This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/VcgWyeq648Gc4ahE2H4P_5An-Vk.roa File: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (raw, json) Hash identifier: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o= Subject key identifier: 55:C8:16:C9:EA:BA:E3:C1:9C:E1:A8:44:D8:7E:0F:FF:90:27:F9:59 Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Certificate serial: 019B7AC8D84B32D8EBD117EB3115B6FE1305 Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/VcgWyeq648Gc4ahE2H4P_5An-Vk.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197831 IP address blocks: 91.228.30.0/23 maxlen: 23 91.228.30.0/24 maxlen: 24 91.228.31.0/24 maxlen: 24 91.234.80.0/22 maxlen: 22 91.244.80.0/20 maxlen: 20 176.104.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d8:4b:32:d8:eb:d1:17:eb:31:15:b6:fe:13:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c816c9eabae3c19ce1a844d87e0fff9027f959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:b0:a8:b8:8f:13:2f:1e:4c:2d:b2:d6:17: 67:8b:6c:45:b2:88:2d:ed:f5:d3:d6:af:ef:67:cd: b9:0f:c6:05:8e:83:36:67:ec:98:eb:c2:02:9b:36: 13:c1:34:b4:b7:2f:a4:f1:81:7e:39:96:b3:d3:b4: 8d:1c:c5:ff:50:b4:af:10:4d:d1:33:22:8f:67:ec: 47:3e:b1:6a:45:0b:6c:fb:87:7a:c3:40:a4:33:f7: c1:7e:c9:ca:c0:7e:d8:e4:ed:de:87:06:a1:63:c4: 08:4d:98:5e:dc:b5:66:74:ad:5a:3c:06:d9:45:dc: e6:f6:70:92:63:7b:b6:e6:61:4a:d7:09:23:10:b7: ef:06:51:87:ea:96:9c:b8:ed:38:9e:9d:f0:d2:dd: 27:40:e1:46:21:5a:1b:6a:93:31:8e:1a:65:62:16: f9:58:8b:dc:a6:5c:0b:65:c4:88:8e:c9:11:88:cc: 1c:e1:3a:70:47:19:34:4b:36:03:c7:cf:36:75:29: ae:e5:f1:92:ad:46:e7:be:66:ad:5d:b5:9c:5f:a9: 71:1a:c8:27:fb:ce:8d:04:f0:3c:df:e4:a7:95:e5: 2d:82:1f:69:76:e1:8f:7c:e5:4b:9f:cb:45:cf:94: 0c:64:3a:40:d0:17:70:db:0d:8a:f8:44:76:0b:35: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:16:C9:EA:BA:E3:C1:9C:E1:A8:44:D8:7E:0F:FF:90:27:F9:59 X509v3 Authority Key Identifier: keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/VcgWyeq648Gc4ahE2H4P_5An-Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.30.0/23 91.234.80.0/22 91.244.80.0/20 176.104.120.0/21 Signature Algorithm: sha256WithRSAEncryption 76:8a:a4:0d:c8:f9:c1:52:59:5a:fc:bf:93:e9:61:16:9f:30: e8:54:54:84:18:54:03:9e:7f:de:0c:f3:11:5b:65:9d:34:bd: a1:f1:47:3a:8c:b4:58:44:b4:00:85:90:a3:1c:e4:cc:fb:dc: 13:cb:78:19:9c:8a:40:cd:53:1c:6f:9f:e8:99:41:ac:bb:55: 92:96:dc:ea:96:08:60:3b:ef:3f:40:ab:06:ee:01:a5:b1:d8: 4c:e9:50:29:8b:fc:c3:cc:e2:f0:53:25:22:7a:1c:e2:f6:67: 6a:e5:35:db:75:3f:ca:46:23:5f:ec:da:11:42:0a:55:fe:33: ad:28:c0:84:f4:cd:49:ad:cd:58:6d:4d:e9:f8:82:23:b8:29: 06:03:e7:6d:57:3a:7f:34:d0:4b:dc:77:ee:7b:61:66:6e:29: 37:8d:35:38:2a:9c:d1:79:a4:bf:a1:ae:59:e6:5d:67:2f:98: 08:c9:0f:62:51:85:47:14:b5:0a:5e:f5:8f:e8:e4:d7:89:01: 83:b9:80:77:47:74:28:85:1d:b9:08:fd:6a:6b:1a:13:f5:1a: 15:79:82:90:35:2f:b4:86:8b:a9:bd:d8:a9:3d:1d:55:82:97: d1:c1:5a:fa:ea:c1:89:28:c4:a6:ed:6d:c9:8b:05:f6:1c:b2: a4:78:ec:d4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yNhLMtjr0RfrMRW2/hMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl MTgyYTEwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWM4MTZjOWVhYmFlM2MxOWNlMWE4NDRkODdlMGZmZjkwMjdmOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteCwqLiPEy8eTC2y1hdni2xFsogt 7fXT1q/vZ825D8YFjoM2Z+yY68ICmzYTwTS0ty+k8YF+OZaz07SNHMX/ULSvEE3R MyKPZ+xHPrFqRQts+4d6w0CkM/fBfsnKwH7Y5O3ehwahY8QITZhe3LVmdK1aPAbZ Rdzm9nCSY3u25mFK1wkjELfvBlGH6pacuO04np3w0t0nQOFGIVobapMxjhplYhb5 WIvcplwLZcSIjskRiMwc4TpwRxk0SzYDx882dSmu5fGSrUbnvmatXbWcX6lxGsgn +86NBPA83+SnleUtgh9pduGPfOVLn8tFz5QMZDpA0Bdw2w2K+ER2CzW/cQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFXIFsnquuPBnOGoRNh+D/+QJ/lZMB8GA1UdIwQY MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt YjgwMjA1MjgzMmNmLzEvVmNnV3llcTY0OEdjNGFoRTJINFBfNUFuLVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW+QeAwQC W+pQAwQEW/RQAwQDsGh4MA0GCSqGSIb3DQEBCwUAA4IBAQB2iqQNyPnBUlla/L+T 6WEWnzDoVFSEGFQDnn/eDPMRW2WdNL2h8Uc6jLRYRLQAhZCjHOTM+9wTy3gZnIpA zVMcb5/omUGsu1WSltzqlghgO+8/QKsG7gGlsdhM6VApi/zDzOLwUyUiehzi9mdq 5TXbdT/KRiNf7NoRQgpV/jOtKMCE9M1Jrc1YbU3p+IIjuCkGA+dtVzp/NNBL3Hfu e2Fmbik3jTU4KpzReaS/oa5Z5l1nL5gIyQ9iUYVHFLUKXvWP6OTXiQGDuYB3R3Qo hR25CP1qaxoT9RoVeYKQNS+0houpvdipPR1VgpfRwVr66sGJKMSm7W3JiwX2HLKk eOzU -----END CERTIFICATE-----Generated at Sat Jan 3 13:04:58 2026 by rpki-client