This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/VN57OoPBsGwrpB2MMJuifcY0BKk.roa File: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (raw, json) Hash identifier: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc= Subject key identifier: 54:DE:7B:3A:83:C1:B0:6C:2B:A4:1D:8C:30:9B:A2:7D:C6:34:04:A9 Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Certificate serial: 019C2ECB2C0148157421D82A489BDA624D98 Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/VN57OoPBsGwrpB2MMJuifcY0BKk.roa Signing time: Thu 05 Feb 2026 17:13:12 +0000 ROA not before: Thu 05 Feb 2026 17:13:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197883 IP address blocks: 80.73.241.0/24 maxlen: 24 91.208.85.0/24 maxlen: 24 94.154.119.0/24 maxlen: 24 176.57.240.0/24 maxlen: 24 176.57.241.0/24 maxlen: 24 176.57.242.0/24 maxlen: 24 176.57.243.0/24 maxlen: 24 176.57.244.0/24 maxlen: 24 176.57.245.0/24 maxlen: 24 176.57.246.0/24 maxlen: 24 176.57.247.0/24 maxlen: 24 176.97.207.0/24 maxlen: 24 185.8.144.0/24 maxlen: 24 185.8.145.0/24 maxlen: 24 185.8.146.0/24 maxlen: 24 185.8.147.0/24 maxlen: 24 185.136.40.0/24 maxlen: 24 185.136.41.0/24 maxlen: 24 185.136.42.0/24 maxlen: 24 185.136.43.0/24 maxlen: 24 194.53.4.0/24 maxlen: 24 194.53.5.0/24 maxlen: 24 194.53.6.0/24 maxlen: 24 194.53.7.0/24 maxlen: 24 195.96.152.0/24 maxlen: 24 195.137.186.0/24 maxlen: 24 195.137.188.0/24 maxlen: 24 195.138.220.0/24 maxlen: 24 195.144.23.0/24 maxlen: 24 2a01:9d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:cb:2c:01:48:15:74:21:d8:2a:48:9b:da:62:4d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Validity Not Before: Feb 5 17:13:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54de7b3a83c1b06c2ba41d8c309ba27dc63404a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:a6:e5:4b:8a:e5:73:79:1b:12:25:fc:dc: 50:3d:f7:7d:12:d8:2d:d8:c8:25:3b:e4:06:a3:05: 20:aa:c7:08:44:44:4d:27:8c:ed:d1:ce:1e:45:dc: 09:20:09:cf:5f:9c:e2:62:89:eb:4d:94:e2:e1:a0: 7e:6f:6b:07:54:d1:9a:a8:ab:9d:16:0c:a2:e8:b2: cf:a2:61:07:f5:fc:fa:3a:44:5f:36:d6:e1:0d:04: 02:60:46:e4:3d:4b:71:8d:9f:bb:e7:2b:55:a3:13: 8f:a8:a0:4b:ba:ce:d7:71:1b:6a:d1:28:48:92:3f: b5:30:c7:8b:64:ef:d9:06:05:02:c2:c7:22:0b:98: 76:f8:ca:35:87:01:a8:62:ba:b5:e6:8e:6e:21:e0: 86:69:a2:1c:65:f5:c3:69:bd:26:8d:c7:f5:55:8d: 75:ae:f0:7a:d4:20:4e:86:8c:a1:b7:8d:05:2a:f0: c4:06:e4:13:a3:f7:e8:cc:5f:6f:8e:c9:c8:db:40: 1b:56:b0:16:9d:f6:a8:47:36:fc:a5:72:7f:0d:88: b5:3b:1f:f0:71:f9:62:00:fb:1c:4e:04:b3:62:e0: 4b:e8:d3:03:83:df:d7:9a:b0:82:45:76:f9:82:b2: 78:e5:bb:81:9a:83:26:65:6a:7d:18:a3:81:50:e6: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DE:7B:3A:83:C1:B0:6C:2B:A4:1D:8C:30:9B:A2:7D:C6:34:04:A9 X509v3 Authority Key Identifier: keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/VN57OoPBsGwrpB2MMJuifcY0BKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.241.0/24 91.208.85.0/24 94.154.119.0/24 176.57.240.0/21 176.97.207.0/24 185.8.144.0/22 185.136.40.0/22 194.53.4.0/22 195.96.152.0/24 195.137.186.0/24 195.137.188.0/24 195.138.220.0/24 195.144.23.0/24 IPv6: 2a01:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 69:9f:7a:2a:79:ef:5f:8c:cd:40:aa:e2:93:02:28:7b:81:bc: df:dd:68:1e:d7:80:62:cc:0f:92:9d:f2:10:dd:3d:e8:9b:c5: 91:5c:f7:23:91:1e:c2:05:4a:cd:34:43:48:c9:88:f4:7d:0f: ea:ce:bd:fd:38:ed:a5:91:1b:69:be:73:f4:27:6b:6c:0b:5f: 89:9f:af:5a:f4:16:67:98:99:61:47:a6:63:36:3b:68:e4:eb: b7:fd:04:b3:df:9c:49:71:36:bc:c1:29:df:02:69:a5:70:0c: d4:a1:01:18:18:02:e3:d1:af:fb:0d:87:d6:55:4e:5d:1e:8a: bd:8c:c6:7a:c0:c6:71:24:5e:49:53:f2:40:e2:6f:1d:6e:8a: 46:10:1d:90:37:3e:5d:ea:80:13:1d:6c:a9:a9:6e:fc:2b:50: d6:5f:a5:7b:2d:8a:c7:76:10:0d:0c:77:29:f2:00:e7:46:0b: 44:e4:c4:7d:a1:f9:13:0a:49:92:76:ba:4c:4a:a8:ab:1c:d5: a4:47:a3:ec:04:9d:9a:51:bf:74:a6:32:ca:3d:2a:62:47:76: 83:66:a9:5d:d9:b6:4e:27:2e:97:b3:96:4b:e1:b3:e5:a6:8a: 4b:5e:13:61:b5:ca:02:7c:ae:11:81:46:87:ba:90:c3:98:ec: 72:02:1f:1c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZwuyywBSBV0IdgqSJvaYk2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi YzJkOTUwHhcNMjYwMjA1MTcxMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGRlN2IzYTgzYzFiMDZjMmJhNDFkOGMzMDliYTI3ZGM2MzQwNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsWm5UuK5XN5GxIl/NxQPfd9Etgt 2MglO+QGowUgqscIRERNJ4zt0c4eRdwJIAnPX5ziYonrTZTi4aB+b2sHVNGaqKud Fgyi6LLPomEH9fz6OkRfNtbhDQQCYEbkPUtxjZ+75ytVoxOPqKBLus7XcRtq0ShI kj+1MMeLZO/ZBgUCwsciC5h2+Mo1hwGoYrq15o5uIeCGaaIcZfXDab0mjcf1VY11 rvB61CBOhoyht40FKvDEBuQTo/fozF9vjsnI20AbVrAWnfaoRzb8pXJ/DYi1Ox/w cfliAPscTgSzYuBL6NMDg9/XmrCCRXb5grJ45buBmoMmZWp9GKOBUOa1xQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFFTeezqDwbBsK6QdjDCbon3GNASpMB8GA1UdIwQY MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt MThjNzBlYmY2ODFhLzEvVk41N09vUEJzR3dycEIyTU1KdWlmY1kwQktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQAUEnxAwQA W9BVAwQAXpp3AwQDsDnwAwQAsGHPAwQCuQiQAwQCuYgoAwQCwjUEAwQAw2CYAwQA w4m6AwQAw4m8AwQAw4rcAwQAw5AXMA0EAgACMAcDBQAqAZ2AMA0GCSqGSIb3DQEB CwUAA4IBAQBpn3oqee9fjM1AquKTAih7gbzf3Wge14BizA+SnfIQ3T3om8WRXPcj kR7CBUrNNENIyYj0fQ/qzr39OO2lkRtpvnP0J2tsC1+Jn69a9BZnmJlhR6ZjNjto 5Ou3/QSz35xJcTa8wSnfAmmlcAzUoQEYGALj0a/7DYfWVU5dHoq9jMZ6wMZxJF5J U/JA4m8dbopGEB2QNz5d6oATHWypqW78K1DWX6V7LYrHdhANDHcp8gDnRgtE5MR9 ofkTCkmSdrpMSqirHNWkR6PsBJ2aUb90pjLKPSpiR3aDZqld2bZOJy6Xs5ZL4bPl popLXhNhtcoCfK4RgUaHupDDmOxyAh8c -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:23 2026 by rpki-client