This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/VEb6LUknY6TAB--bLPap2buV2rQ.roa File: VEb6LUknY6TAB--bLPap2buV2rQ.roa (raw, json) Hash identifier: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8= Subject key identifier: 54:46:FA:2D:49:27:63:A4:C0:07:EF:9B:2C:F6:A9:D9:BB:95:DA:B4 Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47 Certificate serial: 019B7910A616BE8299D8F95AC96A375C6FB7 Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/VEb6LUknY6TAB--bLPap2buV2rQ.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57692 IP address blocks: 91.232.154.0/24 maxlen: 24 91.232.155.0/24 maxlen: 24 91.232.156.0/24 maxlen: 24 194.146.111.0/24 maxlen: 24 2001:67c:1be8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a6:16:be:82:99:d8:f9:5a:c9:6a:37:5c:6f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47 Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5446fa2d492763a4c007ef9b2cf6a9d9bb95dab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7f:cf:aa:21:22:73:57:cc:78:d6:4e:53:92: b7:61:84:ff:1f:8b:df:32:67:d8:4d:ad:f8:94:b2: 2d:33:9a:52:6e:e8:90:15:3c:89:83:fb:81:a5:96: b2:7d:15:50:ea:60:fa:b6:80:a5:3f:26:53:ac:d3: 2b:fd:09:b1:cd:e0:cf:cf:91:53:cf:8a:2d:4f:48: 32:40:4c:c5:eb:5d:3d:b1:6a:1c:8d:2e:00:db:86: 9c:95:08:f2:89:d1:e5:a3:71:4a:f8:7e:e2:b8:b2: 7e:99:a6:36:29:6d:d6:9d:72:b0:59:4a:77:60:df: 3b:e4:b9:e3:e0:26:75:22:30:c7:96:3c:6e:11:8f: 77:86:fd:75:8e:19:49:9d:b3:15:f0:61:34:cb:1c: 62:4c:cf:b0:94:af:4e:dd:e9:56:5a:0a:94:02:93: 12:4f:86:e9:4b:7d:95:eb:73:7e:8c:bd:8c:0b:53: 0f:86:ce:ce:f5:fe:a8:a7:55:a9:41:74:80:e0:5c: ff:ce:5d:02:bb:56:a4:c6:77:27:6b:60:47:c1:cf: 5a:f6:02:9e:20:7e:5e:e6:09:1e:a4:f7:61:09:e7: bc:21:f3:2c:ea:56:33:32:ab:8f:b0:72:d4:57:12: dc:aa:c1:4f:e2:19:98:46:02:0d:78:12:da:f7:76: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:46:FA:2D:49:27:63:A4:C0:07:EF:9B:2C:F6:A9:D9:BB:95:DA:B4 X509v3 Authority Key Identifier: keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/VEb6LUknY6TAB--bLPap2buV2rQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.154.0-91.232.156.255 194.146.111.0/24 IPv6: 2001:67c:1be8::/48 Signature Algorithm: sha256WithRSAEncryption 13:38:5a:33:e2:67:fe:e6:ee:85:2a:15:2f:cd:1a:33:fd:fb: bb:96:36:1e:c7:53:ce:d2:b3:e8:93:61:4c:97:1c:71:8f:53: 1e:fb:12:c7:88:4d:9d:34:09:b7:07:24:7d:67:90:86:e3:27: 12:b5:09:a9:fc:0d:78:58:b1:ae:d3:68:29:96:de:1e:56:9b: df:9f:a0:32:81:1f:5b:52:9b:24:7f:5c:6e:ce:24:b0:26:aa: 4e:87:dd:84:a1:9a:41:83:a4:19:f5:b2:8d:a4:1d:09:0d:fc: 6f:ac:08:3f:c6:a0:9a:9a:fc:b1:aa:25:9d:db:e2:42:82:56: 92:5f:b7:a6:30:d2:67:dc:72:50:6d:5a:ac:b3:c9:ec:3a:74: c7:ad:d7:0b:72:85:77:3d:a8:ba:9d:98:9f:d0:a3:8b:37:b2: ff:c9:5c:59:cd:54:21:df:6d:d4:da:90:90:e4:85:a4:1f:56: af:88:f4:7e:53:7c:18:fa:77:a0:cd:e0:f4:e3:41:3d:18:4c: f0:8f:c7:69:5a:11:ed:02:1d:24:55:19:c4:cb:e7:56:42:b5: 1c:ff:f9:28:9c:1a:e8:4a:d3:09:66:74:eb:06:0f:bf:05:1d: 3a:c6:11:2b:96:ba:57:bb:59:20:93:d4:c0:10:5a:81:4e:97: f0:b0:d4:fe -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt5EKYWvoKZ2PlayWo3XG+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj YThjNDcwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQ2ZmEyZDQ5Mjc2M2E0YzAwN2VmOWIyY2Y2YTlkOWJiOTVkYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3/PqiEic1fMeNZOU5K3YYT/H4vf MmfYTa34lLItM5pSbuiQFTyJg/uBpZayfRVQ6mD6toClPyZTrNMr/QmxzeDPz5FT z4otT0gyQEzF6109sWocjS4A24aclQjyidHlo3FK+H7iuLJ+maY2KW3WnXKwWUp3 YN875Lnj4CZ1IjDHljxuEY93hv11jhlJnbMV8GE0yxxiTM+wlK9O3elWWgqUApMS T4bpS32V63N+jL2MC1MPhs7O9f6op1WpQXSA4Fz/zl0Cu1akxncna2BHwc9a9gKe IH5e5gkepPdhCee8IfMs6lYzMquPsHLUVxLcqsFP4hmYRgINeBLa93aeMQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFFRG+i1JJ2OkwAfvmyz2qdm7ldq0MB8GA1UdIwQY MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt NGZjMWNhZDhhYjIyLzEvVkViNkxVa25ZNlRBQi0tYkxQYXAyYnVWMnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAFb6JoD BABb6JwDBADCkm8wDwQCAAIwCQMHACABBnwb6DANBgkqhkiG9w0BAQsFAAOCAQEA EzhaM+Jn/ubuhSoVL80aM/37u5Y2HsdTztKz6JNhTJcccY9THvsSx4hNnTQJtwck fWeQhuMnErUJqfwNeFixrtNoKZbeHlab35+gMoEfW1KbJH9cbs4ksCaqTofdhKGa QYOkGfWyjaQdCQ38b6wIP8agmpr8saolndviQoJWkl+3pjDSZ9xyUG1arLPJ7Dp0 x63XC3KFdz2oup2Yn9Cjizey/8lcWc1UId9t1NqQkOSFpB9Wr4j0flN8GPp3oM3g 9ONBPRhM8I/HaVoR7QIdJFUZxMvnVkK1HP/5KJwa6ErTCWZ06wYPvwUdOsYRK5a6 V7tZIJPUwBBagU6X8LDU/g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:16 2026 by rpki-client