This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/VHaZ9xAWUz6t5_O77Zl57zRscxg.roa File: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (raw, json) Hash identifier: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4= Subject key identifier: 54:76:99:F7:10:16:53:3E:AD:E7:F3:BB:ED:99:79:EF:34:6C:73:18 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B76EAD8E3486E8809F1BF00900AA57602 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/VHaZ9xAWUz6t5_O77Zl57zRscxg.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8194 IP address blocks: 31.24.192.0/21 maxlen: 24 195.244.144.0/20 maxlen: 24 212.70.160.0/19 maxlen: 24 2a00:1780::/32 maxlen: 48 2a00:1780:dd00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d8:e3:48:6e:88:09:f1:bf:00:90:0a:a5:76:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=547699f71016533eade7f3bbed9979ef346c7318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:e8:d8:f7:31:c9:8e:4c:d4:ec:96:cf:2f: e4:13:68:ff:55:7d:b6:30:aa:f3:75:e5:92:63:b8: 06:e2:3c:cb:24:57:91:2c:04:a5:02:dd:14:d8:0a: 16:aa:fa:a0:3b:9a:4a:4f:c3:2f:24:23:f3:d9:24: 99:58:00:e2:07:09:90:6b:99:55:e7:08:7a:b4:b7: 7b:aa:2f:07:60:1b:0b:d4:39:9a:d9:2b:22:cb:03: fe:ef:a6:be:55:7d:96:41:b8:a0:0f:c5:85:72:16: d6:6d:e0:72:2a:a0:54:47:4c:c5:2a:87:19:25:4e: 44:af:13:00:8b:13:ba:d5:8f:7c:17:b3:ec:c3:f3: d0:dc:fa:ec:d1:55:56:23:eb:ef:7b:ba:dc:80:af: 17:e4:a8:15:d1:fd:8b:d5:60:e0:e6:96:8f:9c:50: ae:56:df:2f:7a:32:ca:bd:5f:a2:8b:a6:f6:25:d3: 5a:54:44:d1:8b:b9:f7:13:e9:51:8e:71:4a:83:1e: 34:d9:9e:f9:e2:03:3f:fb:8a:4b:fd:de:35:0d:fc: f6:69:9e:64:b5:e6:a3:5f:8a:02:a3:04:34:9f:81: 39:19:2c:ce:51:f9:79:96:28:bd:db:b1:55:81:cd: d0:7c:53:de:a7:ee:f5:57:57:0b:f0:66:50:5b:a3: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:76:99:F7:10:16:53:3E:AD:E7:F3:BB:ED:99:79:EF:34:6C:73:18 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/VHaZ9xAWUz6t5_O77Zl57zRscxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.192.0/21 195.244.144.0/20 212.70.160.0/19 IPv6: 2a00:1780::/32 Signature Algorithm: sha256WithRSAEncryption 4a:1c:43:68:a6:a9:2e:b9:24:c5:a1:e9:c1:03:ef:bb:56:7a: 7d:ec:6f:ad:4b:50:47:f1:81:3d:be:e3:45:f7:da:1d:47:e3: 79:fb:1d:1d:bd:64:c6:92:bf:81:b2:fd:66:cb:da:61:aa:3a: 0f:0b:7d:75:f3:a1:bd:53:ad:de:54:22:b2:b9:9b:a8:66:ac: b3:84:e5:6e:2d:7c:0a:b9:2e:dc:11:2d:4c:bb:e5:dd:3d:e0: 06:ec:bb:bc:01:05:83:62:ec:d3:b8:03:00:27:86:44:f4:dd: bb:56:b2:4d:0e:d8:4e:37:78:f2:77:4e:f7:a1:91:ee:b6:c6: 7d:7a:8d:c9:c1:bf:5b:10:e3:c7:ec:51:59:2d:f2:19:81:a0: 61:94:cb:5d:6b:02:ea:9f:9a:d7:c3:7c:01:87:0d:13:22:43: 2d:0b:ba:58:d3:36:42:27:af:14:b6:b8:90:46:31:f5:40:21: f5:c1:7b:dc:6e:0c:7a:5b:a3:a6:83:bc:63:99:ef:80:48:c3: 0c:f4:c3:57:59:fa:f1:6c:26:c4:fb:60:4b:1b:b8:c5:1f:71: 4e:b1:df:57:7b:4e:2c:ae:d6:a2:25:3c:ed:3e:6c:7e:d5:27: 7c:14:5d:52:ce:d3:17:90:46:86:ea:65:6a:b7:fc:ba:c1:0c: ee:0b:0d:bb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26tjjSG6ICfG/AJAKpXYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDc2OTlmNzEwMTY1MzNlYWRlN2YzYmJlZDk5NzllZjM0NmM3MzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikTo2PcxyY5M1OyWzy/kE2j/VX22 MKrzdeWSY7gG4jzLJFeRLASlAt0U2AoWqvqgO5pKT8MvJCPz2SSZWADiBwmQa5lV 5wh6tLd7qi8HYBsL1Dma2SsiywP+76a+VX2WQbigD8WFchbWbeByKqBUR0zFKocZ JU5ErxMAixO61Y98F7Psw/PQ3Prs0VVWI+vve7rcgK8X5KgV0f2L1WDg5paPnFCu Vt8vejLKvV+ii6b2JdNaVETRi7n3E+lRjnFKgx402Z754gM/+4pL/d41Dfz2aZ5k teajX4oCowQ0n4E5GSzOUfl5lii927FVgc3QfFPep+71V1cL8GZQW6PhXQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFR2mfcQFlM+refzu+2Zee80bHMYMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvVkhhWjl4QVdVejZ0NV9PNzdabDU3elJzY3hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDHxjAAwQE w/SQAwQF1EagMA0EAgACMAcDBQAqABeAMA0GCSqGSIb3DQEBCwUAA4IBAQBKHENo pqkuuSTFoenBA++7Vnp97G+tS1BH8YE9vuNF99odR+N5+x0dvWTGkr+Bsv1my9ph qjoPC31186G9U63eVCKyuZuoZqyzhOVuLXwKuS7cES1Mu+XdPeAG7Lu8AQWDYuzT uAMAJ4ZE9N27VrJNDthON3jyd073oZHutsZ9eo3Jwb9bEOPH7FFZLfIZgaBhlMtd awLqn5rXw3wBhw0TIkMtC7pY0zZCJ68UtriQRjH1QCH1wXvcbgx6W6Omg7xjme+A SMMM9MNXWfrxbCbE+2BLG7jFH3FOsd9Xe04srtaiJTztPmx+1Sd8FF1SztMXkEaG 6mVqt/y6wQzuCw27 -----END CERTIFICATE-----Generated at Tue Jan 27 09:55:32 2026 by rpki-client