This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa File: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (raw, json) Hash identifier: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0= Subject key identifier: FA:FB:6B:F9:96:CA:14:BA:82:AC:22:F8:9F:EC:73:E9:FA:28:45:53 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA2ACC5FF8F43B762A2D22E6E7ABF0 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 5.104.72.0/24 maxlen: 24 5.104.74.0/24 maxlen: 24 45.130.184.0/24 maxlen: 24 45.130.185.0/24 maxlen: 24 45.130.186.0/24 maxlen: 24 45.140.4.0/24 maxlen: 24 45.140.7.0/24 maxlen: 24 77.83.20.0/22 maxlen: 24 84.252.64.0/22 maxlen: 24 88.218.80.0/24 maxlen: 24 88.218.239.0/24 maxlen: 24 91.245.239.0/24 maxlen: 24 95.214.83.0/24 maxlen: 24 95.214.92.0/24 maxlen: 24 95.214.93.0/24 maxlen: 24 95.214.95.0/24 maxlen: 24 176.118.188.0/24 maxlen: 24 176.118.189.0/24 maxlen: 24 176.118.191.0/24 maxlen: 24 185.177.76.0/24 maxlen: 24 185.177.77.0/24 maxlen: 24 193.160.68.0/24 maxlen: 24 193.160.72.0/24 maxlen: 24 193.228.48.0/22 maxlen: 24 194.28.157.0/24 maxlen: 24 212.69.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2a:cc:5f:f8:f4:3b:76:2a:2d:22:e6:e7:ab:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fafb6bf996ca14ba82ac22f89fec73e9fa284553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:07:be:cd:6b:c8:4e:66:69:8b:71:44:56: d6:11:7f:1e:10:0a:2d:af:ad:f3:ea:09:d6:58:78: aa:3d:d9:52:7d:98:4f:93:d5:8b:e1:f1:d3:ba:f8: b8:a5:3e:89:af:2a:35:e4:ed:9a:99:1d:0e:25:e0: a4:8a:e0:3d:8d:e2:df:ed:3b:de:6c:48:e6:c4:22: e3:35:66:f3:ac:f6:66:2f:0f:db:a6:1f:cf:d4:4d: 18:40:11:76:ff:2c:f0:a5:c5:eb:0c:00:e8:79:1e: 8f:18:f2:75:75:52:67:ec:b3:5e:f1:46:63:91:38: d1:5b:12:74:11:b7:08:4e:c2:9b:a6:c2:a4:d7:d9: 1d:44:82:ff:e2:ee:ed:a4:35:a8:f9:c7:cc:de:a0: 29:f8:57:a6:dd:00:87:f1:2d:78:e3:ea:3a:93:e8: 69:13:5a:61:c5:62:86:28:7e:98:de:df:43:29:4d: ae:f9:75:a0:42:68:37:d5:cc:ef:20:85:5f:13:ab: 2e:2d:c8:19:12:85:44:92:19:17:69:d8:d3:47:e2: 23:b4:99:be:e4:6e:eb:ef:7e:79:f4:a2:0a:9a:ea: 83:b6:01:d3:92:88:b7:4b:2c:b9:6a:39:97:e9:fa: 9a:49:78:40:c6:d0:86:d0:0a:f7:3f:fd:e0:67:c2: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FB:6B:F9:96:CA:14:BA:82:AC:22:F8:9F:EC:73:E9:FA:28:45:53 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.72.0/24 5.104.74.0/24 45.130.184.0-45.130.186.255 45.140.4.0/24 45.140.7.0/24 77.83.20.0/22 84.252.64.0/22 88.218.80.0/24 88.218.239.0/24 91.245.239.0/24 95.214.83.0/24 95.214.92.0/23 95.214.95.0/24 176.118.188.0/23 176.118.191.0/24 185.177.76.0/23 193.160.68.0/24 193.160.72.0/24 193.228.48.0/22 194.28.157.0/24 212.69.135.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:81:f1:de:b5:a9:fe:b2:2d:41:99:48:06:a9:63:a7:8e:6a: 1f:cd:54:95:ce:aa:e9:11:21:5f:ee:34:43:ad:03:19:28:1a: 3c:dd:0f:d8:a3:31:38:cf:ed:d1:33:29:45:52:b9:4c:ce:17: b7:03:0a:6d:03:e8:2f:0c:47:e5:88:63:f5:f5:e0:86:89:f2: 2c:5f:07:cb:a8:4f:20:e4:62:23:c7:62:7c:ef:c9:0d:8c:c3: db:a9:b2:13:b8:da:af:60:cd:f2:76:9c:6b:d8:ba:bf:b6:61: c7:d1:c5:fa:98:fc:e5:cd:6f:c2:fd:b5:d1:ac:70:18:28:74: df:0a:36:b7:6f:67:d0:ad:63:fd:67:3f:ca:92:92:6f:84:ab: 12:e7:77:da:f8:6c:be:e0:47:c4:7c:26:a3:07:b6:b0:b2:3b: 66:6e:1c:f0:4b:7d:60:c8:59:a6:49:ca:78:2f:9a:58:82:ac: 3f:6b:b8:18:91:07:cc:f5:12:81:c6:5c:80:68:52:1d:0e:1d: a6:a6:97:08:1a:7b:dd:3d:28:fe:10:a2:ab:a3:b5:2d:ad:9b: d6:e1:1c:ed:0d:71:19:35:8f:00:de:71:19:fe:10:d0:26:95: d4:10:37:b1:40:f0:8f:1d:64:b5:f6:de:74:ae:e9:3e:3f:69: 19:f2:fe:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgISAZt9yirMX/j0O3YqLSLm56vwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWZiNmJmOTk2Y2ExNGJhODJhYzIyZjg5ZmVjNzNlOWZhMjg0NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs8Hvs1ryE5maYtxRFbWEX8eEAot r63z6gnWWHiqPdlSfZhPk9WL4fHTuvi4pT6Jryo15O2amR0OJeCkiuA9jeLf7Tve bEjmxCLjNWbzrPZmLw/bph/P1E0YQBF2/yzwpcXrDADoeR6PGPJ1dVJn7LNe8UZj kTjRWxJ0EbcITsKbpsKk19kdRIL/4u7tpDWo+cfM3qAp+Fem3QCH8S144+o6k+hp E1phxWKGKH6Y3t9DKU2u+XWgQmg31czvIIVfE6suLcgZEoVEkhkXadjTR+IjtJm+ 5G7r73559KIKmuqDtgHTkoi3Syy5ajmX6fqaSXhAxtCG0Ar3P/3gZ8JItwIDAQAB o4ICjzCCAoswHQYDVR0OBBYEFPr7a/mWyhS6gqwi+J/sc+n6KEVTMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvMS12dHItWmJLRkxxQ3JDTDRuLXh6NmZvb1JWTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzgvM2YyNDliLWU4MzYtNDFiNC05YTNhLTk5NDgwNmYwODFm MC8xLzRzSzROUHZKR3ZEc2F4MDBfV1FGVFNKcG9mMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBowYIKwYBBQUHAQcBAf8EgZMwgZAwgY0EAgABMIGGAwQA BWhIAwQABWhKMAwDBAMtgrgDBAAtgroDBAAtjAQDBAAtjAcDBAJNUxQDBAJU/EAD BABY2lADBABY2u8DBABb9e8DBABf1lMDBAFf1lwDBABf1l8DBAGwdrwDBACwdr8D BAG5sUwDBADBoEQDBADBoEgDBALB5DADBADCHJ0DBADURYcwDQYJKoZIhvcNAQEL BQADggEBADuB8d61qf6yLUGZSAapY6eOah/NVJXOqukRIV/uNEOtAxkoGjzdD9ij MTjP7dEzKUVSuUzOF7cDCm0D6C8MR+WIY/X14IaJ8ixfB8uoTyDkYiPHYnzvyQ2M w9upshO42q9gzfJ2nGvYur+2YcfRxfqY/OXNb8L9tdGscBgodN8KNrdvZ9CtY/1n P8qSkm+EqxLnd9r4bL7gR8R8JqMHtrCyO2ZuHPBLfWDIWaZJyngvmliCrD9ruBiR B8z1EoHGXIBoUh0OHaamlwgae909KP4QoqujtS2tm9bhHO0NcRk1jwDecRn+ENAm ldQQN7FA8I8dZLX23nSu6T4/aRny/mw= -----END CERTIFICATE-----Generated at Mon Jan 19 21:24:16 2026 by rpki-client