This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vip2pAKHcVLNA7gwiEM1_erdEek.roa File: vip2pAKHcVLNA7gwiEM1_erdEek.roa (raw, json) Hash identifier: f0hUL3sfAjclKc5M7YOoFHMj050hTTRTnVkjVsYuNYU= Subject key identifier: BE:2A:76:A4:02:87:71:52:CD:03:B8:30:88:43:35:FD:EA:DD:11:E9 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D2D7B2BA755E30CF3A1D32BCE6F91 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vip2pAKHcVLNA7gwiEM1_erdEek.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14080 IP address blocks: 78.142.241.0/24 maxlen: 24 2a10:7404::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2d:7b:2b:a7:55:e3:0c:f3:a1:d3:2b:ce:6f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be2a76a402877152cd03b830884335fdeadd11e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:35:6d:19:11:0f:62:46:98:e3:83:37:85: 80:fb:ad:e5:23:14:86:cc:ed:ca:9d:97:d8:01:92: 60:b8:2e:53:f3:d4:62:cb:cf:54:47:92:8e:19:c5: a3:d1:a9:8e:df:9e:f1:ae:d2:a1:e5:7c:fb:42:5b: cb:df:51:70:e9:c9:bb:59:80:42:38:20:db:fb:98: ad:38:d8:4e:17:77:a2:db:d2:95:06:87:9c:18:85: e1:a5:e3:af:56:b7:9e:6a:c7:47:07:c3:01:cd:e5: 61:5b:bd:56:8c:a7:d1:98:5f:95:12:97:81:fe:dc: e8:5a:57:77:cd:6b:a7:a2:7a:cf:81:5b:d0:a3:68: 1a:59:2e:4e:cc:bd:1d:e6:87:8b:47:15:e9:c6:bd: 17:3a:96:2c:19:b7:c1:4a:77:28:cb:d0:43:39:2d: 8a:41:16:16:57:90:fd:81:a0:32:41:37:eb:b5:eb: 9d:5e:3b:f4:88:53:fa:4b:06:47:9c:d6:7c:5f:e3: 01:38:4d:82:2f:e2:d7:71:24:b2:12:ac:db:df:4d: c2:42:af:77:ab:f4:53:cb:12:fd:b6:43:f0:3b:2f: 9c:6d:ce:ab:33:f2:45:b8:69:a9:02:f3:7f:94:d9: df:48:19:93:2d:84:b8:3d:ab:00:13:e1:4b:12:a3: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2A:76:A4:02:87:71:52:CD:03:B8:30:88:43:35:FD:EA:DD:11:E9 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vip2pAKHcVLNA7gwiEM1_erdEek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.241.0/24 IPv6: 2a10:7404::/32 Signature Algorithm: sha256WithRSAEncryption 3b:6e:4e:80:78:f0:ed:49:31:c1:a0:88:da:3d:13:86:87:6b: 3c:ce:c6:86:e5:b6:88:34:02:53:c6:4d:39:64:a4:49:10:2b: b4:30:9d:97:49:c1:02:8a:2c:0c:a6:0b:19:40:74:19:01:06: 0a:bb:92:05:69:23:bc:68:f7:0d:3b:d6:2b:d8:7c:67:7d:72: 2c:4c:29:fa:bf:63:a0:d3:94:ef:ad:a3:1f:5e:66:66:0a:a9: ea:45:f6:df:e0:8d:9c:f0:80:fd:40:81:17:21:4b:73:bd:60: 87:86:d6:fd:e8:65:3d:f5:c3:04:30:60:f7:97:08:65:b5:b5: 4c:36:e8:37:9e:42:c3:13:9c:e0:3d:e1:0a:b9:ff:71:28:35: 64:4f:1a:16:9d:49:d5:b9:b4:48:84:9a:79:15:fd:22:4b:70: 4b:34:71:5a:7c:47:50:97:c4:48:4e:dd:9c:b0:e8:f5:7f:84: 18:6f:fb:ae:6c:60:8f:6c:30:14:41:11:c4:83:53:bd:f9:e1: 94:f7:96:3b:ab:9e:2a:7a:b8:a0:b5:f7:e8:95:4a:e5:4a:0d: 31:55:93:d4:bc:0f:c0:bf:f6:71:8e:0f:c8:93:31:23:10:78: db:33:0d:40:06:45:75:ec:95:7b:a0:91:fe:d2:74:bb:83:c5: ef:9e:18:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XS17K6dV4wzzodMrzm+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTJhNzZhNDAyODc3MTUyY2QwM2I4MzA4ODQzMzVmZGVhZGQxMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueI1bRkRD2JGmOODN4WA+63lIxSG zO3KnZfYAZJguC5T89Riy89UR5KOGcWj0amO357xrtKh5Xz7QlvL31Fw6cm7WYBC OCDb+5itONhOF3ei29KVBoecGIXhpeOvVreeasdHB8MBzeVhW71WjKfRmF+VEpeB /tzoWld3zWunonrPgVvQo2gaWS5OzL0d5oeLRxXpxr0XOpYsGbfBSncoy9BDOS2K QRYWV5D9gaAyQTfrteudXjv0iFP6SwZHnNZ8X+MBOE2CL+LXcSSyEqzb303CQq93 q/RTyxL9tkPwOy+cbc6rM/JFuGmpAvN/lNnfSBmTLYS4PasAE+FLEqPozwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL4qdqQCh3FSzQO4MIhDNf3q3RHpMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvdmlwMnBBS0hjVkxOQTdnd2lFTTFfZXJkRWVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATo7xMA0E AgACMAcDBQAqEHQEMA0GCSqGSIb3DQEBCwUAA4IBAQA7bk6AePDtSTHBoIjaPROG h2s8zsaG5baINAJTxk05ZKRJECu0MJ2XScECiiwMpgsZQHQZAQYKu5IFaSO8aPcN O9Yr2HxnfXIsTCn6v2Og05TvraMfXmZmCqnqRfbf4I2c8ID9QIEXIUtzvWCHhtb9 6GU99cMEMGD3lwhltbVMNug3nkLDE5zgPeEKuf9xKDVkTxoWnUnVubRIhJp5Ff0i S3BLNHFafEdQl8RITt2csOj1f4QYb/uubGCPbDAUQRHEg1O9+eGU95Y7q54qerig tffolUrlSg0xVZPUvA/Av/Zxjg/IkzEjEHjbMw1ABkV17JV7oJH+0nS7g8XvnhgO -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client