This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/vngLZNmfLJj1az9Fmgtss3szy7c.roa File: vngLZNmfLJj1az9Fmgtss3szy7c.roa (raw, json) Hash identifier: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs= Subject key identifier: BE:78:0B:64:D9:9F:2C:98:F5:6B:3F:45:9A:0B:6C:B3:7B:33:CB:B7 Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461 Certificate serial: 019B7758832E7A908164132E839578B9E43F Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/vngLZNmfLJj1az9Fmgtss3szy7c.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209682 IP address blocks: 95.214.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:83:2e:7a:90:81:64:13:2e:83:95:78:b9:e4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be780b64d99f2c98f56b3f459a0b6cb37b33cbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:5f:65:5b:e9:f0:37:a0:71:7c:5e:00:66: 7c:2e:a5:e0:59:b7:06:d6:62:58:d6:3e:fa:26:c1: 2a:76:41:94:90:95:63:7c:4c:b9:95:7a:cf:65:2b: 56:84:44:15:82:f2:36:24:4e:cd:6f:26:06:74:6d: 52:5f:56:20:83:1e:ce:82:2f:55:8f:e5:50:6a:48: 75:87:05:78:88:48:85:89:a8:5a:b7:5f:83:2e:67: fa:03:df:05:6c:95:96:9c:62:d1:d4:30:7c:e1:b0: 6b:4f:6c:5f:b5:7f:6a:ff:b7:dc:d2:22:8d:f6:9f: 87:a0:26:59:74:9f:b7:22:b4:4b:b6:b8:2d:3d:e9: e1:50:1a:59:68:8e:95:29:d2:c3:cf:e4:cc:6c:a1: 40:fd:3f:05:d0:1f:0e:d4:e4:68:82:fe:a5:b8:a2: 23:87:0e:9f:39:7f:5e:63:fc:13:2e:fe:2f:e3:68: af:da:d1:fb:cb:a4:20:47:cc:77:40:0b:4e:81:eb: 26:ed:d6:2b:20:6b:22:68:40:21:80:e1:b6:d8:52: a6:7b:79:1f:36:38:69:27:e0:f5:e5:4a:c5:7c:8e: 46:e3:9a:cd:90:78:1a:55:36:ca:f2:98:6d:2e:a3: 4b:21:80:45:b9:76:e2:88:fd:33:8c:ad:a7:26:44: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:78:0B:64:D9:9F:2C:98:F5:6B:3F:45:9A:0B:6C:B3:7B:33:CB:B7 X509v3 Authority Key Identifier: keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/vngLZNmfLJj1az9Fmgtss3szy7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.64.0/22 Signature Algorithm: sha256WithRSAEncryption 75:27:3e:5e:e4:ac:03:16:8c:e5:cd:6e:4a:ca:e6:5b:6c:d7: 6c:86:4a:7d:ef:85:51:5c:75:d7:c7:02:1e:6e:e4:fc:34:fa: 0e:7f:1a:6d:1a:ae:fb:39:c9:0b:0f:a2:84:fa:6c:9e:28:6e: 02:e1:9b:2b:b8:60:28:fb:33:11:c2:4d:79:b9:7d:2e:dc:73: 84:8c:3b:e6:97:76:6e:cf:9d:64:59:11:95:fa:bc:dd:a0:37: 71:9e:f7:b2:c0:2d:bb:ae:a6:09:1c:60:ea:3b:08:17:d1:74: 9b:35:a8:fc:12:75:42:f9:76:c5:0c:1f:6f:bc:99:52:fb:0b: 96:c3:b4:9d:b4:a8:e5:35:f5:11:a3:71:a4:fb:ad:21:21:d2: fb:c2:a3:0a:9e:41:b7:86:08:4e:c2:bb:f9:e1:54:da:59:56: cc:80:75:ff:3c:b6:b2:d8:f9:28:b3:86:4f:4e:c9:f4:1a:a6: f0:b0:c3:d0:b4:7c:91:e0:dc:08:79:87:ca:2d:a5:1c:ad:91: ec:84:bc:15:4e:ae:41:8b:ab:ad:32:36:a3:bd:5f:89:2b:a7: 22:0b:87:dd:c9:8f:5b:df:93:ea:19:e4:26:57:b6:00:af:1f: 0d:22:d6:f9:c2:71:82:16:d9:1b:75:41:c4:da:7b:34:86:c9: 08:3f:69:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIMuepCBZBMug5V4ueQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGM5ZDU1NDJhNWFhOGNkNWUwMTk4YWI4M2ZjZTBmOTQ3 MmE0NjEwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTc4MGI2NGQ5OWYyYzk4ZjU2YjNmNDU5YTBiNmNiMzdiMzNjYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzVfZVvp8DegcXxeAGZ8LqXgWbcG 1mJY1j76JsEqdkGUkJVjfEy5lXrPZStWhEQVgvI2JE7NbyYGdG1SX1Yggx7Ogi9V j+VQakh1hwV4iEiFiahat1+DLmf6A98FbJWWnGLR1DB84bBrT2xftX9q/7fc0iKN 9p+HoCZZdJ+3IrRLtrgtPenhUBpZaI6VKdLDz+TMbKFA/T8F0B8O1ORogv6luKIj hw6fOX9eY/wTLv4v42iv2tH7y6QgR8x3QAtOgesm7dYrIGsiaEAhgOG22FKme3kf NjhpJ+D15UrFfI5G45rNkHgaVTbK8phtLqNLIYBFuXbiiP0zjK2nJkQVywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL54C2TZnyyY9Ws/RZoLbLN7M8u3MB8GA1UdIwQY MBaAFAAMnVVCpaqM1eAZirg/zg+UcqRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEt ZGRjYzI1ODgxMTI4LzEvdm5nTFpObWZMSmoxYXo5Rm1ndHNzM3N6eTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEtZGRjYzI1ODgxMTI4 LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9ZAMA0G CSqGSIb3DQEBCwUAA4IBAQB1Jz5e5KwDFozlzW5KyuZbbNdshkp974VRXHXXxwIe buT8NPoOfxptGq77OckLD6KE+myeKG4C4ZsruGAo+zMRwk15uX0u3HOEjDvml3Zu z51kWRGV+rzdoDdxnveywC27rqYJHGDqOwgX0XSbNaj8EnVC+XbFDB9vvJlS+wuW w7SdtKjlNfURo3Gk+60hIdL7wqMKnkG3hghOwrv54VTaWVbMgHX/PLay2Pkos4ZP Tsn0GqbwsMPQtHyR4NwIeYfKLaUcrZHshLwVTq5Bi6utMjajvV+JK6ciC4fdyY9b 35PqGeQmV7YArx8NItb5wnGCFtkbdUHE2ns0hskIP2mw -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:27 2026 by rpki-client