This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa File: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (raw, json) Hash identifier: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA= Subject key identifier: 56:F9:8B:3A:00:19:25:88:D5:E6:CF:EE:8F:0A:70:09:7C:37:48:EE Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791023055145BDA423B02BA920B0CBD7 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395374 IP address blocks: 46.37.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:05:51:45:bd:a4:23:b0:2b:a9:20:b0:cb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56f98b3a00192588d5e6cfee8f0a70097c3748ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:32:6a:92:33:78:ea:55:d6:43:66:b5:e5: a5:18:c7:88:40:21:d1:98:51:d8:15:3d:c6:76:ab: 56:0f:bf:46:e0:15:79:27:01:d5:47:d4:d5:78:68: ad:2b:97:59:e2:50:aa:59:34:22:47:b3:85:be:25: f3:96:ce:53:6b:2b:ab:67:b2:1e:6a:b7:58:05:43: a4:6e:78:2c:83:ea:97:ee:ae:ea:7a:19:cf:51:58: 26:e3:c1:a0:7e:91:41:30:e5:7d:92:93:ac:6b:23: 1d:0f:46:02:29:94:2a:c4:92:30:9a:9b:7b:b5:a8: 0d:12:5d:e5:84:89:55:04:98:0f:99:22:e9:1d:45: 0a:ef:e1:75:97:4c:64:98:7c:d3:50:e7:cd:fa:8c: 01:f4:55:d9:7e:e0:51:52:93:34:f1:28:74:c7:9d: 1f:ae:3f:2c:2d:39:54:86:be:23:dc:64:5a:b2:6a: aa:12:c0:e3:95:dc:0c:f4:ea:c6:a9:11:c3:f6:19: 89:d1:a9:54:e0:d1:d9:4e:17:27:47:5e:4f:c4:e0: 1d:d2:e4:29:01:c8:f4:53:c3:63:99:e4:8b:c1:7b: 7e:69:8e:b3:da:62:e8:0e:ab:28:c3:27:61:fe:fd: 32:20:49:c6:2f:f8:75:dd:93:71:0c:f8:4a:83:16: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:8B:3A:00:19:25:88:D5:E6:CF:EE:8F:0A:70:09:7C:37:48:EE X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.108.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:ed:f7:3e:e3:68:b0:a5:46:5a:38:09:76:b2:48:1d:5d:59: c1:c9:3c:c3:e0:9a:99:58:29:71:83:00:4c:d5:a0:aa:be:b8: 2b:22:1c:1d:e4:4e:2f:b6:e6:fd:61:39:a9:de:9d:8f:ea:ea: 7e:8f:e1:93:50:ec:e5:b4:c5:8e:7a:a8:da:05:81:c2:c8:1a: 4e:7a:e9:2d:80:01:b6:26:52:69:84:81:59:a5:62:b4:7a:07: e0:7b:31:51:31:8f:97:49:14:ff:10:3f:1d:a2:0b:b8:fd:48: 4c:6a:6f:d1:60:38:c1:af:95:fc:82:36:ec:4a:2e:c7:b6:c4: 5f:f1:11:b9:9e:78:1f:6c:42:f1:d8:b2:94:68:19:f6:65:97: 01:aa:c9:86:a6:90:17:34:1d:b5:07:17:ee:c6:8d:66:49:23: e6:fd:4e:62:77:7c:7b:19:53:ab:32:30:e7:7c:b6:74:f3:77: 27:40:ef:2c:fa:64:35:5e:f3:25:be:ae:f7:2c:17:4e:b3:23: 54:07:ca:0a:a7:92:b8:04:e5:19:ef:99:ff:47:a3:7d:f5:ef: 7a:0f:59:75:52:52:b8:06:49:c1:cd:1e:da:bd:3f:01:bb:e1: ae:b7:9a:70:24:a2:20:e1:e0:e8:cb:43:f9:27:a4:53:5e:bd: 32:a1:94:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECMFUUW9pCOwK6kgsMvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmY5OGIzYTAwMTkyNTg4ZDVlNmNmZWU4ZjBhNzAwOTdjMzc0OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDcyapIzeOpV1kNmteWlGMeIQCHR mFHYFT3GdqtWD79G4BV5JwHVR9TVeGitK5dZ4lCqWTQiR7OFviXzls5TayurZ7Ie ardYBUOkbngsg+qX7q7qehnPUVgm48GgfpFBMOV9kpOsayMdD0YCKZQqxJIwmpt7 tagNEl3lhIlVBJgPmSLpHUUK7+F1l0xkmHzTUOfN+owB9FXZfuBRUpM08Sh0x50f rj8sLTlUhr4j3GRasmqqEsDjldwM9OrGqRHD9hmJ0alU4NHZThcnR15PxOAd0uQp Acj0U8NjmeSLwXt+aY6z2mLoDqsowydh/v0yIEnGL/h13ZNxDPhKgxb0awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFb5izoAGSWI1ebP7o8KcAl8N0juMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvVnZtTE9nQVpKWWpWNXNfdWp3cHdDWHczU080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVsMA0G CSqGSIb3DQEBCwUAA4IBAQBq7fc+42iwpUZaOAl2skgdXVnByTzD4JqZWClxgwBM 1aCqvrgrIhwd5E4vtub9YTmp3p2P6up+j+GTUOzltMWOeqjaBYHCyBpOeuktgAG2 JlJphIFZpWK0egfgezFRMY+XSRT/ED8dogu4/UhMam/RYDjBr5X8gjbsSi7HtsRf 8RG5nngfbELx2LKUaBn2ZZcBqsmGppAXNB21Bxfuxo1mSSPm/U5id3x7GVOrMjDn fLZ083cnQO8s+mQ1XvMlvq73LBdOsyNUB8oKp5K4BOUZ75n/R6N99e96D1l1UlK4 BknBzR7avT8Bu+Gut5pwJKIg4eDoy0P5J6RTXr0yoZSW -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:38 2026 by rpki-client