This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/VpTcnmIdu1or70NVdb7KksBG0mY.roa File: VpTcnmIdu1or70NVdb7KksBG0mY.roa (raw, json) Hash identifier: X4YGR6I4Wi0PqQvq++rW4nssY1qKMiMmata2S9zHF98= Subject key identifier: 56:94:DC:9E:62:1D:BB:5A:2B:EF:43:55:75:BE:CA:92:C0:46:D2:66 Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Certificate serial: 019B7F1569D8B1CCE954C8DAEB6B372E4EEB Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/VpTcnmIdu1or70NVdb7KksBG0mY.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59775 IP address blocks: 78.108.220.0/24 maxlen: 26 78.108.221.0/24 maxlen: 26 185.56.112.0/22 maxlen: 26 2a02:5260::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:69:d8:b1:cc:e9:54:c8:da:eb:6b:37:2e:4e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5694dc9e621dbb5a2bef435575beca92c046d266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:04:f5:62:1d:d2:d0:06:01:6c:ab:bb:85: 1c:77:33:27:8a:0c:eb:70:64:4a:7c:2f:22:60:16: 49:a6:a5:ae:7f:77:63:7a:1f:5a:c2:0f:49:fe:e2: 1c:4c:17:2e:e2:4e:55:03:18:78:3c:3b:3a:a1:d6: 88:e4:a3:d5:14:7e:f2:55:be:28:11:e5:03:02:5e: b9:0b:77:66:ee:ca:8f:7c:64:2b:10:09:b6:7e:15: e1:a3:db:af:fb:a3:56:d1:f5:4e:9b:2e:60:e5:e8: 73:3a:bd:58:2e:c2:98:03:84:69:0b:5e:94:40:33: be:b0:51:5c:dd:b3:da:4e:88:5e:db:fb:a0:cb:e7: 20:75:f8:3e:2a:69:1d:a2:7d:78:ba:3f:1c:f9:6b: e3:2f:1a:dd:0f:90:26:ab:26:94:d5:f0:bd:ce:36: aa:21:7a:e7:fd:a8:d7:0d:0b:d4:5f:6b:86:78:55: 3e:3d:03:93:e1:df:60:33:49:5f:b8:fd:0e:6e:7d: 04:24:96:8d:51:78:bf:8c:71:8c:9c:1c:db:c9:b4: 7e:cc:eb:a7:92:87:c4:16:07:ff:58:52:ce:ea:e8: cc:7e:8e:b0:04:73:ae:bf:a7:7a:2d:74:1b:5e:76: 2a:d4:73:63:c5:81:52:62:43:87:08:9b:52:52:07: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:94:DC:9E:62:1D:BB:5A:2B:EF:43:55:75:BE:CA:92:C0:46:D2:66 X509v3 Authority Key Identifier: keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/VpTcnmIdu1or70NVdb7KksBG0mY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.220.0/23 185.56.112.0/22 IPv6: 2a02:5260::/29 Signature Algorithm: sha256WithRSAEncryption 25:74:ff:ae:dc:f7:82:df:ea:e2:b6:01:ad:21:48:96:05:bb: a6:b0:2a:7b:1f:5c:30:e0:58:6a:ff:19:c5:fb:54:55:bc:78: 1b:d6:e9:f8:d2:e7:0e:a9:b5:d6:55:49:95:5b:96:76:29:69: 90:06:ee:37:a3:be:df:54:bd:da:9e:83:e8:a3:15:e3:a1:f7: b9:56:1b:47:63:cd:eb:e7:b3:40:e6:3e:14:e3:1a:82:68:50: d1:0b:dd:fc:8f:c0:86:4a:f4:5b:fc:4e:24:a7:fa:27:de:2e: c8:6d:98:92:aa:ef:4a:2c:e9:14:42:d9:2b:6c:b3:63:66:0d: 28:50:d8:7b:37:76:8c:d6:a2:13:a0:83:19:ec:12:59:8e:f3: 99:f9:1a:6f:d0:3b:e9:89:52:2d:b2:8b:d7:1e:6d:02:a8:64: 72:d5:41:93:50:de:39:b4:2c:99:0b:37:53:64:a2:4e:4b:8e: 5e:a2:ed:4d:99:b3:63:92:5c:11:fb:b9:3d:95:45:75:49:b6: c8:35:ce:08:4d:56:f3:ed:6e:e0:de:c5:c7:45:9e:93:5f:5a: 83:f3:22:02:a6:3d:47:6d:c0:1c:d5:29:a7:6c:3a:7d:b3:ff: c8:78:19:2a:8b:b7:5a:9c:33:53:26:66:5d:3b:e9:de:15:40: 8d:9c:47:aa -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FWnYsczpVMja62s3Lk7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy NjRkYzAwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njk0ZGM5ZTYyMWRiYjVhMmJlZjQzNTU3NWJlY2E5MmMwNDZkMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuoE9WId0tAGAWyru4UcdzMnigzr cGRKfC8iYBZJpqWuf3djeh9awg9J/uIcTBcu4k5VAxh4PDs6odaI5KPVFH7yVb4o EeUDAl65C3dm7sqPfGQrEAm2fhXho9uv+6NW0fVOmy5g5ehzOr1YLsKYA4RpC16U QDO+sFFc3bPaTohe2/ugy+cgdfg+Kmkdon14uj8c+WvjLxrdD5AmqyaU1fC9zjaq IXrn/ajXDQvUX2uGeFU+PQOT4d9gM0lfuP0Obn0EJJaNUXi/jHGMnBzbybR+zOun kofEFgf/WFLO6ujMfo6wBHOuv6d6LXQbXnYq1HNjxYFSYkOHCJtSUgeTxQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFaU3J5iHbtaK+9DVXW+ypLARtJmMB8GA1UdIwQY MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt ZDkyZGFlODYxYTdkLzEvVnBUY25tSWR1MW9yNzBOVmRiN0trc0JHMG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBTmzcAwQC uThwMA0EAgACMAcDBQMqAlJgMA0GCSqGSIb3DQEBCwUAA4IBAQAldP+u3PeC3+ri tgGtIUiWBbumsCp7H1ww4Fhq/xnF+1RVvHgb1un40ucOqbXWVUmVW5Z2KWmQBu43 o77fVL3anoPooxXjofe5VhtHY83r57NA5j4U4xqCaFDRC938j8CGSvRb/E4kp/on 3i7IbZiSqu9KLOkUQtkrbLNjZg0oUNh7N3aM1qIToIMZ7BJZjvOZ+Rpv0DvpiVIt sovXHm0CqGRy1UGTUN45tCyZCzdTZKJOS45eou1NmbNjklwR+7k9lUV1SbbINc4I TVbz7W7g3sXHRZ6TX1qD8yICpj1HbcAc1SmnbDp9s//IeBkqi7danDNTJmZdO+ne FUCNnEeq -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:13 2026 by rpki-client