This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/vvBOQ04V9GOEp_xWifhOTx36DlE.roa File: vvBOQ04V9GOEp_xWifhOTx36DlE.roa (raw, json) Hash identifier: kyJgbX8RGqWByplGJZ1fz/UdnF/eQPqYIRllvHcTi70= Subject key identifier: BE:F0:4E:43:4E:15:F4:63:84:A7:FC:56:89:F8:4E:4F:1D:FA:0E:51 Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7 Certificate serial: 019B78A339523D39EC9C0D9681AE44862E24 Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/vvBOQ04V9GOEp_xWifhOTx36DlE.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 185.39.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:39:52:3d:39:ec:9c:0d:96:81:ae:44:86:2e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7 Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bef04e434e15f46384a7fc5689f84e4f1dfa0e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:68:96:20:7f:d3:40:4d:f7:2f:0a:9c:c6: 19:ba:eb:01:da:cb:19:09:4b:65:6e:f7:48:07:df: df:23:4b:bc:73:ae:73:44:b3:14:87:93:48:41:a4: 34:28:1b:8e:28:a5:ee:2a:7a:8a:81:fa:03:f9:3f: c2:80:59:ac:30:37:93:ec:74:96:c7:64:ea:2e:a4: fc:60:99:20:ff:74:65:b6:3d:b8:72:97:8f:a3:6a: 30:7a:3a:de:bc:af:80:98:f3:66:69:b7:66:7e:41: 2c:ed:b2:2e:c2:1e:d6:42:53:e4:1b:56:30:54:9b: 07:ca:eb:e1:9c:c6:7d:c7:0b:aa:92:f8:ae:dc:53: 62:40:2b:d3:8c:ac:76:f9:d9:7a:7f:2a:a2:7b:51: 82:0c:7a:b7:81:5d:77:1a:ba:36:84:d1:73:60:e4: 78:4e:0c:0e:0f:a9:15:87:5a:13:1e:4a:d9:5b:c2: ce:ac:38:47:57:94:d8:f3:58:f4:6e:29:55:3e:9b: b5:35:bf:3a:7f:50:cf:b5:73:4f:fc:22:ac:63:ea: 9f:8e:ba:90:b7:02:e6:d6:71:54:97:e5:9d:95:71: c2:6d:da:b3:d5:d0:92:53:05:7a:b2:54:d9:b0:29: e2:e9:b8:89:0b:96:e8:f6:ca:05:08:18:11:2d:9a: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:4E:43:4E:15:F4:63:84:A7:FC:56:89:F8:4E:4F:1D:FA:0E:51 X509v3 Authority Key Identifier: keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/vvBOQ04V9GOEp_xWifhOTx36DlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.152.0/22 Signature Algorithm: sha256WithRSAEncryption 22:66:a2:22:fd:52:b1:0c:ab:b5:e4:bf:d5:ea:c7:22:5c:a0: ef:b9:29:62:06:cc:cb:19:f5:72:a4:fe:73:a2:b3:61:3a:bb: 0f:2f:d8:af:51:a3:e1:37:39:43:85:73:f7:1c:17:cd:43:6d: 7b:34:5c:51:69:77:c4:cd:f1:3d:e5:0b:0e:fb:e3:f3:c6:72: 4d:02:e8:e8:0c:11:dd:e0:ce:ad:51:d4:a2:84:c0:56:e7:a7: 1b:62:1e:b3:0a:08:c1:a2:e0:e1:26:22:8b:b2:99:d3:20:9a: 4c:de:66:0a:87:ea:f9:3b:1c:66:79:25:34:af:c0:d3:06:ea: 41:64:9b:08:61:23:ae:eb:90:85:8b:5e:6c:a5:89:b7:fd:06: 04:12:44:a2:97:71:87:14:96:65:b7:c5:39:b7:ad:5a:b0:47: 96:1e:a2:1b:ae:18:f9:0d:fe:eb:0c:ae:17:da:2a:46:d3:2e: 2a:82:ea:15:cd:53:c6:d9:2c:e0:c3:8b:fd:09:e2:8f:cf:c7: 35:8b:4d:3b:8b:eb:8d:1f:7d:ce:c1:8d:cd:39:c0:77:f7:66: b7:6f:e9:99:f2:65:a5:e9:f8:a4:94:02:a7:fb:ad:85:f4:e3: 28:f8:6f:1b:50:76:a6:b2:56:46:ef:a0:73:e8:c8:51:85:c0: 24:c8:b0:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozlSPTnsnA2Wga5Ehi4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWI0Y2Q0MGJhZTQ3ZDQ4ZjUxYzljY2NjNjA3Y2NlNTdj ZTAwZjcwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWYwNGU0MzRlMTVmNDYzODRhN2ZjNTY4OWY4NGU0ZjFkZmEwZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c9oliB/00BN9y8KnMYZuusB2ssZ CUtlbvdIB9/fI0u8c65zRLMUh5NIQaQ0KBuOKKXuKnqKgfoD+T/CgFmsMDeT7HSW x2TqLqT8YJkg/3Rltj24cpePo2owejrevK+AmPNmabdmfkEs7bIuwh7WQlPkG1Yw VJsHyuvhnMZ9xwuqkviu3FNiQCvTjKx2+dl6fyqie1GCDHq3gV13Gro2hNFzYOR4 TgwOD6kVh1oTHkrZW8LOrDhHV5TY81j0bilVPpu1Nb86f1DPtXNP/CKsY+qfjrqQ twLm1nFUl+WdlXHCbdqz1dCSUwV6slTZsCni6biJC5bo9soFCBgRLZoRXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL7wTkNOFfRjhKf8Von4Tk8d+g5RMB8GA1UdIwQY MBaAFEIbTNQLrkfUj1HJzMxgfM5XzgD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEt ODRjY2YzNDIwMjg2LzEvdnZCT1EwNFY5R09FcF94V2lmaE9UeDM2RGxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEtODRjY2YzNDIwMjg2 LzEvUWh0TTFBdXVSOVNQVWNuTXpHQjh6bGZPQVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSeYMA0G CSqGSIb3DQEBCwUAA4IBAQAiZqIi/VKxDKu15L/V6sciXKDvuSliBszLGfVypP5z orNhOrsPL9ivUaPhNzlDhXP3HBfNQ217NFxRaXfEzfE95QsO++PzxnJNAujoDBHd 4M6tUdSihMBW56cbYh6zCgjBouDhJiKLspnTIJpM3mYKh+r5OxxmeSU0r8DTBupB ZJsIYSOu65CFi15spYm3/QYEEkSil3GHFJZlt8U5t61asEeWHqIbrhj5Df7rDK4X 2ipG0y4qguoVzVPG2Szgw4v9CeKPz8c1i007i+uNH33OwY3NOcB392a3b+mZ8mWl 6fiklAKn+62F9OMo+G8bUHamslZG76Bz6MhRhcAkyLAy -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:25 2026 by rpki-client