This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa File: VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa (raw, json) Hash identifier: 1oHM+ulR5lgMRMtepZExqDQwuwKJ8Qpfg/fB1/zmAX8= Subject key identifier: 55:FC:D9:2F:2F:EA:0D:D1:89:8B:D9:52:13:09:A3:C3:BA:0B:B7:99 Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f Certificate serial: 019B7AC7BCFBAF12F9393C25583F40030C63 Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa Signing time: Thu 01 Jan 2026 18:17:48 +0000 ROA not before: Thu 01 Jan 2026 18:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21212 IP address blocks: 185.110.96.0/24 maxlen: 24 185.110.97.0/24 maxlen: 24 185.110.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bc:fb:af:12:f9:39:3c:25:58:3f:40:03:0c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55fcd92f2fea0dd1898bd9521309a3c3ba0bb799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:ec:98:40:66:52:cf:e9:59:36:21:11:79: 40:ac:71:4f:65:4f:a2:c5:ff:f1:37:50:14:5e:22: d2:74:8f:76:2c:9a:0d:70:c1:8b:1c:b9:4f:79:1d: 65:73:c4:a1:c1:c2:b2:56:8e:41:8a:e3:0a:b7:50: 06:0c:6a:96:02:e4:d9:30:a2:0f:ef:94:f2:92:0c: 12:05:b4:55:8b:94:d9:16:9a:98:78:45:e9:56:ad: 04:85:bc:b1:da:ec:fc:8f:ca:77:d4:a1:a5:48:33: 4e:c1:66:46:27:ea:01:c9:5e:40:4e:81:3b:ab:5f: 6a:e0:f8:97:e2:68:52:5e:84:e1:01:05:88:a9:fc: ee:93:43:41:27:9a:8c:9e:fe:90:8c:40:a9:84:e3: 24:36:c8:f5:c9:20:3b:6e:1f:16:4b:77:a5:ac:bc: e8:a2:c9:60:a0:76:8a:e6:c8:06:80:aa:e6:18:57: 3f:87:22:26:10:82:36:5d:ab:06:1a:3c:86:18:6e: 28:34:aa:95:b4:d6:a0:fe:80:6e:bd:fb:1c:25:06: fb:f5:94:7d:a4:b6:88:c3:60:b5:39:0d:2d:d3:a5: 9f:7a:91:6b:a6:ee:e8:81:a4:3e:fb:b4:98:03:8a: ca:a6:4e:e9:60:2a:86:6c:57:98:98:94:21:e4:f4: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FC:D9:2F:2F:EA:0D:D1:89:8B:D9:52:13:09:A3:C3:BA:0B:B7:99 X509v3 Authority Key Identifier: keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.96.0-185.110.98.255 Signature Algorithm: sha256WithRSAEncryption 82:e5:39:e6:be:f2:e5:23:30:1f:d0:6b:63:ce:f0:d3:e1:a1: 1a:48:1d:d2:81:f1:48:b8:ff:23:45:a9:08:d7:eb:94:5d:ef: 89:76:b8:df:e4:5d:23:43:ed:f4:f1:40:f6:cd:fa:42:09:52: 74:06:b2:6f:bc:42:0e:62:eb:2b:fa:4d:92:ef:ad:8b:f6:5f: 3a:b6:c1:65:f3:20:88:16:39:7d:f6:24:bd:d6:76:2a:79:09: e3:a6:16:cc:eb:3e:83:c4:85:16:f3:17:01:7e:d8:d7:5e:07: 8f:4f:64:39:70:72:7e:90:b8:eb:19:af:9f:22:01:d1:4d:3f: 34:36:75:99:e7:d8:89:2a:93:06:66:db:51:42:e3:5a:5a:93: ad:78:e0:3d:8f:d2:95:ff:eb:4d:25:7a:9b:db:20:3b:dc:ff: 70:ed:b5:fa:cf:66:e8:b8:0d:3b:4f:67:23:6f:c4:1d:43:fb: 6c:e8:60:11:bd:08:ab:25:8b:7d:2c:a9:29:28:b5:95:ca:54: 8f:85:64:70:16:cb:da:d7:b6:c5:18:d7:d8:fc:51:85:94:46: a2:dc:61:b0:33:2c:ba:94:4d:eb:b5:cf:a6:aa:86:51:b5:6f: 97:53:1b:2a:c3:ed:a0:a4:80:61:ac:6b:4a:41:6b:64:39:1c: b5:f5:7a:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x7z7rxL5OTwlWD9AAwxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2VjMDUzNzI0MmY0NGNlN2Q1OTMzZTliMzIyMDRiM2Y4 NWU5OWYwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWZjZDkyZjJmZWEwZGQxODk4YmQ5NTIxMzA5YTNjM2JhMGJiNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmXsmEBmUs/pWTYhEXlArHFPZU+i xf/xN1AUXiLSdI92LJoNcMGLHLlPeR1lc8ShwcKyVo5BiuMKt1AGDGqWAuTZMKIP 75TykgwSBbRVi5TZFpqYeEXpVq0Ehbyx2uz8j8p31KGlSDNOwWZGJ+oByV5AToE7 q19q4PiX4mhSXoThAQWIqfzuk0NBJ5qMnv6QjECphOMkNsj1ySA7bh8WS3elrLzo oslgoHaK5sgGgKrmGFc/hyImEII2XasGGjyGGG4oNKqVtNag/oBuvfscJQb79ZR9 pLaIw2C1OQ0t06WfepFrpu7ogaQ++7SYA4rKpk7pYCqGbFeYmJQh5PSbJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFX82S8v6g3RiYvZUhMJo8O6C7eZMB8GA1UdIwQY MBaAFIo+wFNyQvRM59WTPpsyIEs/hemfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZWIwMDItZDI2YS00NmQ2LTlkODct ODQwOTMwNjFlOWZmLzEvVmZ6Wkx5X3FEZEdKaTlsU0V3bWp3N29MdDVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZWIwMDItZDI2YS00NmQ2LTlkODctODQwOTMwNjFlOWZm LzEvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAW5bmAD BAC5bmIwDQYJKoZIhvcNAQELBQADggEBAILlOea+8uUjMB/Qa2PO8NPhoRpIHdKB 8Ui4/yNFqQjX65Rd74l2uN/kXSND7fTxQPbN+kIJUnQGsm+8Qg5i6yv6TZLvrYv2 Xzq2wWXzIIgWOX32JL3Wdip5CeOmFszrPoPEhRbzFwF+2NdeB49PZDlwcn6QuOsZ r58iAdFNPzQ2dZnn2IkqkwZm21FC41pak6144D2P0pX/600lepvbIDvc/3DttfrP Zui4DTtPZyNvxB1D+2zoYBG9CKsli30sqSkotZXKVI+FZHAWy9rXtsUY19j8UYWU RqLcYbAzLLqUTeu1z6aqhlG1b5dTGyrD7aCkgGGsa0pBa2Q5HLX1evo= -----END CERTIFICATE-----Generated at Tue Jan 20 11:23:36 2026 by rpki-client