This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/vKeoQ1iSuXePoZLvkE7AO0YUwb4.roa File: vKeoQ1iSuXePoZLvkE7AO0YUwb4.roa (raw, json) Hash identifier: +UV/RCa3VfuPMva0Fiqn4x9Dq3Bl70GQwq8hyRrXy7E= Subject key identifier: BC:A7:A8:43:58:92:B9:77:8F:A1:92:EF:90:4E:C0:3B:46:14:C1:BE Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A21A48848464D0609B3649EF3CCC56 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/vKeoQ1iSuXePoZLvkE7AO0YUwb4.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207388 IP address blocks: 91.239.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1a:48:84:84:64:d0:60:9b:36:49:ef:3c:cc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bca7a8435892b9778fa192ef904ec03b4614c1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:06:e8:1c:c2:9f:24:28:f7:47:d3:cc:3f: ef:68:7f:ba:23:56:3c:c2:35:0f:64:ed:f7:fa:cc: 01:29:4f:76:5a:36:aa:9f:e4:ac:0e:87:dc:60:1f: 0f:1b:9e:2c:33:d8:1f:bb:61:ee:7c:11:cc:cc:af: 1f:8b:39:ce:ba:88:7c:89:e0:6e:b3:39:04:35:84: ba:13:92:7f:e9:7b:8c:10:05:43:8a:ca:0b:cb:eb: 27:9f:85:c1:89:ac:9b:ea:6d:0f:f5:9c:8d:4d:ce: f2:41:43:bb:73:93:7b:c7:5b:93:8a:13:19:dc:74: 74:61:a6:16:d8:b3:72:76:af:f2:06:ea:ed:5a:43: f3:1f:c9:ef:11:e1:98:d6:93:fb:2b:f7:8a:42:bc: 3b:97:60:4f:c8:c5:5c:a8:b2:c5:29:b6:ae:ba:46: ce:ce:80:88:b5:d9:80:4c:bf:20:81:c8:2b:e1:04: 40:b7:75:01:47:90:44:72:da:b6:20:51:1c:f9:72: 4e:c6:29:e5:4a:29:67:49:db:fd:4c:56:26:48:37: 5a:86:94:11:39:87:28:31:72:fc:bd:ee:12:83:29: aa:e1:1b:87:92:2b:b5:1e:25:00:b7:79:0a:2e:f0: d8:e1:d7:dc:4f:1c:a5:c9:69:0b:0c:f7:3d:bd:22: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A7:A8:43:58:92:B9:77:8F:A1:92:EF:90:4E:C0:3B:46:14:C1:BE X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/vKeoQ1iSuXePoZLvkE7AO0YUwb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.217.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:fa:37:9d:b7:2a:96:47:20:c8:b6:f0:c1:63:cb:72:f9:e4: 96:a6:de:3e:96:15:8f:56:97:cf:67:b3:a7:a3:19:07:f7:47: 90:e9:ae:a0:91:43:6e:82:b7:12:88:95:28:71:37:48:4d:10: e0:8b:63:d2:58:ce:2d:f6:d4:00:8e:e8:74:5e:ab:dd:05:1c: bd:42:70:7a:47:7f:7d:56:ed:d2:79:b1:a2:a1:ff:4a:9e:a1: d6:35:b2:2b:a5:78:5f:fb:35:c3:6b:e3:79:38:f6:e6:65:cd: 7d:18:9a:e2:23:26:24:de:b7:4d:54:7e:bc:78:2a:e5:e3:63: b1:22:58:86:f0:e7:3a:5f:4e:95:f3:79:f2:af:2d:2e:1d:1d: 50:13:09:88:1d:2b:42:15:6f:dc:2b:34:59:64:9b:74:d2:f6: 06:43:ba:9b:8c:24:c8:f4:42:1e:1c:19:82:c9:ed:5c:0f:14: f6:1f:a4:24:f6:ee:df:f2:1b:3f:3c:1d:ee:8c:e9:e8:9b:37: 5a:cc:e1:c0:44:4a:c9:d6:96:db:d9:91:84:85:09:4f:31:77: 63:2f:fa:c9:81:b2:db:9a:d6:c0:b0:3a:e1:cf:f5:de:83:e7: 2b:6d:aa:6b:ba:2a:6b:9a:6d:83:d7:4d:c3:3a:a3:9a:50:4a: 92:f6:68:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohpIhIRk0GCbNknvPMxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2E3YTg0MzU4OTJiOTc3OGZhMTkyZWY5MDRlYzAzYjQ2MTRjMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4G6BzCnyQo90fTzD/vaH+6I1Y8 wjUPZO33+swBKU92Wjaqn+SsDofcYB8PG54sM9gfu2HufBHMzK8fiznOuoh8ieBu szkENYS6E5J/6XuMEAVDisoLy+snn4XBiayb6m0P9ZyNTc7yQUO7c5N7x1uTihMZ 3HR0YaYW2LNydq/yBurtWkPzH8nvEeGY1pP7K/eKQrw7l2BPyMVcqLLFKbauukbO zoCItdmATL8ggcgr4QRAt3UBR5BEctq2IFEc+XJOxinlSilnSdv9TFYmSDdahpQR OYcoMXL8ve4Sgymq4RuHkiu1HiUAt3kKLvDY4dfcTxylyWkLDPc9vSI2fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLynqENYkrl3j6GS75BOwDtGFMG+MB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvdktlb1ExaVN1WGVQb1pMdmtFN0FPMFlVd2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/ZMA0G CSqGSIb3DQEBCwUAA4IBAQB7+jedtyqWRyDItvDBY8ty+eSWpt4+lhWPVpfPZ7On oxkH90eQ6a6gkUNugrcSiJUocTdITRDgi2PSWM4t9tQAjuh0XqvdBRy9QnB6R399 Vu3SebGiof9KnqHWNbIrpXhf+zXDa+N5OPbmZc19GJriIyYk3rdNVH68eCrl42Ox IliG8Oc6X06V83nyry0uHR1QEwmIHStCFW/cKzRZZJt00vYGQ7qbjCTI9EIeHBmC ye1cDxT2H6Qk9u7f8hs/PB3ujOnomzdazOHARErJ1pbb2ZGEhQlPMXdjL/rJgbLb mtbAsDrhz/Xeg+crbapruiprmm2D103DOqOaUEqS9miX -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:17 2026 by rpki-client