This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v-jvspyAIOF2zU4NrMiOG-KnURQ.roa File: v-jvspyAIOF2zU4NrMiOG-KnURQ.roa (raw, json) Hash identifier: AKzSr9rMfOU9kLz3zWKI9iRObXxplMowbVYJ1pCTEVs= Subject key identifier: BF:E8:EF:B2:9C:80:20:E1:76:CD:4E:0D:AC:C8:8E:1B:E2:A7:51:14 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74FED4302B511BF1F14DC16CA2088 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v-jvspyAIOF2zU4NrMiOG-KnURQ.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 89.42.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4f:ed:43:02:b5:11:bf:1f:14:dc:16:ca:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfe8efb29c8020e176cd4e0dacc88e1be2a75114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:65:32:cc:aa:aa:b4:f6:ab:e3:4b:4b:90:a9: 3a:ec:6b:dd:6c:12:40:65:e9:7e:f7:35:b2:01:eb: ce:d3:6d:ff:67:06:6a:10:81:d8:ea:2b:b7:cd:7a: 8c:54:a2:e3:bf:20:3c:2d:3e:6b:d8:97:0b:a6:fe: cc:a3:98:fa:48:3d:d2:2e:b6:02:dc:25:60:84:e8: 40:50:ef:e0:53:90:52:18:40:13:43:50:62:b7:c7: 0e:25:27:ea:3b:51:5d:ba:5e:63:c0:e3:21:1e:7b: c0:e3:06:98:84:0a:b2:86:c9:34:0f:a5:bd:c9:b9: 57:05:35:8c:ee:ec:db:cd:b7:6b:1d:a4:02:f3:98: 7e:b9:ce:dd:cb:df:d1:e5:08:11:1d:31:b1:e6:1a: c5:8e:a9:50:a8:07:eb:c6:4c:bf:08:bf:b7:15:44: 63:b0:b6:8a:50:82:1e:3f:3b:da:bb:45:ac:46:35: 32:a2:5c:d9:14:7e:ba:06:44:c9:4b:84:4a:46:2f: 15:51:34:54:9a:ad:95:ff:5e:93:e2:64:70:f8:65: ad:80:34:58:6d:21:7b:15:fa:a7:99:e7:e2:d3:7e: 42:22:85:52:ca:6a:3e:da:15:d0:56:46:e1:e8:2a: ec:e4:e3:9c:c3:7d:c8:fe:82:41:56:42:88:78:96: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:EF:B2:9C:80:20:E1:76:CD:4E:0D:AC:C8:8E:1B:E2:A7:51:14 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v-jvspyAIOF2zU4NrMiOG-KnURQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.29.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f1:13:3c:ff:a3:2a:b8:69:6d:3a:b7:f5:56:62:73:12:63: 90:33:94:ed:4c:19:f2:4a:e9:f3:1b:02:35:dd:3c:6a:75:36: aa:3f:c4:73:6b:7c:05:49:b5:77:26:b5:77:55:4e:cd:f9:7d: 99:0e:12:20:a9:fb:7b:6c:ed:41:06:85:fc:cc:46:95:2d:fa: 44:91:12:85:02:28:ec:e5:e7:64:ca:6d:8c:ce:a0:9e:82:17: 3e:c9:53:c5:fb:38:82:9e:3f:d4:e6:f7:10:98:00:f7:94:43: fd:8a:50:ed:48:9a:7d:f4:dc:3d:3d:53:43:bf:df:67:21:d4: 06:5a:b2:bc:45:58:cd:d6:68:0a:ed:b8:f7:03:ed:bf:9f:f6: d4:72:32:a2:56:98:e9:6c:73:e5:d2:a6:e6:8e:99:52:b8:55: 7a:76:39:4f:94:ef:0c:97:c0:b7:0f:5a:88:65:9b:94:15:80: 99:f2:7e:32:d4:47:99:2c:a2:c3:3b:d8:32:26:df:fe:02:da: a2:87:76:53:4f:b6:db:72:32:d7:85:31:cd:78:92:98:c5:ec: ef:7a:12:2a:ae:b8:ad:38:d0:f3:7a:56:f7:a5:d5:59:04:f6: 2f:46:2c:b8:dc:c7:a1:58:92:6a:9a:48:0e:9a:cd:6f:db:19: 25:4d:83:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0/tQwK1Eb8fFNwWyiCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmU4ZWZiMjljODAyMGUxNzZjZDRlMGRhY2M4OGUxYmUyYTc1MTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WUyzKqqtPar40tLkKk67GvdbBJA Zel+9zWyAevO023/ZwZqEIHY6iu3zXqMVKLjvyA8LT5r2JcLpv7Mo5j6SD3SLrYC 3CVghOhAUO/gU5BSGEATQ1Bit8cOJSfqO1Fdul5jwOMhHnvA4waYhAqyhsk0D6W9 yblXBTWM7uzbzbdrHaQC85h+uc7dy9/R5QgRHTGx5hrFjqlQqAfrxky/CL+3FURj sLaKUIIePzvau0WsRjUyolzZFH66BkTJS4RKRi8VUTRUmq2V/16T4mRw+GWtgDRY bSF7Ffqnmefi035CIoVSymo+2hXQVkbh6Crs5OOcw33I/oJBVkKIeJaMSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/o77KcgCDhds1ODazIjhvip1EUMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvdi1qdnNweUFJT0YyelU0TnJNaU9HLUtuVVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSodMA0G CSqGSIb3DQEBCwUAA4IBAQAv8RM8/6MquGltOrf1VmJzEmOQM5TtTBnySunzGwI1 3TxqdTaqP8Rza3wFSbV3JrV3VU7N+X2ZDhIgqft7bO1BBoX8zEaVLfpEkRKFAijs 5edkym2MzqCeghc+yVPF+ziCnj/U5vcQmAD3lEP9ilDtSJp99Nw9PVNDv99nIdQG WrK8RVjN1mgK7bj3A+2/n/bUcjKiVpjpbHPl0qbmjplSuFV6djlPlO8Ml8C3D1qI ZZuUFYCZ8n4y1EeZLKLDO9gyJt/+Atqih3ZTT7bbcjLXhTHNeJKYxezvehIqrrit ONDzelb3pdVZBPYvRiy43MehWJJqmkgOms1v2xklTYOX -----END CERTIFICATE-----Generated at Thu Jan 1 20:23:16 2026 by rpki-client