This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/VBLtb5anXu8mfDZEd2sf0Q3rh38.roa File: VBLtb5anXu8mfDZEd2sf0Q3rh38.roa (raw, json) Hash identifier: ZdPYXywTN4OXgthFTsawnGv2wOYDeomubZS+6zVQngE= Subject key identifier: 54:12:ED:6F:96:A7:5E:EF:26:7C:36:44:77:6B:1F:D1:0D:EB:87:7F Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1 Certificate serial: 019B7AC8042BA496B750DF14161FDFC92DBD Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/VBLtb5anXu8mfDZEd2sf0Q3rh38.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50320 IP address blocks: 193.104.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:04:2b:a4:96:b7:50:df:14:16:1f:df:c9:2d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1 Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5412ed6f96a75eef267c3644776b1fd10deb877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:63:4f:e6:83:f2:66:34:27:1f:37:50:bb: 32:98:c6:77:a8:35:a5:4b:61:f4:ac:ee:af:fa:96: bd:75:86:cd:dd:ec:c5:9d:5d:0a:99:6b:c3:5d:bb: e9:77:58:d4:4d:09:dc:aa:63:fb:f7:cd:e0:8e:09: c5:66:2a:d9:05:02:65:22:14:b6:41:81:97:0d:a2: c4:f3:bd:d1:6c:97:96:ab:ee:2e:93:f2:d3:e4:89: ea:44:48:53:9b:c2:61:02:ce:bf:42:38:6c:a6:2c: 00:ca:15:9e:b7:25:21:ee:63:1f:e1:7e:75:c2:bc: 94:76:a5:6a:cd:1c:33:e5:d7:11:94:b2:1d:ae:1e: af:00:a3:77:40:ab:ca:70:5c:8d:3f:57:48:2c:27: 8b:b8:93:1f:dd:2a:30:63:f9:ff:32:b3:ba:4e:f5: bd:23:a7:ec:32:78:0c:2d:7f:e6:77:11:08:e9:a1: 26:01:fe:cf:02:3a:27:bc:fb:c9:f2:32:59:72:ba: 75:a6:89:57:89:02:10:0e:72:aa:08:33:b7:01:0a: 53:48:36:4f:a7:cb:ba:53:ea:19:58:0d:00:26:aa: b6:62:07:43:48:5a:1a:d7:e2:55:ea:c1:15:98:2d: b6:15:9e:4b:b4:41:8c:4b:4b:54:c2:1e:e3:d0:5e: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:12:ED:6F:96:A7:5E:EF:26:7C:36:44:77:6B:1F:D1:0D:EB:87:7F X509v3 Authority Key Identifier: keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/VBLtb5anXu8mfDZEd2sf0Q3rh38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.206.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e0:a4:3e:e2:8a:cf:aa:da:07:ea:c2:7f:cc:34:d5:f6:ec: dd:d3:ef:5f:40:d5:af:cf:2c:73:c4:c8:9d:da:53:a7:29:b9: 88:bd:73:c2:28:f5:57:46:42:54:0f:25:6f:8c:a0:52:db:19: 0f:de:0c:d0:b0:0d:de:ac:4c:a5:08:2c:9a:04:f0:f2:40:87: 08:c4:f9:65:13:cb:84:e4:63:11:b4:0c:d5:84:97:03:66:48: 60:66:44:fc:40:b2:5d:a5:a4:76:1e:9d:8b:e5:9c:00:57:a3: 6f:ee:63:2f:6d:8f:f6:68:b6:68:7f:bb:68:f4:d6:61:7a:04: ac:d1:9b:ff:86:d4:b1:17:e3:90:b2:90:c4:00:d2:6c:ce:0b: d0:35:ea:84:71:eb:3e:5f:2e:b8:6f:7d:d7:e1:0a:81:40:95: ea:c0:73:cf:c3:58:4b:ec:b2:d0:c1:c6:a2:d4:7c:20:92:ae: 39:f2:3a:8b:fe:1e:db:3c:4e:e0:7f:7a:fa:86:4a:a4:75:13: a8:e4:1f:bd:d8:d9:fd:06:7c:cc:88:bf:08:7f:9a:30:74:4d: c3:e3:bc:43:1d:97:82:08:c9:e2:f2:61:7e:46:3b:48:5d:e6: 23:c7:07:16:30:dc:16:bc:f6:6a:44:3e:92:ec:c3:c3:ff:4d: f8:20:95:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAQrpJa3UN8UFh/fyS29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5 ZDg1ZTEwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDEyZWQ2Zjk2YTc1ZWVmMjY3YzM2NDQ3NzZiMWZkMTBkZWI4NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW9jT+aD8mY0Jx83ULsymMZ3qDWl S2H0rO6v+pa9dYbN3ezFnV0KmWvDXbvpd1jUTQncqmP7983gjgnFZirZBQJlIhS2 QYGXDaLE873RbJeWq+4uk/LT5InqREhTm8JhAs6/QjhspiwAyhWetyUh7mMf4X51 wryUdqVqzRwz5dcRlLIdrh6vAKN3QKvKcFyNP1dILCeLuJMf3SowY/n/MrO6TvW9 I6fsMngMLX/mdxEI6aEmAf7PAjonvPvJ8jJZcrp1polXiQIQDnKqCDO3AQpTSDZP p8u6U+oZWA0AJqq2YgdDSFoa1+JV6sEVmC22FZ5LtEGMS0tUwh7j0F6vuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQS7W+Wp17vJnw2RHdrH9EN64d/MB8GA1UdIwQY MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt ZGE1Y2IwZmIxOWU3LzEvVkJMdGI1YW5YdThtZkRaRWQyc2YwUTNyaDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3 LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjOMA0G CSqGSIb3DQEBCwUAA4IBAQCT4KQ+4orPqtoH6sJ/zDTV9uzd0+9fQNWvzyxzxMid 2lOnKbmIvXPCKPVXRkJUDyVvjKBS2xkP3gzQsA3erEylCCyaBPDyQIcIxPllE8uE 5GMRtAzVhJcDZkhgZkT8QLJdpaR2Hp2L5ZwAV6Nv7mMvbY/2aLZof7to9NZhegSs 0Zv/htSxF+OQspDEANJszgvQNeqEces+Xy64b33X4QqBQJXqwHPPw1hL7LLQwcai 1Hwgkq458jqL/h7bPE7gf3r6hkqkdROo5B+92Nn9BnzMiL8If5owdE3D47xDHZeC CMni8mF+RjtIXeYjxwcWMNwWvPZqRD6S7MPD/034IJVc -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:24 2026 by rpki-client