This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/VI_14hIZSMxriiYvEo8zurAkwos.roa File: VI_14hIZSMxriiYvEo8zurAkwos.roa (raw, json) Hash identifier: vbC8BhXmxZVktP9z4L8ZbNsqrQlwhBR+BWbQ4L1r4nk= Subject key identifier: 54:8F:F5:E2:12:19:48:CC:6B:8A:26:2F:12:8F:33:BA:B0:24:C2:8B Certificate issuer: /CN=401d19615ace2bbbcfa09169080808762a64b17e Certificate serial: 019B797E039FE22AE6A8BBA10544F4A01848 Authority key identifier: 40:1D:19:61:5A:CE:2B:BB:CF:A0:91:69:08:08:08:76:2A:64:B1:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/VI_14hIZSMxriiYvEo8zurAkwos.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208716 IP address blocks: 91.220.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:03:9f:e2:2a:e6:a8:bb:a1:05:44:f4:a0:18:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401d19615ace2bbbcfa09169080808762a64b17e Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=548ff5e2121948cc6b8a262f128f33bab024c28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:a1:5f:9a:7c:6c:89:64:9c:e3:09:64:90: 80:d4:78:b5:a8:9f:43:75:50:40:2c:1c:9b:8c:d7: 7d:97:74:2e:85:82:f6:e7:fa:ad:79:79:a2:f7:6c: d6:ef:44:f5:0f:bf:30:58:3b:57:7a:a5:a6:45:30: 72:1e:63:cf:cd:ad:b5:dc:69:bc:69:b0:77:4a:0a: 59:37:71:fc:81:96:58:cb:5d:a2:6d:b9:6a:03:3c: 88:f5:e0:be:59:8b:e6:d9:62:b3:cd:ac:4d:60:89: ec:00:f2:34:69:4a:50:7a:25:76:40:90:1d:d3:7c: 59:f6:94:68:f1:19:4d:74:62:b2:1d:ab:eb:4f:f4: 59:2c:eb:1f:85:cb:e8:d2:f1:bd:cf:c5:1d:df:a5: 23:2e:da:2c:9f:6a:af:e5:87:5b:ab:7e:07:e3:00: 9e:2a:77:f2:50:6e:37:9a:ed:8b:7a:b0:f1:f4:80: b3:40:f9:bf:1d:a0:fc:c7:b7:0b:3b:fc:16:24:03: ec:71:e3:09:3e:ae:f5:12:1f:4f:80:01:cf:9c:99: af:b6:79:8a:9c:9d:60:72:bb:fd:ec:9b:06:34:42: c3:6e:0e:c0:7d:c6:bc:36:9e:3a:5a:8e:9d:11:97: 5f:d4:77:6b:00:1d:d1:8d:b7:32:0c:35:33:e2:75: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8F:F5:E2:12:19:48:CC:6B:8A:26:2F:12:8F:33:BA:B0:24:C2:8B X509v3 Authority Key Identifier: keyid:40:1D:19:61:5A:CE:2B:BB:CF:A0:91:69:08:08:08:76:2A:64:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/VI_14hIZSMxriiYvEo8zurAkwos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.15.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:7c:4f:d9:50:eb:71:f2:38:3a:ca:d7:97:ad:de:7b:fc:3e: df:d8:ea:e5:6a:23:89:d0:db:92:28:1f:77:20:d4:a0:40:29: 55:b2:20:64:e6:a8:e1:d1:e3:26:d4:56:76:3e:97:b5:db:00: f4:69:14:10:59:05:18:46:bf:24:87:79:e0:15:45:65:a7:1f: 17:54:3f:8c:b3:26:7f:d7:63:a6:c8:a7:71:60:08:57:09:5f: 5a:00:97:5a:d8:cb:16:76:ea:c3:b4:aa:c6:f0:31:05:5c:df: 3d:8c:35:fa:69:17:ed:91:d4:bc:56:0e:f7:f1:f0:f0:4f:cc: 69:26:cc:6c:11:41:66:67:5e:a7:19:6c:f5:18:20:78:77:19: 29:7b:ea:c4:91:0f:1d:19:5a:80:53:73:ba:21:f8:df:1d:c2: f7:9a:c4:43:8f:d2:34:68:9a:0b:ec:11:c0:1f:83:5c:91:2e: a2:86:1d:41:5d:5b:cd:7d:98:3e:05:8b:a7:d3:81:1a:bf:50: 89:6e:b6:af:3a:41:3c:9d:f8:6d:a6:b4:8f:38:a9:4a:58:00: 41:6e:c2:5d:62:2d:d5:5a:be:1a:72:39:cd:f7:49:c9:16:62: de:8f:57:ec:a4:40:5a:17:cd:77:30:e3:7d:0e:1b:cf:da:a6: 4b:9e:bd:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgOf4irmqLuhBUT0oBhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMWQxOTYxNWFjZTJiYmJjZmEwOTE2OTA4MDgwODc2MmE2 NGIxN2UwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDhmZjVlMjEyMTk0OGNjNmI4YTI2MmYxMjhmMzNiYWIwMjRjMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkWhX5p8bIlknOMJZJCA1Hi1qJ9D dVBALBybjNd9l3QuhYL25/qteXmi92zW70T1D78wWDtXeqWmRTByHmPPza213Gm8 abB3SgpZN3H8gZZYy12ibblqAzyI9eC+WYvm2WKzzaxNYInsAPI0aUpQeiV2QJAd 03xZ9pRo8RlNdGKyHavrT/RZLOsfhcvo0vG9z8Ud36UjLtosn2qv5Ydbq34H4wCe KnfyUG43mu2LerDx9ICzQPm/HaD8x7cLO/wWJAPsceMJPq71Eh9PgAHPnJmvtnmK nJ1gcrv97JsGNELDbg7Afca8Np46Wo6dEZdf1HdrAB3RjbcyDDUz4nV4uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFSP9eISGUjMa4omLxKPM7qwJMKLMB8GA1UdIwQY MBaAFEAdGWFaziu7z6CRaQgICHYqZLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUIwWllWck9LN3ZQb0pGcENBZ0lkaXBrc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNWRhNzAtNDIxMC00NjNlLTlkYzYt OTc5OTcyYTAwMTRkLzEvVklfMTRoSVpTTXhyaWlZdkVvOHp1ckFrd29zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iNWRhNzAtNDIxMC00NjNlLTlkYzYtOTc5OTcyYTAwMTRk LzEvUUIwWllWck9LN3ZQb0pGcENBZ0lkaXBrc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wPMA0G CSqGSIb3DQEBCwUAA4IBAQAefE/ZUOtx8jg6yteXrd57/D7f2OrlaiOJ0NuSKB93 INSgQClVsiBk5qjh0eMm1FZ2Ppe12wD0aRQQWQUYRr8kh3ngFUVlpx8XVD+MsyZ/ 12OmyKdxYAhXCV9aAJda2MsWdurDtKrG8DEFXN89jDX6aRftkdS8Vg738fDwT8xp JsxsEUFmZ16nGWz1GCB4dxkpe+rEkQ8dGVqAU3O6IfjfHcL3msRDj9I0aJoL7BHA H4NckS6ihh1BXVvNfZg+BYun04Eav1CJbravOkE8nfhtprSPOKlKWABBbsJdYi3V Wr4acjnN90nJFmLej1fspEBaF813MON9DhvP2qZLnr3E -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:55 2026 by rpki-client