This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa File: vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa (raw, json) Hash identifier: R/EtSB73ZGWrRnb/Gf2BJqZ0RYrtTKAiO9HiXzdMKyc= Subject key identifier: BD:F8:3E:48:08:EE:A9:42:43:A4:CF:9D:23:B8:15:D6:E0:90:DA:EC Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba Certificate serial: 019B79ED5C89063509894AB3EBDA46622B27 Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31543 IP address blocks: 185.236.188.0/22 maxlen: 24 2a0d:c900::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5c:89:06:35:09:89:4a:b3:eb:da:46:62:2b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdf83e4808eea94243a4cf9d23b815d6e090daec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:9e:d7:90:aa:04:96:8f:fc:e0:58:7b:31: a5:20:20:b4:3e:ca:43:4b:ad:32:e8:37:3e:90:bb: 09:39:11:ef:e9:2c:5d:56:49:eb:3f:50:07:bd:fa: 42:e6:70:dd:1e:4f:ad:41:95:d5:da:8d:71:b7:ad: 61:de:5e:fd:b6:eb:c9:7c:50:a0:96:eb:be:c9:d0: b9:9e:ff:ad:7f:24:db:38:5a:77:d9:5b:cb:cc:85: fa:5c:a9:43:e7:0e:00:ac:5c:99:d1:5d:41:87:88: f3:f1:73:05:7f:e7:18:75:00:30:46:17:f6:62:f2: b7:6e:09:43:c2:a9:72:fb:2b:c0:d8:e3:3b:ea:c9: 34:38:d5:bd:f6:b9:17:38:76:dd:2e:18:e0:b8:07: a3:57:3e:c3:52:b6:f0:72:86:18:67:43:04:e4:7b: c4:18:65:dd:7a:7b:03:b6:a6:3a:e3:3e:c9:f8:e4: 24:1c:d8:e1:0a:6c:a8:9d:ed:67:85:18:f7:c0:17: 7e:35:e9:a9:14:8e:12:c3:4f:1b:bb:99:28:4b:35: fa:39:f3:35:db:0c:05:14:1f:d2:14:ab:3e:ef:7e: f5:f0:7a:d1:3b:39:b6:ba:52:55:d4:06:9b:49:e7: fd:c7:87:25:ba:89:21:18:58:38:6d:71:78:4c:80: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F8:3E:48:08:EE:A9:42:43:A4:CF:9D:23:B8:15:D6:E0:90:DA:EC X509v3 Authority Key Identifier: keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.188.0/22 IPv6: 2a0d:c900::/29 Signature Algorithm: sha256WithRSAEncryption 56:a0:cb:bd:37:b8:99:ca:01:61:71:2c:e5:8e:33:b7:69:ff: 3d:00:60:26:9d:9b:9c:9a:ac:26:1a:58:a7:8d:9c:e1:da:27: d4:26:d3:66:6f:0e:82:b4:13:fb:a3:08:00:cb:9f:33:b7:33: c8:38:55:aa:32:36:be:73:8f:e2:dd:e9:41:28:de:ac:83:3d: 5f:de:92:90:cc:a5:20:ea:de:95:9a:f3:42:17:d4:fe:26:67: 66:a8:27:e3:10:6a:be:d5:ab:0e:11:df:26:41:e2:ea:d2:a8: 6a:91:a9:2e:76:97:ff:5a:3a:83:45:69:ad:85:3c:e3:e7:b6: 4d:4d:5e:35:f9:d4:96:bd:39:fa:f6:15:2e:fc:d1:8f:73:b8: c3:d7:58:4d:d1:8d:97:57:4a:0e:d1:74:37:f8:b4:56:45:c6: 0e:df:83:8b:c9:4d:22:99:6f:79:82:ab:1e:a8:20:68:b8:24: f1:17:d9:81:80:b6:b6:d0:28:66:b6:97:76:ab:46:88:a8:5e: b8:08:84:66:7b:93:3a:45:82:a4:d9:4a:60:a6:0e:6d:67:d1: a3:49:fb:1d:f8:9e:5a:e0:df:96:a8:26:38:71:8a:1e:1f:89: 43:47:0b:76:03:b5:4d:a0:cb:14:1f:e2:64:bc:11:e2:06:1d: 28:84:a9:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57VyJBjUJiUqz69pGYisnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2VmYzljYzNkOWM0YmQyOWEyYmJjMTU1NTFmODJmMjVj ZjExYmEwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGY4M2U0ODA4ZWVhOTQyNDNhNGNmOWQyM2I4MTVkNmUwOTBkYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbKe15CqBJaP/OBYezGlICC0PspD S60y6Dc+kLsJORHv6SxdVknrP1AHvfpC5nDdHk+tQZXV2o1xt61h3l79tuvJfFCg luu+ydC5nv+tfyTbOFp32VvLzIX6XKlD5w4ArFyZ0V1Bh4jz8XMFf+cYdQAwRhf2 YvK3bglDwqly+yvA2OM76sk0ONW99rkXOHbdLhjguAejVz7DUrbwcoYYZ0ME5HvE GGXdensDtqY64z7J+OQkHNjhCmyone1nhRj3wBd+NempFI4Sw08bu5koSzX6OfM1 2wwFFB/SFKs+73718HrROzm2ulJV1AabSef9x4cluokhGFg4bXF4TIDTYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL34PkgI7qlCQ6TPnSO4FdbgkNrsMB8GA1UdIwQY MBaAFOR+/JzD2cS9KaK7wVVR+C8lzxG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUt NmUyZjU4OGMwYzdlLzEvdmZnLVNBanVxVUpEcE0tZEk3Z1YxdUNRMnV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUtNmUyZjU4OGMwYzdl LzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuey8MA0E AgACMAcDBQMqDckAMA0GCSqGSIb3DQEBCwUAA4IBAQBWoMu9N7iZygFhcSzljjO3 af89AGAmnZucmqwmGlinjZzh2ifUJtNmbw6CtBP7owgAy58ztzPIOFWqMja+c4/i 3elBKN6sgz1f3pKQzKUg6t6VmvNCF9T+JmdmqCfjEGq+1asOEd8mQeLq0qhqkaku dpf/WjqDRWmthTzj57ZNTV41+dSWvTn69hUu/NGPc7jD11hN0Y2XV0oO0XQ3+LRW RcYO34OLyU0imW95gqseqCBouCTxF9mBgLa20Chmtpd2q0aIqF64CIRme5M6RYKk 2Upgpg5tZ9GjSfsd+J5a4N+WqCY4cYoeH4lDRwt2A7VNoMsUH+JkvBHiBh0ohKk0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:16 2026 by rpki-client