This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/VsFQPt4uWCua0n1HDigGa7MZykI.roa File: VsFQPt4uWCua0n1HDigGa7MZykI.roa (raw, json) Hash identifier: aO7sXpE7LufWLa9ldjPsDpWQqb+o3sWR/YPv+p5OWvM= Subject key identifier: 56:C1:50:3E:DE:2E:58:2B:9A:D2:7D:47:0E:28:06:6B:B3:19:CA:42 Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c Certificate serial: 019B7F82A266E06B40E488B432914BEE9675 Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/VsFQPt4uWCua0n1HDigGa7MZykI.roa Signing time: Fri 02 Jan 2026 16:20:26 +0000 ROA not before: Fri 02 Jan 2026 16:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 140.150.9.0/24 maxlen: 24 140.150.17.0/24 maxlen: 24 146.103.69.0/24 maxlen: 24 146.103.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a2:66:e0:6b:40:e4:88:b4:32:91:4b:ee:96:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c Validity Not Before: Jan 2 16:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56c1503ede2e582b9ad27d470e28066bb319ca42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:e4:7d:dc:41:c5:04:3e:b4:88:d5:ca:9e: 07:06:c1:41:e1:aa:f2:42:9d:9c:da:a4:31:98:12: 8e:52:2b:7d:2b:6a:2f:b0:de:7b:a0:b8:77:7d:50: 79:53:04:3a:c4:ff:2f:14:37:c8:45:dd:b6:28:95: f0:11:86:ae:57:c5:96:15:5f:ea:c8:b8:87:c8:c2: 71:91:2a:c5:9b:c1:2a:e3:47:d6:97:cb:47:3d:38: 26:00:aa:09:0c:c7:79:06:5c:ac:10:f3:ce:e2:bd: 41:2a:8c:d7:66:0e:be:cb:1c:31:2d:a2:36:8b:0f: 1d:08:58:a9:8b:21:b6:e2:ac:fa:a0:f6:92:a9:e7: d1:23:33:d7:9b:e2:0f:75:03:49:3a:8b:29:d2:c1: d4:5f:d8:d7:bf:80:de:43:19:57:f5:f3:bc:30:88: 18:02:30:98:a3:1c:95:37:09:92:a2:22:15:2a:38: 7d:c1:76:6d:1c:3d:d1:cc:77:84:8f:a8:5c:03:55: e3:ea:82:92:e1:c5:58:5c:15:34:e1:7a:8a:21:59: a8:2a:2f:77:0f:5e:dd:8b:64:2c:10:12:13:cc:f6: 9d:20:59:5f:35:e1:ad:c2:ce:17:97:a5:27:b8:ac: 5a:37:2f:f7:78:b6:f9:f2:7f:c4:3b:df:ca:d7:40: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C1:50:3E:DE:2E:58:2B:9A:D2:7D:47:0E:28:06:6B:B3:19:CA:42 X509v3 Authority Key Identifier: keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/VsFQPt4uWCua0n1HDigGa7MZykI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.9.0/24 140.150.17.0/24 146.103.69.0-146.103.70.255 Signature Algorithm: sha256WithRSAEncryption 7d:50:55:06:e5:22:e2:2d:16:3a:59:a1:15:e0:ad:0b:28:cd: 3a:b6:39:fc:ae:42:a5:e6:cc:f9:77:66:5f:c9:d1:d5:43:13: 8f:0f:8e:2c:86:2d:4b:ce:1f:63:26:f4:8e:d9:01:1a:7b:6c: 19:70:16:c9:95:28:71:e0:67:f6:0e:03:e3:63:81:4b:5f:2e: 43:90:3e:8b:d9:1c:8f:96:f9:40:2f:1a:57:20:51:71:8d:e2: 6c:54:a3:d5:e4:fd:15:ed:b9:06:99:86:61:9d:54:9e:4a:a3: 6c:30:8a:11:7f:4b:9d:2c:69:82:08:0a:f4:fa:7f:81:49:15: 86:27:90:02:8d:09:ed:42:a0:d2:bd:9e:48:3c:48:40:18:9f: 1a:52:e1:f8:4e:f3:ef:04:68:4d:c4:c0:9a:41:d0:cf:ac:4c: 59:b3:87:e4:81:54:4b:89:2a:97:bf:be:b3:0b:ea:a5:ae:1a: 7b:74:2e:76:31:7d:7d:5f:c1:ae:36:c3:42:db:d5:00:78:df: 01:61:f1:2c:c9:6d:3a:d8:cf:2e:40:61:e7:32:76:91:9d:ab: 95:bc:7d:55:34:f0:13:7b:15:ea:91:16:f6:32:01:c2:02:49: 78:97:e7:e7:3c:2d:4e:c8:06:10:b2:5e:44:01:44:8d:d9:35: ec:a4:1b:fa -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/gqJm4GtA5Ii0MpFL7pZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx YTU3NWMwHhcNMjYwMTAyMTYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmMxNTAzZWRlMmU1ODJiOWFkMjdkNDcwZTI4MDY2YmIzMTljYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15bkfdxBxQQ+tIjVyp4HBsFB4ary Qp2c2qQxmBKOUit9K2ovsN57oLh3fVB5UwQ6xP8vFDfIRd22KJXwEYauV8WWFV/q yLiHyMJxkSrFm8Eq40fWl8tHPTgmAKoJDMd5BlysEPPO4r1BKozXZg6+yxwxLaI2 iw8dCFipiyG24qz6oPaSqefRIzPXm+IPdQNJOosp0sHUX9jXv4DeQxlX9fO8MIgY AjCYoxyVNwmSoiIVKjh9wXZtHD3RzHeEj6hcA1Xj6oKS4cVYXBU04XqKIVmoKi93 D17di2QsEBITzPadIFlfNeGtws4Xl6UnuKxaNy/3eLb58n/EO9/K10B51QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFbBUD7eLlgrmtJ9Rw4oBmuzGcpCMB8GA1UdIwQY MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt OGIyYjQ3MzhiMWNjLzEvVnNGUVB0NHVXQ3VhMG4xSERpZ0dhN01aeWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAjJYJAwQA jJYRMAwDBACSZ0UDBACSZ0YwDQYJKoZIhvcNAQELBQADggEBAH1QVQblIuItFjpZ oRXgrQsozTq2OfyuQqXmzPl3Zl/J0dVDE48PjiyGLUvOH2Mm9I7ZARp7bBlwFsmV KHHgZ/YOA+NjgUtfLkOQPovZHI+W+UAvGlcgUXGN4mxUo9Xk/RXtuQaZhmGdVJ5K o2wwihF/S50saYIICvT6f4FJFYYnkAKNCe1CoNK9nkg8SEAYnxpS4fhO8+8EaE3E wJpB0M+sTFmzh+SBVEuJKpe/vrML6qWuGnt0LnYxfX1fwa42w0Lb1QB43wFh8SzJ bTrYzy5AYecydpGdq5W8fVU08BN7FeqRFvYyAcICSXiX5+c8LU7IBhCyXkQBRI3Z NeykG/o= -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:07 2026 by rpki-client