This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa File: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (raw, json) Hash identifier: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o= Subject key identifier: 55:4C:EC:E4:F1:C1:C2:FF:C8:64:04:34:61:F4:2E:BA:D8:57:7B:DA Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019B79ECCDCE370A54C651E3D0B2ACDDD6EC Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35244 IP address blocks: 46.128.0.0/16 maxlen: 16 77.47.0.0/17 maxlen: 17 83.243.112.0/21 maxlen: 21 85.233.32.0/19 maxlen: 19 88.215.64.0/18 maxlen: 18 95.157.0.0/18 maxlen: 18 109.125.64.0/18 maxlen: 18 185.169.204.0/22 maxlen: 22 193.25.118.0/23 maxlen: 23 194.105.96.0/21 maxlen: 24 195.46.44.0/22 maxlen: 24 195.234.128.0/24 maxlen: 24 2001:4c50::/32 maxlen: 32 2a02:2455::/33 maxlen: 33 2a02:2457:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cd:ce:37:0a:54:c6:51:e3:d0:b2:ac:dd:d6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=554cece4f1c1c2ffc864043461f42ebad8577bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:35:17:45:82:bf:c3:01:89:04:2b:1d:94: 3b:5d:0b:c0:17:b7:c5:d9:06:55:9c:f0:28:f7:4d: fc:a0:6c:87:bb:1f:ee:33:7d:aa:cc:73:2f:6a:49: 10:9c:31:d2:54:c1:56:56:b7:59:aa:1f:47:57:a2: 3a:be:f9:36:bf:05:78:8a:5d:04:9a:77:39:2e:f5: d2:01:10:85:65:de:77:21:21:59:55:c3:8a:af:4c: 9c:66:ae:29:a7:ea:57:c7:eb:a3:97:e4:8a:af:5c: d4:21:b5:92:31:bc:92:cd:79:b4:f3:e4:cd:c4:b3: c2:19:22:ae:48:77:9b:7d:1d:ff:20:9e:d3:96:4b: 47:cd:8a:ff:17:b9:4e:31:c7:72:2b:d0:49:d7:0c: 42:bf:d7:2b:f9:dc:28:e7:81:19:c9:04:06:34:80: e5:cc:fd:76:91:18:4b:eb:b5:59:2d:7a:b8:46:6d: 1e:3c:fa:98:e0:b3:bd:a4:4a:f3:d5:14:a1:5f:be: 05:21:94:03:68:01:27:78:2c:5f:6f:50:f8:f9:6d: 7d:94:1e:ca:30:fe:cd:c9:dc:8f:6b:83:b7:da:ef: 91:41:63:4f:43:17:4b:61:3e:79:94:16:14:3b:d0: de:bb:93:80:d1:2f:4d:71:20:71:d2:68:64:f7:9a: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4C:EC:E4:F1:C1:C2:FF:C8:64:04:34:61:F4:2E:BA:D8:57:7B:DA X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.128.0.0/16 77.47.0.0/17 83.243.112.0/21 85.233.32.0/19 88.215.64.0/18 95.157.0.0/18 109.125.64.0/18 185.169.204.0/22 193.25.118.0/23 194.105.96.0/21 195.46.44.0/22 195.234.128.0/24 IPv6: 2001:4c50::/32 2a02:2455::/33 2a02:2457:300::/40 Signature Algorithm: sha256WithRSAEncryption b2:eb:6e:ac:bf:60:7b:23:38:09:8d:b1:1b:c3:21:5e:39:12: 89:c3:06:0e:fc:aa:75:8e:a7:f6:60:19:19:b6:3d:7a:ef:c5: 5f:8f:80:6c:05:6e:99:08:3b:3f:c9:60:14:fa:94:1a:3f:d3: e8:ab:2e:7b:34:62:cd:9a:90:37:15:1c:db:8b:7b:e3:ed:16: 32:bc:8c:55:f7:d4:17:cb:54:bb:b9:e4:38:81:06:91:74:65: d5:d2:05:01:4d:ee:3a:b9:df:00:61:6a:b6:cf:82:b9:b8:19: 07:4c:b8:22:0c:4a:38:5c:f0:46:e2:27:6a:68:5c:86:a5:4e: 34:f0:20:fc:23:bf:7e:75:df:7a:57:02:1d:48:b2:b1:e7:e0: 63:ac:3b:e9:d1:13:89:06:a1:91:61:81:06:1f:1e:de:ee:7c: b5:57:20:db:15:8d:3b:a4:67:0f:78:80:3e:d8:99:f7:2b:0e: b7:88:d2:81:52:8a:20:8c:57:b8:15:b7:55:1b:38:25:9b:bb: 69:75:4f:34:94:76:b2:02:33:2d:61:bb:04:e2:57:1a:9f:80: 9d:49:4c:eb:13:22:a8:d6:38:60:11:30:db:87:85:6a:5f:5d: 6d:f6:6f:ea:0d:b6:dd:84:5b:e1:ea:0a:74:9a:f3:dc:73:b0: 0c:c8:54:41 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt57M3ONwpUxlHj0LKs3dbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTRjZWNlNGYxYzFjMmZmYzg2NDA0MzQ2MWY0MmViYWQ4NTc3YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphs1F0WCv8MBiQQrHZQ7XQvAF7fF 2QZVnPAo9038oGyHux/uM32qzHMvakkQnDHSVMFWVrdZqh9HV6I6vvk2vwV4il0E mnc5LvXSARCFZd53ISFZVcOKr0ycZq4pp+pXx+ujl+SKr1zUIbWSMbySzXm08+TN xLPCGSKuSHebfR3/IJ7TlktHzYr/F7lOMcdyK9BJ1wxCv9cr+dwo54EZyQQGNIDl zP12kRhL67VZLXq4Rm0ePPqY4LO9pErz1RShX74FIZQDaAEneCxfb1D4+W19lB7K MP7NydyPa4O32u+RQWNPQxdLYT55lBYUO9Deu5OA0S9NcSBx0mhk95qoPwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFFVM7OTxwcL/yGQENGH0LrrYV3vaMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvVlV6czVQSEJ3dl9JWkFRMFlmUXV1dGhYZTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBNBAIAATBHAwMALoADBAdN LwADBANT83ADBAVV6SADBAZY10ADBAZfnQADBAZtfUADBAK5qcwDBAHBGXYDBAPC aWADBALDLiwDBADD6oAwHQQCAAIwFwMFACABTFADBgcqAiRVAAMGACoCJFcDMA0G CSqGSIb3DQEBCwUAA4IBAQCy626sv2B7IzgJjbEbwyFeORKJwwYO/Kp1jqf2YBkZ tj1678Vfj4BsBW6ZCDs/yWAU+pQaP9Poqy57NGLNmpA3FRzbi3vj7RYyvIxV99QX y1S7ueQ4gQaRdGXV0gUBTe46ud8AYWq2z4K5uBkHTLgiDEo4XPBG4idqaFyGpU40 8CD8I79+dd96VwIdSLKx5+BjrDvp0ROJBqGRYYEGHx7e7ny1VyDbFY07pGcPeIA+ 2Jn3Kw63iNKBUoogjFe4FbdVGzglm7tpdU80lHayAjMtYbsE4lcan4CdSUzrEyKo 1jhgETDbh4VqX11t9m/qDbbdhFvh6gp0mvPcc7AMyFRB -----END CERTIFICATE-----Generated at Mon Jan 26 21:31:32 2026 by rpki-client