This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/VYgE8-UEudg3YNUfBmaafWIWqbY.roa File: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (raw, json) Hash identifier: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4= Subject key identifier: 55:88:04:F3:E5:04:B9:D8:37:60:D5:1F:06:66:9A:7D:62:16:A9:B6 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389570B8441AF4BAE93EE8BC6FF549 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/VYgE8-UEudg3YNUfBmaafWIWqbY.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40371 IP address blocks: 83.125.36.0/24 maxlen: 24 84.207.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:95:70:b8:44:1a:f4:ba:e9:3e:e8:bc:6f:f5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=558804f3e504b9d83760d51f06669a7d6216a9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:d8:00:c1:9a:1a:85:e3:c1:85:f3:d5:15: 31:63:d4:77:39:f9:a7:d0:4b:35:a4:e1:21:31:ef: f0:0f:eb:52:d0:bb:be:a4:92:20:28:7c:68:f3:b0: 20:2c:48:29:57:04:04:34:10:31:22:84:d0:f2:e2: 5d:4f:41:af:35:f6:5b:3d:15:d9:91:80:da:16:3f: a5:b5:e7:fa:96:9a:6c:55:f3:28:69:3d:36:92:0f: 67:06:e1:88:9c:e1:c8:2b:3d:47:b3:f1:20:5e:3d: de:41:d6:43:9c:f7:02:a7:fe:56:92:00:4b:4b:73: 9f:85:3a:e4:a2:60:c8:d0:d9:e6:77:ea:23:00:4f: 1f:97:58:32:3e:22:cc:dc:7d:77:f9:0b:df:fb:f9: d6:b4:f4:11:67:94:ff:88:aa:89:93:ab:e6:d8:94: 57:90:f3:bf:fe:51:e1:27:9e:2a:2b:e5:07:6a:b2: 06:21:41:a1:1b:b5:9f:d7:30:9f:6a:06:b6:da:48: 6b:fb:a7:58:4f:fe:18:46:7a:38:a7:1b:5b:a1:7a: 34:bf:7c:7d:4c:cc:b2:3a:eb:d6:a0:7e:76:b9:f3: e1:44:db:30:58:66:1b:9e:cf:4a:9a:23:4c:0e:45: b8:f2:57:15:6c:d7:af:62:1e:b9:74:a8:c9:96:92: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:88:04:F3:E5:04:B9:D8:37:60:D5:1F:06:66:9A:7D:62:16:A9:B6 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/VYgE8-UEudg3YNUfBmaafWIWqbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.125.36.0/24 84.207.212.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b2:af:6d:d0:6d:aa:9f:d3:84:75:67:cb:8a:b7:ef:dc:e1: 9e:02:ee:c0:a8:b3:b5:64:fb:f3:e5:b8:4e:6d:40:b8:5b:21: d7:da:4c:8a:f1:69:5d:b1:c3:da:73:62:e4:c1:f2:40:c4:79: 23:23:01:6f:74:d2:d6:cc:11:01:22:a2:51:dd:5c:38:2c:78: b0:bc:7b:7e:b8:b4:72:df:80:a5:ab:a4:f6:31:bb:15:aa:76: c0:6d:dd:d7:e3:e8:0b:38:72:50:2e:6f:43:c7:38:d0:7f:3d: 3f:7a:b0:54:45:d7:31:2d:86:48:0f:b6:11:4b:1c:21:80:02: 1d:27:85:a5:b7:ff:e0:49:41:55:be:ec:26:66:a3:8c:fb:56: 4f:b6:3f:4b:5c:3c:43:1c:e1:2e:81:01:40:aa:8d:95:d9:3d: ba:b4:c1:b3:5b:2f:38:fd:8d:de:57:3b:dd:bf:df:3b:f0:f8: 4b:b9:41:d6:64:8b:88:c5:47:0a:14:ad:f6:3b:81:30:5a:bc: ae:e8:40:e5:88:42:91:8e:d6:d1:c7:94:34:4f:1a:b0:e7:7d: bc:ec:8c:e7:c7:28:d3:95:ab:33:62:34:9a:2b:29:34:a1:3b: 84:36:d2:08:68:25:86:35:5b:96:ff:66:83:90:d7:bc:bd:a7: e7:af:c5:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OJVwuEQa9LrpPui8b/VJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTg4MDRmM2U1MDRiOWQ4Mzc2MGQ1MWYwNjY2OWE3ZDYyMTZhOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmXYAMGaGoXjwYXz1RUxY9R3Ofmn 0Es1pOEhMe/wD+tS0Lu+pJIgKHxo87AgLEgpVwQENBAxIoTQ8uJdT0GvNfZbPRXZ kYDaFj+ltef6lppsVfMoaT02kg9nBuGInOHIKz1Hs/EgXj3eQdZDnPcCp/5WkgBL S3OfhTrkomDI0Nnmd+ojAE8fl1gyPiLM3H13+Qvf+/nWtPQRZ5T/iKqJk6vm2JRX kPO//lHhJ54qK+UHarIGIUGhG7Wf1zCfaga22khr+6dYT/4YRno4pxtboXo0v3x9 TMyyOuvWoH52ufPhRNswWGYbns9KmiNMDkW48lcVbNevYh65dKjJlpIErQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFWIBPPlBLnYN2DVHwZmmn1iFqm2MB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvVllnRTgtVUV1ZGczWU5VZkJtYWFmV0lXcWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU30kAwQA VM/UMA0GCSqGSIb3DQEBCwUAA4IBAQCesq9t0G2qn9OEdWfLirfv3OGeAu7AqLO1 ZPvz5bhObUC4WyHX2kyK8WldscPac2LkwfJAxHkjIwFvdNLWzBEBIqJR3Vw4LHiw vHt+uLRy34Clq6T2MbsVqnbAbd3X4+gLOHJQLm9DxzjQfz0/erBURdcxLYZID7YR SxwhgAIdJ4Wlt//gSUFVvuwmZqOM+1ZPtj9LXDxDHOEugQFAqo2V2T26tMGzWy84 /Y3eVzvdv9878PhLuUHWZIuIxUcKFK32O4EwWryu6EDliEKRjtbRx5Q0Txqw5328 7IznxyjTlaszYjSaKyk0oTuENtIIaCWGNVuW/2aDkNe8vafnr8Ua -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:01 2026 by rpki-client