This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa File: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (raw, json) Hash identifier: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ= Subject key identifier: 54:3B:95:FE:06:BD:7C:A5:A0:E5:94:E0:E0:C2:2A:63:B0:4C:0B:2C Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Certificate serial: 019B7C1312C99BB046D11345BABE8FBC764D Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa Signing time: Fri 02 Jan 2026 00:19:43 +0000 ROA not before: Fri 02 Jan 2026 00:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 109.73.192.0/24 maxlen: 24 109.73.193.0/24 maxlen: 24 109.73.194.0/24 maxlen: 24 109.73.195.0/24 maxlen: 24 109.73.196.0/24 maxlen: 24 109.73.197.0/24 maxlen: 24 109.73.198.0/24 maxlen: 24 109.73.199.0/24 maxlen: 24 109.73.201.0/24 maxlen: 24 109.73.202.0/24 maxlen: 24 109.73.203.0/24 maxlen: 24 109.73.205.0/24 maxlen: 24 109.73.206.0/24 maxlen: 24 109.73.207.0/24 maxlen: 24 217.198.5.0/24 maxlen: 24 217.198.6.0/24 maxlen: 24 217.198.9.0/24 maxlen: 24 217.198.12.0/24 maxlen: 24 217.198.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:12:c9:9b:b0:46:d1:13:45:ba:be:8f:bc:76:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Validity Not Before: Jan 2 00:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=543b95fe06bd7ca5a0e594e0e0c22a63b04c0b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:fd:84:f2:24:59:ac:6c:ec:96:51:2d:03: 12:2c:59:06:69:41:8e:b3:f0:78:4e:63:ec:32:a9: 07:c9:5b:d0:2b:01:e4:08:18:83:f9:b7:e6:b5:9d: 39:42:7b:47:8a:27:46:5c:8a:2b:0f:c3:7e:a6:72: 86:ca:b3:47:1b:ee:d4:7c:fc:53:8c:f0:f8:fe:97: 77:2d:d0:4e:90:4b:08:df:58:e9:43:fe:96:de:87: c5:65:fd:3b:de:37:84:97:a1:2e:02:13:a7:d9:60: ef:ae:61:e2:7d:32:0b:83:09:f6:2b:57:7a:4e:be: 01:5a:8a:bc:68:8d:f4:1f:1f:0e:6a:a6:33:4a:4e: 62:71:db:64:08:ac:fc:b0:8f:4c:f2:c9:d8:d0:83: be:3a:50:64:29:4c:a3:5e:30:58:b8:ea:a0:44:f5: 2f:00:f9:71:73:a0:56:cf:9f:d9:50:b6:a5:72:ad: 93:52:29:2e:68:44:ed:79:fe:09:4c:c0:5b:cb:c0: 76:14:34:3c:6a:f1:28:68:4b:73:b7:0d:8d:08:c8: c2:65:f2:c8:e0:50:b3:f8:f9:f0:00:df:81:f5:ae: 68:5d:93:c1:bd:2f:f6:e4:98:b3:6b:1a:93:6a:96: b3:79:9b:24:1d:74:e5:25:ef:75:fe:36:1d:76:15: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:95:FE:06:BD:7C:A5:A0:E5:94:E0:E0:C2:2A:63:B0:4C:0B:2C X509v3 Authority Key Identifier: keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.73.192.0/21 109.73.201.0-109.73.203.255 109.73.205.0-109.73.207.255 217.198.5.0-217.198.6.255 217.198.9.0/24 217.198.12.0/23 Signature Algorithm: sha256WithRSAEncryption 90:48:6d:7c:fc:a9:0a:92:69:d5:ad:1f:d0:c3:57:e2:1d:ef: 8e:cf:2b:04:32:e3:9e:f2:bf:dd:0d:40:a9:bf:32:8c:8e:95: 0c:18:8e:c2:c0:3e:79:15:c7:c2:7c:d6:6c:e5:45:ce:70:e5: 84:ec:7f:1a:8c:52:45:3f:10:39:2a:cb:4e:35:22:0c:ba:aa: f2:3f:e6:65:8f:67:5c:55:ba:13:d3:74:3c:87:5d:70:0d:ce: 10:be:97:42:16:75:fa:ba:7c:2f:d7:64:8d:c4:27:2c:cc:3d: c8:80:2e:db:8d:69:56:51:d7:59:3d:27:62:54:7d:53:50:5c: 0b:90:60:d5:20:2f:1f:a4:d3:f8:fa:30:9b:2b:0e:04:c3:c5: f3:8b:78:92:ab:8d:74:77:99:1b:19:c9:1e:4d:b3:57:1f:0b: 44:e4:13:cf:31:bb:66:dd:85:cb:7e:3d:c6:3d:d8:71:d2:3a: 1c:90:3d:3d:1c:eb:e4:2e:8a:04:e9:7b:2e:22:42:77:54:9d: 52:ec:fb:cb:b1:0d:38:f8:dc:1c:3b:85:a1:26:fb:6a:21:47: 4f:c4:9d:46:db:d4:d3:bc:a4:7b:63:3a:73:c7:d2:55:b7:b4: 63:4e:bc:08:d7:dc:33:74:60:e6:06:a8:39:22:cf:06:82:9e: 06:2f:09:71 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt8ExLJm7BG0RNFur6PvHZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjk2NzgyZmYxMjFhZTVhNmQ5ZDVjZmEzODQ3OTc2OGI2 YmYwYmQwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDNiOTVmZTA2YmQ3Y2E1YTBlNTk0ZTBlMGMyMmE2M2IwNGMwYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ79hPIkWaxs7JZRLQMSLFkGaUGO s/B4TmPsMqkHyVvQKwHkCBiD+bfmtZ05QntHiidGXIorD8N+pnKGyrNHG+7UfPxT jPD4/pd3LdBOkEsI31jpQ/6W3ofFZf073jeEl6EuAhOn2WDvrmHifTILgwn2K1d6 Tr4BWoq8aI30Hx8OaqYzSk5icdtkCKz8sI9M8snY0IO+OlBkKUyjXjBYuOqgRPUv APlxc6BWz5/ZULalcq2TUikuaETtef4JTMBby8B2FDQ8avEoaEtztw2NCMjCZfLI 4FCz+PnwAN+B9a5oXZPBvS/25JizaxqTapazeZskHXTlJe91/jYddhVjjQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFFQ7lf4GvXyloOWU4ODCKmOwTAssMB8GA1UdIwQY MBaAFHxpZ4L/EhrlptnVz6OEeXaLa/C9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEt NmY4MzZmMzVmNTk0LzEvVkR1Vl9nYTlmS1dnNVpUZzRNSXFZN0JNQ3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEtNmY4MzZmMzVmNTk0 LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDbUnAMAwD BABtSckDBAJtScgwDAMEAG1JzQMEBG1JwDAMAwQA2cYFAwQA2cYGAwQA2cYJAwQB 2cYMMA0GCSqGSIb3DQEBCwUAA4IBAQCQSG18/KkKkmnVrR/Qw1fiHe+OzysEMuOe 8r/dDUCpvzKMjpUMGI7CwD55FcfCfNZs5UXOcOWE7H8ajFJFPxA5KstONSIMuqry P+Zlj2dcVboT03Q8h11wDc4QvpdCFnX6unwv12SNxCcszD3IgC7bjWlWUddZPSdi VH1TUFwLkGDVIC8fpNP4+jCbKw4Ew8Xzi3iSq410d5kbGckeTbNXHwtE5BPPMbtm 3YXLfj3GPdhx0jockD09HOvkLooE6XsuIkJ3VJ1S7PvLsQ04+NwcO4WhJvtqIUdP xJ1G29TTvKR7Yzpzx9JVt7RjTrwI19wzdGDmBqg5Is8Ggp4GLwlx -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:11 2026 by rpki-client