c:d5:aa:61:98:b6: 85:b0:6c:53:aa:9b:12:f4:20:84:20:75:10:2f:a8:52:fc:10: 7c:57:bf:0e:06:e2:2e:b2:09:91:a9:e7:14:22:c6:2a:af:ca: d7:94:16:77:1e:fc:43:94:16:67:9e:d6:33:a1:2f:5a:36:6e: c5:6d:83:2e:f7:c4:e8:62:fb:ca:b2:2a:a9:72:95:5b:8d:94: b9:fe:64:6a:07:bd:71:f8:7a:3a:55:aa:8e:78:2b:76:59:15: 36:47:e1:f4:03:af:65:08:b7:86:82:01:d5:ce:43:72:91:7c: f5:bc:77:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WH3cPD7a/FopMhRz6FeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDcxYzg1YTM0ODI5NThmODdmMDMyYjY0NjMxOThjN2Zk OWViMDcwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGE4M2QwNDcxZmM1NTBmMGUxMTg4MTJiMTVmZjA3OWRmMzBkYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWnyM7zhEakEGKHMN4Lw9dj7nZ8 Rbht4gCA5IcS4y2nINytPYnIy7VTKdXKgpvkWo2jIZkkMZPg3ziH+mNrW+sHB3Xu cBDwp26FJ4OQ2CwNFYyJyHtUmt3ZiortLp2Fn9RohrUWjC1oEDKKrh3Emv5QEPR+ cwEibY97TMDXz1d8hUiWn+5O8QCApAL4KZyEqatFBXGzGxOG+8JPxdPTgJDf4XOJ GMZ/rLQagi9WyfZSF2IG9xL+sBq4il81E3sXanPCfTh7hSeQ9ohRIw3RlxAh9X07 XkOKpHHoFwIQLeykskEtI+U2/ME5E4N5Ru32HCVtwBgROP3rGvsNbpf/5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFSoPQRx/FUPDhGIErFf8HnfMNoeMB8GA1UdIwQY MBaAFHEHHIWjSClY+H8DK2RjGYx/2esHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEt YWVmZDgwODcyNTMyLzEvVktnOUJISDhWUThPRVlnU3NWX3dlZDh3Mmg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEtYWVmZDgwODcyNTMy LzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/N0AwQA vH2kMA0GCSqGSIb3DQEBCwUAA4IBAQB2X9hIFpT7niZT7Hw0OUzjb8mAC2c8WkeH 8GlZaRTPveh8+BJM4VMaqmPSTx1xec/vAxtJeAs28ykn4E0WdJb48F7pWA65JOL6 4ns6DeERKZYtR+0D53QCV61GwNrs4wRqC/+MF0/G+/r2rFI6MBuVoJ9CBc+BAPr2 kewnpXio8DVipc+k48FG6iJ81aphmLaFsGxTqpsS9CCEIHUQL6hS/BB8V78OBuIu sgmRqecUIsYqr8rXlBZ3HvxDlBZnntYzoS9aNm7FbYMu98ToYvvKsiqpcpVbjZS5 /mRqB71x+Ho6VaqOeCt2WRU2R+H0A69lCLeGggHVzkNykXz1vHfA -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:48 2026 by rpki-client