This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/vyQcVp5C3AlRVA819dd3sJ607Q4.roa File: vyQcVp5C3AlRVA819dd3sJ607Q4.roa (raw, json) Hash identifier: dbP286vqsPZG/vM7gj98tCGBen8qv4/fYnsiL/9MVjw= Subject key identifier: BF:24:1C:56:9E:42:DC:09:51:54:0F:35:F5:D7:77:B0:9E:B4:ED:0E Certificate issuer: /CN=804ae76b1975fb4a8cbab2207189eed20232ff5f Certificate serial: 019B7EA4F1DFE2146CB8619799194F40CAFC Authority key identifier: 80:4A:E7:6B:19:75:FB:4A:8C:BA:B2:20:71:89:EE:D2:02:32:FF:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/vyQcVp5C3AlRVA819dd3sJ607Q4.roa Signing time: Fri 02 Jan 2026 12:18:17 +0000 ROA not before: Fri 02 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49290 IP address blocks: 62.122.232.0/21 maxlen: 21 91.195.92.0/23 maxlen: 23 91.198.89.0/24 maxlen: 24 185.242.252.0/22 maxlen: 22 193.25.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f1:df:e2:14:6c:b8:61:97:99:19:4f:40:ca:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804ae76b1975fb4a8cbab2207189eed20232ff5f Validity Not Before: Jan 2 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf241c569e42dc0951540f35f5d777b09eb4ed0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:68:da:2b:33:13:91:30:26:36:5d:b2:e1: 28:a6:22:b7:f2:0c:04:25:23:57:3c:d3:b7:94:a4: 5d:4e:8a:ed:0f:4e:c8:b5:31:d9:2b:d4:0e:4a:5c: b3:8a:c9:cb:43:58:6a:5f:d3:3c:a9:cb:85:f9:7f: d4:ca:9e:9e:23:58:89:37:2d:a0:b7:82:73:41:16: 06:b5:28:2b:16:0e:be:68:9e:a5:30:1d:e7:e2:00: 05:d3:f4:3b:96:31:69:ed:31:61:ac:63:24:da:e3: 5d:55:31:bc:1e:b6:e6:63:9d:b0:0f:bb:76:f8:bd: 7f:7f:1f:f5:88:76:cd:bf:aa:27:7b:38:18:83:7f: 93:b4:e0:dd:41:05:df:e5:e4:c0:27:b8:66:2e:84: c2:06:46:53:52:71:48:53:9d:b9:6c:97:31:98:92: e2:79:0f:d8:e0:e4:7f:d4:e3:96:f9:65:b4:ce:3c: f6:6d:30:f0:e6:1c:d3:92:b3:ad:22:52:e9:d6:b0: 7e:62:a5:98:39:0f:d8:19:2f:79:e3:42:5d:4c:df: b7:dd:28:7e:6b:7f:f6:3a:1b:a8:52:6b:4d:45:47: 1b:41:50:ba:17:22:e1:46:bb:67:db:d3:93:b1:2a: ba:36:00:8e:fb:ee:68:96:31:a0:ce:eb:a6:ce:87: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:1C:56:9E:42:DC:09:51:54:0F:35:F5:D7:77:B0:9E:B4:ED:0E X509v3 Authority Key Identifier: keyid:80:4A:E7:6B:19:75:FB:4A:8C:BA:B2:20:71:89:EE:D2:02:32:FF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/vyQcVp5C3AlRVA819dd3sJ607Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.232.0/21 91.195.92.0/23 91.198.89.0/24 185.242.252.0/22 193.25.248.0/22 Signature Algorithm: sha256WithRSAEncryption 64:32:45:40:7c:5b:2b:b3:e2:79:ca:75:71:cd:18:be:0b:85: 65:08:d3:08:3f:c3:b7:9d:7a:d4:f1:f6:5c:84:e7:53:12:c2: 97:88:34:96:2c:5c:8e:a2:7c:40:6d:0f:3a:ed:62:79:ef:c6: df:be:da:93:15:7b:dd:b8:cf:11:c9:c3:70:ae:b8:87:26:b9: 6d:ed:e6:ba:7a:c7:13:2b:4c:62:a4:42:01:da:53:0f:b3:51: 40:48:fd:3f:1e:24:59:17:5c:8e:bc:e8:f0:2d:95:a4:d9:2d: 55:b5:72:d6:b5:5a:9a:2e:9b:8a:59:fb:38:36:3c:18:99:2c: ec:d2:ac:04:f5:dc:8c:a5:19:ec:b9:16:6e:8c:68:32:e7:4e: 5d:35:43:a9:17:32:4f:6a:ff:b4:54:30:7f:27:dd:a7:7c:99: 99:cc:82:a6:24:e7:22:73:86:f0:f5:2b:f3:39:94:b0:2c:b5: 31:da:51:73:92:f1:b8:e1:f7:16:7d:82:57:7f:4f:e1:cf:b1: 8c:da:0c:f7:f5:c4:dc:7b:14:b7:45:8d:7b:aa:34:e2:00:70: f6:37:71:80:1e:df:4b:3e:fc:b3:c7:ce:4f:f6:5f:82:79:33: 97:df:3e:d6:57:27:0c:c5:36:b2:5a:3b:62:e3:f5:1b:da:f6: 77:db:f8:4e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pPHf4hRsuGGXmRlPQMr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNGFlNzZiMTk3NWZiNGE4Y2JhYjIyMDcxODllZWQyMDIz MmZmNWYwHhcNMjYwMTAyMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjI0MWM1NjllNDJkYzA5NTE1NDBmMzVmNWQ3NzdiMDllYjRlZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0po2iszE5EwJjZdsuEopiK38gwE JSNXPNO3lKRdTortD07ItTHZK9QOSlyzisnLQ1hqX9M8qcuF+X/Uyp6eI1iJNy2g t4JzQRYGtSgrFg6+aJ6lMB3n4gAF0/Q7ljFp7TFhrGMk2uNdVTG8HrbmY52wD7t2 +L1/fx/1iHbNv6onezgYg3+TtODdQQXf5eTAJ7hmLoTCBkZTUnFIU525bJcxmJLi eQ/Y4OR/1OOW+WW0zjz2bTDw5hzTkrOtIlLp1rB+YqWYOQ/YGS9540JdTN+33Sh+ a3/2OhuoUmtNRUcbQVC6FyLhRrtn29OTsSq6NgCO++5oljGgzuumzoc9/QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFL8kHFaeQtwJUVQPNfXXd7CetO0OMB8GA1UdIwQY MBaAFIBK52sZdftKjLqyIHGJ7tICMv9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0VybmF4bDEtMHFNdXJJZ2NZbnUwZ0l5XzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODA5OTItMzhkYS00OThmLWEzNDkt OTQyMjcyOTNjODhlLzEvdnlRY1ZwNUMzQWxSVkE4MTlkZDNzSjYwN1E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODA5OTItMzhkYS00OThmLWEzNDktOTQyMjcyOTNjODhl LzEvZ0VybmF4bDEtMHFNdXJJZ2NZbnUwZ0l5XzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDPnroAwQB W8NcAwQAW8ZZAwQCufL8AwQCwRn4MA0GCSqGSIb3DQEBCwUAA4IBAQBkMkVAfFsr s+J5ynVxzRi+C4VlCNMIP8O3nXrU8fZchOdTEsKXiDSWLFyOonxAbQ867WJ578bf vtqTFXvduM8RycNwrriHJrlt7ea6escTK0xipEIB2lMPs1FASP0/HiRZF1yOvOjw LZWk2S1VtXLWtVqaLpuKWfs4NjwYmSzs0qwE9dyMpRnsuRZujGgy505dNUOpFzJP av+0VDB/J92nfJmZzIKmJOcic4bw9SvzOZSwLLUx2lFzkvG44fcWfYJXf0/hz7GM 2gz39cTcexS3RY17qjTiAHD2N3GAHt9LPvyzx85P9l+CeTOX3z7WVycMxTayWjti 4/Ub2vZ32/hO -----END CERTIFICATE-----Generated at Wed Jan 7 15:39:57 2026 by rpki-client