This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/VmYFVolGbLMMfwkvFM8kJCuQGzE.roa File: VmYFVolGbLMMfwkvFM8kJCuQGzE.roa (raw, json) Hash identifier: /WuPYjGHN6jIW+r1DMVdwmeNT1yyt/R8q6y8mp9Mt4A= Subject key identifier: 56:66:05:56:89:46:6C:B3:0C:7F:09:2F:14:CF:24:24:2B:90:1B:31 Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Certificate serial: 019B77C7261AB608552DEE7AA6302CB8C949 Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/VmYFVolGbLMMfwkvFM8kJCuQGzE.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8267 IP address blocks: 149.156.0.0/16 maxlen: 16 185.92.50.0/24 maxlen: 24 193.193.64.0/21 maxlen: 21 195.150.224.0/19 maxlen: 19 2001:6d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:1a:b6:08:55:2d:ee:7a:a6:30:2c:b8:c9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5666055689466cb30c7f092f14cf24242b901b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:69:fc:cf:df:4a:26:fa:2b:2e:78:4a:93: 37:a4:f5:35:36:2d:31:51:e7:36:c7:70:e9:0d:ae: ad:0b:45:da:73:e6:a4:01:bc:cc:6b:38:a5:ca:29: ce:72:2c:36:52:3d:1d:97:7e:c6:26:b6:51:d9:8b: 52:ab:92:c1:57:81:63:a1:b2:ac:06:62:e6:0f:12: 81:38:73:ec:33:81:11:8f:ff:90:e9:b6:58:3a:a7: cc:5b:9d:83:3f:07:04:ee:06:a6:99:66:95:b8:b7: 74:d7:5c:af:a8:4e:ef:c6:4e:48:21:1e:2a:0c:f3: f3:c6:43:df:fb:78:e0:05:d9:2c:a6:3b:fc:d4:99: 7a:99:f8:eb:0a:79:7e:8c:5a:f7:fa:7a:a6:73:62: 18:d0:bc:82:46:1d:1f:92:fa:cc:99:24:02:a2:de: 04:62:a4:53:61:ed:bd:52:97:ed:a8:a7:2d:a0:36: a8:74:99:80:3f:cb:38:8b:b1:f9:02:af:7b:46:8f: 84:a8:ff:f2:ac:2b:d3:4c:1b:be:0d:3c:03:c7:4b: d5:96:e7:a0:0b:e9:e1:f9:10:44:74:9e:ba:5b:da: 0a:1e:14:3e:db:fa:3c:7b:c2:d8:bc:90:d3:55:46: 47:4c:40:c6:ec:05:46:a6:62:a9:f7:ac:f2:17:42: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:66:05:56:89:46:6C:B3:0C:7F:09:2F:14:CF:24:24:2B:90:1B:31 X509v3 Authority Key Identifier: keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/VmYFVolGbLMMfwkvFM8kJCuQGzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.156.0.0/16 185.92.50.0/24 193.193.64.0/21 195.150.224.0/19 IPv6: 2001:6d8::/32 Signature Algorithm: sha256WithRSAEncryption 76:b9:6d:b9:fa:08:2c:4e:84:2f:9c:aa:71:ce:42:b7:44:42: 11:83:79:df:bf:09:08:62:cb:20:4c:6f:ad:db:ed:16:83:71: cd:ff:9d:b7:19:f8:e0:dc:fa:29:7d:b7:29:3d:d5:b8:0e:08: dd:e4:76:48:21:70:96:71:c1:86:81:3f:56:fa:6d:f3:32:9e: 7f:e0:ac:b5:b6:04:a8:70:4c:4a:40:a9:60:72:44:c0:64:22: 05:bf:f7:4a:d5:91:9e:3b:72:ff:9d:c4:b8:6c:de:eb:1c:10: c8:11:de:84:9f:bc:bc:13:70:4d:ca:2f:18:46:c0:dd:36:a8: 1a:34:62:bf:d3:bc:fc:7e:78:f2:10:82:c0:d9:b9:7f:77:c5: 6e:da:c3:c1:8a:b6:cc:00:16:3a:46:24:fb:06:98:5e:5d:61: c2:5e:35:95:ba:50:2d:61:1c:d3:d1:c3:67:4a:b8:87:7f:48: 38:db:65:f0:62:ee:f5:94:65:a3:ef:4c:8b:c0:b3:a4:25:c3: d4:ca:37:06:07:1e:3c:45:0f:1b:ed:aa:c7:a3:b8:fd:ad:46: 05:59:c9:e0:7c:71:41:36:65:1c:44:54:33:c7:c8:6c:dd:f2: 6b:0c:65:bf:17:c0:f0:b9:6b:8a:81:15:cb:e6:75:dd:66:b7: a2:c7:bf:5c -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt3xyYatghVLe56pjAsuMlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4 ODE4MDQwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjY2MDU1Njg5NDY2Y2IzMGM3ZjA5MmYxNGNmMjQyNDJiOTAxYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv9p/M/fSib6Ky54SpM3pPU1Ni0x Uec2x3DpDa6tC0Xac+akAbzMazilyinOciw2Uj0dl37GJrZR2YtSq5LBV4FjobKs BmLmDxKBOHPsM4ERj/+Q6bZYOqfMW52DPwcE7gammWaVuLd011yvqE7vxk5IIR4q DPPzxkPf+3jgBdkspjv81Jl6mfjrCnl+jFr3+nqmc2IY0LyCRh0fkvrMmSQCot4E YqRTYe29UpftqKctoDaodJmAP8s4i7H5Aq97Ro+EqP/yrCvTTBu+DTwDx0vVlueg C+nh+RBEdJ66W9oKHhQ+2/o8e8LYvJDTVUZHTEDG7AVGpmKp96zyF0KotQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFFZmBVaJRmyzDH8JLxTPJCQrkBsxMB8GA1UdIwQY MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx LTE2Y2Q4ZjRmYjRiOS8xL1ZtWUZWb2xHYkxNTWZ3a3ZGTThrSkN1UUd6RS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMB0EAgABMBcDAwCVnAME ALlcMgMEA8HBQAMEBcOW4DANBAIAAjAHAwUAIAEG2DANBgkqhkiG9w0BAQsFAAOC AQEAdrltufoILE6EL5yqcc5Ct0RCEYN5378JCGLLIExvrdvtFoNxzf+dtxn44Nz6 KX23KT3VuA4I3eR2SCFwlnHBhoE/Vvpt8zKef+CstbYEqHBMSkCpYHJEwGQiBb/3 StWRnjty/53EuGze6xwQyBHehJ+8vBNwTcovGEbA3TaoGjRiv9O8/H548hCCwNm5 f3fFbtrDwYq2zAAWOkYk+waYXl1hwl41lbpQLWEc09HDZ0q4h39IONtl8GLu9ZRl o+9Mi8CzpCXD1Mo3BgcePEUPG+2qx6O4/a1GBVnJ4HxxQTZlHERUM8fIbN3yawxl vxfA8LlrioEVy+Z13Wa3ose/XA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:46 2026 by rpki-client