This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VNyB2s7KmmaKA_Ci9aOgXTe3b50.roa File: VNyB2s7KmmaKA_Ci9aOgXTe3b50.roa (raw, json) Hash identifier: LYfD8E76rHloJeJaeVSrz7p1p7DkxqlJ+ObQAJCYNzU= Subject key identifier: 54:DC:81:DA:CE:CA:9A:66:8A:03:F0:A2:F5:A3:A0:5D:37:B7:6F:9D Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5471F679CA1DDA40CC0A74D04B73D Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VNyB2s7KmmaKA_Ci9aOgXTe3b50.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201583 IP address blocks: 84.40.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:47:1f:67:9c:a1:dd:a4:0c:c0:a7:4d:04:b7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54dc81daceca9a668a03f0a2f5a3a05d37b76f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:db:ce:8a:0c:d2:c2:b4:ac:98:1e:d3:3c:c0: 1e:5f:e1:2f:77:46:7c:a1:2f:b2:ea:80:f1:92:79: 20:30:93:d7:a6:1a:16:ad:e5:2f:95:f2:cc:3c:5f: a7:a0:76:59:5d:65:53:1c:27:4d:ee:6e:26:a6:9f: 98:a8:50:22:4e:a7:ca:42:10:80:f6:6a:69:a8:97: 25:b9:c6:03:e9:e7:77:49:7f:09:be:58:c9:96:eb: aa:22:15:cf:fa:74:b8:69:96:ac:34:19:9f:9d:a7: 56:a5:00:14:6a:04:60:63:71:1c:a2:09:25:81:49: e6:f3:6d:c9:15:37:85:9b:1b:d8:30:f7:1d:23:6a: 77:44:3c:bb:04:ff:5d:85:ca:6b:e8:4b:f7:fe:6b: 74:9c:07:82:8e:66:eb:b3:a2:b5:12:74:41:50:6f: 46:93:b8:85:50:f5:33:cc:68:b1:34:9c:ff:8a:30: f6:40:8c:95:dc:91:6f:32:84:71:65:b2:5a:72:21: 99:7a:b7:da:67:26:ac:06:16:30:22:04:12:fa:63: f1:31:1b:a8:bb:28:3c:9d:ca:a6:e3:20:96:b1:93: 7a:e2:3e:e1:3f:3b:cd:5c:d8:8b:5e:4a:cd:38:17: e2:9c:2b:0c:91:30:c1:4f:e1:f9:e5:3f:b5:c4:3d: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:81:DA:CE:CA:9A:66:8A:03:F0:A2:F5:A3:A0:5D:37:B7:6F:9D X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VNyB2s7KmmaKA_Ci9aOgXTe3b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.40.114.0/24 Signature Algorithm: sha256WithRSAEncryption 54:3b:06:e8:da:d0:f8:79:3f:a8:91:5c:5d:86:e9:90:54:df: 1a:88:a4:59:1f:34:d7:1a:02:b1:5d:61:b9:36:fe:57:3e:94: 01:68:09:d5:22:bb:ad:d0:36:b6:e0:bd:6e:bc:94:91:5b:cc: 5c:31:26:1b:1e:72:d0:d1:63:73:b3:41:94:11:b7:c2:91:21: c6:29:41:4c:2f:b0:55:f3:96:a9:3e:ff:eb:d9:cc:01:a9:34: a7:9b:4b:c7:95:df:6a:a9:6d:61:5b:cd:f6:53:4d:a4:86:9a: 61:df:e6:cb:94:f3:db:9f:c4:4e:39:ae:55:29:cc:88:a5:06: 1b:e9:35:23:96:04:50:b0:e0:60:68:b3:79:95:35:23:f2:6b: c9:66:b4:fe:8f:86:ff:69:69:bd:fa:71:49:74:bf:fc:53:a9: 23:c5:05:d7:fb:43:dd:01:6a:ef:42:bf:a9:75:88:b9:5f:46: c2:03:30:19:4d:27:65:90:1b:57:d5:c5:8e:1a:7d:41:33:37: 63:c1:45:d7:9a:65:be:a2:bb:b1:ee:c7:7d:3f:6b:6e:32:46: 9b:98:86:28:be:11:f0:22:32:a2:ab:f3:d0:04:52:08:38:fc: 37:9c:c3:31:93:e9:0b:8d:26:11:80:e4:9c:c4:3e:26:88:cc: 5c:04:91:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUcfZ5yh3aQMwKdNBLc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGRjODFkYWNlY2E5YTY2OGEwM2YwYTJmNWEzYTA1ZDM3Yjc2ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tvOigzSwrSsmB7TPMAeX+Evd0Z8 oS+y6oDxknkgMJPXphoWreUvlfLMPF+noHZZXWVTHCdN7m4mpp+YqFAiTqfKQhCA 9mppqJclucYD6ed3SX8JvljJluuqIhXP+nS4aZasNBmfnadWpQAUagRgY3Ecogkl gUnm823JFTeFmxvYMPcdI2p3RDy7BP9dhcpr6Ev3/mt0nAeCjmbrs6K1EnRBUG9G k7iFUPUzzGixNJz/ijD2QIyV3JFvMoRxZbJaciGZerfaZyasBhYwIgQS+mPxMRuo uyg8ncqm4yCWsZN64j7hPzvNXNiLXkrNOBfinCsMkTDBT+H55T+1xD1QowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTcgdrOyppmigPwovWjoF03t2+dMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvVk55QjJzN0ttbWFLQV9DaTlhT2dYVGUzYjUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVChyMA0G CSqGSIb3DQEBCwUAA4IBAQBUOwbo2tD4eT+okVxdhumQVN8aiKRZHzTXGgKxXWG5 Nv5XPpQBaAnVIrut0Da24L1uvJSRW8xcMSYbHnLQ0WNzs0GUEbfCkSHGKUFML7BV 85apPv/r2cwBqTSnm0vHld9qqW1hW832U02khpph3+bLlPPbn8ROOa5VKcyIpQYb 6TUjlgRQsOBgaLN5lTUj8mvJZrT+j4b/aWm9+nFJdL/8U6kjxQXX+0PdAWrvQr+p dYi5X0bCAzAZTSdlkBtX1cWOGn1BMzdjwUXXmmW+orux7sd9P2tuMkabmIYovhHw IjKiq/PQBFIIOPw3nMMxk+kLjSYRgOScxD4miMxcBJE/ -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:58 2026 by rpki-client