This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/_VghFuSB3pxng4qU96KyO7RSywE.roa File: _VghFuSB3pxng4qU96KyO7RSywE.roa (raw, json) Hash identifier: 4b9qvLzhapQ1MdXEO/Sy301VzxibZ/nOvTQ7N1A3dCg= Subject key identifier: FD:58:21:16:E4:81:DE:9C:67:83:8A:94:F7:A2:B2:3B:B4:52:CB:01 Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B76EB33528A97AE03A71BC8FC2115D61F Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/_VghFuSB3pxng4qU96KyO7RSywE.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44112 IP address blocks: 77.222.32.0/24 maxlen: 24 77.222.36.0/22 maxlen: 24 77.222.40.0/21 maxlen: 24 77.222.48.0/20 maxlen: 24 77.222.48.0/23 maxlen: 24 80.93.60.0/22 maxlen: 24 2a02:408:7722::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:33:52:8a:97:ae:03:a7:1b:c8:fc:21:15:d6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd582116e481de9c67838a94f7a2b23bb452cb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:37:64:9d:09:4b:4a:6a:98:72:12:93:be: c5:20:43:b0:66:32:f2:4a:2d:ed:66:be:29:35:4e: 72:a4:4d:7d:e8:1d:6f:67:fa:90:8e:e4:36:2f:7d: 49:95:2a:7f:b2:f7:f0:2e:65:82:cb:3c:b3:af:39: 22:49:d4:a9:53:7f:d4:0a:fe:ee:16:d2:63:a5:7a: eb:b2:e9:d0:91:3e:30:3c:a2:29:a0:fb:fb:99:8a: d8:23:8b:f4:e1:24:79:03:a5:ec:92:57:8e:ce:eb: 44:d2:ed:0b:66:25:08:77:53:23:84:6b:45:82:97: 50:ec:26:35:24:6e:2a:2c:1d:e8:a8:c6:7c:df:0d: 83:c2:22:ca:3a:c7:42:a4:cc:23:b9:4e:7b:4e:8e: 3d:54:06:67:14:30:ee:d2:3a:e1:4f:b3:f1:5f:c3: 07:18:b3:14:3f:d4:c0:46:b3:86:38:99:97:5c:8c: 87:b0:ae:64:a9:8b:5a:38:eb:25:31:15:3a:c8:32: 80:2b:6e:ae:83:1a:e2:8b:b7:f0:f8:b5:fa:27:3d: db:e1:74:af:02:a2:1a:9b:30:1d:63:5b:0f:0d:a0: cf:1f:a4:c7:fd:e8:df:7d:9a:67:2c:57:5d:82:99: ab:2a:95:2d:e5:1a:b0:08:9f:22:0b:e1:b8:24:fe: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:58:21:16:E4:81:DE:9C:67:83:8A:94:F7:A2:B2:3B:B4:52:CB:01 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/_VghFuSB3pxng4qU96KyO7RSywE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.222.32.0/24 77.222.36.0-77.222.63.255 80.93.60.0/22 IPv6: 2a02:408:7722::/48 Signature Algorithm: sha256WithRSAEncryption 61:13:45:fd:24:e8:c3:28:26:84:cf:d7:cb:89:e8:ea:b8:d7: 8d:d0:8c:4f:a0:3c:9c:e3:8b:20:1c:d6:55:ba:85:9e:0c:00: ed:73:71:e5:b8:05:57:31:3c:d6:99:53:a3:81:e0:c9:a3:58: 8b:63:56:10:b4:f3:29:52:ee:4e:6d:5f:b5:0c:7d:ca:42:61: 9b:e9:68:b0:5b:85:62:b5:34:ff:64:46:43:bd:03:41:55:f8: 9c:8f:e8:5e:71:6d:69:a3:f8:30:db:70:26:72:b8:f9:0f:d9: cc:19:7d:55:7b:b6:33:7d:f5:54:92:c7:65:d4:a9:2a:3c:26: 6c:b0:cc:a0:c2:a8:ff:ad:80:3a:0a:bf:55:ee:6a:9e:aa:18: cc:39:bc:88:96:7b:d5:90:56:75:18:8c:de:d1:c5:41:49:4c: 05:1e:bd:0b:c2:b2:41:d3:c0:7e:ab:ea:11:56:5a:76:c7:7b: 16:43:48:c7:e7:75:1a:2f:4d:1d:f1:13:68:52:e1:34:62:37: 5b:4b:6c:2e:6a:e0:04:25:3c:31:61:51:fc:6b:b2:ae:f7:ac: 86:14:5e:32:48:66:11:cc:31:55:c1:f8:49:27:91:6f:63:b4: ee:f7:8b:c3:52:04:9b:8b:57:fa:6b:74:d7:5f:a8:ce:59:53: cb:12:35:88 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt26zNSipeuA6cbyPwhFdYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDU4MjExNmU0ODFkZTljNjc4MzhhOTRmN2EyYjIzYmI0NTJjYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwko3ZJ0JS0pqmHISk77FIEOwZjLy Si3tZr4pNU5ypE196B1vZ/qQjuQ2L31JlSp/svfwLmWCyzyzrzkiSdSpU3/UCv7u FtJjpXrrsunQkT4wPKIpoPv7mYrYI4v04SR5A6XskleOzutE0u0LZiUId1MjhGtF gpdQ7CY1JG4qLB3oqMZ83w2DwiLKOsdCpMwjuU57To49VAZnFDDu0jrhT7PxX8MH GLMUP9TARrOGOJmXXIyHsK5kqYtaOOslMRU6yDKAK26ugxrii7fw+LX6Jz3b4XSv AqIamzAdY1sPDaDPH6TH/ejffZpnLFddgpmrKpUt5RqwCJ8iC+G4JP4tkwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFP1YIRbkgd6cZ4OKlPeisju0UssBMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvX1ZnaEZ1U0IzcHhuZzRxVTk2S3lPN1JTeXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQATd4gMAwD BAJN3iQDBAZN3gADBAJQXTwwDwQCAAIwCQMHACoCBAh3IjANBgkqhkiG9w0BAQsF AAOCAQEAYRNF/STowygmhM/Xy4no6rjXjdCMT6A8nOOLIBzWVbqFngwA7XNx5bgF VzE81plTo4HgyaNYi2NWELTzKVLuTm1ftQx9ykJhm+losFuFYrU0/2RGQ70DQVX4 nI/oXnFtaaP4MNtwJnK4+Q/ZzBl9VXu2M331VJLHZdSpKjwmbLDMoMKo/62AOgq/ Ve5qnqoYzDm8iJZ71ZBWdRiM3tHFQUlMBR69C8KyQdPAfqvqEVZadsd7FkNIx+d1 Gi9NHfETaFLhNGI3W0tsLmrgBCU8MWFR/GuyrveshhReMkhmEcwxVcH4SSeRb2O0 7veLw1IEm4tX+mt011+ozllTyxI1iA== -----END CERTIFICATE-----Generated at Tue Jan 27 19:15:41 2026 by rpki-client