This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/vmeyUsb0B6nt7RQL8zVkNFOh_tA.roa File: vmeyUsb0B6nt7RQL8zVkNFOh_tA.roa (raw, json) Hash identifier: QL+UGoxzg+c0nwUj+09aM3m1fGQQjVUbgtOrR4jVg/s= Subject key identifier: BE:67:B2:52:C6:F4:07:A9:ED:ED:14:0B:F3:35:64:34:53:A1:FE:D0 Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Certificate serial: 019B7DCA66D0BBCD27AAE6EAB764DB81C7C8 Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/vmeyUsb0B6nt7RQL8zVkNFOh_tA.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208427 IP address blocks: 185.231.244.0/24 maxlen: 24 185.231.245.0/24 maxlen: 24 185.231.246.0/23 maxlen: 23 194.147.114.0/24 maxlen: 24 2a0c:9300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:66:d0:bb:cd:27:aa:e6:ea:b7:64:db:81:c7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be67b252c6f407a9eded140bf335643453a1fed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:9b:c8:62:b6:02:02:2f:ee:03:13:1b:d9: 9a:3b:18:23:af:e7:37:00:42:5b:4f:40:23:9f:67: 64:56:49:ba:6b:ff:1f:d7:4d:83:65:c0:9a:58:18: be:34:34:5d:29:63:df:e9:b2:91:af:71:93:a9:6d: 57:21:c4:4b:9b:ad:1e:1b:51:5d:74:a0:b4:bf:88: 9f:89:aa:df:ed:65:20:f1:1a:28:36:76:01:8a:fc: 95:83:63:d4:4e:f4:6a:50:b8:68:67:8d:3b:b4:d6: 7f:a5:06:90:f7:a1:d5:d1:39:cc:7c:92:1a:f6:79: ce:7e:c8:b9:62:60:b5:c7:d6:06:94:ab:7c:2c:a3: 46:81:1c:48:9d:26:cd:b8:fc:b5:f0:c6:2a:83:c9: 68:10:7f:a6:93:50:a8:47:b8:a1:73:f6:01:1a:1f: 70:7a:ff:d2:c4:40:ad:3b:95:b0:5f:d4:dc:c9:07: 6e:c9:d9:d1:43:5b:1d:38:3f:51:ab:ee:cf:b8:f7: f4:2f:2d:17:cb:f0:0e:d5:0d:86:b3:26:c2:cc:22: 0b:f9:9b:33:c0:a5:2e:22:60:94:20:c6:24:6c:3d: aa:2d:1a:e2:a3:6b:06:ca:31:cb:ec:19:a1:1e:97: 75:75:6d:0e:ea:9e:36:8f:75:b2:d4:7f:1d:2a:48: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:B2:52:C6:F4:07:A9:ED:ED:14:0B:F3:35:64:34:53:A1:FE:D0 X509v3 Authority Key Identifier: keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/vmeyUsb0B6nt7RQL8zVkNFOh_tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.244.0/22 194.147.114.0/24 IPv6: 2a0c:9300::/29 Signature Algorithm: sha256WithRSAEncryption 0e:82:bd:51:75:a4:3b:e7:8d:e7:9d:b3:24:0e:de:cc:b6:8f: d4:8f:bb:15:41:e9:b5:a3:cc:81:98:82:b0:be:90:d8:77:9d: 58:43:fd:46:4c:76:e4:ce:7c:3b:80:06:05:cd:96:e0:07:9e: 8c:69:90:6c:0e:20:a2:96:cc:16:27:2b:7c:cf:ce:46:d0:7b: 1e:1c:f8:3e:47:6f:7c:c2:5c:c7:07:ee:99:e5:77:4a:05:7a: b1:4c:53:43:45:ed:b0:49:88:8a:29:24:3c:a9:ca:d2:be:c4: 78:43:7e:c6:d0:ac:20:28:5c:2b:b9:b7:2b:f1:1e:3b:a7:e9: a6:10:a2:34:62:40:50:be:88:e3:5e:5e:54:9e:92:cd:ce:0b: 82:0a:bb:a1:de:58:38:39:e1:8c:a0:1e:42:b5:54:50:83:89: 2b:9a:cd:88:b5:e4:33:1d:60:23:d1:84:99:de:14:1c:ce:b3: b0:45:b8:8d:ed:ce:d2:f2:29:c6:1d:53:a7:f9:21:62:f7:09: e9:bf:cd:e5:2e:96:6c:69:be:0c:99:9a:14:b1:53:03:44:9d: ee:32:42:13:ad:2d:55:aa:ff:c8:77:1d:58:48:c2:95:ae:4e: b3:f8:20:6c:37:39:ef:26:31:43:4f:1b:8c:c8:22:4d:a9:e2: 24:e9:04:61 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ymbQu80nqubqt2TbgcfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx ZDc2NzQwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTY3YjI1MmM2ZjQwN2E5ZWRlZDE0MGJmMzM1NjQzNDUzYTFmZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LGbyGK2AgIv7gMTG9maOxgjr+c3 AEJbT0Ajn2dkVkm6a/8f102DZcCaWBi+NDRdKWPf6bKRr3GTqW1XIcRLm60eG1Fd dKC0v4ifiarf7WUg8RooNnYBivyVg2PUTvRqULhoZ407tNZ/pQaQ96HV0TnMfJIa 9nnOfsi5YmC1x9YGlKt8LKNGgRxInSbNuPy18MYqg8loEH+mk1CoR7ihc/YBGh9w ev/SxECtO5WwX9TcyQduydnRQ1sdOD9Rq+7PuPf0Ly0Xy/AO1Q2GsybCzCIL+Zsz wKUuImCUIMYkbD2qLRrio2sGyjHL7BmhHpd1dW0O6p42j3Wy1H8dKkgmvQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL5nslLG9Aep7e0UC/M1ZDRTof7QMB8GA1UdIwQY MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt ZTM3ODFkOGZlNzRjLzEvdm1leVVzYjBCNm50N1JRTDh6VmtORk9oX3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuef0AwQA wpNyMA0EAgACMAcDBQMqDJMAMA0GCSqGSIb3DQEBCwUAA4IBAQAOgr1RdaQ7543n nbMkDt7Mto/Uj7sVQem1o8yBmIKwvpDYd51YQ/1GTHbkznw7gAYFzZbgB56MaZBs DiCilswWJyt8z85G0HseHPg+R298wlzHB+6Z5XdKBXqxTFNDRe2wSYiKKSQ8qcrS vsR4Q37G0KwgKFwrubcr8R47p+mmEKI0YkBQvojjXl5UnpLNzguCCruh3lg4OeGM oB5CtVRQg4krms2IteQzHWAj0YSZ3hQczrOwRbiN7c7S8inGHVOn+SFi9wnpv83l LpZsab4MmZoUsVMDRJ3uMkITrS1Vqv/Idx1YSMKVrk6z+CBsNznvJjFDTxuMyCJN qeIk6QRh -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:36 2026 by rpki-client