This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/vdxk280EZJdsjHh7wsXDY4EoHlo.roa File: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (raw, json) Hash identifier: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA= Subject key identifier: BD:DC:64:DB:CD:04:64:97:6C:8C:78:7B:C2:C5:C3:63:81:28:1E:5A Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019B7AC8595FD483349857DF3A24460835D8 Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/vdxk280EZJdsjHh7wsXDY4EoHlo.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 89.35.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:59:5f:d4:83:34:98:57:df:3a:24:46:08:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bddc64dbcd0464976c8c787bc2c5c36381281e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:c3:f7:85:cf:d6:cb:39:aa:6c:52:ef:65: 89:49:fc:24:37:46:f6:85:51:00:20:c9:d1:43:05: 6b:60:6a:e1:be:cb:c1:b4:10:f5:67:5f:ff:13:63: 96:e6:93:38:52:ca:37:2e:a3:ba:5b:cb:c7:96:27: c3:e2:e1:6c:46:b6:59:e0:15:e0:bb:61:09:3f:a2: 99:25:cb:5d:c1:91:14:ac:98:76:a3:bf:b2:b8:02: 8e:be:db:ce:22:15:be:ea:49:8a:15:53:a5:06:3b: 2e:fc:39:f2:14:73:84:97:fd:4f:e9:41:5d:3d:ef: 8a:03:be:40:38:4a:34:53:73:bb:b0:b1:9e:e9:b1: e1:32:6d:b0:4d:09:5f:2f:e3:bc:ef:b5:01:6b:53: ac:c7:4d:54:db:37:9e:a8:c8:c2:60:3e:f1:43:2f: 37:e1:dd:75:61:12:83:03:48:2f:8b:8a:ad:24:de: 14:25:77:4b:8c:64:5f:6a:64:84:91:83:b0:6e:23: 45:73:0a:1a:98:65:6d:9b:66:18:1e:3e:2d:56:31: 44:fe:16:fb:a3:82:0d:d6:f5:d6:e9:ef:b4:0a:4f: 2b:a7:97:51:e9:86:fd:84:35:29:65:7a:cf:4d:8b: ac:4b:32:29:8b:c3:ab:8f:f3:c1:66:1e:c7:c9:17: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DC:64:DB:CD:04:64:97:6C:8C:78:7B:C2:C5:C3:63:81:28:1E:5A X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/vdxk280EZJdsjHh7wsXDY4EoHlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.52.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:cc:a7:89:0d:eb:8c:a2:48:4f:eb:a7:53:67:2f:15:2e:5e: 72:d5:46:81:96:dd:68:e4:04:bf:29:df:23:3f:a2:ab:0b:c0: 28:7c:20:ac:14:a5:2a:b6:d8:70:15:ab:7e:cb:dd:61:b0:65: 7e:15:04:58:ca:ed:71:be:2c:11:13:96:6f:a8:56:bb:7f:8f: 78:3a:6b:b3:90:0c:1b:9a:42:2c:15:52:a9:43:cb:bf:fc:9a: 2f:d8:67:57:d3:b9:fe:b9:a5:e1:9a:23:1d:fa:e1:59:73:4a: eb:d7:ee:c6:f5:28:b6:8b:5a:0d:ed:3e:5b:51:e4:92:fe:98: b1:81:3b:1b:a3:78:c8:3f:3b:9e:66:b8:11:3d:e9:89:9c:d4: 11:00:f6:fa:ed:3a:dc:a9:9e:6b:a1:3b:cf:6d:75:23:52:68: 46:e2:6e:32:93:2c:3e:75:1d:f6:fc:1e:c3:1b:b7:aa:ce:ef: cc:48:8b:23:f0:5d:3d:a3:aa:d1:8d:59:6b:c6:23:35:d4:c5: ce:91:f2:3e:ad:22:a2:f5:f4:ed:61:1e:bc:67:f4:bd:5c:48: 0c:67:a7:ba:f3:08:dd:e9:4d:7b:98:0b:99:43:e5:51:72:89: fe:de:96:ba:05:f0:45:77:50:18:ed:de:89:f5:ff:30:64:a1: ce:07:ea:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFlf1IM0mFffOiRGCDXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGRjNjRkYmNkMDQ2NDk3NmM4Yzc4N2JjMmM1YzM2MzgxMjgxZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaTD94XP1ss5qmxS72WJSfwkN0b2 hVEAIMnRQwVrYGrhvsvBtBD1Z1//E2OW5pM4Uso3LqO6W8vHlifD4uFsRrZZ4BXg u2EJP6KZJctdwZEUrJh2o7+yuAKOvtvOIhW+6kmKFVOlBjsu/DnyFHOEl/1P6UFd Pe+KA75AOEo0U3O7sLGe6bHhMm2wTQlfL+O877UBa1Osx01U2zeeqMjCYD7xQy83 4d11YRKDA0gvi4qtJN4UJXdLjGRfamSEkYOwbiNFcwoamGVtm2YYHj4tVjFE/hb7 o4IN1vXW6e+0Ck8rp5dR6Yb9hDUpZXrPTYusSzIpi8Orj/PBZh7HyRf9PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3cZNvNBGSXbIx4e8LFw2OBKB5aMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvdmR4azI4MEVaSmRzakhoN3dzWERZNEVvSGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSM0MA0G CSqGSIb3DQEBCwUAA4IBAQBdzKeJDeuMokhP66dTZy8VLl5y1UaBlt1o5AS/Kd8j P6KrC8AofCCsFKUqtthwFat+y91hsGV+FQRYyu1xviwRE5ZvqFa7f494OmuzkAwb mkIsFVKpQ8u//Jov2GdX07n+uaXhmiMd+uFZc0rr1+7G9Si2i1oN7T5bUeSS/pix gTsbo3jIPzueZrgRPemJnNQRAPb67TrcqZ5roTvPbXUjUmhG4m4ykyw+dR32/B7D G7eqzu/MSIsj8F09o6rRjVlrxiM11MXOkfI+rSKi9fTtYR68Z/S9XEgMZ6e68wjd 6U17mAuZQ+VRcon+3pa6BfBFd1AY7d6J9f8wZKHOB+o2 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:19 2026 by rpki-client