This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/vMZUucYgT5z0znQZnRF-dVJeRiE.roa File: vMZUucYgT5z0znQZnRF-dVJeRiE.roa (raw, json) Hash identifier: W7+gTHKhQj/8XXemyZ/NzWsuUf16BLgdFCj756C84Vo= Subject key identifier: BC:C6:54:B9:C6:20:4F:9C:F4:CE:74:19:9D:11:7E:75:52:5E:46:21 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED1F8D2E181D711100431E5B7D8FD3 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/vMZUucYgT5z0znQZnRF-dVJeRiE.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200633 IP address blocks: 194.181.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:8d:2e:18:1d:71:11:00:43:1e:5b:7d:8f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcc654b9c6204f9cf4ce74199d117e75525e4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:d2:6d:70:fd:d9:ef:86:2d:03:c5:8c:f9: fb:17:85:15:68:0e:dd:47:13:1c:81:b9:90:13:1b: 1c:6e:1c:6d:8e:59:d3:7b:bb:f6:78:72:39:78:95: 94:16:9c:14:d0:6e:81:e2:c5:29:ff:f6:8f:5e:e0: 27:4c:76:35:14:26:f7:ef:f0:00:9b:04:6b:5c:95: e2:43:c8:4c:fc:d9:57:eb:3d:39:71:c8:92:2a:b9: fd:d8:24:3f:fa:56:19:bf:c6:a6:5f:c2:a5:a0:4a: d5:72:ab:49:bd:cf:a4:2b:c8:7e:aa:d8:1e:7b:8a: 69:20:97:e4:24:d9:17:d2:4d:9c:e2:ea:e4:88:86: 50:3d:2c:ef:9b:f7:3d:09:27:51:bf:cf:f0:88:5e: 77:d3:78:ee:f0:eb:bc:6c:17:3f:7d:a1:fa:d9:de: 06:8d:4e:1f:7b:7a:af:64:85:d2:46:81:9a:b3:c7: 51:16:28:40:19:3a:b6:c3:ad:47:d4:7d:e8:97:5d: a7:17:6a:ab:11:fe:ba:f1:d7:73:a0:8e:9d:8b:8f: 68:7e:ea:f2:3c:7e:b5:5f:40:7c:20:38:6e:0e:23: 35:39:bb:ee:ca:31:12:35:e2:50:b5:eb:9c:06:fa: d9:12:be:41:87:fc:fd:f5:0e:b5:1a:ca:d9:61:c3: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C6:54:B9:C6:20:4F:9C:F4:CE:74:19:9D:11:7E:75:52:5E:46:21 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/vMZUucYgT5z0znQZnRF-dVJeRiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.181.51.0/24 Signature Algorithm: sha256WithRSAEncryption 60:7f:04:51:29:0a:11:05:97:83:d7:ce:85:7d:f3:7f:cb:16: 5a:8b:0d:12:3a:e2:e9:8f:5a:16:bc:68:ac:fe:de:bb:9d:0c: a3:65:af:e8:6c:98:6b:bd:0b:74:99:af:e5:72:4c:70:85:d9: be:13:af:32:a3:1d:8c:43:04:d2:10:1b:14:87:d1:c8:f3:69: 63:b5:6f:2c:6d:1f:44:20:14:9b:b4:95:57:01:b3:f1:e6:ba: 47:53:0d:20:d5:3e:53:48:22:ae:a3:18:ae:db:2d:fd:87:30: 92:f5:fb:ff:4e:18:13:88:cc:2e:9c:48:57:6b:32:19:a8:88: 57:c7:1f:61:6a:14:34:04:65:c0:72:d4:61:e1:c8:22:05:1a: 46:77:45:b9:1f:58:32:ed:4f:17:1e:b6:3a:67:d9:1d:b4:cc: e3:57:1f:2d:e5:69:59:b0:1a:ce:e6:7b:cc:20:66:15:d1:9f: a7:9b:89:d6:e9:93:42:9c:15:bc:a0:9d:df:6b:4b:4c:bb:d5: 5b:f9:ab:01:c9:a4:be:e1:20:cb:47:28:f5:e2:bc:a4:ab:4d: de:63:e9:ea:7c:f1:6e:07:09:80:33:75:ea:e7:65:c4:bd:81: df:96:f5:7e:4b:5c:64:aa:43:f1:b2:73:c0:25:77:c1:87:f2: 86:57:6e:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R+NLhgdcREAQx5bfY/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2M2NTRiOWM2MjA0ZjljZjRjZTc0MTk5ZDExN2U3NTUyNWU0NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CHSbXD92e+GLQPFjPn7F4UVaA7d RxMcgbmQExscbhxtjlnTe7v2eHI5eJWUFpwU0G6B4sUp//aPXuAnTHY1FCb37/AA mwRrXJXiQ8hM/NlX6z05cciSKrn92CQ/+lYZv8amX8KloErVcqtJvc+kK8h+qtge e4ppIJfkJNkX0k2c4urkiIZQPSzvm/c9CSdRv8/wiF5303ju8Ou8bBc/faH62d4G jU4fe3qvZIXSRoGas8dRFihAGTq2w61H1H3ol12nF2qrEf668ddzoI6di49ofury PH61X0B8IDhuDiM1ObvuyjESNeJQteucBvrZEr5Bh/z99Q61GsrZYcOzNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzGVLnGIE+c9M50GZ0RfnVSXkYhMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvdk1aVXVjWWdUNXowem5RWm5SRi1kVkplUmlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrUzMA0G CSqGSIb3DQEBCwUAA4IBAQBgfwRRKQoRBZeD186FffN/yxZaiw0SOuLpj1oWvGis /t67nQyjZa/obJhrvQt0ma/lckxwhdm+E68yox2MQwTSEBsUh9HI82ljtW8sbR9E IBSbtJVXAbPx5rpHUw0g1T5TSCKuoxiu2y39hzCS9fv/ThgTiMwunEhXazIZqIhX xx9hahQ0BGXActRh4cgiBRpGd0W5H1gy7U8XHrY6Z9kdtMzjVx8t5WlZsBrO5nvM IGYV0Z+nm4nW6ZNCnBW8oJ3fa0tMu9Vb+asByaS+4SDLRyj14rykq03eY+nqfPFu BwmAM3Xq52XEvYHflvV+S1xkqkPxsnPAJXfBh/KGV26U -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:43 2026 by rpki-client