This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VYXBH7L9HanQdU-7TJTrzIVz61A.roa File: VYXBH7L9HanQdU-7TJTrzIVz61A.roa (raw, json) Hash identifier: tqsUcSGTXq4zMNCiad7pIgOW2+2g/5iqcujcg0xm7O0= Subject key identifier: 55:85:C1:1F:B2:FD:1D:A9:D0:75:4F:BB:4C:94:EB:CC:85:73:EB:50 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB73A5E35F1977B902E11F7C5C0F0E Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VYXBH7L9HanQdU-7TJTrzIVz61A.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61302 IP address blocks: 91.236.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:73:a5:e3:5f:19:77:b9:02:e1:1f:7c:5c:0f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5585c11fb2fd1da9d0754fbb4c94ebcc8573eb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:3b:80:fd:7d:c6:2a:cd:82:bc:7f:4a:1c: d7:5d:f7:b5:52:ee:05:82:f0:21:3b:a6:e7:7d:75: 47:5f:87:66:eb:9c:0d:7a:9e:1f:0f:f2:e6:14:52: ca:48:f8:42:8b:d9:1f:6c:37:58:98:31:d1:1d:8b: 5e:23:5e:8d:43:49:b3:1c:c3:93:90:e1:7e:e9:13: d8:da:73:4e:c8:f5:e7:2c:9e:4d:10:54:a9:66:b0: 4f:3b:e6:f7:07:bb:ab:bd:c2:6c:99:a2:b4:ad:20: a6:f1:ed:ee:3d:50:85:52:10:ae:69:82:8d:33:19: 5e:2f:2f:41:f9:16:db:a8:38:6b:66:90:20:34:f6: 49:17:c7:a2:72:af:f3:df:fc:1a:69:18:cf:53:66: 02:a4:f8:24:93:9f:09:84:49:d7:9e:ab:97:ac:0f: ad:1f:46:0e:d3:1a:31:62:54:5a:19:96:ee:36:c0: 93:a9:13:bd:5f:ad:5b:75:71:70:2a:14:d7:f1:d2: ce:38:73:d3:1b:2f:8b:27:1a:e0:8c:e4:4b:15:bb: d8:11:2b:8e:1d:27:ab:c3:e5:10:91:0b:d6:c3:7d: f7:85:69:5b:42:0a:45:4d:46:31:8b:73:9d:82:28: 21:9b:4f:c6:95:ed:0c:bb:4e:89:e9:86:7a:f8:bf: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:85:C1:1F:B2:FD:1D:A9:D0:75:4F:BB:4C:94:EB:CC:85:73:EB:50 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VYXBH7L9HanQdU-7TJTrzIVz61A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.79.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:64:1a:0c:0f:f7:aa:db:f4:11:44:0f:b2:1b:20:fe:b0:19: dc:38:45:eb:07:0c:a5:f0:bb:59:06:13:16:f3:50:9b:4d:e5: 89:fa:cf:e6:d7:cd:39:12:e2:a3:42:70:96:ca:66:0a:c1:76: f3:57:bf:86:b7:22:15:71:92:2b:c8:a8:b6:3a:73:e8:ca:f2: a7:ae:a7:f9:58:9b:49:52:21:4e:88:a4:17:72:41:ab:8d:4e: 22:a5:43:27:98:05:7f:4e:43:02:56:d3:e1:92:62:a7:e4:5d: bc:53:34:fe:84:b1:4f:28:9a:a6:bf:b3:46:e0:70:64:83:7b: 43:f4:f7:b8:b1:1f:d1:2b:41:af:fa:5c:cf:8e:57:62:a4:e3: a1:0f:2a:55:14:14:1e:0d:cc:7e:92:c5:ed:f3:59:b6:2e:5c: 33:3f:0b:12:8e:0d:54:34:9b:6c:bc:9b:e0:61:0a:38:e0:a9: 10:df:94:7f:5c:e9:2a:47:01:95:ed:ff:52:b1:99:f8:98:77: c9:36:2a:92:7d:e2:b4:86:c4:ce:97:59:ae:a9:36:7a:1f:db: 58:a8:16:cb:25:a3:9d:33:e8:bb:30:70:50:4d:ee:8b:bd:9c: 0e:66:8c:86:d6:8b:cf:d7:90:7e:68:e7:d4:93:dc:1e:3e:de: 78:39:20:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3Ol418Zd7kC4R98XA8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTg1YzExZmIyZmQxZGE5ZDA3NTRmYmI0Yzk0ZWJjYzg1NzNlYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mc7gP19xirNgrx/ShzXXfe1Uu4F gvAhO6bnfXVHX4dm65wNep4fD/LmFFLKSPhCi9kfbDdYmDHRHYteI16NQ0mzHMOT kOF+6RPY2nNOyPXnLJ5NEFSpZrBPO+b3B7urvcJsmaK0rSCm8e3uPVCFUhCuaYKN MxleLy9B+RbbqDhrZpAgNPZJF8eicq/z3/waaRjPU2YCpPgkk58JhEnXnquXrA+t H0YO0xoxYlRaGZbuNsCTqRO9X61bdXFwKhTX8dLOOHPTGy+LJxrgjORLFbvYESuO HSerw+UQkQvWw333hWlbQgpFTUYxi3Odgighm0/Gle0Mu06J6YZ6+L8RzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWFwR+y/R2p0HVPu0yU68yFc+tQMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvVllYQkg3TDlIYW5RZFUtN1RKVHJ6SVZ6NjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+xPMA0G CSqGSIb3DQEBCwUAA4IBAQBqZBoMD/eq2/QRRA+yGyD+sBncOEXrBwyl8LtZBhMW 81CbTeWJ+s/m1805EuKjQnCWymYKwXbzV7+GtyIVcZIryKi2OnPoyvKnrqf5WJtJ UiFOiKQXckGrjU4ipUMnmAV/TkMCVtPhkmKn5F28UzT+hLFPKJqmv7NG4HBkg3tD 9Pe4sR/RK0Gv+lzPjldipOOhDypVFBQeDcx+ksXt81m2LlwzPwsSjg1UNJtsvJvg YQo44KkQ35R/XOkqRwGV7f9SsZn4mHfJNiqSfeK0hsTOl1muqTZ6H9tYqBbLJaOd M+i7MHBQTe6LvZwOZoyG1ovP15B+aOfUk9wePt54OSBM -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:58 2026 by rpki-client