This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/vkcxD7RlYQaCcDI-vzTByrPDVXM.roa File: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (raw, json) Hash identifier: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ= Subject key identifier: BE:47:31:0F:B4:65:61:06:82:70:32:3E:BF:34:C1:CA:B3:C3:55:73 Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407 Certificate serial: 019B7C11E3A299E06568D88E8A2CA6C8EEB9 Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/vkcxD7RlYQaCcDI-vzTByrPDVXM.roa Signing time: Fri 02 Jan 2026 00:18:25 +0000 ROA not before: Fri 02 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25082 IP address blocks: 91.203.140.0/22 maxlen: 22 91.203.140.0/24 maxlen: 24 91.203.141.0/24 maxlen: 24 91.203.142.0/24 maxlen: 24 91.203.143.0/24 maxlen: 24 91.215.68.0/22 maxlen: 22 91.215.68.0/23 maxlen: 23 91.215.68.0/24 maxlen: 24 91.215.70.0/23 maxlen: 23 91.215.70.0/24 maxlen: 24 91.215.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e3:a2:99:e0:65:68:d8:8e:8a:2c:a6:c8:ee:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c070ee8dc8378086960182e3309226717e83e407 Validity Not Before: Jan 2 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be47310fb46561068270323ebf34c1cab3c35573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:b5:03:f7:e9:e6:89:2c:ac:23:b8:6c:1b: 97:28:9a:45:f4:f0:b8:5a:4b:b9:a8:5a:26:2f:af: 4b:3e:79:02:d4:f9:11:69:c7:36:e5:02:93:f8:fa: 5b:8f:24:f5:5e:4a:50:59:05:21:71:58:44:ee:cb: 8e:00:75:ef:fa:64:f6:ac:a3:81:b8:3b:a9:71:25: 43:eb:8f:be:66:26:42:1e:19:18:e2:77:91:e8:2b: 6a:74:b5:dc:dd:a5:4e:97:58:35:fd:93:12:69:e7: a7:69:5a:1b:24:1d:20:68:a2:95:ac:9d:ef:7c:29: 55:2b:8f:8e:a6:4e:65:3d:a9:d0:2e:e4:e9:bd:5d: 91:a1:64:8b:a0:fe:68:24:8a:e7:54:4e:94:f4:a3: 29:94:1f:0f:c9:d5:38:70:d6:8a:88:6c:e3:08:27: 7e:0a:67:91:98:64:e1:fc:37:5c:92:6f:ae:09:80: 8e:03:7f:c8:a1:5b:6b:1e:b0:15:58:5b:74:68:59: d5:63:47:0d:cc:36:72:9f:23:cd:9d:83:26:26:2e: bb:1a:26:1c:0d:7d:8a:be:a2:07:f1:f0:00:1f:48: bd:e0:3b:dd:a7:2b:24:67:e3:dc:8d:72:8e:ca:3f: 1b:26:37:61:b4:13:e4:b8:80:05:8a:de:42:4c:69: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:47:31:0F:B4:65:61:06:82:70:32:3E:BF:34:C1:CA:B3:C3:55:73 X509v3 Authority Key Identifier: keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/vkcxD7RlYQaCcDI-vzTByrPDVXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.140.0/22 91.215.68.0/22 Signature Algorithm: sha256WithRSAEncryption 38:03:1d:9a:23:38:ac:9c:f9:a1:13:5a:ad:c1:d8:27:1d:5c: dc:3b:c5:5e:01:68:cc:a3:02:a0:33:e0:7c:55:b4:1e:1e:22: 7b:63:84:af:c0:61:0f:7e:82:03:bd:38:6d:4c:9d:8a:2d:e5: 7e:dc:a7:15:00:bc:91:76:4c:b1:97:ac:84:64:c1:96:50:db: 44:8d:ec:e6:70:e1:ea:da:00:cc:8c:0b:00:86:5a:75:21:5a: 4f:e6:9d:e6:cf:e3:95:04:64:d3:22:4e:56:d9:49:8e:90:1c: a2:49:b9:f7:c7:f7:38:31:d0:03:98:c2:05:76:93:fe:6a:07: ef:27:ea:10:fb:fb:2f:bb:6e:2c:f7:58:c2:93:97:ba:c0:8a: 15:15:1f:1c:62:21:5d:ca:e6:c5:77:ad:fe:57:d0:cf:31:5b: 76:d4:45:36:46:b1:66:6f:be:09:fa:e6:86:71:de:58:53:b4: 7b:63:93:04:0b:7f:63:0e:c3:e1:72:66:b1:c4:7d:2b:40:ec: ff:72:42:fc:aa:f0:85:06:24:29:d1:a2:85:be:5e:7b:8a:8c: f3:2c:29:3b:b3:cc:c9:bc:a1:95:72:c6:6a:1f:bc:0f:eb:42: 92:b6:ee:72:4f:a0:df:b5:8a:35:98:46:65:13:cc:88:50:52: 2b:7d:63:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EeOimeBlaNiOiiymyO65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4 M2U0MDcwHhcNMjYwMTAyMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQ3MzEwZmI0NjU2MTA2ODI3MDMyM2ViZjM0YzFjYWIzYzM1NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41u1A/fp5oksrCO4bBuXKJpF9PC4 Wku5qFomL69LPnkC1PkRacc25QKT+PpbjyT1XkpQWQUhcVhE7suOAHXv+mT2rKOB uDupcSVD64++ZiZCHhkY4neR6CtqdLXc3aVOl1g1/ZMSaeenaVobJB0gaKKVrJ3v fClVK4+Opk5lPanQLuTpvV2RoWSLoP5oJIrnVE6U9KMplB8PydU4cNaKiGzjCCd+ CmeRmGTh/Ddckm+uCYCOA3/IoVtrHrAVWFt0aFnVY0cNzDZynyPNnYMmJi67GiYc DX2KvqIH8fAAH0i94DvdpyskZ+PcjXKOyj8bJjdhtBPkuIAFit5CTGn7JwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL5HMQ+0ZWEGgnAyPr80wcqzw1VzMB8GA1UdIwQY MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt NDVhN2I2OTc4NDkzLzEvdmtjeEQ3UmxZUWFDY0RJLXZ6VEJ5clBEVlhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8uMAwQC W9dEMA0GCSqGSIb3DQEBCwUAA4IBAQA4Ax2aIzisnPmhE1qtwdgnHVzcO8VeAWjM owKgM+B8VbQeHiJ7Y4SvwGEPfoIDvThtTJ2KLeV+3KcVALyRdkyxl6yEZMGWUNtE jezmcOHq2gDMjAsAhlp1IVpP5p3mz+OVBGTTIk5W2UmOkByiSbn3x/c4MdADmMIF dpP+agfvJ+oQ+/svu24s91jCk5e6wIoVFR8cYiFdyubFd63+V9DPMVt21EU2RrFm b74J+uaGcd5YU7R7Y5MEC39jDsPhcmaxxH0rQOz/ckL8qvCFBiQp0aKFvl57iozz LCk7s8zJvKGVcsZqH7wP60KStu5yT6DftYo1mEZlE8yIUFIrfWMq -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:47 2026 by rpki-client