This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vgyz1FaTLL9VtNVr5X8iAogQECA.roa File: Vgyz1FaTLL9VtNVr5X8iAogQECA.roa (raw, json) Hash identifier: A7h7eno1ReuKV/AOG/fZF3W2BXBl0/vNzwIRhOVY41k= Subject key identifier: 56:0C:B3:D4:56:93:2C:BF:55:B4:D5:6B:E5:7F:22:02:88:10:10:20 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BC10A059FCB8D94C876A2BB8466A73B13 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vgyz1FaTLL9VtNVr5X8iAogQECA.roa Signing time: Thu 15 Jan 2026 09:43:38 +0000 ROA not before: Thu 15 Jan 2026 09:43:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51722 IP address blocks: 217.60.200.0/22 maxlen: 24 217.60.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:0a:05:9f:cb:8d:94:c8:76:a2:bb:84:66:a7:3b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 15 09:43:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=560cb3d456932cbf55b4d56be57f220288101020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:63:6b:30:5a:33:85:21:8a:2d:9d:c8:00: 22:8c:eb:17:4d:3b:a4:eb:61:14:62:9e:08:63:6b: 74:5a:57:5f:8e:be:7b:c1:2d:30:5a:a7:1b:3d:27: be:fa:84:c5:c5:fb:e4:1c:1f:4a:14:e1:c0:68:99: 0c:00:c5:89:12:60:91:b5:a5:ac:bc:66:d5:7c:a2: 1a:32:33:d6:82:57:94:17:00:4f:12:f0:62:91:1c: 45:3a:83:bb:6d:a2:7d:5d:f7:99:23:f7:63:87:d7: ac:80:fa:76:53:c0:49:24:01:45:03:94:8d:b8:15: 8c:7e:5c:0c:aa:da:88:cd:4c:4b:a1:fd:ee:83:f1: 3b:d4:1b:c7:88:c8:b0:b2:cc:ed:7c:8e:70:07:c0: b2:11:d6:09:af:78:ac:7c:08:9f:99:27:be:19:65: b4:19:38:33:2e:88:2c:08:b4:9a:38:50:e7:10:8b: 3a:cc:34:fe:a1:35:78:60:38:7c:0c:b8:6b:fd:1a: ea:55:8d:36:47:61:90:dc:86:39:13:ed:da:32:88: ac:ee:9e:d7:2d:58:b8:06:78:7b:9c:11:36:81:36: e8:c8:7b:e9:8f:90:cd:bf:1f:1f:17:a3:ee:a2:dc: 06:de:2c:02:91:c8:59:d7:52:fa:f8:af:18:2d:58: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0C:B3:D4:56:93:2C:BF:55:B4:D5:6B:E5:7F:22:02:88:10:10:20 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vgyz1FaTLL9VtNVr5X8iAogQECA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.200.0/21 Signature Algorithm: sha256WithRSAEncryption 32:7a:73:33:b8:d9:00:bf:d7:da:bd:1e:9c:1d:ef:d7:43:6e: 30:1c:44:6b:1f:8f:34:93:3a:bb:15:ed:5e:74:f1:d1:30:51: 2c:e1:93:95:0d:a3:3d:c5:05:c3:f9:0b:c7:0d:95:bb:18:c2: 67:50:eb:74:a9:a9:68:bb:5c:91:68:9c:ac:9d:49:df:7f:50: d8:db:0b:0e:73:74:2d:37:1a:b0:25:d1:e6:bc:a7:c0:03:f7: 13:ce:0b:6b:9b:d9:00:ab:e9:92:2f:8f:88:dc:5d:28:c9:48: 63:87:df:4e:b7:6d:33:ee:a9:ab:ca:d7:fb:38:66:4c:dd:f2: dd:6b:9e:ef:cb:65:c9:18:3a:78:04:c9:43:d0:49:b7:53:0a: 89:d9:15:42:94:b5:4d:ef:66:b1:92:a0:86:dc:6c:c5:86:a8: 74:0c:75:20:e7:19:02:5e:67:c0:13:82:69:af:32:41:f4:36: e5:5a:9f:86:e8:0e:f8:e6:3d:44:39:e3:ff:1b:15:33:d6:dd: e9:bf:be:ad:c6:5d:24:5b:e4:8d:88:76:51:d2:49:d2:7b:e5: 58:ac:b8:41:75:4f:3b:dd:e4:3e:5d:f8:11:be:41:8e:b0:5a: 56:f2:f1:4f:9d:5b:45:8c:06:7d:1e:77:dd:0a:05:7b:d4:95: e0:d0:31:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvBCgWfy42UyHaiu4RmpzsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE1MDk0MzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjBjYjNkNDU2OTMyY2JmNTViNGQ1NmJlNTdmMjIwMjg4MTAxMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyStjazBaM4Uhii2dyAAijOsXTTuk 62EUYp4IY2t0Wldfjr57wS0wWqcbPSe++oTFxfvkHB9KFOHAaJkMAMWJEmCRtaWs vGbVfKIaMjPWgleUFwBPEvBikRxFOoO7baJ9XfeZI/djh9esgPp2U8BJJAFFA5SN uBWMflwMqtqIzUxLof3ug/E71BvHiMiwssztfI5wB8CyEdYJr3isfAifmSe+GWW0 GTgzLogsCLSaOFDnEIs6zDT+oTV4YDh8DLhr/RrqVY02R2GQ3IY5E+3aMois7p7X LVi4Bnh7nBE2gTboyHvpj5DNvx8fF6PuotwG3iwCkchZ11L6+K8YLVgAPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYMs9RWkyy/VbTVa+V/IgKIEBAgMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVmd5ejFGYVRMTDlWdE5WcjVYOGlBb2dRRUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2TzIMA0G CSqGSIb3DQEBCwUAA4IBAQAyenMzuNkAv9favR6cHe/XQ24wHERrH480kzq7Fe1e dPHRMFEs4ZOVDaM9xQXD+QvHDZW7GMJnUOt0qalou1yRaJysnUnff1DY2wsOc3Qt NxqwJdHmvKfAA/cTzgtrm9kAq+mSL4+I3F0oyUhjh99Ot20z7qmrytf7OGZM3fLd a57vy2XJGDp4BMlD0Em3UwqJ2RVClLVN72axkqCG3GzFhqh0DHUg5xkCXmfAE4Jp rzJB9DblWp+G6A745j1EOeP/GxUz1t3pv76txl0kW+SNiHZR0knSe+VYrLhBdU87 3eQ+XfgRvkGOsFpW8vFPnVtFjAZ9HnfdCgV71JXg0DGG -----END CERTIFICATE-----Generated at Thu Jan 15 22:49:12 2026 by rpki-client