This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/VBmr-5LpIjSQ6myjINReT6R1vMo.roa File: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (raw, json) Hash identifier: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU= Subject key identifier: 54:19:AB:FB:92:E9:22:34:90:EA:6C:A3:20:D4:5E:4F:A4:75:BC:CA Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f Certificate serial: 019B76EB7102FA6B17234CB6B7F21564B44B Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/VBmr-5LpIjSQ6myjINReT6R1vMo.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216346 IP address blocks: 78.41.60.0/24 maxlen: 24 194.117.63.0/24 maxlen: 24 2a13:4e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:71:02:fa:6b:17:23:4c:b6:b7:f2:15:64:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5419abfb92e9223490ea6ca320d45e4fa475bcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:76:0f:ac:e3:3c:8f:24:9d:54:4d:7e:2b: 31:30:90:21:38:3b:20:90:03:cb:3d:48:ff:42:5f: 0c:d9:31:e9:c4:33:7d:df:64:74:c8:e8:30:89:57: 74:ec:63:08:8c:b3:e8:a5:87:c2:20:35:c2:06:20: f9:60:6e:19:58:28:c1:eb:bd:53:91:fd:41:09:7a: 37:06:ca:0b:f7:a3:bd:e9:9b:07:35:83:95:96:24: 57:41:46:87:e0:a5:08:8c:26:80:48:05:8b:e7:26: de:68:66:7e:71:80:11:5d:c7:71:20:b9:80:91:5d: ad:c3:a2:f0:0e:5b:45:02:3a:fa:49:7e:d4:37:2c: 30:2f:31:b3:70:86:c2:91:03:a4:c9:3a:71:9c:62: f8:4d:72:91:6f:f8:57:57:90:c7:84:76:c7:a4:b4: 1b:76:03:b1:0b:6f:e2:b1:fa:1c:47:d3:4f:33:42: 02:aa:38:da:b1:10:97:68:f2:86:4d:4b:98:06:7d: 4b:ba:ef:ef:42:32:e2:11:28:0c:37:11:e2:bb:0a: e0:fd:59:00:6e:3a:79:30:0d:2a:b0:08:a1:7c:05: d4:3d:18:81:9d:ff:44:8f:ab:b5:2e:eb:ac:dd:9b: 9b:e3:49:15:54:50:41:ce:5c:82:82:4c:6f:a2:fb: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:19:AB:FB:92:E9:22:34:90:EA:6C:A3:20:D4:5E:4F:A4:75:BC:CA X509v3 Authority Key Identifier: keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/VBmr-5LpIjSQ6myjINReT6R1vMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.60.0/24 194.117.63.0/24 IPv6: 2a13:4e00::/29 Signature Algorithm: sha256WithRSAEncryption 24:3c:39:6a:bf:96:23:80:63:ab:6e:82:a9:38:4a:6d:8d:5a: 98:99:a4:cf:f6:0b:7b:99:9e:37:85:7a:88:89:4b:bf:6d:7e: 84:7a:2b:81:3c:0a:1e:12:9c:63:ca:82:5a:a0:8b:de:65:a5: 74:da:d4:8b:e4:1f:31:21:32:d6:c6:a3:a7:47:c5:be:0a:62: c9:e2:9c:b0:a7:12:f2:3b:f4:b7:ec:ce:66:8d:3a:df:94:e4: 32:5d:7f:5d:44:ba:d5:25:9b:51:97:7b:06:39:61:84:d9:1b: 81:1b:4c:5e:1c:e6:fc:ff:88:2d:b6:6c:f5:fc:ad:ea:ab:5b: 25:26:c8:1f:cf:6e:c3:8f:97:0d:4f:ef:60:d3:6a:1f:38:ed: e0:ab:49:a5:c7:a4:c1:d0:b5:c2:66:fa:2d:c6:c2:25:8d:a5: fc:30:7e:10:3b:6c:69:a9:4d:8e:ce:47:7b:1f:2a:e4:18:d1: 2d:66:e1:bc:3b:8a:17:6c:d0:04:50:d8:e8:fb:97:8b:f3:75: eb:f0:6f:82:5c:e8:d0:d3:9c:78:eb:73:9c:05:9a:ba:c1:fe: c9:66:6d:ea:9b:01:2b:45:8d:76:f8:bf:03:e0:96:47:fb:8b: 0c:0d:c2:03:1c:83:48:1e:33:b6:6f:75:25:55:e3:31:63:7f: ce:31:ba:b3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt263EC+msXI0y2t/IVZLRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz OTZhM2YwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDE5YWJmYjkyZTkyMjM0OTBlYTZjYTMyMGQ0NWU0ZmE0NzViY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWZ2D6zjPI8knVRNfisxMJAhODsg kAPLPUj/Ql8M2THpxDN932R0yOgwiVd07GMIjLPopYfCIDXCBiD5YG4ZWCjB671T kf1BCXo3BsoL96O96ZsHNYOVliRXQUaH4KUIjCaASAWL5ybeaGZ+cYARXcdxILmA kV2tw6LwDltFAjr6SX7UNywwLzGzcIbCkQOkyTpxnGL4TXKRb/hXV5DHhHbHpLQb dgOxC2/isfocR9NPM0ICqjjasRCXaPKGTUuYBn1Luu/vQjLiESgMNxHiuwrg/VkA bjp5MA0qsAihfAXUPRiBnf9Ej6u1Luus3Zub40kVVFBBzlyCgkxvovty+QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFQZq/uS6SI0kOpsoyDUXk+kdbzKMB8GA1UdIwQY MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt MTViMDlmNWY2ZWQ3LzEvVkJtci01THBJalNRNm15aklOUmVUNlIxdk1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3 LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATik8AwQA wnU/MA0EAgACMAcDBQMqE04AMA0GCSqGSIb3DQEBCwUAA4IBAQAkPDlqv5YjgGOr boKpOEptjVqYmaTP9gt7mZ43hXqIiUu/bX6EeiuBPAoeEpxjyoJaoIveZaV02tSL 5B8xITLWxqOnR8W+CmLJ4pywpxLyO/S37M5mjTrflOQyXX9dRLrVJZtRl3sGOWGE 2RuBG0xeHOb8/4gttmz1/K3qq1slJsgfz27Dj5cNT+9g02ofOO3gq0mlx6TB0LXC ZvotxsIljaX8MH4QO2xpqU2Ozkd7HyrkGNEtZuG8O4oXbNAEUNjo+5eL83Xr8G+C XOjQ05x463OcBZq6wf7JZm3qmwErRY12+L8D4JZH+4sMDcIDHINIHjO2b3UlVeMx Y3/OMbqz -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:26 2026 by rpki-client