This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ViVNLeYXDBi40P9K8KMSLPE1y5U.roa File: ViVNLeYXDBi40P9K8KMSLPE1y5U.roa (raw, json) Hash identifier: xmuxJRX/QC4z7WDHHSZbahHvh3fWlaN4TtX+fN5NNg0= Subject key identifier: 56:25:4D:2D:E6:17:0C:18:B8:D0:FF:4A:F0:A3:12:2C:F1:35:CB:95 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC854E6B2EDB335B6F15B0B44337E3F Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ViVNLeYXDBi40P9K8KMSLPE1y5U.roa Signing time: Thu 01 Jan 2026 18:18:27 +0000 ROA not before: Thu 01 Jan 2026 18:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31715 IP address blocks: 77.111.109.0/24 maxlen: 24 94.229.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:54:e6:b2:ed:b3:35:b6:f1:5b:0b:44:33:7e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56254d2de6170c18b8d0ff4af0a3122cf135cb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:bb:59:8c:1f:8a:10:c9:63:95:84:fd:b2: de:a2:29:f4:a0:a9:60:e3:5d:bd:cf:30:4f:89:18: 61:78:5e:5e:e6:ab:a6:44:ef:2c:6f:5a:14:86:48: 1b:23:9b:9e:9a:91:3b:a1:bc:71:8f:8a:f9:36:ba: 64:5d:b1:e2:2f:fe:de:41:f8:97:55:00:95:8f:6f: 4a:32:04:b8:7c:a6:c7:91:e3:98:5f:4a:fe:e0:65: ca:ca:e1:34:d7:68:fc:68:ff:ec:8e:8b:50:5e:a4: f3:32:3e:b7:69:2c:70:ea:d9:76:fe:58:19:84:65: 32:d1:63:3c:9d:ff:ad:7a:ac:b1:d3:dc:d0:0c:c2: c3:bb:be:31:a2:39:4a:0b:33:f1:49:1d:d9:78:88: 28:d0:1a:e4:0e:ca:37:fa:92:a4:a3:85:dc:97:16: b7:48:6c:31:20:02:5b:53:b9:dc:a9:da:c2:cb:dd: 10:7e:03:03:73:8b:cd:52:7c:69:3e:63:0f:8a:d9: 5c:91:5a:bd:13:51:8d:02:e8:98:40:ce:92:1e:b6: bd:11:a9:d9:ee:8b:63:20:a4:c5:51:75:dc:2f:70: dc:8f:0a:5f:2f:05:25:57:a3:13:3c:f6:85:2e:0e: 68:d2:9e:89:8c:d8:c8:e6:5f:43:5a:ef:a5:c4:df: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:25:4D:2D:E6:17:0C:18:B8:D0:FF:4A:F0:A3:12:2C:F1:35:CB:95 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ViVNLeYXDBi40P9K8KMSLPE1y5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.109.0/24 94.229.220.0/24 Signature Algorithm: sha256WithRSAEncryption 19:e6:43:22:2c:a4:7c:8a:ef:84:d9:45:9b:1d:21:10:7d:b1: 89:a1:d3:69:40:b2:ba:a6:6f:20:de:88:4f:05:65:38:e0:43: fc:46:91:cd:ec:b8:c6:ad:a6:93:2b:cc:95:83:94:a4:c3:59: 6a:ca:12:c2:5b:21:0b:8b:ef:c0:ef:30:82:5e:6e:03:db:1d: 08:b5:e7:d1:04:88:4c:dc:fc:76:c7:20:80:6f:fe:a0:09:32: 3d:5a:3d:25:c3:bd:e5:23:97:21:bb:bd:ec:8f:ae:a3:74:a5: 76:04:1e:01:a1:20:77:da:cc:12:a8:57:73:ed:53:07:6c:37: 6d:39:0b:77:f0:9b:76:60:6a:ff:1f:1b:e4:de:79:0d:d8:a9: 9d:99:ae:c0:94:e2:a3:a9:d3:0c:61:14:33:0a:fe:6b:f9:74: 90:2b:9f:5f:a3:2e:ea:81:3e:62:f1:12:d6:38:29:1c:31:e3: 9d:b3:d4:26:7f:eb:9a:a1:8e:e3:cb:3d:86:45:5a:ea:39:89: b2:7c:78:67:5c:e5:be:77:73:33:88:00:09:f8:da:2a:49:23: 9a:b5:79:cd:0d:e8:95:53:09:6d:3b:08:7b:af:f7:e0:46:44: cf:48:ee:b3:81:c2:be:f7:98:c2:b3:2a:a7:38:23:47:96:cc: 4f:04:f4:1b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yFTmsu2zNbbxWwtEM34/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjI1NGQyZGU2MTcwYzE4YjhkMGZmNGFmMGEzMTIyY2YxMzVjYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMa7WYwfihDJY5WE/bLeoin0oKlg 4129zzBPiRhheF5e5qumRO8sb1oUhkgbI5uempE7obxxj4r5NrpkXbHiL/7eQfiX VQCVj29KMgS4fKbHkeOYX0r+4GXKyuE012j8aP/sjotQXqTzMj63aSxw6tl2/lgZ hGUy0WM8nf+teqyx09zQDMLDu74xojlKCzPxSR3ZeIgo0BrkDso3+pKko4Xclxa3 SGwxIAJbU7ncqdrCy90QfgMDc4vNUnxpPmMPitlckVq9E1GNAuiYQM6SHra9EanZ 7otjIKTFUXXcL3DcjwpfLwUlV6MTPPaFLg5o0p6JjNjI5l9DWu+lxN8ipQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFYlTS3mFwwYuND/SvCjEizxNcuVMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvVmlWTkxlWVhEQmk0MFA5SzhLTVNMUEUxeTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW9tAwQA XuXcMA0GCSqGSIb3DQEBCwUAA4IBAQAZ5kMiLKR8iu+E2UWbHSEQfbGJodNpQLK6 pm8g3ohPBWU44EP8RpHN7LjGraaTK8yVg5Skw1lqyhLCWyELi+/A7zCCXm4D2x0I tefRBIhM3Px2xyCAb/6gCTI9Wj0lw73lI5chu73sj66jdKV2BB4BoSB32swSqFdz 7VMHbDdtOQt38Jt2YGr/Hxvk3nkN2Kmdma7AlOKjqdMMYRQzCv5r+XSQK59foy7q gT5i8RLWOCkcMeOds9Qmf+uaoY7jyz2GRVrqOYmyfHhnXOW+d3MziAAJ+NoqSSOa tXnNDeiVUwltOwh7r/fgRkTPSO6zgcK+95jCsyqnOCNHlsxPBPQb -----END CERTIFICATE-----Generated at Mon Jan 19 11:22:35 2026 by rpki-client