This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa File: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (raw, json) Hash identifier: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg= Subject key identifier: C7:EF:95:53:B6:5B:19:81:6D:18:92:38:7B:35:84:F8:B0:DA:40:D2 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7B5F5DE3138A7D3B2A37383A9F49 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 5.252.184.0/24 maxlen: 24 5.252.185.0/24 maxlen: 24 45.11.155.0/24 maxlen: 24 45.84.108.0/24 maxlen: 24 45.84.109.0/24 maxlen: 24 45.84.110.0/24 maxlen: 24 45.84.111.0/24 maxlen: 24 45.138.28.0/22 maxlen: 22 139.28.174.0/24 maxlen: 24 141.98.56.0/24 maxlen: 24 141.98.57.0/24 maxlen: 24 141.98.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7b:5f:5d:e3:13:8a:7d:3b:2a:37:38:3a:9f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7ef9553b65b19816d1892387b3584f8b0da40d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:97:41:b6:ed:74:0f:28:97:c7:4c:2a:e4: 76:e3:2a:bd:99:46:d4:e8:e8:3f:75:16:6a:c1:d8: 96:d2:e9:bb:11:1b:bc:83:9f:73:93:1b:eb:12:9b: 43:be:9b:4b:0d:fa:f9:fb:ac:90:89:06:c9:7f:c2: 85:a6:7d:dd:13:2b:4a:48:b4:19:04:70:b7:00:04: 3f:1b:f4:92:49:f9:f5:18:db:27:47:d0:4e:60:40: b1:77:dc:ef:d5:32:fc:ad:9c:cd:6b:a3:81:3d:a8: d4:c0:6c:59:1f:08:3e:9b:18:dd:9b:f1:14:2a:56: a1:7f:be:0d:b4:7f:32:02:b1:d4:55:aa:17:50:ba: c0:e8:71:2f:c4:b6:32:88:56:b2:68:0e:65:4a:7d: a2:75:e4:78:98:be:09:2d:ca:e1:aa:d6:55:86:72: c9:d8:70:9b:47:ee:fd:cf:02:5a:da:45:6d:cd:fc: d1:6b:cd:97:8f:31:da:70:f6:b2:42:60:75:e1:f2: a2:ab:6d:f6:fa:c6:58:39:a4:3c:2c:63:a0:58:8e: e5:52:e1:78:6d:54:26:82:80:15:d6:52:4a:76:e4: d5:13:1f:d6:17:09:93:1f:4d:de:f1:39:12:a4:81: 0a:d1:ce:09:88:26:86:cc:9b:47:04:11:05:28:6c: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EF:95:53:B6:5B:19:81:6D:18:92:38:7B:35:84:F8:B0:DA:40:D2 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.184.0/23 45.11.155.0/24 45.84.108.0/22 45.138.28.0/22 139.28.174.0/24 141.98.56.0/23 141.98.59.0/24 Signature Algorithm: sha256WithRSAEncryption 65:96:de:70:eb:31:39:ab:b3:f5:ba:96:ac:7a:79:b9:4d:ea: b3:10:77:c3:0a:04:84:02:01:55:1c:da:f8:6e:5d:38:f2:82: f3:dc:21:02:f2:a7:3e:8e:53:6a:f7:56:78:9f:17:04:be:17: 41:9d:7c:c3:aa:ac:b0:cc:cf:72:88:7e:c7:39:a4:97:26:80: 5b:b0:cc:70:81:7a:d5:1c:97:59:31:95:1d:62:81:76:26:18: d5:31:22:65:d8:15:7d:83:80:ce:c9:27:46:e7:51:4f:17:9b: 2d:29:66:e6:21:2d:5a:27:8d:ab:be:9b:68:8c:c5:cf:fa:a7: ca:16:51:5f:21:17:31:86:d3:27:27:68:35:fb:49:c4:87:09: a4:e9:0e:34:72:27:3e:66:fd:d0:54:0a:6c:55:8d:f9:b1:c6: 52:49:e1:0b:24:c5:dc:49:ac:a2:50:33:72:5d:c3:23:66:cf: 7d:fa:9c:3f:ca:27:59:b0:58:d6:67:40:1a:08:df:d8:8a:ff: 42:5f:c2:bb:ca:07:7d:7d:98:db:6e:4b:96:6f:5c:d6:13:63: 65:61:d7:bc:e9:93:06:f8:04:5b:d9:48:9b:10:94:fd:88:47: 03:e2:21:62:b8:d0:12:39:c0:05:c8:1b:86:5a:45:ed:b6:dc: a8:fd:6f:54 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8f3tfXeMTin07Kjc4Op9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2VmOTU1M2I2NWIxOTgxNmQxODkyMzg3YjM1ODRmOGIwZGE0MGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVaXQbbtdA8ol8dMKuR24yq9mUbU 6Og/dRZqwdiW0um7ERu8g59zkxvrEptDvptLDfr5+6yQiQbJf8KFpn3dEytKSLQZ BHC3AAQ/G/SSSfn1GNsnR9BOYECxd9zv1TL8rZzNa6OBPajUwGxZHwg+mxjdm/EU Klahf74NtH8yArHUVaoXULrA6HEvxLYyiFayaA5lSn2ideR4mL4JLcrhqtZVhnLJ 2HCbR+79zwJa2kVtzfzRa82XjzHacPayQmB14fKiq232+sZYOaQ8LGOgWI7lUuF4 bVQmgoAV1lJKduTVEx/WFwmTH03e8TkSpIEK0c4JiCaGzJtHBBEFKGwQ9wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMfvlVO2WxmBbRiSOHs1hPiw2kDSMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEveC0tVlU3WmJHWUZ0R0pJNGV6V0UtTERhUU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBBfy4AwQA LQubAwQCLVRsAwQCLYocAwQAixyuAwQBjWI4AwQAjWI7MA0GCSqGSIb3DQEBCwUA A4IBAQBllt5w6zE5q7P1upasenm5TeqzEHfDCgSEAgFVHNr4bl048oLz3CEC8qc+ jlNq91Z4nxcEvhdBnXzDqqywzM9yiH7HOaSXJoBbsMxwgXrVHJdZMZUdYoF2JhjV MSJl2BV9g4DOySdG51FPF5stKWbmIS1aJ42rvptojMXP+qfKFlFfIRcxhtMnJ2g1 +0nEhwmk6Q40cic+Zv3QVApsVY35scZSSeELJMXcSayiUDNyXcMjZs99+pw/yidZ sFjWZ0AaCN/Yiv9CX8K7ygd9fZjbbkuWb1zWE2NlYde86ZMG+ARb2UibEJT9iEcD 4iFiuNASOcAFyBuGWkXtttyo/W9U -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:03 2026 by rpki-client