This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/VCV7HyTUt8tm68B15fKOErx2kfM.roa File: VCV7HyTUt8tm68B15fKOErx2kfM.roa (raw, json) Hash identifier: nMzsEQ+m4fEfPNGdId/ALdJtSeiEKBWtGdiNADmVhPQ= Subject key identifier: 54:25:7B:1F:24:D4:B7:CB:66:EB:C0:75:E5:F2:8E:12:BC:76:91:F3 Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Certificate serial: 019B7F83FD0F703F55673C108E0821AD229B Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/VCV7HyTUt8tm68B15fKOErx2kfM.roa Signing time: Fri 02 Jan 2026 16:21:55 +0000 ROA not before: Fri 02 Jan 2026 16:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30931 IP address blocks: 91.223.203.0/24 maxlen: 24 91.223.218.0/24 maxlen: 24 193.30.41.0/24 maxlen: 24 194.107.118.0/24 maxlen: 24 195.234.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fd:0f:70:3f:55:67:3c:10:8e:08:21:ad:22:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2 Validity Not Before: Jan 2 16:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54257b1f24d4b7cb66ebc075e5f28e12bc7691f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:04:3e:2e:52:59:5e:b1:37:34:de:3a:99: ca:61:8d:38:b9:ad:46:5a:cc:e5:f9:f7:31:20:52: 48:02:e4:59:0e:29:ac:d4:8c:21:9b:21:bf:e1:b8: 6f:fb:8c:d4:06:98:ae:6b:36:02:38:cc:ed:e1:93: 41:d1:76:43:a4:86:53:20:f8:1b:9e:1d:c4:bf:1f: df:f2:ca:14:3a:f1:6a:fb:45:5e:28:16:19:ae:d4: df:a7:f7:73:96:cd:da:a9:24:37:ca:db:7b:43:d1: e5:95:78:12:82:b1:20:72:4f:7a:64:1a:c6:5d:c0: 59:78:ef:a2:5a:2a:7a:f8:ac:11:2e:fe:66:e7:1e: f8:b7:88:05:99:07:2d:1f:e2:92:a3:2e:20:ad:80: 8a:76:3b:06:1d:0e:5c:e0:ea:4e:48:6b:d4:6f:79: 8f:9c:2d:c1:91:53:7a:4b:7f:31:d4:1a:d8:fd:56: 3a:e6:81:36:e6:f3:88:57:26:1d:49:b9:36:68:8c: be:f1:3c:1c:13:ef:86:08:0c:b7:2c:4f:d9:c6:38: c6:7a:87:3d:f8:de:fc:d4:0e:cb:f5:cd:47:6d:97: 4b:91:59:f5:9e:9c:ff:18:a4:16:c9:a4:9e:24:60: 80:ee:07:ba:40:85:61:52:a1:98:f1:f6:69:c7:32: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:25:7B:1F:24:D4:B7:CB:66:EB:C0:75:E5:F2:8E:12:BC:76:91:F3 X509v3 Authority Key Identifier: keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/VCV7HyTUt8tm68B15fKOErx2kfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.203.0/24 91.223.218.0/24 193.30.41.0/24 194.107.118.0/24 195.234.39.0/24 Signature Algorithm: sha256WithRSAEncryption 22:2c:b4:0b:c9:bd:01:38:61:8a:6a:9f:64:a6:b5:28:9f:5b: c2:19:17:a8:fa:5f:da:b9:e8:a3:51:05:1e:73:95:6d:d6:3d: ed:d5:40:de:f3:42:f2:10:e5:16:91:d1:62:e5:e9:ef:9e:29: fa:ee:93:29:9c:7a:62:4f:21:6f:70:e3:bf:f0:41:05:fc:61: ee:0b:09:93:3a:8f:e3:4a:c1:55:e4:8f:6b:ad:7a:0a:88:a9: 50:d0:11:bb:77:22:f4:e0:a5:14:3c:ee:bf:08:8b:38:f7:1e: b9:1f:88:61:14:44:be:5f:e6:8e:19:d7:75:c4:94:13:cf:fc: e7:c7:f7:f7:91:21:4c:fc:72:76:97:6f:55:d8:27:79:8b:e3: d6:04:85:fc:d2:12:32:0d:67:3e:1a:8d:7c:4d:4b:c1:43:8f: 38:88:8d:07:fb:9b:55:c2:a7:a5:42:26:8a:0f:0d:e2:0f:34: 4f:ca:cc:bf:30:ee:72:0c:03:1f:fa:bc:4f:39:ef:c1:c2:17: 70:ad:f5:5c:e4:a0:c2:fc:23:44:ac:97:05:fd:62:16:9d:b1: 7d:9d:55:34:5e:98:5b:e1:b5:2f:8d:88:22:44:19:7e:61:a1: 02:74:72:38:e0:4a:46:78:ab:a6:8e:69:8d:49:29:d2:56:a1: 29:da:62:d3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/g/0PcD9VZzwQjgghrSKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3 NTJmYTIwHhcNMjYwMTAyMTYyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDI1N2IxZjI0ZDRiN2NiNjZlYmMwNzVlNWYyOGUxMmJjNzY5MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6gEPi5SWV6xNzTeOpnKYY04ua1G Wszl+fcxIFJIAuRZDims1IwhmyG/4bhv+4zUBpiuazYCOMzt4ZNB0XZDpIZTIPgb nh3Evx/f8soUOvFq+0VeKBYZrtTfp/dzls3aqSQ3ytt7Q9HllXgSgrEgck96ZBrG XcBZeO+iWip6+KwRLv5m5x74t4gFmQctH+KSoy4grYCKdjsGHQ5c4OpOSGvUb3mP nC3BkVN6S38x1BrY/VY65oE25vOIVyYdSbk2aIy+8TwcE++GCAy3LE/ZxjjGeoc9 +N781A7L9c1HbZdLkVn1npz/GKQWyaSeJGCA7ge6QIVhUqGY8fZpxzLGaQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFQlex8k1LfLZuvAdeXyjhK8dpHzMB8GA1UdIwQY MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt ZmE4YTVlODZiMzQ4LzEvVkNWN0h5VFV0OHRtNjhCMTVmS09Fcngya2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4 LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW9/LAwQA W9/aAwQAwR4pAwQAwmt2AwQAw+onMA0GCSqGSIb3DQEBCwUAA4IBAQAiLLQLyb0B OGGKap9kprUon1vCGReo+l/aueijUQUec5Vt1j3t1UDe80LyEOUWkdFi5envnin6 7pMpnHpiTyFvcOO/8EEF/GHuCwmTOo/jSsFV5I9rrXoKiKlQ0BG7dyL04KUUPO6/ CIs49x65H4hhFES+X+aOGdd1xJQTz/znx/f3kSFM/HJ2l29V2Cd5i+PWBIX80hIy DWc+Go18TUvBQ484iI0H+5tVwqelQiaKDw3iDzRPysy/MO5yDAMf+rxPOe/Bwhdw rfVc5KDC/CNErJcF/WIWnbF9nVU0Xphb4bUvjYgiRBl+YaECdHI44EpGeKumjmmN SSnSVqEp2mLT -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:45 2026 by rpki-client