This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/vTeQphfN2kOOEUbtX-iDOET61jg.roa File: vTeQphfN2kOOEUbtX-iDOET61jg.roa (raw, json) Hash identifier: d96uQbpZZgvCDIsBrz8d/YthfALSsMKs+VoyzsKFeiU= Subject key identifier: BD:37:90:A6:17:CD:DA:43:8E:11:46:ED:5F:E8:83:38:44:FA:D6:38 Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Certificate serial: 019B7D5CA18984DA8498EAD54775DFB53AB2 Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/vTeQphfN2kOOEUbtX-iDOET61jg.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3491 IP address blocks: 185.77.60.0/22 maxlen: 22 185.77.60.0/24 maxlen: 24 217.113.64.0/19 maxlen: 19 217.113.65.0/24 maxlen: 24 217.113.86.0/24 maxlen: 24 217.113.88.0/24 maxlen: 24 217.113.92.0/24 maxlen: 24 2a03:5400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a1:89:84:da:84:98:ea:d5:47:75:df:b5:3a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd3790a617cdda438e1146ed5fe8833844fad638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:01:eb:75:2b:b5:0d:7b:18:de:50:33:b4: 4a:55:0d:28:99:cf:2c:16:d2:3a:01:78:8d:b1:9e: 12:d7:06:d0:95:5f:96:ef:85:85:54:8e:dd:57:dc: 2b:e3:09:9c:43:a4:ee:87:fb:5a:52:1e:0f:24:dc: f1:fe:04:57:23:88:fe:7a:ce:9e:74:ad:21:b2:44: 71:73:8f:f3:12:23:e1:43:03:90:7e:ce:11:02:9c: 9a:e4:3a:65:d8:84:7c:bc:58:8e:49:7c:c5:0c:a0: f7:7f:01:a8:c0:2b:7e:ef:b1:6b:e8:46:2a:b8:fd: 89:ce:df:c3:04:62:87:ba:69:c8:71:49:66:6b:37: 32:3b:35:a1:cc:3e:26:c5:b3:f3:15:d0:78:e3:09: e6:7e:e4:fb:52:d5:a3:eb:fe:ed:de:ff:4c:15:57: 06:c8:af:d4:2d:0f:20:f6:c7:2d:1b:4b:48:40:d5: 37:f4:7b:88:92:0c:55:7f:6f:d5:35:9e:1c:db:7f: 44:75:d8:07:85:47:64:1f:60:e0:6c:92:9b:ee:a1: 76:fb:6c:0f:56:89:80:f7:1a:a3:08:5f:ad:dc:43: 51:03:1b:41:28:ce:08:2d:7c:0c:1f:d4:ab:aa:cf: 35:d2:e0:06:55:12:d8:7d:ca:c9:11:18:66:b9:e0: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:90:A6:17:CD:DA:43:8E:11:46:ED:5F:E8:83:38:44:FA:D6:38 X509v3 Authority Key Identifier: keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/vTeQphfN2kOOEUbtX-iDOET61jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.60.0/22 217.113.64.0/19 IPv6: 2a03:5400::/32 Signature Algorithm: sha256WithRSAEncryption 9c:3a:c6:7c:96:42:73:1a:08:56:e6:83:6a:be:c4:57:6b:c0: 17:15:7a:68:20:af:f5:89:af:70:c2:1a:85:89:fa:47:33:80: ec:b3:41:a1:b8:07:9b:c8:f8:80:91:8b:13:43:36:a8:9d:51: 95:14:23:3f:c3:f7:74:e6:54:5e:45:b8:de:3a:74:92:57:aa: 70:cd:76:75:da:2a:92:d8:5f:31:44:ed:1b:cc:69:59:cb:07: e5:1f:7c:37:89:b6:0c:b5:ef:96:1c:c0:1d:b0:30:a9:df:fd: 46:76:95:3f:8e:8a:df:1e:92:d2:1b:e7:be:4a:f8:db:6d:89: 10:1a:44:54:b5:f0:44:97:e5:43:f4:7c:c9:d1:53:44:fb:cd: f0:67:d4:44:64:2c:ec:de:c2:bc:b4:d3:70:3e:88:1c:5b:82: 59:1d:f1:0a:70:49:a0:a9:24:ee:e6:3a:e8:d9:69:6b:83:dd: 75:ef:c8:ae:87:df:82:6c:03:7a:0c:0b:84:5a:31:ea:30:51: 93:0b:f4:03:b5:1f:46:7c:44:f3:a0:61:c0:9e:e4:08:6e:8b: 13:a5:df:f2:26:ad:37:b0:f9:47:3c:97:ed:a8:66:80:6e:c8: 31:55:db:d9:20:6d:12:1d:81:c7:8b:4e:6a:ab:35:5a:fc:99: 9e:09:0c:b7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XKGJhNqEmOrVR3XftTqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4 MDFiYTEwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM3OTBhNjE3Y2RkYTQzOGUxMTQ2ZWQ1ZmU4ODMzODQ0ZmFkNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrYB63UrtQ17GN5QM7RKVQ0omc8s FtI6AXiNsZ4S1wbQlV+W74WFVI7dV9wr4wmcQ6Tuh/taUh4PJNzx/gRXI4j+es6e dK0hskRxc4/zEiPhQwOQfs4RApya5Dpl2IR8vFiOSXzFDKD3fwGowCt+77Fr6EYq uP2Jzt/DBGKHumnIcUlmazcyOzWhzD4mxbPzFdB44wnmfuT7UtWj6/7t3v9MFVcG yK/ULQ8g9sctG0tIQNU39HuIkgxVf2/VNZ4c239EddgHhUdkH2DgbJKb7qF2+2wP VomA9xqjCF+t3ENRAxtBKM4ILXwMH9Srqs810uAGVRLYfcrJERhmueA1KwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL03kKYXzdpDjhFG7V/ogzhE+tY4MB8GA1UdIwQY MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt NDVkNTQyZDVmNTVmLzEvdlRlUXBoZk4ya09PRVVidFgtaURPRVQ2MWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuU08AwQF 2XFAMA0EAgACMAcDBQAqA1QAMA0GCSqGSIb3DQEBCwUAA4IBAQCcOsZ8lkJzGghW 5oNqvsRXa8AXFXpoIK/1ia9wwhqFifpHM4Dss0GhuAebyPiAkYsTQzaonVGVFCM/ w/d05lReRbjeOnSSV6pwzXZ12iqS2F8xRO0bzGlZywflH3w3ibYMte+WHMAdsDCp 3/1GdpU/jorfHpLSG+e+SvjbbYkQGkRUtfBEl+VD9HzJ0VNE+83wZ9REZCzs3sK8 tNNwPogcW4JZHfEKcEmgqSTu5jro2Wlrg91178iuh9+CbAN6DAuEWjHqMFGTC/QD tR9GfETzoGHAnuQIbosTpd/yJq03sPlHPJftqGaAbsgxVdvZIG0SHYHHi05qqzVa /JmeCQy3 -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:16 2026 by rpki-client