This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa File: VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa (raw, json) Hash identifier: 6wRzyykqCCxdI4kZ8Ht7eIQbCtfAS/CYcPHcXOqhj1U= Subject key identifier: 54:5C:5D:05:1D:5D:0E:9F:09:39:A0:35:3F:08:17:D1:93:49:1F:36 Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54 Certificate serial: 019B7EA6D6419564E76E89B154D22865BE56 Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24631 IP address blocks: 185.191.76.0/24 maxlen: 24 185.191.77.0/24 maxlen: 24 185.191.78.0/24 maxlen: 24 185.191.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d6:41:95:64:e7:6e:89:b1:54:d2:28:65:be:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=545c5d051d5d0e9f0939a0353f0817d193491f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:36:5f:23:96:74:39:b7:f7:29:a8:df:ce:70: a2:c4:a3:fd:af:b0:e2:a0:e3:a6:f6:f0:98:a8:d0: d3:05:e6:e6:a6:6b:3a:b6:9e:af:7b:7a:a1:2e:ff: 48:80:f8:76:dd:11:10:4c:73:54:f8:b7:13:93:88: 7b:5e:ca:3f:7f:6e:be:d6:5d:b6:0c:4f:bd:cb:a2: 8c:1f:9b:25:cb:8c:ea:a0:51:49:01:a0:f4:fd:83: 8d:ea:34:bc:ca:33:1e:8a:dd:64:61:85:83:52:da: 57:f6:41:17:32:3a:c9:48:0a:7f:d7:d4:68:d8:9e: fa:e2:bb:4d:ae:be:97:a4:f7:1a:bb:60:44:57:1a: 8c:b4:c0:e2:48:bb:2b:5b:8b:b3:7b:ea:20:a3:01: 4f:2c:25:d8:82:2f:bb:d7:56:36:73:4e:db:7d:1e: 95:cb:9c:bb:86:fd:4e:25:4b:87:f4:9c:93:fa:a6: 84:f6:94:fb:c9:71:72:fd:ec:c0:78:8e:c4:2f:7b: 5e:bc:53:8f:2d:6f:af:c6:85:ec:30:8b:49:d1:7d: 75:fb:18:1f:69:c4:9c:5d:31:ad:08:27:3c:bd:d5: 0f:d1:fd:18:d3:7f:3f:56:22:8a:1f:db:bb:48:26: 41:af:35:44:85:aa:3a:82:c1:21:ba:25:90:29:10: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:5D:05:1D:5D:0E:9F:09:39:A0:35:3F:08:17:D1:93:49:1F:36 X509v3 Authority Key Identifier: keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.76.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:ce:98:ca:a5:0f:c4:ef:45:5e:09:bb:38:d7:7b:aa:64:10: 7a:95:9e:29:85:c0:5d:c6:10:29:46:4e:72:0f:b6:9c:d6:fe: b3:52:41:58:ac:10:26:9b:cc:d2:6a:1c:4a:50:7c:60:97:39: b9:9d:1a:dd:38:64:8f:53:50:8e:1f:6f:37:88:0c:3e:ba:1b: 96:fb:5a:3a:bf:97:80:55:00:b3:06:b8:c0:59:de:bf:63:ec: 58:38:18:de:4f:f0:1a:cd:a8:92:44:6a:7c:ff:7b:98:b2:20: f6:3a:04:6d:6e:aa:ab:2e:be:4f:62:fc:20:de:82:39:b4:be: e0:94:c8:75:06:54:a3:ce:54:88:6e:e6:ff:ac:82:3f:09:38: c6:8a:a0:b0:39:03:b7:c8:4e:4c:f7:d0:7a:c8:2c:0e:c8:bf: 6d:4b:ce:72:dc:f3:fe:9b:7f:45:df:53:71:10:40:8f:72:73: 31:ae:2c:ac:e4:29:4d:e6:28:c5:f7:33:ff:a7:a9:52:c9:25: b8:f2:57:80:d8:89:eb:22:a8:39:3d:5b:05:e9:cf:07:99:ef: fb:0b:7f:3b:19:6c:e0:2f:b0:c1:06:d8:cb:1d:d0:3a:cb:ff: 16:a3:37:ff:f4:98:08:18:b0:6d:29:d4:be:d5:b6:0b:9b:82: f6:e9:0f:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ptZBlWTnbomxVNIoZb5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5 OWFlNTQwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDVjNWQwNTFkNWQwZTlmMDkzOWEwMzUzZjA4MTdkMTkzNDkxZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzZfI5Z0Obf3KajfznCixKP9r7Di oOOm9vCYqNDTBebmpms6tp6ve3qhLv9IgPh23REQTHNU+LcTk4h7Xso/f26+1l22 DE+9y6KMH5sly4zqoFFJAaD0/YON6jS8yjMeit1kYYWDUtpX9kEXMjrJSAp/19Ro 2J764rtNrr6XpPcau2BEVxqMtMDiSLsrW4uze+ogowFPLCXYgi+711Y2c07bfR6V y5y7hv1OJUuH9JyT+qaE9pT7yXFy/ezAeI7EL3tevFOPLW+vxoXsMItJ0X11+xgf acScXTGtCCc8vdUP0f0Y038/ViKKH9u7SCZBrzVEhao6gsEhuiWQKRAKwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFRcXQUdXQ6fCTmgNT8IF9GTSR82MB8GA1UdIwQY MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt MjEwZDQ4MmE0YjkzLzEvVkZ4ZEJSMWREcDhKT2FBMVB3Z1gwWk5KSHpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub9MMA0G CSqGSIb3DQEBCwUAA4IBAQBOzpjKpQ/E70VeCbs413uqZBB6lZ4phcBdxhApRk5y D7ac1v6zUkFYrBAmm8zSahxKUHxglzm5nRrdOGSPU1COH283iAw+uhuW+1o6v5eA VQCzBrjAWd6/Y+xYOBjeT/AazaiSRGp8/3uYsiD2OgRtbqqrLr5PYvwg3oI5tL7g lMh1BlSjzlSIbub/rII/CTjGiqCwOQO3yE5M99B6yCwOyL9tS85y3PP+m39F31Nx EECPcnMxriys5ClN5ijF9zP/p6lSySW48leA2InrIqg5PVsF6c8Hme/7C387GWzg L7DBBtjLHdA6y/8Wozf/9JgIGLBtKdS+1bYLm4L26Q/L -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:04 2026 by rpki-client