This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa File: Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa (raw, json) Hash identifier: COQQhfCQ5pueYBwG1/nepox+6Hyg8CKRyfOh9o2cEpg= Subject key identifier: 55:BE:60:E5:3E:9B:A8:5A:21:F2:AB:66:D0:9F:C9:92:C9:69:38:4A Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a Certificate serial: 019BEC84E20A8DC4542011A1CA639AA80B5E Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa Signing time: Fri 23 Jan 2026 20:21:30 +0000 ROA not before: Fri 23 Jan 2026 20:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203628 IP address blocks: 185.129.32.0/22 maxlen: 22 195.85.227.0/24 maxlen: 24 2a03:9be0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:84:e2:0a:8d:c4:54:20:11:a1:ca:63:9a:a8:0b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a Validity Not Before: Jan 23 20:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55be60e53e9ba85a21f2ab66d09fc992c969384a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:25:0f:24:c8:26:83:37:aa:02:bd:b5:17: c0:86:c2:9c:8d:2d:51:03:2d:35:fd:ff:53:22:b1: bf:a4:9a:1b:62:10:ca:98:94:9b:21:01:23:6e:21: 04:a4:2c:50:3d:cc:ff:93:17:ce:82:4d:c0:6e:c4: 89:b6:89:a3:53:09:a5:95:aa:ca:32:18:e8:b2:f9: 4d:f2:f3:56:7c:4a:7c:4d:35:50:be:35:c1:77:e3: 0c:aa:61:6b:49:e1:6a:2b:dc:8a:6c:45:cf:97:f5: b5:9b:56:8b:c4:05:88:5e:ae:6f:26:0e:07:e6:a7: aa:69:e4:c8:cc:88:d9:f7:48:85:e3:8d:0b:17:21: 92:ec:e9:88:c0:92:68:d0:67:b5:83:ef:cf:52:50: 64:94:4a:1e:d1:99:5d:1f:2b:98:5b:0d:2e:97:b3: 7f:94:68:9d:3b:b8:f3:68:f2:a1:5e:cd:89:af:69: da:fd:b4:a9:4f:d7:9e:15:57:ee:d5:24:15:d5:d8: b0:f4:c0:2f:b7:c6:5a:69:84:d7:d2:2a:cd:f1:94: 94:b3:f6:ba:14:bd:23:68:08:e7:6e:fd:ae:52:ba: 1f:d8:c4:c7:46:50:48:1c:dc:2f:ec:03:42:75:49: da:68:2d:eb:b7:a9:e8:ea:31:41:ed:a6:ce:4e:fa: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BE:60:E5:3E:9B:A8:5A:21:F2:AB:66:D0:9F:C9:92:C9:69:38:4A X509v3 Authority Key Identifier: keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.32.0/22 195.85.227.0/24 IPv6: 2a03:9be0::/32 Signature Algorithm: sha256WithRSAEncryption 2b:44:80:1e:aa:57:fa:18:c0:c2:5a:a0:82:f8:0b:80:88:03: 3d:29:3f:e0:73:0d:d8:a2:2a:66:bc:32:d2:76:b6:ce:20:6e: ff:d7:11:11:5a:43:00:ea:4f:a7:8e:1c:37:c4:fa:97:61:dc: ac:c3:9d:1a:85:d3:0c:ad:67:8d:c8:b6:c8:b6:03:7d:d8:f8: 97:ce:6b:25:f2:f1:30:55:63:8d:8e:c1:a0:1d:fb:5e:1a:3c: ab:3c:3a:b4:ca:09:8f:7c:39:76:3e:ea:3b:22:0f:48:0b:1f: 99:de:0b:71:90:8c:16:3f:41:99:b6:a3:fd:d2:6f:ac:47:66: 66:89:f8:31:a4:de:69:ae:4a:b0:f9:40:6a:42:1d:c4:ae:e9: 44:fa:54:41:88:40:0b:dd:88:60:b7:ac:e2:12:8e:c8:41:6f: 77:5b:f3:bc:bd:19:ef:7c:8f:f8:bd:db:cc:20:21:d0:76:d3: c3:66:82:5e:43:2d:5d:d2:3f:e1:30:fc:db:a3:a0:1b:fe:f1: 25:a8:8d:73:52:a2:5c:c9:15:4e:c1:ae:b3:0f:f8:dd:c8:c9: 4b:86:82:44:8b:df:e5:f1:5f:f2:ac:3d:ec:fd:0b:af:ca:ec: 31:61:1c:fa:52:0a:21:f6:5a:cf:29:f9:96:15:53:11:67:c9: 2c:31:30:53 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvshOIKjcRUIBGhymOaqAteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl NDU4MGEwHhcNMjYwMTIzMjAyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWJlNjBlNTNlOWJhODVhMjFmMmFiNjZkMDlmYzk5MmM5NjkzODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunolDyTIJoM3qgK9tRfAhsKcjS1R Ay01/f9TIrG/pJobYhDKmJSbIQEjbiEEpCxQPcz/kxfOgk3AbsSJtomjUwmllarK MhjosvlN8vNWfEp8TTVQvjXBd+MMqmFrSeFqK9yKbEXPl/W1m1aLxAWIXq5vJg4H 5qeqaeTIzIjZ90iF440LFyGS7OmIwJJo0Ge1g+/PUlBklEoe0ZldHyuYWw0ul7N/ lGidO7jzaPKhXs2Jr2na/bSpT9eeFVfu1SQV1diw9MAvt8ZaaYTX0irN8ZSUs/a6 FL0jaAjnbv2uUrof2MTHRlBIHNwv7ANCdUnaaC3rt6no6jFB7abOTvq4MwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFW+YOU+m6haIfKrZtCfyZLJaThKMB8GA1UdIwQY MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt YTM4ZGRhMTNhNjA4LzEvVmI1ZzVUNmJxRm9oOHF0bTBKX0prc2xwT0VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4 LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYEgAwQA w1XjMA0EAgACMAcDBQAqA5vgMA0GCSqGSIb3DQEBCwUAA4IBAQArRIAeqlf6GMDC WqCC+AuAiAM9KT/gcw3YoipmvDLSdrbOIG7/1xERWkMA6k+njhw3xPqXYdysw50a hdMMrWeNyLbItgN92PiXzmsl8vEwVWONjsGgHfteGjyrPDq0ygmPfDl2Puo7Ig9I Cx+Z3gtxkIwWP0GZtqP90m+sR2ZmifgxpN5prkqw+UBqQh3ErulE+lRBiEAL3Yhg t6ziEo7IQW93W/O8vRnvfI/4vdvMICHQdtPDZoJeQy1d0j/hMPzbo6Ab/vElqI1z UqJcyRVOwa6zD/jdyMlLhoJEi9/l8V/yrD3s/QuvyuwxYRz6Ugoh9lrPKfmWFVMR Z8ksMTBT -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:30 2026 by rpki-client