This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/VlcSPU0SSboucncQzfDMPKOtrJQ.roa File: VlcSPU0SSboucncQzfDMPKOtrJQ.roa (raw, json) Hash identifier: u8Y9MDR5ph00NnslMwtKkPqxu4tVzHOEdeTM35TXuqs= Subject key identifier: 56:57:12:3D:4D:12:49:BA:2E:72:77:10:CD:F0:CC:3C:A3:AD:AC:94 Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050 Certificate serial: 019B7C11D2605367EB9A13D38E10DD7B293B Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/VlcSPU0SSboucncQzfDMPKOtrJQ.roa Signing time: Fri 02 Jan 2026 00:18:21 +0000 ROA not before: Fri 02 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200600 IP address blocks: 185.101.220.0/22 maxlen: 22 2a06:2140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d2:60:53:67:eb:9a:13:d3:8e:10:dd:7b:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050 Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5657123d4d1249ba2e727710cdf0cc3ca3adac94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:28:39:57:f6:3a:bc:80:f2:33:65:6a:c0: 2d:53:cb:bd:15:9c:ff:bf:b4:62:0e:11:82:4e:4d: 9e:d8:34:76:6f:eb:f0:a0:f8:8a:23:5e:83:2a:c7: 60:ac:90:3e:a5:9d:58:c9:ff:0b:10:4b:d5:7e:55: 17:da:8f:71:17:fa:d8:58:b7:5c:46:85:c1:65:43: 10:fb:72:15:05:a6:0a:6e:1f:22:48:aa:0d:87:dc: bb:63:b9:c7:3d:c3:33:6d:85:06:90:60:d1:87:b5: d4:61:83:46:8f:96:1f:96:fe:43:ec:3c:36:19:35: b8:39:e6:0a:ea:7b:9b:80:79:b2:9c:23:b7:71:2f: c5:cf:45:98:0b:fd:29:19:dd:9b:21:20:d0:97:45: 19:ab:ef:3b:83:5f:12:4a:60:b2:d6:e3:0e:30:19: d0:67:26:10:c9:50:1f:48:d7:b1:e3:f2:a9:ea:92: 3f:bc:97:bc:9c:46:d3:87:fc:cc:1a:c9:13:84:9f: 7f:3b:42:47:ac:2c:18:8d:df:78:b8:e8:4b:b5:98: 23:84:30:29:cb:89:57:de:5f:2b:f1:ff:ec:f6:d1: e5:76:fa:26:46:f2:f6:97:fd:ab:5b:b3:8e:ed:fb: ab:80:6b:db:7e:f4:51:0f:d1:6e:6e:70:a3:cc:c5: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:57:12:3D:4D:12:49:BA:2E:72:77:10:CD:F0:CC:3C:A3:AD:AC:94 X509v3 Authority Key Identifier: keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/VlcSPU0SSboucncQzfDMPKOtrJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.220.0/22 IPv6: 2a06:2140::/29 Signature Algorithm: sha256WithRSAEncryption 47:f7:04:a5:16:cc:e8:a1:68:4f:b8:28:89:4e:e6:10:f6:f6: 46:47:20:0b:29:6b:c5:cf:eb:79:9e:fa:59:07:08:22:35:ca: c8:a0:24:bd:be:56:0e:22:96:33:f9:8d:77:71:4b:f5:4e:04: f6:3d:97:16:ec:c4:e8:ff:e0:a7:80:df:09:b3:34:53:96:64: d9:a6:01:1d:88:64:78:9b:ed:ab:8d:e5:4e:b3:aa:16:ec:ef: 87:f5:c9:10:47:67:35:98:51:ee:24:b3:3a:d5:ad:cf:dc:c1: 7d:fd:3b:db:29:a5:61:a8:e9:62:4b:85:6d:63:3f:b5:29:4b: 8e:7f:ab:b3:da:65:39:cc:52:92:40:53:6a:b7:0c:8e:8f:84: 12:10:bc:9f:2c:a8:c6:b5:e6:d5:8e:c8:4b:eb:0a:0a:d0:d6: 3b:56:14:dc:c9:b8:03:11:58:6e:52:1f:bb:9f:f9:93:8f:f7: 1c:80:da:6e:5c:d6:06:72:24:d6:56:e5:48:11:86:05:03:04: 0f:7a:15:a1:7b:d0:64:17:4e:63:ab:4d:34:ef:cf:99:c0:13: af:b2:b5:1f:b3:8c:03:6d:d5:6b:1d:5a:b7:72:3f:9b:3e:9e: 52:02:a1:ba:ea:4c:d1:30:32:32:4a:e8:c6:c1:a1:48:3c:40: 58:5d:a6:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EdJgU2frmhPTjhDdeyk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmY0MWEyNGZjNDgyNzFiOTkyMzI3YTJkYWU1YTQzM2Jk ZWQwNTAwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjU3MTIzZDRkMTI0OWJhMmU3Mjc3MTBjZGYwY2MzY2EzYWRhYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSAoOVf2OryA8jNlasAtU8u9FZz/ v7RiDhGCTk2e2DR2b+vwoPiKI16DKsdgrJA+pZ1Yyf8LEEvVflUX2o9xF/rYWLdc RoXBZUMQ+3IVBaYKbh8iSKoNh9y7Y7nHPcMzbYUGkGDRh7XUYYNGj5Yflv5D7Dw2 GTW4OeYK6nubgHmynCO3cS/Fz0WYC/0pGd2bISDQl0UZq+87g18SSmCy1uMOMBnQ ZyYQyVAfSNex4/Kp6pI/vJe8nEbTh/zMGskThJ9/O0JHrCwYjd94uOhLtZgjhDAp y4lX3l8r8f/s9tHldvomRvL2l/2rW7OO7furgGvbfvRRD9FubnCjzMWNSQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFZXEj1NEkm6LnJ3EM3wzDyjrayUMB8GA1UdIwQY MBaAFGT/QaJPxIJxuZIyei2uWkM73tBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQt ZjAxYTYyNDAwODIxLzEvVmxjU1BVMFNTYm91Y25jUXpmRE1QS090ckpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQtZjAxYTYyNDAwODIx LzEvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWXcMA0E AgACMAcDBQMqBiFAMA0GCSqGSIb3DQEBCwUAA4IBAQBH9wSlFszooWhPuCiJTuYQ 9vZGRyALKWvFz+t5nvpZBwgiNcrIoCS9vlYOIpYz+Y13cUv1TgT2PZcW7MTo/+Cn gN8JszRTlmTZpgEdiGR4m+2rjeVOs6oW7O+H9ckQR2c1mFHuJLM61a3P3MF9/Tvb KaVhqOliS4VtYz+1KUuOf6uz2mU5zFKSQFNqtwyOj4QSELyfLKjGtebVjshL6woK 0NY7VhTcybgDEVhuUh+7n/mTj/ccgNpuXNYGciTWVuVIEYYFAwQPehWhe9BkF05j q00078+ZwBOvsrUfs4wDbdVrHVq3cj+bPp5SAqG66kzRMDIySujGwaFIPEBYXabY -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:09 2026 by rpki-client