This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/vCRnh4F_lljPYv3DYF0shQI8Bbo.roa File: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (raw, json) Hash identifier: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE= Subject key identifier: BC:24:67:87:81:7F:96:58:CF:62:FD:C3:60:5D:2C:85:02:3C:05:BA Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Certificate serial: 019B7F81442A661867AD14B227A0C56C7FC8 Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/vCRnh4F_lljPYv3DYF0shQI8Bbo.roa Signing time: Fri 02 Jan 2026 16:18:56 +0000 ROA not before: Fri 02 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206610 IP address blocks: 78.111.128.0/20 maxlen: 24 79.141.16.0/20 maxlen: 24 92.119.100.0/24 maxlen: 24 92.119.101.0/24 maxlen: 24 92.119.102.0/24 maxlen: 24 92.119.103.0/24 maxlen: 24 185.104.168.0/22 maxlen: 24 185.173.180.0/22 maxlen: 24 2a0b:b880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:44:2a:66:18:67:ad:14:b2:27:a0:c5:6c:7f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Validity Not Before: Jan 2 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc246787817f9658cf62fdc3605d2c85023c05ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:02:dd:18:81:29:b7:b5:e5:85:4e:bc:52: c1:0a:fe:4f:b3:09:96:7c:cd:8a:8e:06:57:49:97: 03:7c:e1:1f:de:26:a7:8e:a5:ad:8e:8c:fe:22:98: 63:72:24:b9:a3:44:3d:59:2b:6f:08:93:cc:e2:00: 48:7c:d2:69:b5:98:0c:8e:6e:d4:0f:64:61:08:45: ce:45:dc:e0:09:98:29:4c:ca:06:27:b6:b0:84:0a: 36:14:6f:63:2d:58:81:e1:7b:6e:32:02:00:2c:7e: f7:6f:84:11:a3:27:b1:78:9d:71:90:29:ec:54:fa: 3c:76:8a:9e:d8:c0:53:af:9c:46:ec:7b:c9:3c:ee: d6:a7:a3:cd:ba:5b:74:f5:60:3c:94:3a:f6:06:a8: 47:ea:45:a6:c0:5c:13:ae:e8:24:fb:fb:8c:a8:62: 73:4a:8f:ac:3c:29:3e:3d:53:fd:f2:e3:13:15:eb: 09:e7:eb:90:09:94:04:f7:71:d8:cd:bb:69:df:87: ef:37:75:5a:11:dd:0b:4a:50:95:d7:79:a3:15:8c: b6:b7:4e:4f:a1:96:0d:2b:24:19:43:d4:eb:b5:b4: b6:d5:f3:be:ca:f4:d4:03:46:4d:28:18:ad:16:cd: ec:42:b1:a0:86:d6:87:a1:2f:a7:32:ba:a9:75:9a: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:24:67:87:81:7F:96:58:CF:62:FD:C3:60:5D:2C:85:02:3C:05:BA X509v3 Authority Key Identifier: keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/vCRnh4F_lljPYv3DYF0shQI8Bbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.128.0/20 79.141.16.0/20 92.119.100.0/22 185.104.168.0/22 185.173.180.0/22 IPv6: 2a0b:b880::/29 Signature Algorithm: sha256WithRSAEncryption 3b:d6:97:02:b5:ee:02:fb:bd:ab:97:da:da:a8:10:93:b1:f6: dc:99:de:25:c6:e1:fe:39:40:2c:ce:dc:2d:10:00:22:59:f3: 5f:ff:54:c4:a7:12:cc:d3:c2:0b:4a:c2:9d:f9:51:85:f1:70: af:de:0d:ac:22:83:8f:ce:bf:3d:bf:6b:9e:c0:9e:c6:54:bf: 44:93:d8:b0:fc:68:00:09:9b:95:93:f0:60:6f:b9:f3:8a:03: 7d:a7:03:28:90:fd:ff:cd:02:c6:0d:ac:30:7d:ea:b2:d6:39: 02:9c:9d:2c:8d:26:2f:e0:cf:3f:91:61:1c:73:32:db:bc:b1: e7:df:00:64:61:d4:ba:89:d7:3e:18:c7:b2:d3:5d:00:1b:db: d4:12:83:50:1c:f8:00:5d:b8:de:f4:da:b8:f1:e1:fb:35:f0: f3:3a:02:3e:84:c6:46:41:5b:07:c1:ae:ee:29:c9:e2:3e:a6: ce:16:3e:d5:36:18:5e:2f:38:d9:d1:28:5e:e4:8d:76:59:1e: b6:b2:d9:44:33:48:ce:da:6e:b2:71:d8:35:10:13:b4:7e:d1: f2:3c:08:f5:5b:45:2a:03:88:df:42:7b:c7:c7:fe:79:79:5f: 93:a4:9e:b0:dd:e2:58:a0:86:6f:da:72:b4:dc:2f:d3:c6:56: bf:98:0e:60 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt/gUQqZhhnrRSyJ6DFbH/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx YThkMGUwHhcNMjYwMTAyMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzI0Njc4NzgxN2Y5NjU4Y2Y2MmZkYzM2MDVkMmM4NTAyM2MwNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfcC3RiBKbe15YVOvFLBCv5PswmW fM2KjgZXSZcDfOEf3ianjqWtjoz+IphjciS5o0Q9WStvCJPM4gBIfNJptZgMjm7U D2RhCEXORdzgCZgpTMoGJ7awhAo2FG9jLViB4XtuMgIALH73b4QRoyexeJ1xkCns VPo8doqe2MBTr5xG7HvJPO7Wp6PNult09WA8lDr2BqhH6kWmwFwTrugk+/uMqGJz So+sPCk+PVP98uMTFesJ5+uQCZQE93HYzbtp34fvN3VaEd0LSlCV13mjFYy2t05P oZYNKyQZQ9TrtbS21fO+yvTUA0ZNKBitFs3sQrGghtaHoS+nMrqpdZqskwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFLwkZ4eBf5ZYz2L9w2BdLIUCPAW6MB8GA1UdIwQY MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt ZTZjZjE3Y2RkYTRmLzEvdkNSbmg0Rl9sbGpQWXYzRFlGMHNoUUk4QmJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQETm+AAwQE T40QAwQCXHdkAwQCuWioAwQCua20MA0EAgACMAcDBQMqC7iAMA0GCSqGSIb3DQEB CwUAA4IBAQA71pcCte4C+72rl9raqBCTsfbcmd4lxuH+OUAsztwtEAAiWfNf/1TE pxLM08ILSsKd+VGF8XCv3g2sIoOPzr89v2uewJ7GVL9Ek9iw/GgACZuVk/Bgb7nz igN9pwMokP3/zQLGDawwfeqy1jkCnJ0sjSYv4M8/kWEcczLbvLHn3wBkYdS6idc+ GMey010AG9vUEoNQHPgAXbje9Nq48eH7NfDzOgI+hMZGQVsHwa7uKcniPqbOFj7V NhheLzjZ0She5I12WR62stlEM0jO2m6ycdg1EBO0ftHyPAj1W0UqA4jfQnvHx/55 eV+TpJ6w3eJYoIZv2nK03C/Txla/mA5g -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:55 2026 by rpki-client