This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/vUnigMLcxEHFFYzam4W0EFuYfF0.roa File: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (raw, json) Hash identifier: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A= Subject key identifier: BD:49:E2:80:C2:DC:C4:41:C5:15:8C:DA:9B:85:B4:10:5B:98:7C:5D Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019B77C722FCE1606FFA1CD2E44DDEEC1BC0 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/vUnigMLcxEHFFYzam4W0EFuYfF0.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205953 IP address blocks: 212.64.219.0/24 maxlen: 24 212.64.221.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:fc:e1:60:6f:fa:1c:d2:e4:4d:de:ec:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd49e280c2dcc441c5158cda9b85b4105b987c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:66:bf:3e:1d:b0:b9:88:ec:90:40:bf:2e: 70:35:d6:cb:5e:6c:5c:b4:9c:a6:e7:d5:bd:1f:be: 72:ae:c5:7a:b8:20:a8:5a:73:41:34:9c:d7:c4:d3: 34:7d:32:5e:8c:c9:21:77:54:3e:24:1d:94:5d:a0: ae:49:d0:64:54:c8:d8:a8:49:86:36:a5:5c:71:89: bf:91:bf:3e:0a:3f:06:db:45:28:8a:40:e5:34:63: 04:c6:d3:f9:3f:db:ee:49:b0:fd:93:91:57:35:62: 8c:93:17:a8:88:9b:a7:79:a9:23:28:79:dd:13:d5: d6:d9:40:75:2d:40:e7:df:20:f7:44:13:31:72:d4: a5:5c:4a:87:dc:a7:f6:ed:da:f8:0a:cf:79:5c:49: 31:19:87:a1:51:b4:51:87:f6:f7:cc:07:7a:fe:87: 2b:83:dc:27:be:20:3d:10:86:fe:f4:d7:bf:58:0f: f6:0b:55:ad:4b:82:af:29:50:5f:a8:6e:e2:78:55: 74:55:d0:1a:a0:da:b4:b5:67:5b:94:d3:31:7a:75: 9d:ec:46:6a:a9:b8:2b:d0:00:87:2c:b1:65:b2:87: e6:c1:04:09:ee:bf:f5:2b:f7:22:01:63:47:3b:9f: d8:2b:ff:47:03:b7:fd:2e:7f:13:a9:44:b7:7b:72: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:E2:80:C2:DC:C4:41:C5:15:8C:DA:9B:85:B4:10:5B:98:7C:5D X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/vUnigMLcxEHFFYzam4W0EFuYfF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.64.219.0/24 212.64.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:2f:fe:95:85:f6:7b:93:fb:9d:a4:2f:b0:a4:d7:cf:5d:49: 28:44:22:f0:05:fa:af:26:f3:10:93:2a:2b:00:90:e8:b0:ce: b7:f0:72:04:49:5d:28:09:cc:f5:0d:7a:6a:47:f7:2d:de:f8: 69:b9:a6:8a:31:58:bb:e7:39:e6:64:a6:62:63:1f:85:11:aa: e5:28:b0:0d:62:c7:e6:4a:56:a0:f8:c3:ba:79:07:72:9a:f5: 66:2e:eb:2c:14:e8:cc:a2:3e:1a:17:22:9f:69:f0:0d:24:d9: 00:4a:b5:4c:f1:c5:54:a5:e0:ed:06:6f:9c:20:b0:ee:ba:77: 39:20:7b:88:2a:de:39:0b:b6:63:47:db:92:a7:d6:73:6b:69: 8e:1e:02:5e:af:a2:e9:b4:7c:ea:6c:a6:f9:91:11:fc:b1:27: 83:7b:5e:94:54:96:71:76:d7:33:7e:86:4c:a8:a4:65:de:a0: 8f:e9:3e:f8:62:bf:53:bb:8b:69:37:12:37:12:c1:c0:f4:1b: e5:2d:27:1a:86:8e:73:91:7f:30:01:2b:e2:ed:e6:23:92:85: ee:e1:d4:01:da:13:88:94:09:4d:7e:d9:b3:13:42:f7:e0:bc: 97:2c:c0:0f:eb:c1:cb:37:7a:32:3e:fd:19:b0:b6:a5:a9:4e: 83:02:2e:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyL84WBv+hzS5E3e7BvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQ5ZTI4MGMyZGNjNDQxYzUxNThjZGE5Yjg1YjQxMDViOTg3YzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZpmvz4dsLmI7JBAvy5wNdbLXmxc tJym59W9H75yrsV6uCCoWnNBNJzXxNM0fTJejMkhd1Q+JB2UXaCuSdBkVMjYqEmG NqVccYm/kb8+Cj8G20UoikDlNGMExtP5P9vuSbD9k5FXNWKMkxeoiJuneakjKHnd E9XW2UB1LUDn3yD3RBMxctSlXEqH3Kf27dr4Cs95XEkxGYehUbRRh/b3zAd6/ocr g9wnviA9EIb+9Ne/WA/2C1WtS4KvKVBfqG7ieFV0VdAaoNq0tWdblNMxenWd7EZq qbgr0ACHLLFlsofmwQQJ7r/1K/ciAWNHO5/YK/9HA7f9Ln8TqUS3e3IDkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL1J4oDC3MRBxRWM2puFtBBbmHxdMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvdlVuaWdNTGN4RUhGRll6YW00VzBFRnVZZkYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1EDbAwQA 1EDdMA0GCSqGSIb3DQEBCwUAA4IBAQA8L/6VhfZ7k/udpC+wpNfPXUkoRCLwBfqv JvMQkyorAJDosM638HIESV0oCcz1DXpqR/ct3vhpuaaKMVi75znmZKZiYx+FEarl KLANYsfmSlag+MO6eQdymvVmLussFOjMoj4aFyKfafANJNkASrVM8cVUpeDtBm+c ILDuunc5IHuIKt45C7ZjR9uSp9Zza2mOHgJer6LptHzqbKb5kRH8sSeDe16UVJZx dtczfoZMqKRl3qCP6T74Yr9Tu4tpNxI3EsHA9BvlLScaho5zkX8wASvi7eYjkoXu 4dQB2hOIlAlNftmzE0L34LyXLMAP68HLN3oyPv0ZsLalqU6DAi6T -----END CERTIFICATE-----Generated at Wed Jan 21 19:06:46 2026 by rpki-client