This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/VND09LSiHkpjSOuhfnkKXr1ycfk.roa File: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (raw, json) Hash identifier: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA= Subject key identifier: 54:D0:F4:F4:B4:A2:1E:4A:63:48:EB:A1:7E:79:0A:5E:BD:72:71:F9 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019B77C683F4446273205F1FCC0C4819E545 Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/VND09LSiHkpjSOuhfnkKXr1ycfk.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.239.43.0/24 maxlen: 24 195.191.65.0/24 maxlen: 24 213.109.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:83:f4:44:62:73:20:5f:1f:cc:0c:48:19:e5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54d0f4f4b4a21e4a6348eba17e790a5ebd7271f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:c3:3d:77:ff:39:29:5a:f4:af:69:3c:43: 38:c4:3c:b9:0f:25:5e:17:0c:27:28:5a:8d:d5:55: f1:fd:ff:fa:c9:6e:d8:df:da:d1:2b:94:19:ff:44: f2:c6:17:03:3e:6a:69:73:b3:3f:55:00:ad:c0:72: b7:64:d5:1c:8b:04:05:eb:4f:ee:57:48:c7:f7:d3: 5d:4d:99:9d:9c:f0:25:c1:a6:20:b5:8e:ae:64:5d: 00:16:6e:17:5f:95:a3:ab:ce:f6:15:37:ad:2c:e7: 09:29:f3:05:47:31:95:51:67:11:22:d8:2f:49:c9: 72:06:22:cc:be:1c:87:56:51:3e:b0:49:fd:8b:c6: db:79:13:99:90:f3:da:ac:91:d8:f5:26:ee:12:2e: d2:22:fd:10:0b:bd:90:8e:b5:04:8b:45:b7:e7:16: 81:16:62:b3:46:0a:3f:b5:fe:2b:90:91:d5:af:d9: 1e:80:b5:8c:a2:b5:fe:2b:41:3f:06:6d:8c:7d:c8: 08:f4:69:73:ef:c6:75:24:80:6e:25:5c:88:b9:80: ae:31:18:bf:07:93:9c:b4:93:8e:b9:59:ab:64:1c: f2:a6:2d:ee:5c:ab:67:d3:b1:b3:0f:8b:ae:c8:df: dc:c3:b7:d6:45:b4:45:0d:f1:3f:b6:cf:aa:90:3e: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:F4:F4:B4:A2:1E:4A:63:48:EB:A1:7E:79:0A:5E:BD:72:71:F9 X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/VND09LSiHkpjSOuhfnkKXr1ycfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.43.0/24 195.191.65.0/24 213.109.76.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:ea:88:cb:0f:96:bd:73:de:bc:05:3d:b3:2d:c7:cb:98:69: f5:18:75:33:08:b4:fe:e5:d8:d2:10:3e:73:c9:cf:ec:c5:c7: fe:43:e3:72:6b:2e:1e:4d:37:ad:5b:f3:ba:c9:e5:15:39:04: 83:84:8a:28:dc:2f:04:6b:83:ca:12:d5:42:d4:af:dd:5f:a0: 89:8a:a2:8d:aa:bf:76:68:cd:81:b9:68:58:0e:2a:e8:4b:91: 68:82:65:b9:2e:dd:2d:f7:a9:32:04:66:50:ce:c0:46:8c:72: bf:be:45:ea:c4:12:47:13:c4:0f:38:d7:08:e8:55:16:a5:c0: 5e:60:d5:f0:83:2b:19:e1:f3:e3:23:b3:3d:92:96:3d:4f:7e: e9:46:ec:0a:dc:7d:d1:7d:75:eb:1a:46:70:e5:3e:4c:bb:be: 4e:e0:f4:b3:d8:4c:1c:0d:3a:69:9f:6f:13:2f:2d:b7:c6:74: ff:15:0f:a7:ee:8c:82:fd:ee:bf:d6:14:86:aa:7e:7b:de:02: e3:2c:dd:05:fb:37:e3:ad:3c:a8:5b:3b:a6:36:eb:42:b6:48: aa:0d:75:df:95:9c:df:69:d3:70:f1:53:9e:54:a7:3b:2b:5d: ad:7e:94:c1:19:d2:7a:00:fb:3a:e5:86:5a:24:0a:c6:52:dd: 76:a3:c2:a8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xoP0RGJzIF8fzAxIGeVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGQwZjRmNGI0YTIxZTRhNjM0OGViYTE3ZTc5MGE1ZWJkNzI3MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xLDPXf/OSla9K9pPEM4xDy5DyVe FwwnKFqN1VXx/f/6yW7Y39rRK5QZ/0TyxhcDPmppc7M/VQCtwHK3ZNUciwQF60/u V0jH99NdTZmdnPAlwaYgtY6uZF0AFm4XX5Wjq872FTetLOcJKfMFRzGVUWcRItgv SclyBiLMvhyHVlE+sEn9i8bbeROZkPParJHY9SbuEi7SIv0QC72QjrUEi0W35xaB FmKzRgo/tf4rkJHVr9kegLWMorX+K0E/Bm2MfcgI9Glz78Z1JIBuJVyIuYCuMRi/ B5OctJOOuVmrZBzypi3uXKtn07GzD4uuyN/cw7fWRbRFDfE/ts+qkD6XpwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFTQ9PS0oh5KY0jroX55Cl69cnH5MB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvVk5EMDlMU2lIa3BqU091aGZua0tYcjF5Y2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+8rAwQA w79BAwQB1W1MMA0GCSqGSIb3DQEBCwUAA4IBAQB86ojLD5a9c968BT2zLcfLmGn1 GHUzCLT+5djSED5zyc/sxcf+Q+Nyay4eTTetW/O6yeUVOQSDhIoo3C8Ea4PKEtVC 1K/dX6CJiqKNqr92aM2BuWhYDiroS5FogmW5Lt0t96kyBGZQzsBGjHK/vkXqxBJH E8QPONcI6FUWpcBeYNXwgysZ4fPjI7M9kpY9T37pRuwK3H3RfXXrGkZw5T5Mu75O 4PSz2EwcDTppn28TLy23xnT/FQ+n7oyC/e6/1hSGqn573gLjLN0F+zfjrTyoWzum NutCtkiqDXXflZzfadNw8VOeVKc7K12tfpTBGdJ6APs65YZaJArGUt12o8Ko -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:08 2026 by rpki-client