This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vVc0dc3EPpbjtPYJ7V6KKSauen4.roa File: vVc0dc3EPpbjtPYJ7V6KKSauen4.roa (raw, json) Hash identifier: VEIHXyWV1OWVxeQr4sCn2XxX8h2k7/LmQ/wEdaObUIE= Subject key identifier: BD:57:34:75:CD:C4:3E:96:E3:B4:F6:09:ED:5E:8A:29:26:AE:7A:7E Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019C07E280E74DFA9A2F04837A1599CD0794 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vVc0dc3EPpbjtPYJ7V6KKSauen4.roa Signing time: Thu 29 Jan 2026 03:53:30 +0000 ROA not before: Thu 29 Jan 2026 03:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:07:e2:80:e7:4d:fa:9a:2f:04:83:7a:15:99:cd:07:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 29 03:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd573475cdc43e96e3b4f609ed5e8a2926ae7a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:a3:78:30:14:57:d5:f2:fa:e7:66:de:48: 37:bb:60:fe:77:18:f6:36:e1:13:d6:04:94:c1:8f: 33:cf:1b:2b:04:b3:9f:ff:06:45:20:4a:45:a7:e6: e1:3c:ff:63:4f:59:a8:c8:ff:ba:e5:82:51:88:36: 22:97:ae:bc:8d:60:b6:1f:55:30:36:ef:25:03:88: 1f:6f:eb:40:89:68:b7:fe:8c:27:cc:26:96:2b:f5: 00:04:bb:a5:ad:a6:72:30:dd:c8:8d:4a:c7:57:23: 51:27:67:89:47:03:12:9c:01:f4:ef:25:20:bc:59: 52:a9:b4:f1:37:56:26:32:85:44:2b:63:83:83:74: 7e:6b:70:50:1c:15:21:db:a2:b2:87:19:be:49:c2: c8:08:85:96:60:ab:54:30:5c:7d:3a:ef:e4:13:7f: 04:3b:21:f5:40:49:34:79:64:22:61:35:16:23:7c: e9:76:c0:f3:21:72:3b:94:df:e0:fa:a7:83:6d:73: 5e:0e:6e:5d:8a:ed:4f:28:98:f5:59:48:d7:97:23: b7:18:e9:de:41:5e:2d:39:e2:dc:cb:61:77:08:76: e1:46:15:95:75:b1:72:36:b7:10:e0:ed:1b:c7:9b: af:d7:55:ae:c9:b2:cc:ad:ec:da:de:33:8f:4f:68: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:57:34:75:CD:C4:3E:96:E3:B4:F6:09:ED:5E:8A:29:26:AE:7A:7E X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/vVc0dc3EPpbjtPYJ7V6KKSauen4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 35:1b:c1:0e:8d:51:69:09:02:02:a7:4d:c3:38:e7:ab:91:34: 55:24:4a:93:05:83:f9:50:b3:15:75:78:b3:3b:fa:b5:21:59: 2d:01:38:04:06:92:18:d9:e4:27:1e:a0:f6:ea:dd:78:f4:c7: 2a:14:02:97:22:3e:6e:b5:70:12:99:1e:ee:8f:8e:3c:38:99: 18:57:ed:44:2b:cc:fb:36:9d:aa:6c:c3:3f:92:d8:cb:ac:ac: 6c:4a:38:49:c9:56:26:b9:41:e4:5d:c6:c8:d8:b7:6d:bb:06: 3b:93:8b:7e:8a:5a:1f:af:1c:61:cd:c9:3a:7d:53:8d:39:af: b8:70:52:7e:99:96:6a:f9:e5:0c:1c:74:34:fe:29:e9:f2:1b: 79:bf:9e:ec:8e:bf:da:1b:31:ec:b6:48:c2:11:54:90:fa:6e: ac:6d:8d:36:6f:6e:bc:bf:7a:01:c1:8c:b6:2c:28:e7:6a:c0: 29:51:3e:bb:cf:19:b3:a2:1e:e8:e1:10:52:70:b8:74:22:b8: 19:04:a7:2b:25:eb:16:22:9f:37:29:88:6d:fb:67:2a:28:a3: 0f:4b:b6:6c:93:7a:e2:ed:c9:8d:ba:eb:39:89:f7:d0:74:c4: 49:08:71:d6:b2:6b:c1:43:24:c4:aa:e0:89:d3:19:55:59:65: f6:ec:0c:53 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZwH4oDnTfqaLwSDehWZzQeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTI5MDM1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDU3MzQ3NWNkYzQzZTk2ZTNiNGY2MDllZDVlOGEyOTI2YWU3YTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB6jeDAUV9Xy+udm3kg3u2D+dxj2 NuET1gSUwY8zzxsrBLOf/wZFIEpFp+bhPP9jT1moyP+65YJRiDYil668jWC2H1Uw Nu8lA4gfb+tAiWi3/ownzCaWK/UABLulraZyMN3IjUrHVyNRJ2eJRwMSnAH07yUg vFlSqbTxN1YmMoVEK2ODg3R+a3BQHBUh26Kyhxm+ScLICIWWYKtUMFx9Ou/kE38E OyH1QEk0eWQiYTUWI3zpdsDzIXI7lN/g+qeDbXNeDm5diu1PKJj1WUjXlyO3GOne QV4tOeLcy2F3CHbhRhWVdbFyNrcQ4O0bx5uv11WuybLMreza3jOPT2irHwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFL1XNHXNxD6W47T2Ce1eiikmrnp+MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvdlZjMGRjM0VQcGJqdFBZSjdWNktLU2F1ZW40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9mmAwQA uXEKMA8EAgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBADUbwQ6NUWkJ AgKnTcM456uRNFUkSpMFg/lQsxV1eLM7+rUhWS0BOAQGkhjZ5CceoPbq3Xj0xyoU ApciPm61cBKZHu6Pjjw4mRhX7UQrzPs2napswz+S2MusrGxKOEnJVia5QeRdxsjY t227BjuTi36KWh+vHGHNyTp9U405r7hwUn6Zlmr55QwcdDT+KenyG3m/nuyOv9ob Mey2SMIRVJD6bqxtjTZvbry/egHBjLYsKOdqwClRPrvPGbOiHujhEFJwuHQiuBkE pysl6xYinzcpiG37Zyooow9LtmyTeuLtyY266zmJ99B0xEkIcdaya8FDJMSq4InT GVVZZfbsDFM= -----END CERTIFICATE-----Generated at Fri Jan 30 10:21:32 2026 by rpki-client