This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/VVUHU9wzPSipaX2HFFPnxlMDk40.roa File: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (raw, json) Hash identifier: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE= Subject key identifier: 55:55:07:53:DC:33:3D:28:A9:69:7D:87:14:53:E7:C6:53:03:93:8D Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Certificate serial: 019B7BA509F3C21DEFBFA54AA0B0DD2EAE66 Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/VVUHU9wzPSipaX2HFFPnxlMDk40.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8478 IP address blocks: 109.74.176.0/20 maxlen: 20 185.90.212.0/22 maxlen: 22 2a00:17a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:09:f3:c2:1d:ef:bf:a5:4a:a0:b0:dd:2e:ae:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55550753dc333d28a9697d871453e7c65303938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:5c:58:74:8b:d9:72:54:a0:d8:24:a4:57: a7:3f:3f:2f:b1:ca:f4:da:74:b9:52:8b:2e:82:86: ce:92:c5:79:59:16:b0:ef:39:59:de:2c:be:3a:7a: 73:85:89:6a:49:8a:57:47:3f:2f:56:53:b7:ad:f9: 04:73:8f:29:4d:64:c9:1e:80:d2:80:96:69:be:8e: 23:9d:55:e8:cf:a2:0e:e1:13:be:14:fd:2c:7f:e5: 67:7a:bb:4b:18:84:a4:04:0a:4b:52:00:4a:84:fb: b2:68:6d:ac:39:17:aa:ef:fc:04:23:df:96:7a:9e: b7:69:2e:dc:44:60:66:59:3c:32:68:37:94:72:fa: 93:51:a2:7a:c8:70:b6:9a:43:75:d4:e7:38:c5:36: 54:e5:53:a8:d6:63:b8:c5:28:2d:af:7d:1d:9a:25: 93:2d:ee:73:c6:c9:05:3a:6f:ac:09:1d:d2:42:f3: 9e:7f:fa:d7:fb:77:0e:5e:3f:be:8c:cc:aa:3c:f4: be:ae:d7:aa:91:f5:9c:74:57:f5:89:7b:20:5a:a7: 4f:e9:60:d8:dc:81:c0:f5:90:30:f2:3b:9b:b6:ad: 87:c2:90:24:0e:77:6e:b4:ec:ec:df:bc:91:4b:de: d5:f1:6c:8e:53:ad:3a:6c:10:36:57:37:42:d4:72: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:55:07:53:DC:33:3D:28:A9:69:7D:87:14:53:E7:C6:53:03:93:8D X509v3 Authority Key Identifier: keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/VVUHU9wzPSipaX2HFFPnxlMDk40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.74.176.0/20 185.90.212.0/22 IPv6: 2a00:17a8::/32 Signature Algorithm: sha256WithRSAEncryption 07:98:d0:da:c1:93:9d:5a:09:e5:8e:09:b5:52:47:eb:1c:9c: 8e:8c:3f:b6:fa:99:ff:c5:5d:61:67:1c:78:f5:2e:76:ec:1e: 81:fb:e7:1f:5b:64:4b:00:b0:f4:d0:4c:38:62:d8:76:3e:d6: 7f:3b:92:29:e7:48:2d:39:b0:d5:fa:2d:9b:99:63:67:80:1e: 15:4c:2b:d5:43:e2:1a:78:a4:b9:a4:60:b8:41:57:7a:e7:62: ea:22:22:99:84:a2:43:3d:5c:29:7b:af:3b:50:43:04:9f:83: 52:97:8e:b8:67:0e:a0:cf:c5:6b:1d:3a:4b:39:bd:ed:47:04: d1:a1:75:01:7d:cf:8f:f4:d8:98:dd:33:37:84:76:e1:3c:f8: 62:28:fa:a7:42:e8:12:a3:d5:00:24:ad:65:28:8d:4c:7d:28: f1:2f:e7:f3:56:d5:ff:c2:69:78:4a:3a:ef:8d:e1:27:36:52: f5:33:fe:e5:d6:03:25:0e:43:a3:93:e0:a7:c0:14:60:4f:15: e2:03:e9:6f:c1:a0:ff:c6:6d:2b:68:37:3e:b3:40:6c:91:b3: bc:ec:94:d2:f1:10:f9:74:bf:a8:91:f6:dd:74:ce:6a:d7:c9: 5b:48:ea:68:25:f4:6d:77:9f:af:d1:10:dd:4e:0b:0d:f4:00: 2b:a9:28:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pQnzwh3vv6VKoLDdLq5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2 NzJlYTkwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTU1MDc1M2RjMzMzZDI4YTk2OTdkODcxNDUzZTdjNjUzMDM5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/9cWHSL2XJUoNgkpFenPz8vscr0 2nS5UosugobOksV5WRaw7zlZ3iy+OnpzhYlqSYpXRz8vVlO3rfkEc48pTWTJHoDS gJZpvo4jnVXoz6IO4RO+FP0sf+VnertLGISkBApLUgBKhPuyaG2sOReq7/wEI9+W ep63aS7cRGBmWTwyaDeUcvqTUaJ6yHC2mkN11Oc4xTZU5VOo1mO4xSgtr30dmiWT Le5zxskFOm+sCR3SQvOef/rX+3cOXj++jMyqPPS+rteqkfWcdFf1iXsgWqdP6WDY 3IHA9ZAw8jubtq2HwpAkDndutOzs37yRS97V8WyOU606bBA2VzdC1HL2dQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFVVB1PcMz0oqWl9hxRT58ZTA5ONMB8GA1UdIwQY MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt OWQzMTY3ODMxOTM0LzEvVlZVSFU5d3pQU2lwYVgySEZGUG54bE1EazQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0 LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEbUqwAwQC uVrUMA0EAgACMAcDBQAqABeoMA0GCSqGSIb3DQEBCwUAA4IBAQAHmNDawZOdWgnl jgm1UkfrHJyOjD+2+pn/xV1hZxx49S527B6B++cfW2RLALD00Ew4Yth2PtZ/O5Ip 50gtObDV+i2bmWNngB4VTCvVQ+IaeKS5pGC4QVd652LqIiKZhKJDPVwpe687UEME n4NSl464Zw6gz8VrHTpLOb3tRwTRoXUBfc+P9NiY3TM3hHbhPPhiKPqnQugSo9UA JK1lKI1MfSjxL+fzVtX/wml4SjrvjeEnNlL1M/7l1gMlDkOjk+CnwBRgTxXiA+lv waD/xm0raDc+s0BskbO87JTS8RD5dL+okfbddM5q18lbSOpoJfRtd5+v0RDdTgsN 9AArqSiv -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:49 2026 by rpki-client