This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa File: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (raw, json) Hash identifier: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM= Subject key identifier: 55:FA:D9:88:1F:57:EC:6A:4B:DD:6C:87:00:F6:80:33:63:14:00:C3 Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec Certificate serial: 019B7BA4349921178DF19526BC2288334E99 Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa Signing time: Thu 01 Jan 2026 22:18:37 +0000 ROA not before: Thu 01 Jan 2026 22:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19607 IP address blocks: 91.108.160.0/21 maxlen: 21 159.253.160.0/21 maxlen: 21 185.31.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:34:99:21:17:8d:f1:95:26:bc:22:88:33:4e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d894365b28a082834a751a97771b791124524dec Validity Not Before: Jan 1 22:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55fad9881f57ec6a4bdd6c8700f68033631400c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:c0:99:4b:a6:41:d2:d3:88:cc:1a:49:8a: 15:de:b4:af:7a:8f:de:6a:f6:1c:96:88:4e:9f:6c: 82:a1:c5:b7:2d:03:da:68:42:df:7c:1d:99:d4:5f: f4:78:57:e2:aa:f4:0b:4d:e1:2a:ec:39:bb:c2:34: 69:97:f2:22:9f:6a:ab:ed:2a:06:7c:08:55:36:c5: 28:4b:91:0d:12:79:73:4f:2d:1a:c3:64:a9:55:26: 2c:90:b6:ce:12:ab:06:4c:82:84:56:d4:30:78:b1: c4:2e:16:e6:96:c6:29:4f:1b:94:48:4f:9b:a7:35: ad:aa:3d:93:d6:bd:d4:74:d8:89:4e:65:67:5b:07: 6e:4b:58:bb:dd:d8:16:9a:4d:50:59:82:09:4e:2c: 73:bd:f4:34:66:f1:77:41:7f:ac:d2:cb:6f:04:fd: 5e:de:3e:0a:68:94:a4:5a:68:ae:18:71:81:dc:a8: 3b:62:b9:1e:c3:7f:b6:5f:49:61:1a:1b:66:e5:8c: 99:9a:df:48:b3:28:c5:e8:13:c4:5e:ed:8f:50:28: 82:98:97:d5:28:17:6a:84:d6:22:14:4e:04:f3:6f: bb:86:88:23:9b:58:4a:bb:9e:d2:84:a8:2f:ff:43: ef:00:86:20:5b:46:a1:97:99:fd:94:d1:6f:b9:1a: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:D9:88:1F:57:EC:6A:4B:DD:6C:87:00:F6:80:33:63:14:00:C3 X509v3 Authority Key Identifier: keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.160.0/21 159.253.160.0/21 185.31.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:d5:8f:ad:3a:c3:9a:50:61:50:a3:29:22:ce:51:c7:b4:03: b5:5a:51:03:2c:e4:20:48:a4:87:14:9f:e1:84:be:8d:98:a1: 07:1d:f2:ba:96:00:18:0f:80:41:a5:7c:67:0c:d7:f4:04:79: 81:22:e6:b2:b9:d4:fa:4f:91:71:05:13:31:d5:ca:2e:14:e7: 91:09:3c:dd:87:f3:49:41:f8:14:dd:7d:7c:ee:9f:d9:77:09: 34:e6:20:9c:07:1d:d0:ce:f7:76:3b:bc:e1:78:83:65:53:18: 16:31:59:d5:07:11:34:ee:05:5e:e7:5c:67:c1:28:f3:7c:f0: 65:a2:c2:82:c7:3b:e5:75:d4:ca:b1:91:3d:ac:30:97:95:46: ce:67:f8:88:c7:b6:36:be:5c:7b:23:02:40:7b:84:17:61:1c: c9:3d:10:4b:4f:d4:5b:27:44:cc:00:92:e7:d1:ce:ad:46:04: 9c:c8:22:7a:45:36:88:a4:33:8f:da:f9:36:f0:b7:6e:45:5e: a6:ef:05:5d:49:ea:63:49:40:38:22:73:27:84:53:b6:ff:37: d6:84:7e:de:6d:06:8a:cd:80:25:cf:26:f0:03:a4:26:de:0e: d1:d3:2a:12:f0:ee:97:f6:17:78:98:0c:2f:52:23:0e:58:72: 62:92:6f:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pDSZIReN8ZUmvCKIM06ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1 MjRkZWMwHhcNMjYwMTAxMjIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWZhZDk4ODFmNTdlYzZhNGJkZDZjODcwMGY2ODAzMzYzMTQwMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o/AmUumQdLTiMwaSYoV3rSveo/e avYclohOn2yCocW3LQPaaELffB2Z1F/0eFfiqvQLTeEq7Dm7wjRpl/Iin2qr7SoG fAhVNsUoS5ENEnlzTy0aw2SpVSYskLbOEqsGTIKEVtQweLHELhbmlsYpTxuUSE+b pzWtqj2T1r3UdNiJTmVnWwduS1i73dgWmk1QWYIJTixzvfQ0ZvF3QX+s0stvBP1e 3j4KaJSkWmiuGHGB3Kg7Yrkew3+2X0lhGhtm5YyZmt9IsyjF6BPEXu2PUCiCmJfV KBdqhNYiFE4E82+7hogjm1hKu57ShKgv/0PvAIYgW0ahl5n9lNFvuRpcFwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFX62YgfV+xqS91shwD2gDNjFADDMB8GA1UdIwQY MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt MjE0NjE3OWQ4ZTJiLzEvVmZyWmlCOVg3R3BMM1d5SEFQYUFNMk1VQU1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDW2ygAwQD n/2gAwQCuR+YMA0GCSqGSIb3DQEBCwUAA4IBAQCa1Y+tOsOaUGFQoykizlHHtAO1 WlEDLOQgSKSHFJ/hhL6NmKEHHfK6lgAYD4BBpXxnDNf0BHmBIuayudT6T5FxBRMx 1couFOeRCTzdh/NJQfgU3X187p/Zdwk05iCcBx3Qzvd2O7zheINlUxgWMVnVBxE0 7gVe51xnwSjzfPBlosKCxzvlddTKsZE9rDCXlUbOZ/iIx7Y2vlx7IwJAe4QXYRzJ PRBLT9RbJ0TMAJLn0c6tRgScyCJ6RTaIpDOP2vk28LduRV6m7wVdSepjSUA4InMn hFO2/zfWhH7ebQaKzYAlzybwA6Qm3g7R0yoS8O6X9hd4mAwvUiMOWHJikm9V -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:35 2026 by rpki-client