This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/VynjIVEwblB9H_BmRl1ljWkeWpM.roa File: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (raw, json) Hash identifier: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo= Subject key identifier: 57:29:E3:21:51:30:6E:50:7D:1F:F0:66:46:5D:65:8D:69:1E:5A:93 Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Certificate serial: 019B7D5C1E7CEA39846A8947575D85FAC236 Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/VynjIVEwblB9H_BmRl1ljWkeWpM.roa Signing time: Fri 02 Jan 2026 06:19:07 +0000 ROA not before: Fri 02 Jan 2026 06:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.58.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1e:7c:ea:39:84:6a:89:47:57:5d:85:fa:c2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Validity Not Before: Jan 2 06:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5729e32151306e507d1ff066465d658d691e5a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:4f:28:71:f5:f1:0e:4f:b6:87:31:b4:62: ce:b1:34:2e:17:f2:ef:2a:e8:bf:b1:d7:86:5e:02: 47:f9:d4:e3:4a:a9:f8:8e:16:77:72:68:fe:89:52: 86:23:36:7f:fa:7c:24:36:e1:c7:50:32:84:6e:a2: a3:28:cb:cf:06:75:ac:e1:c9:c5:6e:b7:2f:ef:89: 50:cd:22:cb:8c:93:08:06:cf:7a:8d:e6:3e:27:23: 99:40:a4:e4:96:90:5d:57:0e:98:55:42:07:23:34: 82:22:87:08:2f:db:dd:ad:0b:71:26:06:6f:37:35: 09:80:12:c5:15:9e:48:b0:fa:95:f2:f0:dc:82:17: c3:fd:a0:0e:d9:69:84:92:b2:46:0c:78:60:36:55: 13:fb:58:5b:90:d9:c5:8c:a8:1a:1b:60:36:c1:75: ee:b3:d6:e4:7e:58:b7:95:0a:31:50:3f:79:89:da: a7:38:1e:15:c2:fb:e6:9e:66:b0:bd:05:12:9e:4b: 76:e8:13:1a:5a:40:77:01:de:43:d0:4f:56:91:24: 3f:2d:53:0c:82:be:d7:e7:07:a1:c8:7f:51:8d:1e: 1e:bd:da:09:e0:60:f4:83:8d:b3:c0:78:c0:b7:3d: b5:9e:da:11:7e:e3:47:d2:16:f2:0d:8b:e4:7a:b3: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:29:E3:21:51:30:6E:50:7D:1F:F0:66:46:5D:65:8D:69:1E:5A:93 X509v3 Authority Key Identifier: keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/VynjIVEwblB9H_BmRl1ljWkeWpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.6.0/24 Signature Algorithm: sha256WithRSAEncryption c3:29:23:9b:4c:e7:c9:25:ae:fb:72:5c:5e:7b:de:b6:e0:2a: 3c:d1:bb:8e:29:87:29:bd:1d:24:d8:17:fd:1b:46:93:b8:ca: 6a:67:d4:9c:5f:ec:16:6d:c5:ed:d6:22:06:16:35:37:62:bd: 11:b0:b6:d4:52:08:8c:a2:aa:76:79:14:f1:bf:15:40:e6:4a: 7e:d2:00:44:fb:53:ac:8b:ec:d9:ac:f2:0b:c2:05:ac:83:49: ae:a2:1d:43:8e:e1:ae:08:96:22:7f:c1:3c:ad:d1:87:d8:54: dd:1a:19:6b:88:12:d5:4f:1e:43:10:29:86:9b:a3:c7:77:4b: ad:c0:d7:25:9f:9a:02:cf:c3:41:81:71:00:01:f5:89:79:d5: c7:e6:d9:d0:93:06:dc:74:b5:92:98:66:b0:63:78:7f:3d:83: d2:51:e7:af:a3:08:21:d7:ec:0f:6d:64:43:44:7a:6e:21:81: b7:07:44:22:45:a8:fa:2e:81:2e:17:21:e8:07:50:b8:69:4c: 07:a9:47:6f:1f:a6:29:6e:0a:50:09:96:f6:b2:66:21:ee:a6: 6b:ea:51:81:5e:97:12:22:17:3f:e9:91:f1:a3:d6:7e:33:81: 67:e2:0c:e9:77:14:55:d0:70:72:55:f3:20:49:a2:87:d2:83: 5b:2f:4e:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XB586jmEaolHV12F+sI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTBhMzhmODVkMmY1MzA1M2I4Yzg5NDNkOTAxN2IwYjhm NzcxYWMwHhcNMjYwMTAyMDYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzI5ZTMyMTUxMzA2ZTUwN2QxZmYwNjY0NjVkNjU4ZDY5MWU1YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjilPKHH18Q5PtocxtGLOsTQuF/Lv Kui/sdeGXgJH+dTjSqn4jhZ3cmj+iVKGIzZ/+nwkNuHHUDKEbqKjKMvPBnWs4cnF brcv74lQzSLLjJMIBs96jeY+JyOZQKTklpBdVw6YVUIHIzSCIocIL9vdrQtxJgZv NzUJgBLFFZ5IsPqV8vDcghfD/aAO2WmEkrJGDHhgNlUT+1hbkNnFjKgaG2A2wXXu s9bkfli3lQoxUD95idqnOB4VwvvmnmawvQUSnkt26BMaWkB3Ad5D0E9WkSQ/LVMM gr7X5wehyH9RjR4evdoJ4GD0g42zwHjAtz21ntoRfuNH0hbyDYvkerMNXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcp4yFRMG5QfR/wZkZdZY1pHlqTMB8GA1UdIwQY MBaAFL+go4+F0vUwU7jIlD2QF7C493GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTkt N2FiMWZhMGJhMzk5LzEvVnluaklWRXdibEI5SF9CbVJsMWxqV2tlV3BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTktN2FiMWZhMGJhMzk5 LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwToGMA0G CSqGSIb3DQEBCwUAA4IBAQDDKSObTOfJJa77clxee9624Co80buOKYcpvR0k2Bf9 G0aTuMpqZ9ScX+wWbcXt1iIGFjU3Yr0RsLbUUgiMoqp2eRTxvxVA5kp+0gBE+1Os i+zZrPILwgWsg0muoh1DjuGuCJYif8E8rdGH2FTdGhlriBLVTx5DECmGm6PHd0ut wNcln5oCz8NBgXEAAfWJedXH5tnQkwbcdLWSmGawY3h/PYPSUeevowgh1+wPbWRD RHpuIYG3B0QiRaj6LoEuFyHoB1C4aUwHqUdvH6YpbgpQCZb2smYh7qZr6lGBXpcS Ihc/6ZHxo9Z+M4Fn4gzpdxRV0HByVfMgSaKH0oNbL04R -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:54 2026 by rpki-client