This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Vs1DHp_Ytqjv6-x0Cfj7O5cxIoQ.roa File: Vs1DHp_Ytqjv6-x0Cfj7O5cxIoQ.roa (raw, json) Hash identifier: pY2foHYXUULi03p9Fhs4PL4PCT/ekZHTe2pJ20mlpk8= Subject key identifier: 56:CD:43:1E:9F:D8:B6:A8:EF:EB:EC:74:09:F8:FB:3B:97:31:22:84 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B91513D944BBF4BA7C6B18600E731ABB1 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Vs1DHp_Ytqjv6-x0Cfj7O5cxIoQ.roa Signing time: Tue 06 Jan 2026 03:19:39 +0000 ROA not before: Tue 06 Jan 2026 03:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211484 IP address blocks: 172.110.219.0/24 maxlen: 24 172.110.222.0/24 maxlen: 24 194.76.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:91:51:3d:94:4b:bf:4b:a7:c6:b1:86:00:e7:31:ab:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 6 03:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56cd431e9fd8b6a8efebec7409f8fb3b97312284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:34:15:a6:77:c8:6b:eb:c1:f0:33:0e:eb: 99:9b:30:a5:72:2d:33:b4:fe:64:3f:67:c1:3a:c4: b9:0d:e6:4e:98:34:9c:7e:39:0e:73:5a:35:82:05: 21:98:a2:01:34:5d:0c:b2:18:ab:8a:73:03:9c:29: 25:94:f6:73:bf:7e:64:38:63:b7:c8:7b:63:f4:da: c8:82:b7:22:e9:13:30:2c:82:b2:7d:87:8e:ae:0b: 49:f3:f9:a4:2e:09:85:b3:30:04:eb:03:1f:e4:6e: 79:84:9f:d7:0a:5f:ed:a2:d6:45:ea:10:6d:88:2e: 90:af:0a:35:8b:e6:ee:69:58:ab:d6:8c:d6:a4:bc: d0:6c:b5:ae:08:21:15:fa:75:62:59:d7:eb:91:3f: 47:a0:3d:45:b0:cb:f3:e9:ef:93:3b:49:b8:79:c9: 17:ab:ba:b6:fd:1e:bb:57:a8:9d:21:55:52:eb:b1: b6:9a:20:76:9e:cb:37:f3:e2:19:d6:ab:3e:ee:e5: 58:68:21:78:0e:c1:59:4c:71:1c:b9:a5:9d:f4:56: 25:db:8c:ce:bd:6c:5f:e2:ad:01:a2:fe:ea:d3:4d: ec:01:40:57:30:f6:df:61:a0:0c:77:ef:ef:17:6e: f4:2d:27:29:e0:f8:f3:4b:c7:66:62:5c:99:c9:c4: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:43:1E:9F:D8:B6:A8:EF:EB:EC:74:09:F8:FB:3B:97:31:22:84 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Vs1DHp_Ytqjv6-x0Cfj7O5cxIoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.219.0/24 172.110.222.0/24 194.76.0.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:68:5c:a1:de:95:3d:1d:5c:03:c6:12:fd:0d:20:bf:70:be: ea:df:28:f5:1a:31:b9:83:90:d4:8a:50:71:02:87:b1:0e:7e: e4:56:14:ca:7b:6e:ad:0f:1b:1d:38:a5:2b:b5:3e:9f:fe:59: 6b:f7:31:bb:76:55:45:4d:b6:21:8c:f1:a5:43:28:97:04:5c: da:4d:a1:23:0c:da:be:6f:e7:e2:91:6e:fb:a3:ec:46:04:03: 7f:eb:91:d2:bd:3f:8f:77:b5:b3:a9:b3:a6:3d:42:80:86:ff: dc:b1:08:98:f5:ed:a8:ec:26:3f:25:57:a8:39:6d:47:84:19: 21:17:e7:ee:3b:31:7b:cf:dd:df:4d:52:78:2a:cb:37:4a:9e: 5b:bb:85:e7:94:33:16:8d:74:f2:28:42:c1:c7:d2:6c:2f:58: 00:c4:07:5c:bb:f7:6a:1d:5d:39:ee:c5:88:a5:d5:6a:79:e8: fb:76:ce:fe:20:dd:27:05:b1:83:00:a8:58:dc:43:58:a6:aa: 0c:75:bc:08:c3:24:bf:bf:03:d6:7d:ee:60:d0:85:16:d1:63: 31:a3:80:74:de:24:81:48:c9:b9:85:26:d7:d6:ac:c4:ee:7e: 09:a5:b9:74:02:3d:9c:62:16:2a:c8:1e:e1:dc:7f:8f:5c:63: 0f:16:5a:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuRUT2US79Lp8axhgDnMauxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTA2MDMxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmNkNDMxZTlmZDhiNmE4ZWZlYmVjNzQwOWY4ZmIzYjk3MzEyMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUI0FaZ3yGvrwfAzDuuZmzClci0z tP5kP2fBOsS5DeZOmDScfjkOc1o1ggUhmKIBNF0MshirinMDnCkllPZzv35kOGO3 yHtj9NrIgrci6RMwLIKyfYeOrgtJ8/mkLgmFszAE6wMf5G55hJ/XCl/totZF6hBt iC6Qrwo1i+buaVir1ozWpLzQbLWuCCEV+nViWdfrkT9HoD1FsMvz6e+TO0m4eckX q7q2/R67V6idIVVS67G2miB2nss38+IZ1qs+7uVYaCF4DsFZTHEcuaWd9FYl24zO vWxf4q0Bov7q003sAUBXMPbfYaAMd+/vF270LScp4PjzS8dmYlyZycQjpwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFbNQx6f2Lao7+vsdAn4+zuXMSKEMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvVnMxREhwX1l0cWp2Ni14MENmajdPNWN4SW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArG7bAwQA rG7eAwQAwkwAMA0GCSqGSIb3DQEBCwUAA4IBAQAaaFyh3pU9HVwDxhL9DSC/cL7q 3yj1GjG5g5DUilBxAoexDn7kVhTKe26tDxsdOKUrtT6f/llr9zG7dlVFTbYhjPGl QyiXBFzaTaEjDNq+b+fikW77o+xGBAN/65HSvT+Pd7WzqbOmPUKAhv/csQiY9e2o 7CY/JVeoOW1HhBkhF+fuOzF7z93fTVJ4Kss3Sp5bu4XnlDMWjXTyKELBx9JsL1gA xAdcu/dqHV057sWIpdVqeej7ds7+IN0nBbGDAKhY3ENYpqoMdbwIwyS/vwPWfe5g 0IUW0WMxo4B03iSBSMm5hSbX1qzE7n4Jpbl0Aj2cYhYqyB7h3H+PXGMPFlox -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:27 2026 by rpki-client