This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa File: vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa (raw, json) Hash identifier: F8siYYIOWBqcJc18xZZBvTPob2dHLHgiU0/yM3ixtco= Subject key identifier: BC:72:77:FE:D5:64:77:61:9D:5A:4A:92:E2:70:9B:EB:BC:B3:78:D5 Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6 Certificate serial: 019B7D5C8311FA9FC54906D2E93A6987B72B Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 91.208.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:83:11:fa:9f:c5:49:06:d2:e9:3a:69:87:b7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc7277fed56477619d5a4a92e2709bebbcb378d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:b7:11:98:18:42:a7:b2:7b:ab:f2:2d:2c: b4:9e:95:06:51:97:cd:e5:b8:0a:af:69:36:02:0f: 4d:f1:16:59:e4:f2:96:a5:30:ce:91:76:35:d3:76: 45:62:a4:a1:1c:32:9c:58:d7:05:cd:58:e5:a3:7f: aa:04:c7:35:aa:e6:18:a8:ed:8a:15:e3:72:d9:9c: 8f:43:df:dd:ad:82:7c:67:a9:8b:10:08:3d:6e:c5: be:f6:2c:8a:d6:20:fc:41:19:6c:4d:fa:15:e9:6e: ca:9d:b4:e0:77:47:ac:5c:d0:8e:db:c7:9c:d0:66: 46:de:dd:da:39:3a:d6:9b:58:5d:f9:15:8f:e8:14: 59:69:69:5f:4d:6e:f3:07:1e:13:08:07:c4:97:56: db:fa:91:b3:46:ed:1a:87:d7:e1:b3:d4:5c:90:52: 01:92:78:5d:98:e3:d5:a0:46:fc:41:45:e9:d3:a8: e4:cf:1b:17:39:5a:fa:bf:49:90:fe:5d:f2:c9:1b: 38:09:65:61:50:41:86:b7:fa:f8:58:99:de:fe:31: b9:b1:df:c5:02:e6:31:22:a9:9e:54:d3:3b:6b:91: f7:a2:0d:58:7f:3d:17:7f:8c:30:a9:d6:10:2f:02: f2:1b:25:7e:9d:b0:6e:b8:c6:cf:54:1c:99:26:2e: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:72:77:FE:D5:64:77:61:9D:5A:4A:92:E2:70:9B:EB:BC:B3:78:D5 X509v3 Authority Key Identifier: keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.217.0/24 Signature Algorithm: sha256WithRSAEncryption 73:31:32:9d:b1:1a:7c:dc:2b:36:14:9e:d7:5d:69:e4:bd:3e: 56:a5:f8:ac:6b:3e:7a:78:f2:55:2c:13:68:19:8e:87:3d:1a: 55:cd:51:15:eb:ee:3f:2b:12:fb:3d:c0:a7:27:2d:e2:9e:55: 70:32:cc:06:2a:09:fd:b8:e0:cc:33:68:92:aa:78:c2:cc:ed: bd:57:09:d6:6a:4c:a1:1f:6c:37:7e:e0:dd:2d:fd:d8:cc:9c: 2d:c4:79:b3:f0:3b:c5:f8:3d:f8:1f:b2:33:09:35:05:96:43: d4:0f:15:21:c1:ea:a1:21:d6:12:a5:78:a5:92:ca:4a:7a:68: 1d:a8:d8:95:9c:52:8c:58:19:4c:e1:b5:bb:ed:3f:36:88:39: 77:12:0f:18:34:23:6c:93:c2:5a:c9:e5:3b:f2:47:a7:3f:55: 00:b4:f6:37:a4:23:0b:78:9f:b8:45:62:ca:a6:c4:61:0f:37: b0:62:32:bd:19:ec:f2:73:c1:e2:85:03:e0:4a:cc:64:8e:00: 01:be:54:0d:57:be:21:07:0d:f2:45:0d:b1:71:6a:17:88:d3: f5:62:b2:b9:69:f6:54:d6:dd:05:4e:e7:c2:44:77:04:86:65: 03:f8:7e:d0:0f:4a:82:b1:89:92:e2:0d:95:7e:51:42:26:3d: d5:dd:c5:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XIMR+p/FSQbS6Tpph7crMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2YxNzU0MTczMmY1N2FiZmYxMjk0YzcxYjUzM2ViNTY3 NDZmZDYwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzcyNzdmZWQ1NjQ3NzYxOWQ1YTRhOTJlMjcwOWJlYmJjYjM3OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXK3EZgYQqeye6vyLSy0npUGUZfN 5bgKr2k2Ag9N8RZZ5PKWpTDOkXY103ZFYqShHDKcWNcFzVjlo3+qBMc1quYYqO2K FeNy2ZyPQ9/drYJ8Z6mLEAg9bsW+9iyK1iD8QRlsTfoV6W7KnbTgd0esXNCO28ec 0GZG3t3aOTrWm1hd+RWP6BRZaWlfTW7zBx4TCAfEl1bb+pGzRu0ah9fhs9RckFIB knhdmOPVoEb8QUXp06jkzxsXOVr6v0mQ/l3yyRs4CWVhUEGGt/r4WJne/jG5sd/F AuYxIqmeVNM7a5H3og1Yfz0Xf4wwqdYQLwLyGyV+nbBuuMbPVByZJi7U/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxyd/7VZHdhnVpKkuJwm+u8s3jVMB8GA1UdIwQY MBaAFME/F1QXMvV6v/EpTHG1M+tWdG/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0Nzgt ZDhhMWMzMjk1ZTg5LzEvdkhKM190VmtkMkdkV2txUzRuQ2I2N3l6ZU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0NzgtZDhhMWMzMjk1ZTg5 LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DZMA0G CSqGSIb3DQEBCwUAA4IBAQBzMTKdsRp83Cs2FJ7XXWnkvT5Wpfisaz56ePJVLBNo GY6HPRpVzVEV6+4/KxL7PcCnJy3inlVwMswGKgn9uODMM2iSqnjCzO29VwnWakyh H2w3fuDdLf3YzJwtxHmz8DvF+D34H7IzCTUFlkPUDxUhweqhIdYSpXilkspKemgd qNiVnFKMWBlM4bW77T82iDl3Eg8YNCNsk8JayeU78kenP1UAtPY3pCMLeJ+4RWLK psRhDzewYjK9Gezyc8HihQPgSsxkjgABvlQNV74hBw3yRQ2xcWoXiNP1YrK5afZU 1t0FTufCRHcEhmUD+H7QD0qCsYmS4g2VflFCJj3V3cUW -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:28 2026 by rpki-client