This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/VI88t701xOomwQbkq2A0MsUHhaE.roa File: VI88t701xOomwQbkq2A0MsUHhaE.roa (raw, json) Hash identifier: RAWKc0L395XKof6Gm/hGtX8RP6I3bbR74YcCWfoMv7g= Subject key identifier: 54:8F:3C:B7:BD:35:C4:EA:26:C1:06:E4:AB:60:34:32:C5:07:85:A1 Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2 Certificate serial: 019B7C1266DF62D87D775DE8E82CD22B3006 Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/VI88t701xOomwQbkq2A0MsUHhaE.roa Signing time: Fri 02 Jan 2026 00:18:59 +0000 ROA not before: Fri 02 Jan 2026 00:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49370 IP address blocks: 91.212.223.0/24 maxlen: 24 194.1.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:66:df:62:d8:7d:77:5d:e8:e8:2c:d2:2b:30:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2 Validity Not Before: Jan 2 00:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=548f3cb7bd35c4ea26c106e4ab603432c50785a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:38:3b:ad:9f:ab:3e:2a:8b:6d:df:1d:6f: 57:ca:04:73:ae:99:02:ec:59:f9:c5:04:d9:5a:67: c5:11:37:1f:94:6b:20:b8:49:5d:cc:00:0c:80:84: 29:db:d7:bd:03:6b:1e:09:61:93:61:7b:d5:c9:d5: 0c:da:db:4b:1d:62:b0:9a:01:dd:9d:70:a5:7e:1b: be:1e:eb:86:36:7c:60:2e:d0:7d:a7:19:de:fc:07: f9:bd:e4:38:98:ff:2a:ee:c2:81:f0:25:f0:20:ad: 2d:66:38:16:8c:cb:ca:7d:f6:10:9f:ab:ac:fe:5a: b5:8b:65:1d:f2:ef:64:fc:50:7e:8c:d2:a9:11:9f: bc:c6:8e:28:c0:df:94:02:80:94:eb:8c:f6:a5:2c: 7f:1b:d7:c7:b9:e6:ac:16:86:47:e7:35:01:85:ea: 74:ce:24:1d:a8:ac:57:5f:0f:1f:44:1e:b4:59:e2: f5:53:db:61:e3:df:d4:37:36:a5:e2:d8:98:6f:4a: d2:12:7c:10:f7:65:2a:bb:7a:63:32:d2:c7:7f:b2: 08:21:12:60:77:ee:fa:2c:82:af:d9:78:75:92:74: e3:80:2d:ba:26:fc:e5:d3:4a:47:71:cd:6c:b7:9f: af:36:d7:e7:8d:0f:4a:50:b4:92:d2:68:27:81:2c: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8F:3C:B7:BD:35:C4:EA:26:C1:06:E4:AB:60:34:32:C5:07:85:A1 X509v3 Authority Key Identifier: keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/VI88t701xOomwQbkq2A0MsUHhaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.223.0/24 194.1.196.0/24 Signature Algorithm: sha256WithRSAEncryption 00:4a:9f:cf:7e:6d:1c:f7:d5:f4:d9:93:e4:64:6b:35:01:3b: 20:6b:f8:39:a6:f9:aa:71:d4:b5:76:ad:29:b4:5b:0c:f5:fc: 85:31:9f:f8:b9:c9:5d:88:8e:37:b1:80:4f:04:48:47:d7:37: 4e:92:8b:dd:36:fe:8a:89:70:f8:9d:b9:eb:ef:d0:96:23:22: 01:1b:fa:a2:f2:31:79:01:cc:f0:14:b0:cb:ea:52:e5:bc:f0: 8a:81:c9:38:55:af:da:99:11:01:c9:25:ed:5a:89:a6:99:84: 6e:e1:e1:7d:47:d0:74:b1:4f:a1:e9:7c:67:f6:76:e6:bf:26: 45:5e:9d:e7:f2:4c:fc:71:81:ed:68:01:a4:4c:a8:dc:a5:76: 75:ef:e0:9f:d2:50:df:01:9a:49:88:62:fd:d7:c2:1d:11:eb: e9:22:88:e2:a4:37:0b:92:a4:fb:10:d1:79:15:b6:b3:3a:bb: 9d:cd:3d:57:d8:22:a3:8b:2f:e7:7e:c0:8c:d0:c3:8e:ad:ef: 57:0d:98:47:a3:c7:cb:85:56:65:6d:54:c0:d8:ef:53:9a:78: dc:01:3d:07:79:33:d8:4c:34:f9:c0:cc:1f:cb:13:11:18:be: 9c:69:bd:48:1c:dc:b0:eb:c6:a1:f7:c9:dc:2d:21:bb:15:13: 09:6a:2d:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EmbfYth9d13o6CzSKzAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjgyODIwODllMjg3NjY1MTIxMzNkNDIzNmFmNDE1YTM3 YmQzZDIwHhcNMjYwMTAyMDAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDhmM2NiN2JkMzVjNGVhMjZjMTA2ZTRhYjYwMzQzMmM1MDc4NWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/84O62fqz4qi23fHW9XygRzrpkC 7Fn5xQTZWmfFETcflGsguEldzAAMgIQp29e9A2seCWGTYXvVydUM2ttLHWKwmgHd nXClfhu+HuuGNnxgLtB9pxne/Af5veQ4mP8q7sKB8CXwIK0tZjgWjMvKffYQn6us /lq1i2Ud8u9k/FB+jNKpEZ+8xo4owN+UAoCU64z2pSx/G9fHueasFoZH5zUBhep0 ziQdqKxXXw8fRB60WeL1U9th49/UNzal4tiYb0rSEnwQ92Uqu3pjMtLHf7IIIRJg d+76LIKv2Xh1knTjgC26Jvzl00pHcc1st5+vNtfnjQ9KULSS0mgngSwGtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFSPPLe9NcTqJsEG5KtgNDLFB4WhMB8GA1UdIwQY MBaAFH34KCCJ4odmUSEz1CNq9BWje9PSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NTJiYTctM2MxNS00YmJhLWFkMzMt MjU3MWY3YTJkMjVmLzEvVkk4OHQ3MDF4T29td1Fia3EyQTBNc1VIaGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80NTJiYTctM2MxNS00YmJhLWFkMzMtMjU3MWY3YTJkMjVm LzEvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9TfAwQA wgHEMA0GCSqGSIb3DQEBCwUAA4IBAQAASp/Pfm0c99X02ZPkZGs1ATsga/g5pvmq cdS1dq0ptFsM9fyFMZ/4ucldiI43sYBPBEhH1zdOkovdNv6KiXD4nbnr79CWIyIB G/qi8jF5AczwFLDL6lLlvPCKgck4Va/amREBySXtWommmYRu4eF9R9B0sU+h6Xxn 9nbmvyZFXp3n8kz8cYHtaAGkTKjcpXZ17+Cf0lDfAZpJiGL918IdEevpIojipDcL kqT7ENF5FbazOrudzT1X2CKjiy/nfsCM0MOOre9XDZhHo8fLhVZlbVTA2O9Tmnjc AT0HeTPYTDT5wMwfyxMRGL6cab1IHNyw68ah98ncLSG7FRMJai39 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:59 2026 by rpki-client