This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/vli7nBMVVsmnP9pgh14ogSpMo5o.roa File: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (raw, json) Hash identifier: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4= Subject key identifier: BE:58:BB:9C:13:15:56:C9:A7:3F:DA:60:87:5E:28:81:2A:4C:A3:9A Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Certificate serial: 019B7AC7BFA85C129768FF2A9F4E05BC1EC1 Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/vli7nBMVVsmnP9pgh14ogSpMo5o.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 185.209.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bf:a8:5c:12:97:68:ff:2a:9f:4e:05:bc:1e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576 Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be58bb9c131556c9a73fda60875e28812a4ca39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:d5:97:78:74:3b:25:76:3f:65:db:44:32: a8:40:4c:12:10:94:d6:5f:92:7c:95:92:d4:e7:d2: f4:f9:db:2a:7f:d3:b0:0c:fb:5a:ad:75:bd:29:96: c5:a9:c6:a2:19:ed:ac:9d:b5:09:63:6d:8f:25:5f: 71:b0:cc:8c:01:47:61:ed:ee:94:e3:49:78:5a:0d: 35:51:67:b1:91:07:46:97:ce:c8:ff:a0:62:10:2f: a1:e2:2b:77:ab:99:f4:11:fa:57:13:ce:04:e4:57: 5e:5e:50:b2:16:2d:d1:2a:14:de:33:9a:8b:20:52: 9a:64:8d:28:df:06:b8:5c:e9:32:d1:84:f4:1a:14: e4:2d:59:6a:bf:e1:11:4f:ba:f1:b4:f6:ce:d7:89: a3:48:a8:1e:80:e9:01:53:19:c4:6e:2b:1e:cb:a9: 15:9f:72:1c:38:ce:d6:03:7a:d9:0a:2f:0f:d3:23: 3c:07:4b:5e:6c:d6:b0:6c:b5:88:90:b9:37:0d:f1: f3:ea:1d:1f:31:67:04:49:22:b9:a4:96:f8:e1:18: 3f:34:1f:0c:d1:29:e9:2e:40:75:1f:30:3e:7c:0b: 5d:cd:88:59:72:c5:72:2b:cb:df:a4:4c:ea:bd:29: e8:dc:8b:7b:ed:c6:93:16:df:45:8c:65:51:c5:a8: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:58:BB:9C:13:15:56:C9:A7:3F:DA:60:87:5E:28:81:2A:4C:A3:9A X509v3 Authority Key Identifier: keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/vli7nBMVVsmnP9pgh14ogSpMo5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.43.0/24 Signature Algorithm: sha256WithRSAEncryption 79:2d:83:fc:30:e5:60:0b:a8:62:2b:bd:b6:b6:95:34:7f:ff: 42:e1:a6:ef:26:55:99:80:62:15:90:cb:dd:95:99:ba:47:54: de:64:2c:d5:0e:b8:94:7e:e9:75:d3:fa:eb:87:4d:51:be:b5: 68:c9:70:d1:74:24:ff:f6:ef:a7:4f:47:bf:80:d5:53:a8:d3: a0:ff:52:45:a5:2b:c9:07:1f:70:2e:0f:44:37:2a:39:f3:53: 10:4a:d9:bc:4d:24:27:e6:8d:90:78:f3:2d:0f:72:82:e8:fe: 44:8e:f6:91:4a:e9:e3:b7:bb:15:a3:7d:43:92:1f:01:5b:08: 52:52:a3:7c:aa:21:4a:bf:ab:24:e6:e3:c5:2a:cc:9f:34:9f: 3e:1e:ab:37:0c:08:f8:e3:ad:c6:7b:e0:c6:95:51:9c:c0:a2: 2e:41:dd:d7:b4:1e:4c:31:b3:7f:7f:83:7e:8e:b2:f1:df:e2: ed:3f:db:92:d6:6f:8f:ce:02:92:42:26:96:bd:66:95:59:5a: 18:f8:ad:1e:24:bc:89:b4:73:b0:48:65:53:1e:ac:85:69:fb: 2d:0e:29:cc:ae:81:e7:16:65:70:13:a5:fe:66:e7:33:94:a6: 85:89:28:c7:13:9d:4a:25:bc:10:9b:7d:83:3a:14:27:d7:11: 58:7c:1a:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7+oXBKXaP8qn04FvB7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy NDI1NzYwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTU4YmI5YzEzMTU1NmM5YTczZmRhNjA4NzVlMjg4MTJhNGNhMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P7Vl3h0OyV2P2XbRDKoQEwSEJTW X5J8lZLU59L0+dsqf9OwDPtarXW9KZbFqcaiGe2snbUJY22PJV9xsMyMAUdh7e6U 40l4Wg01UWexkQdGl87I/6BiEC+h4it3q5n0EfpXE84E5FdeXlCyFi3RKhTeM5qL IFKaZI0o3wa4XOky0YT0GhTkLVlqv+ERT7rxtPbO14mjSKgegOkBUxnEbisey6kV n3IcOM7WA3rZCi8P0yM8B0tebNawbLWIkLk3DfHz6h0fMWcESSK5pJb44Rg/NB8M 0SnpLkB1HzA+fAtdzYhZcsVyK8vfpEzqvSno3It77caTFt9FjGVRxajU1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5Yu5wTFVbJpz/aYIdeKIEqTKOaMB8GA1UdIwQY MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt MTUxZjZlZDE3NjkxLzEvdmxpN25CTVZWc21uUDlwZ2gxNG9nU3BNbzVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudErMA0G CSqGSIb3DQEBCwUAA4IBAQB5LYP8MOVgC6hiK722tpU0f/9C4abvJlWZgGIVkMvd lZm6R1TeZCzVDriUful10/rrh01RvrVoyXDRdCT/9u+nT0e/gNVTqNOg/1JFpSvJ Bx9wLg9ENyo581MQStm8TSQn5o2QePMtD3KC6P5EjvaRSunjt7sVo31Dkh8BWwhS UqN8qiFKv6sk5uPFKsyfNJ8+Hqs3DAj4463Ge+DGlVGcwKIuQd3XtB5MMbN/f4N+ jrLx3+LtP9uS1m+PzgKSQiaWvWaVWVoY+K0eJLyJtHOwSGVTHqyFafstDinMroHn FmVwE6X+ZuczlKaFiSjHE51KJbwQm32DOhQn1xFYfBpw -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:27 2026 by rpki-client