This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Vnfr1B6zeveKpVS4LB2mUJeRrFs.roa File: Vnfr1B6zeveKpVS4LB2mUJeRrFs.roa (raw, json) Hash identifier: sFBJAuH+zG22UYwIVQ0x6Xvt7QE8TTPKS5unq5O8Owg= Subject key identifier: 56:77:EB:D4:1E:B3:7A:F7:8A:A5:54:B8:2C:1D:A6:50:97:91:AC:5B Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12FBDDCB4108C22D95387C68AF6459 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Vnfr1B6zeveKpVS4LB2mUJeRrFs.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60420 IP address blocks: 212.243.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fb:dd:cb:41:08:c2:2d:95:38:7c:68:af:64:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5677ebd41eb37af78aa554b82c1da6509791ac5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:33:78:4e:b3:40:d4:72:55:b8:f2:e2:0e: 80:20:c4:ec:62:ea:39:79:0e:68:95:ef:8e:45:a2: fb:b6:77:99:3d:85:52:99:9e:29:5f:23:86:63:6e: f5:ea:1e:ec:c0:ae:07:38:e6:f9:d9:5a:82:31:d4: b7:f5:42:1d:0c:eb:6a:63:a0:ba:46:5d:23:16:4e: 01:62:c2:77:e8:3a:0e:5a:62:20:0c:69:72:46:93: af:ab:79:d4:45:d9:56:5d:5f:27:57:24:9d:4e:ce: 67:ba:30:54:80:ac:e0:79:c3:68:a6:c5:db:a0:54: 87:b2:bd:8b:c1:ff:a6:c2:a3:27:ce:0d:4e:24:b2: d5:ef:ce:c7:c0:54:23:48:81:42:86:ab:fb:7c:e7: 9d:63:88:8a:46:7c:4e:a2:2f:e4:61:25:69:15:5c: 79:9a:07:7d:0d:1d:6f:f0:69:bc:22:43:14:37:11: d7:f8:05:15:72:51:49:f2:5c:39:b2:d8:f8:6d:b8: 69:19:16:a6:dc:d4:9f:21:7b:a2:19:06:3a:0f:1f: 06:4a:42:38:70:bb:a1:85:76:51:14:19:d6:b8:46: 34:02:6f:c7:69:cd:dd:ae:f0:28:5c:f1:da:3d:8b: 83:56:f6:09:bb:d9:e6:fa:8d:07:a6:30:46:5b:a6: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:EB:D4:1E:B3:7A:F7:8A:A5:54:B8:2C:1D:A6:50:97:91:AC:5B X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Vnfr1B6zeveKpVS4LB2mUJeRrFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.127.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:c2:d9:69:fb:3a:2e:d8:7a:d6:a0:77:54:14:20:0d:8f:18: 40:01:83:b0:aa:f5:f7:63:26:18:d8:28:e3:fa:04:d2:b5:e1: 04:73:2f:99:8b:11:e4:b0:12:a3:37:27:6a:5c:ac:21:b8:32: 64:2d:f2:4a:89:14:0b:b5:13:ce:dd:8d:3d:cb:20:3e:68:8c: c3:69:b7:08:fe:09:c5:df:b5:ac:52:ed:e0:8e:ff:15:7c:52: b0:34:44:90:b8:39:98:ba:f2:ca:7e:54:15:ca:d2:18:1c:8e: 27:6b:32:32:00:7d:3b:fd:df:25:ce:a6:e4:d0:b5:50:c9:c2: 51:d2:ac:3c:98:03:5c:fb:0a:fc:51:12:5e:6f:5e:2c:42:dd: c0:8e:f1:52:77:f3:09:87:44:10:76:56:7a:cc:3b:c1:83:e4: df:9d:ae:ca:e2:56:b2:3d:93:63:e7:fd:90:25:52:a1:d2:1a: dd:98:c4:f8:17:25:b3:e3:1c:3e:eb:24:29:a6:3a:17:1a:4b: 74:8e:a8:a8:f5:8e:15:32:7b:49:a8:ab:0b:ca:39:c4:4b:3b: ba:7e:97:a2:3f:c6:e2:b5:8f:7a:45:09:5c:73:87:4c:99:e6: c6:f1:00:ec:49:ba:47:8d:20:4b:7c:86:55:68:05:23:89:d8: a3:49:b8:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Evvdy0EIwi2VOHxor2RZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njc3ZWJkNDFlYjM3YWY3OGFhNTU0YjgyYzFkYTY1MDk3OTFhYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4zeE6zQNRyVbjy4g6AIMTsYuo5 eQ5ole+ORaL7tneZPYVSmZ4pXyOGY2716h7swK4HOOb52VqCMdS39UIdDOtqY6C6 Rl0jFk4BYsJ36DoOWmIgDGlyRpOvq3nURdlWXV8nVySdTs5nujBUgKzgecNopsXb oFSHsr2Lwf+mwqMnzg1OJLLV787HwFQjSIFChqv7fOedY4iKRnxOoi/kYSVpFVx5 mgd9DR1v8Gm8IkMUNxHX+AUVclFJ8lw5stj4bbhpGRam3NSfIXuiGQY6Dx8GSkI4 cLuhhXZRFBnWuEY0Am/Hac3drvAoXPHaPYuDVvYJu9nm+o0HpjBGW6YYfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZ369Qes3r3iqVUuCwdplCXkaxbMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvVm5mcjFCNnpldmVLcFZTNExCMm1VSmVSckZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN/MA0G CSqGSIb3DQEBCwUAA4IBAQBbwtlp+zou2HrWoHdUFCANjxhAAYOwqvX3YyYY2Cjj +gTSteEEcy+ZixHksBKjNydqXKwhuDJkLfJKiRQLtRPO3Y09yyA+aIzDabcI/gnF 37WsUu3gjv8VfFKwNESQuDmYuvLKflQVytIYHI4nazIyAH07/d8lzqbk0LVQycJR 0qw8mANc+wr8URJeb14sQt3AjvFSd/MJh0QQdlZ6zDvBg+Tfna7K4layPZNj5/2Q JVKh0hrdmMT4FyWz4xw+6yQppjoXGkt0jqio9Y4VMntJqKsLyjnESzu6fpeiP8bi tY96RQlcc4dMmebG8QDsSbpHjSBLfIZVaAUjidijSbit -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:33 2026 by rpki-client