This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/Vi82WamhNS_7BkMeH_Obwd9eH6o.roa File: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (raw, json) Hash identifier: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY= Subject key identifier: 56:2F:36:59:A9:A1:35:2F:FB:06:43:1E:1F:F3:9B:C1:DF:5E:1F:AA Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Certificate serial: 019B7CEDD832B951F8600CAFFCC49BBA0A05 Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/Vi82WamhNS_7BkMeH_Obwd9eH6o.roa Signing time: Fri 02 Jan 2026 04:18:40 +0000 ROA not before: Fri 02 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51321 IP address blocks: 185.132.120.0/22 maxlen: 24 185.132.120.0/24 maxlen: 24 185.132.121.0/24 maxlen: 24 185.132.122.0/24 maxlen: 24 185.132.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d8:32:b9:51:f8:60:0c:af:fc:c4:9b:ba:0a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=562f3659a9a1352ffb06431e1ff39bc1df5e1faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:96:40:6e:53:12:00:a4:d3:9d:8a:15:64: 03:19:51:2c:af:01:31:d3:f8:7c:c5:17:4a:05:a5: 68:c1:c3:a1:24:a9:3a:24:f8:7f:eb:70:75:a0:8b: 15:c1:e7:37:26:9e:62:e2:84:d3:8b:5f:27:bd:dc: 15:20:51:73:c7:28:14:99:a8:ee:21:08:74:6e:84: 8e:16:15:d2:c4:08:cd:9f:bd:84:7e:bf:6e:f9:25: 60:05:ce:b5:b4:e0:ed:47:7b:d3:4c:87:1b:86:01: 51:8b:99:8f:8b:8b:fb:de:97:59:e6:20:96:0f:44: 2f:d3:19:c4:a5:80:bd:1c:ae:cd:64:bb:6f:51:17: 0c:a4:7e:58:e2:3f:61:a8:7d:db:5f:76:c3:e3:0e: d2:e3:c8:b5:fe:6a:3b:0c:74:67:be:85:fb:f4:53: df:87:7c:68:aa:94:22:00:50:b0:86:98:4e:54:53: 6f:b2:d8:20:32:43:2f:0b:10:77:58:57:f1:2c:da: 36:df:77:48:6b:42:89:79:d1:1a:e9:b7:f3:13:53: 09:f1:af:d8:ca:e6:3f:af:40:ec:5c:ab:12:18:23: 8c:f5:b1:c5:5c:91:a1:b1:95:75:3e:59:e1:e4:1e: 15:0b:1d:4c:a6:18:ed:60:43:86:9e:46:18:c5:b1: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2F:36:59:A9:A1:35:2F:FB:06:43:1E:1F:F3:9B:C1:DF:5E:1F:AA X509v3 Authority Key Identifier: keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/Vi82WamhNS_7BkMeH_Obwd9eH6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.120.0/22 Signature Algorithm: sha256WithRSAEncryption 20:ed:5c:a2:0e:84:eb:61:8d:35:08:78:af:66:49:9b:25:f5: 32:f2:d6:43:ad:2d:f1:ed:29:69:3b:a0:4d:da:ea:0e:7a:1c: fc:a7:a4:fc:3b:c1:77:5f:cb:f7:98:28:84:79:28:f5:a5:17: c5:67:ff:8f:70:3e:7a:67:7f:f2:7e:8a:f3:75:64:15:19:03: 82:fd:06:46:66:ab:67:e4:e3:ac:b8:18:92:c4:e6:00:16:80: ff:34:0c:07:43:83:a0:62:d1:11:d6:ed:b7:d7:90:7c:9c:06: 33:e4:78:52:26:79:af:0e:e4:a4:6c:f1:0e:4b:98:6f:e5:fb: 90:e9:d2:8b:09:bb:64:6e:6f:4d:be:d9:b2:ca:b8:08:c1:ad: 46:a1:de:c5:c3:0a:d2:d8:2f:c2:fd:e1:e8:11:b7:ba:56:9c: b6:2d:63:56:18:e2:45:25:f5:8e:50:47:1e:50:cd:e6:ac:90: a2:3e:78:17:07:4a:60:ba:67:94:27:c2:1b:80:df:87:95:5d: 10:f3:77:c6:0d:45:aa:a2:5a:18:1e:4e:5e:ac:86:af:98:e0: 45:f9:4a:83:fc:8e:0b:e8:20:56:a3:d8:80:64:f6:d0:26:51: cb:07:0e:88:b5:df:da:ba:0b:9c:a3:09:0a:6e:9c:5f:ef:94: 80:20:56:d6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87dgyuVH4YAyv/MSbugoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm NWZjYjIwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjJmMzY1OWE5YTEzNTJmZmIwNjQzMWUxZmYzOWJjMWRmNWUxZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj2WQG5TEgCk052KFWQDGVEsrwEx 0/h8xRdKBaVowcOhJKk6JPh/63B1oIsVwec3Jp5i4oTTi18nvdwVIFFzxygUmaju IQh0boSOFhXSxAjNn72Efr9u+SVgBc61tODtR3vTTIcbhgFRi5mPi4v73pdZ5iCW D0Qv0xnEpYC9HK7NZLtvURcMpH5Y4j9hqH3bX3bD4w7S48i1/mo7DHRnvoX79FPf h3xoqpQiAFCwhphOVFNvstggMkMvCxB3WFfxLNo233dIa0KJedEa6bfzE1MJ8a/Y yuY/r0DsXKsSGCOM9bHFXJGhsZV1Plnh5B4VCx1MphjtYEOGnkYYxbFl/QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFYvNlmpoTUv+wZDHh/zm8HfXh+qMB8GA1UdIwQY MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2 LTgyNWVjMTA3NWRlNi8xL1ZpODJXYW1oTlNfN0JrTWVIX09id2Q5ZUg2by5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2LTgyNWVjMTA3NWRl Ni8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5hHgw DQYJKoZIhvcNAQELBQADggEBACDtXKIOhOthjTUIeK9mSZsl9TLy1kOtLfHtKWk7 oE3a6g56HPynpPw7wXdfy/eYKIR5KPWlF8Vn/49wPnpnf/J+ivN1ZBUZA4L9BkZm q2fk46y4GJLE5gAWgP80DAdDg6Bi0RHW7bfXkHycBjPkeFImea8O5KRs8Q5LmG/l +5Dp0osJu2Rub02+2bLKuAjBrUah3sXDCtLYL8L94egRt7pWnLYtY1YY4kUl9Y5Q Rx5QzeaskKI+eBcHSmC6Z5QnwhuA34eVXRDzd8YNRaqiWhgeTl6shq+Y4EX5SoP8 jgvoIFaj2IBk9tAmUcsHDoi139q6C5yjCQpunF/vlIAgVtY= -----END CERTIFICATE-----Generated at Wed Jan 7 07:15:37 2026 by rpki-client