This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/VFUebJHke8z497d8CsxvyTmvo_k.roa File: VFUebJHke8z497d8CsxvyTmvo_k.roa (raw, json) Hash identifier: oFEmGcOuTt+GtkbTIY5IyWCbIjXB6VmI7strCzOauV0= Subject key identifier: 54:55:1E:6C:91:E4:7B:CC:F8:F7:B7:7C:0A:CC:6F:C9:39:AF:A3:F9 Certificate issuer: /CN=77a53d2e97704dbea831a6440072904ee91a71b0 Certificate serial: 019B7F1579F9BF31F67171FBEC663D1CF0DF Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/VFUebJHke8z497d8CsxvyTmvo_k.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42510 IP address blocks: 176.103.64.0/21 maxlen: 21 176.103.64.0/22 maxlen: 22 176.103.64.0/23 maxlen: 23 176.103.66.0/23 maxlen: 23 176.103.68.0/22 maxlen: 22 176.103.68.0/23 maxlen: 23 176.103.70.0/23 maxlen: 23 193.200.68.0/23 maxlen: 23 193.200.68.0/24 maxlen: 24 193.200.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:79:f9:bf:31:f6:71:71:fb:ec:66:3d:1c:f0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54551e6c91e47bccf8f7b77c0acc6fc939afa3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:5e:8c:58:ef:4a:5d:c8:61:56:ac:48:56: eb:90:c2:26:ad:a6:c3:e3:46:3b:fa:05:17:54:16: 7e:02:f7:ae:e8:79:ea:47:61:46:df:ae:fe:38:54: eb:be:2c:ea:43:82:40:33:a1:04:2b:8f:f6:3a:5f: ca:c9:f1:e5:5c:9f:b9:64:0e:d2:13:f6:1f:a6:5e: bc:d9:9d:54:45:0f:c3:42:a7:7c:07:ae:3e:f6:a3: 60:50:69:70:05:e9:cf:3d:62:b2:66:ed:36:0d:c4: c9:bb:23:64:14:83:67:e7:49:79:28:82:b5:b9:af: d0:22:21:21:84:b3:b8:9c:9a:3c:3d:89:ef:86:2e: 59:31:5f:b6:58:32:55:70:a9:4b:a7:d5:0e:d3:d2: ce:07:5d:32:47:f0:37:7a:64:a4:7b:e4:33:ca:5f: 16:9c:f6:fb:9d:ca:2e:74:6b:ca:6d:77:68:72:ab: 3f:1a:2c:3c:15:5e:b6:6d:a0:77:1f:17:ae:87:ce: 79:4e:15:1f:44:bf:7b:23:1a:cb:7c:eb:f2:23:8c: 7f:bd:64:45:79:38:dd:de:87:64:17:09:fc:a4:60: 9c:72:06:07:8c:12:ce:cb:60:89:7c:d4:94:34:b4: 46:08:fe:39:7a:a2:e0:b9:63:5b:52:6a:b1:63:e2: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:1E:6C:91:E4:7B:CC:F8:F7:B7:7C:0A:CC:6F:C9:39:AF:A3:F9 X509v3 Authority Key Identifier: keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/VFUebJHke8z497d8CsxvyTmvo_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.64.0/21 193.200.68.0/23 Signature Algorithm: sha256WithRSAEncryption 80:6d:0d:45:e1:8b:4f:93:31:d9:4b:bc:0a:44:f3:3a:43:08: e7:b3:ff:87:3e:8c:e8:f1:61:66:61:94:8f:b7:50:e1:b7:c5: 94:cd:4e:34:ea:4e:0e:e2:4e:f9:41:de:93:1a:08:4b:e6:5e: 98:be:69:cb:38:71:7d:27:a5:35:f7:df:85:2a:5e:99:6f:76: db:7b:b2:c0:9a:c0:36:7e:4a:03:cd:8d:bf:1f:1f:ef:d6:03: e1:74:3b:c1:66:e0:72:df:3c:31:bf:fd:d7:97:12:60:51:8f: 3d:73:a2:b7:93:62:c7:33:dc:3f:4d:10:c9:3c:76:e3:68:3d: 0c:98:3e:57:7a:d1:7f:e3:5e:cd:8e:1b:32:c8:6d:9f:d3:f9: e2:4c:7f:9d:d6:4f:83:73:b4:a2:a2:83:0b:05:e2:d2:ae:f1: d7:55:40:19:e5:aa:0a:ce:f3:29:88:bb:85:bc:c8:96:08:e7: 54:03:50:96:b4:96:e4:82:07:ed:b4:7a:d0:e3:70:57:e5:7e: 3f:19:9c:28:2f:a3:e2:9f:27:5f:3d:e3:5f:e3:f3:f7:98:c8: eb:f5:80:af:2f:d7:bd:cc:97:85:44:3b:33:4e:f1:e1:85:77: 5c:c4:2b:88:22:30:fc:c2:a8:49:4e:42:65:f3:76:f3:b7:7f: 7a:47:a6:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FXn5vzH2cXH77GY9HPDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTUzZDJlOTc3MDRkYmVhODMxYTY0NDAwNzI5MDRlZTkx YTcxYjAwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDU1MWU2YzkxZTQ3YmNjZjhmN2I3N2MwYWNjNmZjOTM5YWZhM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL1ejFjvSl3IYVasSFbrkMImrabD 40Y7+gUXVBZ+Aveu6HnqR2FG367+OFTrvizqQ4JAM6EEK4/2Ol/KyfHlXJ+5ZA7S E/Yfpl682Z1URQ/DQqd8B64+9qNgUGlwBenPPWKyZu02DcTJuyNkFINn50l5KIK1 ua/QIiEhhLO4nJo8PYnvhi5ZMV+2WDJVcKlLp9UO09LOB10yR/A3emSke+Qzyl8W nPb7ncoudGvKbXdocqs/Giw8FV62baB3Hxeuh855ThUfRL97IxrLfOvyI4x/vWRF eTjd3odkFwn8pGCccgYHjBLOy2CJfNSUNLRGCP45eqLguWNbUmqxY+L7HQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFRVHmyR5HvM+Pe3fArMb8k5r6P5MB8GA1UdIwQY MBaAFHelPS6XcE2+qDGmRABykE7pGnGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUt ZDNjOGE0OGY3YTMyLzEvVkZVZWJKSGtlOHo0OTdkOENzeHZ5VG12b19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUtZDNjOGE0OGY3YTMy LzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsGdAAwQB wchEMA0GCSqGSIb3DQEBCwUAA4IBAQCAbQ1F4YtPkzHZS7wKRPM6Qwjns/+HPozo 8WFmYZSPt1Dht8WUzU406k4O4k75Qd6TGghL5l6YvmnLOHF9J6U199+FKl6Zb3bb e7LAmsA2fkoDzY2/Hx/v1gPhdDvBZuBy3zwxv/3XlxJgUY89c6K3k2LHM9w/TRDJ PHbjaD0MmD5XetF/417NjhsyyG2f0/niTH+d1k+Dc7SiooMLBeLSrvHXVUAZ5aoK zvMpiLuFvMiWCOdUA1CWtJbkggfttHrQ43BX5X4/GZwoL6PinydfPeNf4/P3mMjr 9YCvL9e9zJeFRDszTvHhhXdcxCuIIjD8wqhJTkJl83bzt396R6a2 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:37 2026 by rpki-client