This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/VS_M4cAagWUGuW9fqRkh-RrWxeM.roa File: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (raw, json) Hash identifier: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E= Subject key identifier: 55:2F:CC:E1:C0:1A:81:65:06:B9:6F:5F:A9:19:21:F9:1A:D6:C5:E3 Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Certificate serial: 019B7835454ADC9DC7E5378E915A9AD7CFED Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/VS_M4cAagWUGuW9fqRkh-RrWxeM.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62125 IP address blocks: 185.46.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:45:4a:dc:9d:c7:e5:37:8e:91:5a:9a:d7:cf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=552fcce1c01a816506b96f5fa91921f91ad6c5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:ff:9c:61:05:ee:c3:95:fc:02:b2:f3:60: 64:a1:13:52:fa:53:eb:e3:31:4f:06:31:5a:b9:33: 29:d8:8b:a3:6e:a1:1e:af:2c:bd:ca:01:cf:36:6a: d5:50:b0:e1:63:ef:e1:02:a2:29:0a:f4:11:34:08: d3:ad:57:76:e9:43:bc:1d:d6:58:21:7f:44:fd:15: c5:2b:38:e5:3c:cc:a7:19:d7:9c:b6:8c:56:2f:9f: 8b:07:8a:7b:04:a4:16:78:04:c1:ed:ad:79:54:55: 27:9b:10:ed:c3:b1:a8:54:fb:ee:29:7c:bb:e7:23: b9:46:dd:dd:d3:b7:8c:19:77:5d:24:57:f8:ed:4a: 07:87:cb:9a:92:f2:e0:b2:d1:53:bb:4e:7c:3b:72: b7:31:2e:97:dc:8c:30:29:a7:a6:f9:31:7b:6e:9c: 91:18:38:a7:8a:34:7a:6b:c3:f7:5f:7b:21:f7:49: 08:42:07:48:ba:17:9c:b2:8d:31:85:ae:b3:d5:f2: ca:41:08:dc:e8:30:ee:99:65:6f:8d:1a:ab:ea:7a: ad:77:c6:cb:e3:d8:5c:c1:6b:d8:d4:fb:b2:14:e5: 7f:fb:f9:b3:c2:3d:1d:c1:c5:9c:65:7b:00:91:de: 8c:73:e4:05:ae:48:fb:f0:2c:03:2c:fa:84:5f:34: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:CC:E1:C0:1A:81:65:06:B9:6F:5F:A9:19:21:F9:1A:D6:C5:E3 X509v3 Authority Key Identifier: keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/VS_M4cAagWUGuW9fqRkh-RrWxeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:6e:d3:8e:b5:31:8e:e2:4b:c3:1b:56:c1:45:6c:fc:92:8f: 24:27:42:10:f5:32:bd:59:a7:a1:6b:e8:11:a4:cf:32:dc:95: 76:d2:9e:7e:8d:22:67:ce:b6:b9:4b:e0:ee:de:17:ec:29:6c: 87:f6:93:c5:72:a7:3f:aa:4d:eb:3c:24:d5:7d:3f:0b:08:2c: 45:d6:5f:5b:3b:a3:f0:4e:15:93:0c:f8:1b:7e:3f:80:61:8d: 1d:88:e4:4c:ed:8e:56:1e:e8:45:09:fb:7e:17:8a:f2:71:98: 62:f8:da:91:86:8b:c4:f1:04:b9:1a:22:fc:aa:c2:eb:ab:0d: 36:f5:b8:aa:1e:91:84:84:c0:ce:d9:9d:6e:68:ff:ec:a3:4c: fa:85:25:05:87:17:24:7b:01:94:17:2f:56:c7:fe:dc:0e:3b: 38:3a:e8:df:1b:28:1c:c9:db:ed:73:cd:43:62:bd:5e:87:d1: ea:e2:86:fe:1b:77:d2:07:3c:db:1b:cf:d9:6e:67:68:f4:fd: 15:4f:8e:e0:71:f6:60:fa:ea:93:3a:d8:ff:89:f7:79:54:d0: a9:15:7e:74:28:b7:1c:ab:55:74:97:36:32:a6:5b:59:b0:67: 40:4a:05:0e:c0:87:ce:9f:37:2b:4b:3b:4d:6c:5e:4c:1d:3a: 1e:d7:d7:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUVK3J3H5TeOkVqa18/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex MmQzNzQwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTJmY2NlMWMwMWE4MTY1MDZiOTZmNWZhOTE5MjFmOTFhZDZjNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJn/nGEF7sOV/AKy82BkoRNS+lPr 4zFPBjFauTMp2IujbqEeryy9ygHPNmrVULDhY+/hAqIpCvQRNAjTrVd26UO8HdZY IX9E/RXFKzjlPMynGdectoxWL5+LB4p7BKQWeATB7a15VFUnmxDtw7GoVPvuKXy7 5yO5Rt3d07eMGXddJFf47UoHh8uakvLgstFTu058O3K3MS6X3IwwKaem+TF7bpyR GDinijR6a8P3X3sh90kIQgdIuhecso0xha6z1fLKQQjc6DDumWVvjRqr6nqtd8bL 49hcwWvY1PuyFOV/+/mzwj0dwcWcZXsAkd6Mc+QFrkj78CwDLPqEXzQ4nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFUvzOHAGoFlBrlvX6kZIfka1sXjMB8GA1UdIwQY MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt ZDIyOTY3ZTIyZWYwLzEvVlNfTTRjQWFnV1VHdVc5ZnFSa2gtUnJXeGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS7AMA0G CSqGSIb3DQEBCwUAA4IBAQBMbtOOtTGO4kvDG1bBRWz8ko8kJ0IQ9TK9Waeha+gR pM8y3JV20p5+jSJnzra5S+Du3hfsKWyH9pPFcqc/qk3rPCTVfT8LCCxF1l9bO6Pw ThWTDPgbfj+AYY0diORM7Y5WHuhFCft+F4rycZhi+NqRhovE8QS5GiL8qsLrqw02 9biqHpGEhMDO2Z1uaP/so0z6hSUFhxckewGUFy9Wx/7cDjs4OujfGygcydvtc81D Yr1eh9Hq4ob+G3fSBzzbG8/Zbmdo9P0VT47gcfZg+uqTOtj/ifd5VNCpFX50KLcc q1V0lzYypltZsGdASgUOwIfOnzcrSztNbF5MHToe19cT -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:26 2026 by rpki-client