This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/VJNeRODqD6T5IMeQoh6SGZFSsUA.roa File: VJNeRODqD6T5IMeQoh6SGZFSsUA.roa (raw, json) Hash identifier: Zl8wYu5uQXUxR+F5/UErv6oGRThFNITBwnj1Q2V8QHI= Subject key identifier: 54:93:5E:44:E0:EA:0F:A4:F9:20:C7:90:A2:1E:92:19:91:52:B1:40 Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f Certificate serial: 019B77C7128F00A974EA1CDDE6192E25AE1D Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/VJNeRODqD6T5IMeQoh6SGZFSsUA.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212688 IP address blocks: 212.24.125.0/24 maxlen: 24 2001:67c:840::/48 maxlen: 48 2a11:28c0::/32 maxlen: 48 2a11:28c0::/48 maxlen: 48 2a11:28c0:1::/48 maxlen: 48 2a11:28c0:2::/48 maxlen: 48 2a11:28c0:acab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:12:8f:00:a9:74:ea:1c:dd:e6:19:2e:25:ae:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54935e44e0ea0fa4f920c790a21e92199152b140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:53:aa:1f:8b:a8:5b:8d:3e:50:a5:4e:b1: 07:74:db:8c:6e:c0:53:97:8c:42:6a:bb:01:ec:cf: 58:3c:b5:22:00:92:05:c6:00:f0:30:8e:b7:e1:15: 61:31:1d:ab:1c:ee:04:f2:10:29:7d:13:81:4f:93: d1:31:9e:16:5b:0c:76:55:a9:f7:98:3b:0e:a9:ae: 0d:e8:8d:b7:79:4d:39:c2:ec:58:ff:ad:9a:3d:e3: b8:16:45:0c:18:7e:27:47:3b:74:af:bc:f4:d6:91: 60:6e:5a:a7:d0:e8:0d:dd:d5:4e:f6:00:c1:53:f3: de:12:5b:1b:89:e6:ab:32:bd:82:8f:e3:57:5d:4d: fa:43:1e:76:07:69:d7:70:0c:bc:f6:ea:ff:2d:03: e8:f5:0a:19:26:b5:f0:4a:9c:bf:cc:01:c2:82:1e: 42:68:1f:c2:b7:77:2e:21:84:8b:6c:16:6f:f0:73: a3:c2:52:aa:1c:c4:f3:fe:3b:3a:84:53:35:91:14: 75:b0:d4:53:2b:7c:ac:20:3b:ae:c2:f5:da:44:3c: 9f:d5:15:fc:6b:14:7d:46:db:06:5f:5f:49:c6:84: ea:8c:d9:d1:2c:e9:e5:cb:73:ac:cb:96:53:5d:08: 75:d4:a7:f6:94:3a:85:43:e0:7e:1a:02:04:8b:d6: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:5E:44:E0:EA:0F:A4:F9:20:C7:90:A2:1E:92:19:91:52:B1:40 X509v3 Authority Key Identifier: keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/VJNeRODqD6T5IMeQoh6SGZFSsUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.24.125.0/24 IPv6: 2001:67c:840::/48 2a11:28c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:82:ef:ea:04:9b:54:7a:aa:71:0c:93:d4:99:48:66:b7:ca: a6:20:3c:6c:6a:d0:b6:bf:d0:3c:4f:31:06:9e:33:02:67:f0: e4:5b:f4:7b:70:5d:86:e5:ba:79:c1:3c:eb:48:bb:f3:58:96: 86:80:46:e9:18:fb:91:58:ee:8c:0c:fe:68:35:f1:a4:92:8a: e3:05:c6:f0:1c:26:54:11:2a:e0:75:5a:01:10:4e:92:75:1a: 86:7e:02:f4:0c:6d:39:b9:b9:69:4d:02:00:a2:12:4b:ff:c2: 53:01:02:1b:03:6e:0e:4c:a6:af:d4:9b:8e:f6:a1:89:1c:c3: 4e:06:26:1b:21:a7:cd:84:a4:4e:de:3b:f7:22:88:6f:4a:a3: 53:21:3c:0f:60:72:77:1c:2b:63:83:60:af:52:6a:19:64:81: 8f:a9:d0:4b:ab:f1:61:0e:34:72:fe:9b:5b:0f:da:0e:01:9a: 45:24:1d:e8:41:0e:30:6f:e7:de:91:a4:00:9c:d0:5e:94:20: a1:af:db:c1:09:5f:c8:8a:bc:3c:3e:d1:ab:04:74:3d:23:7a: 55:09:cc:2e:2a:f9:16:0d:49:c6:0a:af:9a:88:14:0b:c3:d2: da:65:3d:f2:3f:88:28:33:d4:21:b1:fd:38:54:4e:ea:3e:27: 9d:5c:8d:38 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xxKPAKl06hzd5hkuJa4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy YWI0M2YwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDkzNWU0NGUwZWEwZmE0ZjkyMGM3OTBhMjFlOTIxOTkxNTJiMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00tTqh+LqFuNPlClTrEHdNuMbsBT l4xCarsB7M9YPLUiAJIFxgDwMI634RVhMR2rHO4E8hApfROBT5PRMZ4WWwx2Van3 mDsOqa4N6I23eU05wuxY/62aPeO4FkUMGH4nRzt0r7z01pFgblqn0OgN3dVO9gDB U/PeElsbiearMr2Cj+NXXU36Qx52B2nXcAy89ur/LQPo9QoZJrXwSpy/zAHCgh5C aB/Ct3cuIYSLbBZv8HOjwlKqHMTz/js6hFM1kRR1sNRTK3ysIDuuwvXaRDyf1RX8 axR9RtsGX19JxoTqjNnRLOnly3Osy5ZTXQh11Kf2lDqFQ+B+GgIEi9ZYLwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFSTXkTg6g+k+SDHkKIekhmRUrFAMB8GA1UdIwQY MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt OTVkNjBiM2U0NmNjLzEvVkpOZVJPRHFENlQ1SU1lUW9oNlNHWkZTc1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQA1Bh9MBYE AgACMBADBwAgAQZ8CEADBQAqESjAMA0GCSqGSIb3DQEBCwUAA4IBAQBPgu/qBJtU eqpxDJPUmUhmt8qmIDxsatC2v9A8TzEGnjMCZ/DkW/R7cF2G5bp5wTzrSLvzWJaG gEbpGPuRWO6MDP5oNfGkkorjBcbwHCZUESrgdVoBEE6SdRqGfgL0DG05ublpTQIA ohJL/8JTAQIbA24OTKav1JuO9qGJHMNOBiYbIafNhKRO3jv3IohvSqNTITwPYHJ3 HCtjg2CvUmoZZIGPqdBLq/FhDjRy/ptbD9oOAZpFJB3oQQ4wb+fekaQAnNBelCCh r9vBCV/Iirw8PtGrBHQ9I3pVCcwuKvkWDUnGCq+aiBQLw9LaZT3yP4goM9Qhsf04 VE7qPiedXI04 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:25 2026 by rpki-client