This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa File: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (raw, json) Hash identifier: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I= Subject key identifier: 56:5C:EC:67:53:C5:40:E4:EC:DF:A3:E3:48:62:81:CE:50:F7:AD:2C Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c Certificate serial: 019B7FF2955B935EAFFA208447D7B882F3A3 Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa Signing time: Fri 02 Jan 2026 18:22:42 +0000 ROA not before: Fri 02 Jan 2026 18:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201722 IP address blocks: 185.82.112.0/24 maxlen: 24 185.82.113.0/24 maxlen: 24 185.82.114.0/24 maxlen: 24 185.82.115.0/24 maxlen: 24 2a05:8f80::/32 maxlen: 32 2a05:8f81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:95:5b:93:5e:af:fa:20:84:47:d7:b8:82:f3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c Validity Not Before: Jan 2 18:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=565cec6753c540e4ecdfa3e3486281ce50f7ad2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:35:bb:58:c0:00:04:d3:f3:2d:1f:c8:ce: 5f:92:37:c8:8c:78:9c:60:63:8b:fa:91:4a:ba:05: 33:3d:c9:ed:63:0f:84:60:69:21:ad:69:17:eb:a6: 34:0e:77:97:ac:bf:89:34:e0:28:1e:3f:27:5e:80: 38:ff:d4:3e:08:9e:17:06:c7:62:da:75:fc:cb:b9: 02:18:f3:89:a1:0d:e8:2c:19:04:98:d8:15:a4:d3: 9d:6e:67:d2:5d:2c:26:09:ac:09:a0:dd:c3:4f:a0: 10:61:d6:1c:ef:74:92:cb:8c:a4:9b:8b:68:7e:01: d0:28:13:2f:fc:b0:a6:85:7d:e2:42:d6:04:d9:0b: ad:a6:05:3b:78:c6:ae:64:7e:34:94:c2:ba:d6:73: 67:c8:59:68:63:e5:e2:43:03:08:24:7a:02:3f:50: ab:56:37:c6:dc:e3:bc:aa:1b:c4:b1:ff:90:05:46: 0b:28:a5:02:ef:87:ef:03:2f:6b:c4:9b:22:f7:52: 1b:05:89:1c:f1:15:8f:58:78:c0:d8:88:2a:df:1e: 72:42:6a:4c:30:e8:3a:be:53:a7:c9:45:ba:e7:e1: 6b:50:c1:3e:3c:1e:cd:cc:9b:63:fb:15:fe:64:59: b7:e9:a5:d9:0b:37:14:81:6e:f7:01:71:ba:05:1e: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:EC:67:53:C5:40:E4:EC:DF:A3:E3:48:62:81:CE:50:F7:AD:2C X509v3 Authority Key Identifier: keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.112.0/22 IPv6: 2a05:8f80::/31 Signature Algorithm: sha256WithRSAEncryption 01:bd:78:a6:2b:38:d0:a3:58:78:c2:3a:8c:0f:1f:c4:ec:99: bf:6f:0c:c0:fe:94:d7:d7:05:cd:d1:56:d9:b6:81:6a:cf:99: 10:8a:f4:56:5e:87:ed:97:f3:b6:95:94:10:17:26:9b:22:c8: dc:d7:9b:77:49:60:cc:b3:e8:b6:0c:bc:ed:29:5f:fa:b2:ac: cb:7d:64:f5:79:e4:ee:fe:ae:b6:26:52:eb:34:7a:32:b4:e0: a0:b4:df:b4:af:f4:f3:9c:13:06:8e:08:76:13:d4:f2:23:1d: ea:27:d3:c3:91:de:92:6e:de:9e:f3:2d:43:65:a5:93:10:6e: b1:20:8f:cd:e7:aa:7c:ae:12:47:fa:b8:3b:a1:d8:12:80:0e: 1c:f0:8c:7e:30:7f:da:ad:58:e3:e1:8f:6b:5a:75:78:f9:1a: 46:06:77:f4:fb:c5:17:f1:0d:21:2f:ef:f1:38:fa:65:0e:d5: 76:f5:de:e5:45:03:d3:5b:03:5f:cc:10:28:61:ef:9c:b2:75: 29:84:d3:38:4e:b9:a3:b4:4f:ef:4d:17:db:38:06:8c:fb:24: a9:09:8e:e5:23:bd:0c:bf:35:34:d5:ed:b3:3c:9e:43:cb:d9: 4f:2f:06:a2:89:9c:9c:3d:39:d1:8b:98:d5:1a:e0:17:1d:67: 15:70:56:13 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8pVbk16v+iCER9e4gvOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYzNhZDVmZjY1YjhkY2I0NzYyMjlmMTJkNDU3ZDc3NjFh MGI5N2MwHhcNMjYwMTAyMTgyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjVjZWM2NzUzYzU0MGU0ZWNkZmEzZTM0ODYyODFjZTUwZjdhZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFQ1u1jAAATT8y0fyM5fkjfIjHic YGOL+pFKugUzPcntYw+EYGkhrWkX66Y0DneXrL+JNOAoHj8nXoA4/9Q+CJ4XBsdi 2nX8y7kCGPOJoQ3oLBkEmNgVpNOdbmfSXSwmCawJoN3DT6AQYdYc73SSy4ykm4to fgHQKBMv/LCmhX3iQtYE2QutpgU7eMauZH40lMK61nNnyFloY+XiQwMIJHoCP1Cr VjfG3OO8qhvEsf+QBUYLKKUC74fvAy9rxJsi91IbBYkc8RWPWHjA2Igq3x5yQmpM MOg6vlOnyUW65+FrUME+PB7NzJtj+xX+ZFm36aXZCzcUgW73AXG6BR44fQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFZc7GdTxUDk7N+j40higc5Q960sMB8GA1UdIwQY MBaAFA7DrV/2W43LR2Ip8S1FfXdhoLl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzIt YjhhYWIzMzIzNTI0LzEvVmx6c1oxUEZRT1RzMzZQalNHS0J6bEQzclN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzItYjhhYWIzMzIzNTI0 LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVJwMA0E AgACMAcDBQEqBY+AMA0GCSqGSIb3DQEBCwUAA4IBAQABvXimKzjQo1h4wjqMDx/E 7Jm/bwzA/pTX1wXN0VbZtoFqz5kQivRWXoftl/O2lZQQFyabIsjc15t3SWDMs+i2 DLztKV/6sqzLfWT1eeTu/q62JlLrNHoytOCgtN+0r/TznBMGjgh2E9TyIx3qJ9PD kd6Sbt6e8y1DZaWTEG6xII/N56p8rhJH+rg7odgSgA4c8Ix+MH/arVjj4Y9rWnV4 +RpGBnf0+8UX8Q0hL+/xOPplDtV29d7lRQPTWwNfzBAoYe+csnUphNM4TrmjtE/v TRfbOAaM+ySpCY7lI70MvzU01e2zPJ5Dy9lPLwaiiZycPTnRi5jVGuAXHWcVcFYT -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:47 2026 by rpki-client