This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa File: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (raw, json) Hash identifier: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk= Subject key identifier: 56:10:91:7D:CB:C4:8C:D3:3C:F6:07:0E:8B:42:4F:E5:0E:D9:72:5A Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38BEBD53AD1F557167DF48DA22E471 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7224 IP address blocks: 109.122.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:be:bd:53:ad:1f:55:71:67:df:48:da:22:e4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5610917dcbc48cd33cf6070e8b424fe50ed9725a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:cb:8e:ec:7c:19:2b:1e:2c:f9:e3:52:3f: c4:04:a1:1e:7e:8a:e2:0f:22:ac:3f:52:fc:e8:60: a4:57:f3:ea:46:49:fb:c7:d4:bf:34:27:55:ab:4c: 28:88:1a:0d:9f:08:13:6c:11:7b:a1:89:f2:e6:d6: fd:af:2f:13:c9:d8:2a:3b:cd:0b:12:fb:ba:83:dc: 27:3a:75:41:f2:bb:6d:ad:18:aa:6d:ef:a3:f6:01: 06:ca:83:99:c9:fd:93:6e:0d:75:30:da:3f:fe:5a: 9d:65:a7:0e:c7:c4:46:f2:72:fe:14:ee:f7:41:63: 9b:e9:7a:c4:3d:61:7a:19:c5:b9:61:01:73:1b:8c: e3:c1:9c:73:07:fd:0f:19:14:29:77:f5:6d:59:89: 3f:45:3c:b4:25:8d:b0:27:77:28:d7:83:d9:b6:87: 92:8a:b9:a4:91:7b:1c:3b:b6:a2:5f:d9:9b:73:a5: 8b:fb:a2:f6:39:c3:7e:f4:ae:e6:43:45:95:2a:cb: dd:55:bc:23:5b:cb:b0:88:5b:1a:71:20:7d:3d:b9: 00:f9:bd:11:7a:73:9f:a2:74:e7:06:2e:c4:6c:7e: 87:16:68:f4:97:3c:c4:bf:13:cc:de:3d:49:96:3b: 2d:a7:1f:9d:99:e4:22:72:5f:14:7a:fe:33:8b:2e: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:10:91:7D:CB:C4:8C:D3:3C:F6:07:0E:8B:42:4F:E5:0E:D9:72:5A X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.57.0/24 Signature Algorithm: sha256WithRSAEncryption b8:e6:58:df:78:a2:86:c2:eb:58:77:c7:2c:d0:b4:50:31:19: 02:55:d1:39:25:64:bb:47:89:3c:2c:bb:23:30:c8:6e:a6:37: c8:4d:bd:5c:62:0c:7b:cc:bc:0b:78:bf:05:fc:e7:75:1e:29: 01:d3:a3:62:83:68:c0:50:a0:0a:71:b0:f6:04:b8:76:25:7f: 4b:7b:71:f2:1c:c7:84:90:27:7c:13:7f:67:c4:7c:c1:a8:c5: 9f:17:46:a7:07:b2:da:da:b4:e2:f0:41:ed:d0:29:0c:14:94: 32:09:3c:63:c7:86:f0:77:83:1c:e1:8a:ed:68:1e:9b:b4:90: 41:ac:f4:15:11:23:ec:b2:1a:ba:ff:89:cb:3b:5f:c2:d8:9b: fb:3e:1f:b5:62:44:47:26:8c:24:92:6b:d2:d6:a2:b8:de:e8: 5f:be:5a:14:f4:84:02:3b:26:67:88:b7:d8:58:34:70:12:92: 73:a1:13:67:d4:c0:8e:71:09:13:77:6a:8e:21:c6:07:0b:e3: 00:80:71:fe:71:d7:24:fd:05:de:f7:aa:41:9e:0c:3a:4e:fe: 0a:80:2f:72:de:ba:11:1b:8a:96:c0:cd:28:3f:6c:42:14:aa: 7e:d4:e0:ad:43:33:0b:38:f5:ca:f3:66:cf:0e:66:02:52:a5: b7:25:09:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OL69U60fVXFn30jaIuRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjEwOTE3ZGNiYzQ4Y2QzM2NmNjA3MGU4YjQyNGZlNTBlZDk3MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2fLjux8GSseLPnjUj/EBKEefori DyKsP1L86GCkV/PqRkn7x9S/NCdVq0woiBoNnwgTbBF7oYny5tb9ry8TydgqO80L Evu6g9wnOnVB8rttrRiqbe+j9gEGyoOZyf2Tbg11MNo//lqdZacOx8RG8nL+FO73 QWOb6XrEPWF6GcW5YQFzG4zjwZxzB/0PGRQpd/VtWYk/RTy0JY2wJ3co14PZtoeS irmkkXscO7aiX9mbc6WL+6L2OcN+9K7mQ0WVKsvdVbwjW8uwiFsacSB9PbkA+b0R enOfonTnBi7EbH6HFmj0lzzEvxPM3j1Jljstpx+dmeQicl8Uev4ziy5geQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYQkX3LxIzTPPYHDotCT+UO2XJaMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvVmhDUmZjdkVqTk04OWdjT2kwSlA1UTdaY2xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo5MA0G CSqGSIb3DQEBCwUAA4IBAQC45ljfeKKGwutYd8cs0LRQMRkCVdE5JWS7R4k8LLsj MMhupjfITb1cYgx7zLwLeL8F/Od1HikB06Nig2jAUKAKcbD2BLh2JX9Le3HyHMeE kCd8E39nxHzBqMWfF0anB7La2rTi8EHt0CkMFJQyCTxjx4bwd4Mc4YrtaB6btJBB rPQVESPsshq6/4nLO1/C2Jv7Ph+1YkRHJowkkmvS1qK43uhfvloU9IQCOyZniLfY WDRwEpJzoRNn1MCOcQkTd2qOIcYHC+MAgHH+cdck/QXe96pBngw6Tv4KgC9y3roR G4qWwM0oP2xCFKp+1OCtQzMLOPXK82bPDmYCUqW3JQlr -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:56 2026 by rpki-client