This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vLaGn68UrGShMyPI8X4axlcxUFQ.roa File: vLaGn68UrGShMyPI8X4axlcxUFQ.roa (raw, json) Hash identifier: /JegxnUKDKG9WYfrOeN5/iFYM6RVEw+1sxyQlFE0qn4= Subject key identifier: BC:B6:86:9F:AF:14:AC:64:A1:33:23:C8:F1:7E:1A:C6:57:31:50:54 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB69DA767622BF55903E909DFF660 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vLaGn68UrGShMyPI8X4axlcxUFQ.roa Signing time: Fri 02 Jan 2026 08:21:00 +0000 ROA not before: Fri 02 Jan 2026 08:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401075 IP address blocks: 37.202.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b6:9d:a7:67:62:2b:f5:59:03:e9:09:df:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcb6869faf14ac64a13323c8f17e1ac657315054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:8f:e7:01:42:e7:d4:44:b4:58:a8:c5:99: 95:d9:a4:94:74:ba:2f:c8:e9:4d:6e:c1:fb:a5:4d: 4a:0b:76:19:e4:05:4b:93:59:c2:1a:97:78:30:9a: c0:e0:05:38:7a:57:95:13:7b:9e:4d:72:b2:76:5f: 17:1d:ee:d3:56:6c:00:7d:c3:84:73:35:4b:e6:07: af:13:d4:0b:0d:ce:13:d0:17:3f:42:ee:42:d6:1f: 41:53:39:15:27:89:8a:31:30:72:e2:9c:6c:34:15: be:f4:75:2d:ef:25:1b:d2:d7:18:60:ef:50:21:f5: 41:ea:89:9e:b7:ad:6c:48:51:b6:05:ef:79:22:c0: a1:98:62:ad:c6:ab:37:05:07:f3:34:db:66:ed:1b: ef:28:fa:5e:63:c3:c0:2e:40:e8:0a:b8:14:e7:4a: 5f:36:18:b1:32:9b:ec:06:57:37:90:cb:25:ec:60: 88:11:b3:38:1b:7d:39:3e:9e:e3:9e:34:a5:2e:21: d8:de:a8:a1:5e:41:a4:d7:17:34:fd:5f:2b:b5:ef: 89:58:a9:4e:2b:dd:70:4e:b8:b6:28:5c:01:15:09: b5:e6:7c:31:ed:dd:9a:79:32:23:83:0f:6c:c6:c1: ca:6d:44:86:1f:e8:75:4b:d3:c2:97:68:a7:f3:2b: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B6:86:9F:AF:14:AC:64:A1:33:23:C8:F1:7E:1A:C6:57:31:50:54 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vLaGn68UrGShMyPI8X4axlcxUFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.200.0/24 Signature Algorithm: sha256WithRSAEncryption 14:f9:14:79:3a:ab:ba:5a:6d:99:b2:5a:3a:ea:80:88:03:88: 33:d9:78:1c:f7:bd:7e:f7:f6:a3:3a:c8:d9:c3:d0:33:4b:a7: 1c:ac:09:bb:66:af:0a:07:dc:47:db:76:db:21:5c:76:9c:b2: 07:19:8e:29:ec:82:78:41:83:c0:cb:a4:a0:ee:48:ab:cd:05: 23:e3:a2:ca:65:ae:4e:2a:b3:df:2c:0c:4e:e5:82:f2:8a:c1: 61:52:a2:72:43:fd:07:66:d1:1d:97:d6:5a:6f:97:2f:2a:a3: df:2d:d1:da:ce:16:4a:e9:43:00:07:12:95:b6:75:7d:d5:fb: 5c:7f:46:4f:d3:a9:ab:3f:01:cc:e4:54:5c:1f:a6:a3:86:5a: da:f5:b6:c6:2e:22:e5:af:33:21:49:76:42:74:52:42:ca:59: f4:c0:f8:9d:ab:93:99:04:53:04:b1:0a:fc:ef:f5:fd:42:c1: aa:12:fd:6e:ff:41:b8:52:de:69:80:10:dc:b1:c7:6d:12:64: ed:2f:9a:76:69:a7:07:09:0d:53:c0:aa:f8:b5:7f:6a:24:1a: 4b:07:30:ca:60:8c:49:c7:f8:39:80:45:8d:93:ec:9d:41:3f: ea:b0:b3:95:b2:e0:87:13:15:42:64:c6:0a:5f:32:99:ab:3d: 22:d0:6a:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y7adp2diK/VZA+kJ3/ZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2I2ODY5ZmFmMTRhYzY0YTEzMzIzYzhmMTdlMWFjNjU3MzE1MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6mP5wFC59REtFioxZmV2aSUdLov yOlNbsH7pU1KC3YZ5AVLk1nCGpd4MJrA4AU4eleVE3ueTXKydl8XHe7TVmwAfcOE czVL5gevE9QLDc4T0Bc/Qu5C1h9BUzkVJ4mKMTBy4pxsNBW+9HUt7yUb0tcYYO9Q IfVB6omet61sSFG2Be95IsChmGKtxqs3BQfzNNtm7RvvKPpeY8PALkDoCrgU50pf NhixMpvsBlc3kMsl7GCIEbM4G305Pp7jnjSlLiHY3qihXkGk1xc0/V8rte+JWKlO K91wTri2KFwBFQm15nwx7d2aeTIjgw9sxsHKbUSGH+h1S9PCl2in8yuv+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLy2hp+vFKxkoTMjyPF+GsZXMVBUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdkxhR242OFVyR1NoTXlQSThYNGF4bGN4VUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrIMA0G CSqGSIb3DQEBCwUAA4IBAQAU+RR5Oqu6Wm2Zslo66oCIA4gz2Xgc971+9/ajOsjZ w9AzS6ccrAm7Zq8KB9xH23bbIVx2nLIHGY4p7IJ4QYPAy6Sg7kirzQUj46LKZa5O KrPfLAxO5YLyisFhUqJyQ/0HZtEdl9Zab5cvKqPfLdHazhZK6UMABxKVtnV91ftc f0ZP06mrPwHM5FRcH6ajhlra9bbGLiLlrzMhSXZCdFJCyln0wPidq5OZBFMEsQr8 7/X9QsGqEv1u/0G4Ut5pgBDcscdtEmTtL5p2aacHCQ1TwKr4tX9qJBpLBzDKYIxJ x/g5gEWNk+ydQT/qsLOVsuCHExVCZMYKXzKZqz0i0GqO -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client