This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/VBZM83CovnXWWNAoSTmLuwtkvPA.roa File: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (raw, json) Hash identifier: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E= Subject key identifier: 54:16:4C:F3:70:A8:BE:75:D6:58:D0:28:49:39:8B:BB:0B:64:BC:F0 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B7910939F3F95BFE09C58CD813B1F2AA0 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/VBZM83CovnXWWNAoSTmLuwtkvPA.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 192.89.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:93:9f:3f:95:bf:e0:9c:58:cd:81:3b:1f:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54164cf370a8be75d658d02849398bbb0b64bcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:8e:5a:d1:9d:6d:ed:03:35:31:2d:a5:92: 96:88:6d:07:2a:6e:e3:3a:70:21:88:dd:45:cb:8a: b6:81:05:49:ed:ec:8e:a1:5f:f6:4c:64:ee:ff:57: 3b:0d:09:84:bf:19:97:66:4c:c4:6c:c2:83:21:12: 4f:23:ec:0c:b8:73:32:0b:e8:35:0c:a2:db:c9:5e: dc:10:09:96:4c:2a:da:9f:7d:df:f7:6c:7d:f7:04: e1:00:60:30:fa:74:c5:ff:a2:32:e6:ed:92:e2:ea: 70:54:41:ae:94:b9:0e:8f:4a:9e:4d:5c:f8:7d:84: 54:ce:51:67:5d:cb:68:65:af:c6:12:e4:47:18:5e: 04:cb:6b:fa:73:c7:05:c1:2e:ea:46:e8:42:16:76: 07:e7:fd:a1:c8:c2:a4:2f:7c:15:38:19:70:85:23: 35:2d:61:3c:40:7e:c6:79:b2:27:24:95:2f:47:e5: c0:a5:f7:d0:e5:45:c5:9d:31:87:29:a7:6c:a1:39: 30:60:b1:1f:36:c9:52:28:27:9a:e4:e9:4b:1f:57: 34:ad:ff:06:ab:cc:6d:11:ab:a6:54:50:16:a6:91: 51:15:5f:43:b9:4e:b4:f5:5c:57:28:dd:22:3d:c6: 56:42:ec:90:95:88:fc:4f:09:74:20:d9:25:66:8b: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:4C:F3:70:A8:BE:75:D6:58:D0:28:49:39:8B:BB:0B:64:BC:F0 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/VBZM83CovnXWWNAoSTmLuwtkvPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.89.218.0/24 Signature Algorithm: sha256WithRSAEncryption 81:b2:4e:02:51:9e:b5:3c:b1:d6:b8:25:6d:80:5d:91:53:ce: 89:4f:dc:5f:1e:18:52:f9:8c:2d:0b:24:18:23:00:87:73:d1: 93:c9:c1:14:70:ce:1b:1b:63:ea:06:fd:cc:65:93:9b:b3:fe: b4:4c:df:ae:9c:81:00:60:b0:f5:77:ab:0d:50:f9:69:c4:09: 02:27:75:90:ee:99:4f:c4:56:0f:5f:33:58:0b:1e:b2:29:3e: ad:70:00:79:ba:66:08:33:d2:c2:d7:6d:dc:62:a6:68:c6:90: 58:33:88:d7:2f:c4:77:07:6c:5f:1c:5f:13:a5:9a:a8:57:51: 6f:18:75:71:ae:26:8e:b3:95:00:53:28:0a:0b:47:8d:63:ba: 65:72:75:13:66:c2:4a:67:45:a5:f9:8b:75:b9:92:f0:3b:d4: a2:d1:38:06:b1:f8:7d:60:a8:66:1d:9d:15:38:86:ec:1c:ae: 1d:3f:1b:45:c2:04:5e:f2:51:6a:e4:39:3c:dc:fe:b2:04:47: fb:ea:af:41:41:30:ea:0b:f4:7a:18:c2:28:1b:1c:93:02:51: 68:6b:8d:ec:ab:e3:64:d2:1d:67:cb:03:6d:05:56:72:b3:b2: 74:5d:70:80:82:53:87:e8:8d:4b:5b:33:6a:89:74:a2:48:f8: 10:12:ec:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJOfP5W/4JxYzYE7HyqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDE2NGNmMzcwYThiZTc1ZDY1OGQwMjg0OTM5OGJiYjBiNjRiY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j+OWtGdbe0DNTEtpZKWiG0HKm7j OnAhiN1Fy4q2gQVJ7eyOoV/2TGTu/1c7DQmEvxmXZkzEbMKDIRJPI+wMuHMyC+g1 DKLbyV7cEAmWTCran33f92x99wThAGAw+nTF/6Iy5u2S4upwVEGulLkOj0qeTVz4 fYRUzlFnXctoZa/GEuRHGF4Ey2v6c8cFwS7qRuhCFnYH5/2hyMKkL3wVOBlwhSM1 LWE8QH7GebInJJUvR+XApffQ5UXFnTGHKadsoTkwYLEfNslSKCea5OlLH1c0rf8G q8xtEaumVFAWppFRFV9DuU609VxXKN0iPcZWQuyQlYj8Twl0INklZotSWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQWTPNwqL511ljQKEk5i7sLZLzwMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvVkJaTTgzQ292blhXV05Bb1NUbUx1d3RrdlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFnaMA0G CSqGSIb3DQEBCwUAA4IBAQCBsk4CUZ61PLHWuCVtgF2RU86JT9xfHhhS+YwtCyQY IwCHc9GTycEUcM4bG2PqBv3MZZObs/60TN+unIEAYLD1d6sNUPlpxAkCJ3WQ7plP xFYPXzNYCx6yKT6tcAB5umYIM9LC123cYqZoxpBYM4jXL8R3B2xfHF8TpZqoV1Fv GHVxriaOs5UAUygKC0eNY7plcnUTZsJKZ0Wl+Yt1uZLwO9Si0TgGsfh9YKhmHZ0V OIbsHK4dPxtFwgRe8lFq5Dk83P6yBEf76q9BQTDqC/R6GMIoGxyTAlFoa43sq+Nk 0h1nywNtBVZys7J0XXCAglOH6I1LWzNqiXSiSPgQEuzB -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:13 2026 by rpki-client