This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vIBs8tKQd72uNww4J1SizpWGYDI.roa File: vIBs8tKQd72uNww4J1SizpWGYDI.roa (raw, json) Hash identifier: vjrcLqIahKPWlu5yezWlKf8VF6hUZVHAOofiClIBa0w= Subject key identifier: BC:80:6C:F2:D2:90:77:BD:AE:37:0C:38:27:54:A2:CE:95:86:60:32 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA7D3F8C8BE750DBC80D16B647218 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vIBs8tKQd72uNww4J1SizpWGYDI.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 109.176.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a7:d3:f8:c8:be:75:0d:bc:80:d1:6b:64:72:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc806cf2d29077bdae370c382754a2ce95866032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:56:68:72:10:5f:e1:13:5b:32:55:7a:33: 10:a5:c1:94:92:d9:5c:67:b6:d9:db:dc:ee:c6:13: bd:b4:8f:78:35:d9:63:f6:ee:cc:c4:67:15:5d:6f: 5a:2d:af:86:e7:c6:72:9b:90:7d:e5:7e:49:fd:2a: 5e:b8:bd:44:93:02:43:d2:86:00:7c:86:36:b7:03: a1:73:b4:06:07:97:76:97:f4:ef:16:bc:d3:0c:9c: df:f0:29:fa:56:8a:43:10:c3:f1:32:f2:ca:07:53: ad:2f:d4:e1:22:61:79:ae:16:10:21:77:15:a2:07: be:85:c4:ca:3c:22:99:6f:4d:7a:7f:8a:2a:8c:4e: fd:ba:0d:fb:8d:70:bd:e2:f6:54:90:38:96:91:ae: fe:0c:13:da:81:35:5b:36:1d:50:70:57:e2:2f:30: e7:a4:6b:54:88:09:68:91:d9:24:87:2e:42:8e:8a: 8c:00:51:93:88:6d:e9:eb:6e:4f:bd:60:e8:74:92: ed:6f:2f:92:21:9e:b3:a5:6b:31:73:3a:75:9b:fd: 10:50:05:e7:93:61:3f:ff:fb:70:3f:4a:b2:67:43: c4:d1:13:b2:c4:29:23:82:7d:b1:79:fc:0d:17:39: 18:a6:fb:75:f2:6b:bb:09:b5:f9:ab:2d:3b:61:bd: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:6C:F2:D2:90:77:BD:AE:37:0C:38:27:54:A2:CE:95:86:60:32 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vIBs8tKQd72uNww4J1SizpWGYDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.254.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:b6:80:80:02:f2:73:b4:31:c4:97:9f:43:75:0e:8c:09:36: 7e:f8:51:2c:93:6d:9a:4d:52:65:58:07:97:e7:3b:66:0d:79: 2f:0d:33:e8:fc:bc:d8:4a:43:e6:4d:e6:8d:ee:82:63:27:d0: c0:93:0d:ee:1b:0c:c0:ba:fd:54:a0:d5:b2:2c:a9:fc:46:d2: 7b:c3:eb:c7:da:ca:e2:49:b0:11:27:b0:79:89:9f:5d:ab:b7: fc:34:8c:4b:d1:02:78:57:51:f4:24:f0:33:52:aa:7a:5b:9e: 13:9c:7b:84:c7:bb:64:f5:16:41:4b:54:06:c1:2b:f6:75:ee: d0:6d:df:9d:b1:54:43:77:dc:e7:36:99:2d:2d:a0:a3:34:e9: 60:d4:27:b6:5f:17:65:bb:e1:58:ae:93:96:62:1f:e3:f3:de: 75:03:6c:45:72:1d:3b:6b:42:a1:04:e0:31:d1:9b:06:2d:99: 3e:63:2f:f6:a0:7d:c8:1f:e8:42:54:e1:1d:c5:4a:ba:c2:c6: 43:da:5d:51:6a:91:19:be:ed:c6:e7:ee:32:26:ea:8b:e2:17: ae:f3:c3:45:2d:e3:62:cb:e2:84:34:e6:86:71:55:dd:7f:33: 02:29:33:44:c6:19:d0:7d:79:0d:b7:de:5b:c5:7a:73:55:cf: e7:85:dd:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqfT+Mi+dQ28gNFrZHIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzgwNmNmMmQyOTA3N2JkYWUzNzBjMzgyNzU0YTJjZTk1ODY2MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5xWaHIQX+ETWzJVejMQpcGUktlc Z7bZ29zuxhO9tI94Ndlj9u7MxGcVXW9aLa+G58Zym5B95X5J/SpeuL1EkwJD0oYA fIY2twOhc7QGB5d2l/TvFrzTDJzf8Cn6VopDEMPxMvLKB1OtL9ThImF5rhYQIXcV oge+hcTKPCKZb016f4oqjE79ug37jXC94vZUkDiWka7+DBPagTVbNh1QcFfiLzDn pGtUiAlokdkkhy5CjoqMAFGTiG3p625PvWDodJLtby+SIZ6zpWsxczp1m/0QUAXn k2E///twP0qyZ0PE0ROyxCkjgn2xefwNFzkYpvt18mu7CbX5qy07Yb2gnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLyAbPLSkHe9rjcMOCdUos6VhmAyMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdklCczh0S1FkNzJ1Tnd3NEoxU2l6cFdHWURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbbD+MA0G CSqGSIb3DQEBCwUAA4IBAQBPtoCAAvJztDHEl59DdQ6MCTZ++FEsk22aTVJlWAeX 5ztmDXkvDTPo/LzYSkPmTeaN7oJjJ9DAkw3uGwzAuv1UoNWyLKn8RtJ7w+vH2sri SbARJ7B5iZ9dq7f8NIxL0QJ4V1H0JPAzUqp6W54TnHuEx7tk9RZBS1QGwSv2de7Q bd+dsVRDd9znNpktLaCjNOlg1Ce2Xxdlu+FYrpOWYh/j8951A2xFch07a0KhBOAx 0ZsGLZk+Yy/2oH3IH+hCVOEdxUq6wsZD2l1RapEZvu3G5+4yJuqL4heu88NFLeNi y+KENOaGcVXdfzMCKTNExhnQfXkNt95bxXpzVc/nhd1r -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:43 2026 by rpki-client