This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa File: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (raw, json) Hash identifier: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0= Subject key identifier: 54:19:74:BE:19:19:D2:9E:61:D7:75:49:30:7C:ED:DB:0A:EC:43:B0 Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Certificate serial: 019B7F13B64A26FD83EAB4538F607C4B89D6 Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa Signing time: Fri 02 Jan 2026 14:19:16 +0000 ROA not before: Fri 02 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33965 IP address blocks: 193.47.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b6:4a:26:fd:83:ea:b4:53:8f:60:7c:4b:89:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Validity Not Before: Jan 2 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=541974be1919d29e61d77549307ceddb0aec43b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:3f:cf:f7:97:43:6e:e9:c3:a9:f8:3d:f2: e2:c5:74:bc:4b:8f:51:e3:b2:9d:e6:d0:a6:37:36: e5:c6:43:fc:ef:69:50:97:e3:39:24:5a:ac:0a:35: 6e:52:ef:02:c7:3b:3a:e3:3e:38:b5:05:da:6d:48: 67:b2:d7:cb:2a:7f:35:12:7b:8b:3f:63:66:24:72: 83:0a:d6:3d:45:5a:10:48:81:56:02:e5:25:d5:b6: f3:c5:90:66:12:c5:bf:df:2a:c7:97:ce:ec:80:cd: c9:72:8f:89:32:ac:33:e5:b7:24:73:6b:71:b7:03: cd:3a:2a:65:b2:77:c1:eb:0f:ac:26:0a:52:c0:c3: 56:20:76:a0:67:46:0c:b8:5f:52:a7:fa:c1:81:87: 43:34:fa:b1:3f:8a:90:bd:ac:9a:e2:b4:b9:f1:53: 25:6e:9b:73:20:9f:95:3c:e3:03:ea:de:f2:6c:69: 52:a9:0a:12:ec:6f:be:86:bd:39:5e:1b:0d:42:ca: 75:e8:d8:b0:09:89:f3:32:69:1a:c1:77:06:88:48: b7:fe:e7:75:af:56:b5:79:dd:3d:96:3f:28:6e:83: 2f:ec:dd:62:16:04:6c:1f:da:1f:fc:ea:0c:37:03: 24:80:fd:4b:7e:43:f8:b5:df:41:a7:30:81:b3:c0: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:19:74:BE:19:19:D2:9E:61:D7:75:49:30:7C:ED:DB:0A:EC:43:B0 X509v3 Authority Key Identifier: keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.132.0/22 Signature Algorithm: sha256WithRSAEncryption 83:31:10:27:a6:c2:e3:32:f4:92:96:c8:d7:9f:28:d9:a0:89: 47:17:86:bb:f8:26:68:e4:33:de:e6:86:55:c4:ac:81:6e:a4: ce:6a:64:18:f9:9c:b2:a3:20:2a:11:ca:5b:68:1e:00:4d:32: ea:bd:68:53:69:56:76:1d:2a:f0:49:4a:f9:0e:71:4c:7d:60: 13:76:55:0a:d1:69:23:84:e3:3d:59:46:8a:13:09:ed:d1:83: d6:dd:8d:2a:03:27:1b:9b:98:f6:f4:3d:e1:12:eb:61:89:0e: 1f:55:10:10:b7:1b:08:0b:55:6f:d3:fb:0a:ba:ec:72:07:66: 9b:f9:1b:77:af:3c:be:fe:9a:46:45:64:65:4a:33:02:e7:88: 24:52:6a:22:3c:37:3b:66:80:41:da:35:9c:fd:4c:ec:0d:33: 07:7a:c6:67:a7:dd:1a:8a:7f:6a:7e:9f:5f:20:0d:79:07:4b: 21:21:b2:4c:81:40:f9:cd:87:76:a8:51:ba:55:f1:b1:fc:3c: b0:56:a9:79:9c:f1:20:af:89:fc:85:32:db:05:89:af:64:41: 7e:ca:9f:42:b0:56:eb:34:6d:1d:d3:d5:c3:95:33:45:1e:39: 48:47:eb:01:c3:5e:f8:71:d2:f9:34:10:1a:d7:1e:ac:f2:f3: 35:8c:f8:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E7ZKJv2D6rRTj2B8S4nWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll NWQ0ZTIwHhcNMjYwMTAyMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDE5NzRiZTE5MTlkMjllNjFkNzc1NDkzMDdjZWRkYjBhZWM0M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbA/z/eXQ27pw6n4PfLixXS8S49R 47Kd5tCmNzblxkP872lQl+M5JFqsCjVuUu8Cxzs64z44tQXabUhnstfLKn81EnuL P2NmJHKDCtY9RVoQSIFWAuUl1bbzxZBmEsW/3yrHl87sgM3Jco+JMqwz5bckc2tx twPNOiplsnfB6w+sJgpSwMNWIHagZ0YMuF9Sp/rBgYdDNPqxP4qQvaya4rS58VMl bptzIJ+VPOMD6t7ybGlSqQoS7G++hr05XhsNQsp16NiwCYnzMmkawXcGiEi3/ud1 r1a1ed09lj8oboMv7N1iFgRsH9of/OoMNwMkgP1LfkP4td9BpzCBs8BBuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQZdL4ZGdKeYdd1STB87dsK7EOwMB8GA1UdIwQY MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt MzQwZmFjM2Y2YmFmLzEvVkJsMHZoa1owcDVoMTNWSk1IenQyd3JzUTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwS+EMA0G CSqGSIb3DQEBCwUAA4IBAQCDMRAnpsLjMvSSlsjXnyjZoIlHF4a7+CZo5DPe5oZV xKyBbqTOamQY+ZyyoyAqEcpbaB4ATTLqvWhTaVZ2HSrwSUr5DnFMfWATdlUK0Wkj hOM9WUaKEwnt0YPW3Y0qAycbm5j29D3hEuthiQ4fVRAQtxsIC1Vv0/sKuuxyB2ab +Rt3rzy+/ppGRWRlSjMC54gkUmoiPDc7ZoBB2jWc/UzsDTMHesZnp90ain9qfp9f IA15B0shIbJMgUD5zYd2qFG6VfGx/DywVql5nPEgr4n8hTLbBYmvZEF+yp9CsFbr NG0d09XDlTNFHjlIR+sBw174cdL5NBAa1x6s8vM1jPgi -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:52 2026 by rpki-client