This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/vndxFTa05fIa6-yUCZPvIBrR_Rc.roa File: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (raw, json) Hash identifier: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4= Subject key identifier: BE:77:71:15:36:B4:E5:F2:1A:EB:EC:94:09:93:EF:20:1A:D1:FD:17 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80A599EA998D4797552F4DBA17312 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/vndxFTa05fIa6-yUCZPvIBrR_Rc.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 185.232.18.0/24 maxlen: 24 185.232.19.0/24 maxlen: 24 185.246.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0a:59:9e:a9:98:d4:79:75:52:f4:db:a1:73:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be77711536b4e5f21aebec940993ef201ad1fd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:9a:11:a4:1f:8d:a1:77:1b:f5:eb:d2:d0: ed:79:d6:45:9d:36:bc:56:22:79:b5:0d:7c:c6:ad: f7:5e:64:f9:a8:ba:5a:55:53:96:88:ad:4c:12:5a: c3:08:a1:2c:ef:85:b7:9f:bc:22:68:a8:2a:23:e8: ad:5d:81:23:c7:ea:9c:dc:93:bd:71:7f:1a:51:85: d0:2b:e0:a2:b3:be:de:75:8f:1c:83:1c:f7:2b:fe: cc:aa:59:70:71:2e:99:90:38:b6:85:cd:ad:55:b1: e5:c5:33:ae:08:a7:40:ec:d1:9d:83:6d:30:2e:53: 98:68:25:e0:96:03:bd:5f:e0:bb:9d:ea:7b:63:16: 98:82:30:c7:95:e1:e9:1f:84:09:a2:df:cb:99:a7: 6b:0e:3f:62:42:00:84:eb:d8:ef:bb:f8:e8:02:0c: ce:f0:73:0e:98:51:02:ee:df:9f:6d:2f:e5:1f:c8: 75:71:83:6b:ae:87:e0:56:fe:ae:8e:f8:2b:e1:76: fc:27:67:e8:9b:c3:1f:ba:f9:03:40:e1:03:83:07: cb:b0:8e:6f:d5:7e:a3:ed:09:2b:d3:97:36:7a:ac: ae:cb:17:3d:9d:04:b9:c8:5f:fd:8a:7d:a7:e0:ba: 5d:88:b8:0e:5a:c5:14:bc:e7:40:e1:ff:19:50:35: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:77:71:15:36:B4:E5:F2:1A:EB:EC:94:09:93:EF:20:1A:D1:FD:17 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/vndxFTa05fIa6-yUCZPvIBrR_Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.18.0/23 185.246.216.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:7d:ce:7b:03:29:ed:c2:2f:83:1f:1d:ce:1a:21:37:12:6a: 54:39:74:e7:7f:06:de:a9:7a:bf:2b:de:74:ba:39:3f:b1:3c: 8d:49:9d:ef:80:8b:67:d4:42:7a:8d:35:fd:e4:ea:c5:db:ec: 33:fa:5c:4e:f2:ed:e9:d1:05:0b:ed:cf:66:8e:75:c7:ce:e5: 16:1d:30:2e:93:fd:dc:d3:0b:bb:75:bb:d9:d9:0b:a9:c7:69: be:e3:c2:cd:c1:53:e5:b9:08:9a:6b:86:c8:66:51:5f:d7:c9: 1c:ce:e4:e5:dc:17:6b:80:4f:a1:5a:8c:f1:02:44:3b:43:6d: be:54:dd:91:38:15:07:3b:73:be:f8:33:be:f1:3e:b3:ed:60: 43:f2:41:bb:c1:1a:9d:4b:8a:62:60:cc:94:47:e9:44:c5:c2: 3a:8c:4c:d6:cc:c0:21:aa:06:cd:13:53:0b:22:31:2c:35:e4: 04:39:ff:fb:a9:97:69:66:e0:4a:21:40:6f:8a:05:67:5f:6f: f4:48:5f:6b:35:23:e2:c7:a3:e8:65:fe:74:b8:68:e1:77:28: 59:ce:4a:65:de:40:f2:27:de:a0:23:73:32:32:b7:b2:e4:1d: 79:1d:83:15:5e:dd:a9:87:6f:f6:48:db:1b:27:a9:84:b7:1c: 87:a6:d0:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yApZnqmY1Hl1UvTboXMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTc3NzExNTM2YjRlNWYyMWFlYmVjOTQwOTkzZWYyMDFhZDFmZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yuaEaQfjaF3G/Xr0tDtedZFnTa8 ViJ5tQ18xq33XmT5qLpaVVOWiK1MElrDCKEs74W3n7wiaKgqI+itXYEjx+qc3JO9 cX8aUYXQK+Cis77edY8cgxz3K/7MqllwcS6ZkDi2hc2tVbHlxTOuCKdA7NGdg20w LlOYaCXglgO9X+C7nep7YxaYgjDHleHpH4QJot/LmadrDj9iQgCE69jvu/joAgzO 8HMOmFEC7t+fbS/lH8h1cYNrrofgVv6ujvgr4Xb8J2fom8MfuvkDQOEDgwfLsI5v 1X6j7Qkr05c2eqyuyxc9nQS5yF/9in2n4LpdiLgOWsUUvOdA4f8ZUDXXbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL53cRU2tOXyGuvslAmT7yAa0f0XMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvdm5keEZUYTA1ZklhNi15VUNaUHZJQnJSX1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuegSAwQA ufbYMA0GCSqGSIb3DQEBCwUAA4IBAQBsfc57Ayntwi+DHx3OGiE3EmpUOXTnfwbe qXq/K950ujk/sTyNSZ3vgItn1EJ6jTX95OrF2+wz+lxO8u3p0QUL7c9mjnXHzuUW HTAuk/3c0wu7dbvZ2Qupx2m+48LNwVPluQiaa4bIZlFf18kczuTl3BdrgE+hWozx AkQ7Q22+VN2ROBUHO3O++DO+8T6z7WBD8kG7wRqdS4piYMyUR+lExcI6jEzWzMAh qgbNE1MLIjEsNeQEOf/7qZdpZuBKIUBvigVnX2/0SF9rNSPix6PoZf50uGjhdyhZ zkpl3kDyJ96gI3MyMrey5B15HYMVXt2ph2/2SNsbJ6mEtxyHptAY -----END CERTIFICATE-----Generated at Tue Jan 20 22:01:19 2026 by rpki-client