This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa File: VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa (raw, json) Hash identifier: dPV7nvv66J/N7qMIMaqxbPZi7u5SK+lm/oBP/6Z99x8= Subject key identifier: 57:17:C3:E5:BF:F2:94:00:7F:31:39:C1:23:05:8B:41:E7:77:C2:C4 Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e Certificate serial: 019B7DCAF8892025EBF20B8CC9CA60E89F1E Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49037 IP address blocks: 185.1.72.0/24 maxlen: 32 2001:7f8:a3::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f8:89:20:25:eb:f2:0b:8c:c9:ca:60:e8:9f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5717c3e5bff294007f3139c123058b41e777c2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:02:8a:f6:3d:75:ff:d4:85:eb:6f:28:d9: 85:d4:f6:d8:b2:62:28:d1:4d:cc:43:02:33:d6:38: 78:38:61:b8:7a:eb:45:37:f5:2f:de:fb:5b:0d:a4: 8d:ab:59:c7:7c:6d:f9:5e:6f:cd:e2:fe:c2:cf:57: a1:fd:f6:f9:be:88:8b:0a:b7:f0:49:ff:24:ac:28: 1d:26:d9:19:a4:bd:f5:cb:34:c8:35:02:0c:62:86: 85:7c:41:33:89:49:fa:28:61:66:24:ab:e3:58:e9: 09:da:de:16:53:2e:b5:1e:42:a2:36:ca:61:12:fb: 3b:6d:30:c4:29:5d:48:bc:27:9a:35:e0:81:41:03: 24:7d:37:d3:9b:37:50:de:06:49:4e:f8:e1:8b:05: a9:bf:9a:a7:dd:95:4b:39:9d:1f:af:3a:c3:8e:66: f2:8f:e7:f4:8d:86:16:66:fa:de:de:87:2a:02:ae: ae:42:1b:17:ab:55:f9:9c:be:52:8b:01:6b:5c:44: d3:99:c0:6c:e3:87:21:8b:37:c3:0f:53:34:76:e1: aa:7a:da:0e:29:5b:65:26:5c:ef:11:96:1a:4d:8e: 70:8b:f2:4f:10:e9:7c:05:5b:3f:b9:0b:0a:66:a1: 39:60:3b:f7:2d:80:c4:83:c5:3e:6d:c5:48:86:23: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:17:C3:E5:BF:F2:94:00:7F:31:39:C1:23:05:8B:41:E7:77:C2:C4 X509v3 Authority Key Identifier: keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.72.0/24 IPv6: 2001:7f8:a3::/48 Signature Algorithm: sha256WithRSAEncryption ab:48:a0:89:df:9d:93:63:7d:37:75:56:aa:ab:e8:8e:bc:66: de:93:6f:b6:98:70:c2:6a:f3:aa:3a:98:cc:dd:39:58:87:df: 36:4e:a5:32:a4:a1:cc:0b:46:a7:be:53:e3:d5:f3:34:5a:d9: 8a:c8:78:6c:ad:5a:c9:91:9a:9e:83:4c:e5:a0:b6:33:89:65: f9:ad:c9:4c:e0:ab:c3:eb:97:bf:4a:f0:59:ed:fe:f9:f4:57: eb:41:1a:12:b4:6d:c2:d3:bd:e9:8b:a9:29:e1:1a:4b:c9:c8: 09:b2:24:47:d4:ee:b0:45:47:0b:99:b7:74:f7:62:05:7f:9c: 69:f4:7d:6c:c7:29:3b:26:9d:4a:76:57:d5:00:9b:1e:00:db: 4b:b4:36:67:7a:d8:ee:17:63:a8:4c:41:e3:a4:e1:07:fd:08: b6:85:a3:ab:4d:e7:11:9b:92:e4:8e:c8:26:10:c7:e3:f2:c7: b4:8b:f9:4e:c8:fc:09:d3:d0:ee:bf:cf:3a:02:50:07:71:47: 1e:bc:3f:3c:c2:90:18:46:b4:28:12:47:51:a1:0c:e1:48:99: ea:16:9c:e1:68:f3:62:34:0c:d1:c0:d4:03:38:8f:f7:9f:b6: b2:03:e1:b9:45:51:b7:a4:76:27:77:0e:2f:88:a9:20:19:2e: f4:d4:49:e4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yviJICXr8guMycpg6J8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3 NjI1N2UwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzE3YzNlNWJmZjI5NDAwN2YzMTM5YzEyMzA1OGI0MWU3NzdjMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TsCivY9df/UhetvKNmF1PbYsmIo 0U3MQwIz1jh4OGG4eutFN/Uv3vtbDaSNq1nHfG35Xm/N4v7Cz1eh/fb5voiLCrfw Sf8krCgdJtkZpL31yzTINQIMYoaFfEEziUn6KGFmJKvjWOkJ2t4WUy61HkKiNsph Evs7bTDEKV1IvCeaNeCBQQMkfTfTmzdQ3gZJTvjhiwWpv5qn3ZVLOZ0frzrDjmby j+f0jYYWZvre3ocqAq6uQhsXq1X5nL5SiwFrXETTmcBs44chizfDD1M0duGqetoO KVtlJlzvEZYaTY5wi/JPEOl8BVs/uQsKZqE5YDv3LYDEg8U+bcVIhiNCnQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFcXw+W/8pQAfzE5wSMFi0Hnd8LEMB8GA1UdIwQY MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt ODQ2OWNmNjU5MTAxLzEvVnhmRDViX3lsQUJfTVRuQkl3V0xRZWQzd3NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQFIMA8E AgACMAkDBwAgAQf4AKMwDQYJKoZIhvcNAQELBQADggEBAKtIoInfnZNjfTd1Vqqr 6I68Zt6Tb7aYcMJq86o6mMzdOViH3zZOpTKkocwLRqe+U+PV8zRa2YrIeGytWsmR mp6DTOWgtjOJZfmtyUzgq8Prl79K8Fnt/vn0V+tBGhK0bcLTvemLqSnhGkvJyAmy JEfU7rBFRwuZt3T3YgV/nGn0fWzHKTsmnUp2V9UAmx4A20u0Nmd62O4XY6hMQeOk 4Qf9CLaFo6tN5xGbkuSOyCYQx+Pyx7SL+U7I/AnT0O6/zzoCUAdxRx68PzzCkBhG tCgSR1GhDOFImeoWnOFo82I0DNHA1AM4j/eftrID4blFUbekdid3Di+IqSAZLvTU SeQ= -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:29 2026 by rpki-client