This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/vpYJVd9lmAX8UFoe0uydgfVwJtU.roa File: vpYJVd9lmAX8UFoe0uydgfVwJtU.roa (raw, json) Hash identifier: eLTt6ySPFn6XU3Ymgk0lswL6I4f8T/KqgDPFjU696QI= Subject key identifier: BE:96:09:55:DF:65:98:05:FC:50:5A:1E:D2:EC:9D:81:F5:70:26:D5 Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13 Certificate serial: 019B7C1106E697F1D6144B5609445F103965 Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/vpYJVd9lmAX8UFoe0uydgfVwJtU.roa Signing time: Fri 02 Jan 2026 00:17:29 +0000 ROA not before: Fri 02 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51235 IP address blocks: 185.51.40.0/23 maxlen: 23 185.51.40.0/24 maxlen: 24 185.51.41.0/24 maxlen: 24 185.51.42.0/23 maxlen: 23 185.51.42.0/24 maxlen: 24 185.51.43.0/24 maxlen: 24 2a04:c147::/34 maxlen: 34 2a04:c147:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:06:e6:97:f1:d6:14:4b:56:09:44:5f:10:39:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13 Validity Not Before: Jan 2 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be960955df659805fc505a1ed2ec9d81f57026d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:a8:a2:6d:1a:75:b5:24:ad:26:c8:c2:e8: fc:d1:94:91:8c:50:14:45:f2:84:23:76:73:06:60: 3d:3e:c1:f7:4a:31:b0:2d:0e:7d:3a:d1:c1:7b:4e: 41:d6:4f:0b:ea:f9:23:33:28:a3:e0:68:49:7f:7c: b2:be:aa:ff:a4:5c:bf:40:55:c4:29:49:64:6a:6d: 6a:07:4c:0b:3f:1e:4b:c5:44:a0:10:c5:e6:47:fa: d3:95:0c:ec:74:f8:59:39:bf:dc:bd:9f:be:e7:d8: f7:bc:18:2c:04:48:a9:2b:a7:3c:05:41:9e:e2:1a: cd:70:c0:83:83:36:b6:2a:7b:d5:70:ac:78:11:76: d6:8e:54:e4:23:3f:76:83:71:da:33:88:81:2d:5b: d2:da:94:6d:74:1a:44:be:16:24:47:34:5f:53:70: ea:16:d7:43:d1:af:f3:c7:23:4f:b3:4e:d8:8c:8d: 1d:62:53:82:94:bb:52:d6:11:5d:d3:6f:98:00:1d: d2:62:c8:16:0d:80:db:bc:84:a5:38:81:1b:bf:35: 05:13:b2:0b:40:cc:f3:78:61:17:68:ea:bc:24:df: ac:85:ee:41:02:f9:bb:bc:4a:a8:e3:4a:3b:47:8d: 71:7b:23:b3:b5:ed:ed:63:b7:57:91:23:88:e0:f9: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:96:09:55:DF:65:98:05:FC:50:5A:1E:D2:EC:9D:81:F5:70:26:D5 X509v3 Authority Key Identifier: keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/vpYJVd9lmAX8UFoe0uydgfVwJtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.40.0/22 IPv6: 2a04:c147::/33 Signature Algorithm: sha256WithRSAEncryption 2f:0b:fa:27:84:4e:b7:c9:bb:1e:09:9f:35:11:83:e7:b5:7e: 29:24:1d:d8:d3:ff:03:3c:62:80:1d:09:37:4a:3e:6a:ae:c7: e3:b4:76:2d:3e:4c:d7:85:4f:a0:06:7b:91:be:0e:52:63:d4: 56:8d:2c:93:ad:44:cb:e9:70:f5:d2:75:ca:95:29:e3:53:8a: fd:a2:aa:9a:45:d3:e1:c0:d8:6b:42:cd:14:6b:b8:62:77:29: 22:52:8b:f3:43:6c:b3:8d:9a:ab:9d:ec:9b:00:bc:52:b5:43: b7:1e:fa:13:59:28:15:f3:e5:f6:0e:ce:63:56:c5:c4:2d:ac: bc:cd:af:cb:9b:0f:9d:61:44:6c:76:83:7f:fe:3c:24:c8:75: 11:78:29:9a:67:35:30:92:52:24:24:bb:b7:64:49:e3:7a:9e: 37:10:cb:13:e4:1e:f7:2a:c0:47:e2:ed:df:60:a4:a0:c5:31: 3e:de:cd:bc:e3:28:c9:aa:9a:04:66:b6:ef:1a:ca:6f:50:f7: 6f:df:f9:73:24:7e:6b:36:39:67:59:9b:d6:44:01:ed:92:30: 26:12:26:95:18:42:bf:03:9e:39:bd:95:30:56:77:e4:0c:46: 59:a8:86:bf:66:a7:56:08:56:46:89:12:1d:81:5d:29:9e:dc: f1:b7:f5:ef -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8EQbml/HWFEtWCURfEDllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzhkZmI5ZWI5MjQwNzliYjcwNmNiNjE2ZWRhNTcyODY0 YTllMTMwHhcNMjYwMTAyMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTk2MDk1NWRmNjU5ODA1ZmM1MDVhMWVkMmVjOWQ4MWY1NzAyNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr6oom0adbUkrSbIwuj80ZSRjFAU RfKEI3ZzBmA9PsH3SjGwLQ59OtHBe05B1k8L6vkjMyij4GhJf3yyvqr/pFy/QFXE KUlkam1qB0wLPx5LxUSgEMXmR/rTlQzsdPhZOb/cvZ++59j3vBgsBEipK6c8BUGe 4hrNcMCDgza2KnvVcKx4EXbWjlTkIz92g3HaM4iBLVvS2pRtdBpEvhYkRzRfU3Dq FtdD0a/zxyNPs07YjI0dYlOClLtS1hFd02+YAB3SYsgWDYDbvISlOIEbvzUFE7IL QMzzeGEXaOq8JN+she5BAvm7vEqo40o7R41xeyOzte3tY7dXkSOI4PlIIQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFL6WCVXfZZgF/FBaHtLsnYH1cCbVMB8GA1UdIwQY MBaAFHk437nrkkB5u3BsthbtpXKGSp4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQt MDZkYTJiYjA2MDcxLzEvdnBZSlZkOWxtQVg4VUZvZTB1eWRnZlZ3SnRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQtMDZkYTJiYjA2MDcx LzEvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuTMoMA4E AgACMAgDBgcqBMFHADANBgkqhkiG9w0BAQsFAAOCAQEALwv6J4ROt8m7HgmfNRGD 57V+KSQd2NP/AzxigB0JN0o+aq7H47R2LT5M14VPoAZ7kb4OUmPUVo0sk61Ey+lw 9dJ1ypUp41OK/aKqmkXT4cDYa0LNFGu4YncpIlKL80Nss42aq53smwC8UrVDtx76 E1koFfPl9g7OY1bFxC2svM2vy5sPnWFEbHaDf/48JMh1EXgpmmc1MJJSJCS7t2RJ 43qeNxDLE+Qe9yrAR+Lt32CkoMUxPt7NvOMoyaqaBGa27xrKb1D3b9/5cyR+azY5 Z1mb1kQB7ZIwJhImlRhCvwOeOb2VMFZ35AxGWaiGv2anVghWRokSHYFdKZ7c8bf1 7w== -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:28 2026 by rpki-client