This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/vM4pcQR4cpfxqBvoAa4ezpfAooA.roa File: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (raw, json) Hash identifier: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM= Subject key identifier: BC:CE:29:71:04:78:72:97:F1:A8:1B:E8:01:AE:1E:CE:97:C0:A2:80 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019B7A5B147561CD8D11C8E20BB280B201B7 Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/vM4pcQR4cpfxqBvoAa4ezpfAooA.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 192.124.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:14:75:61:cd:8d:11:c8:e2:0b:b2:80:b2:01:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcce297104787297f1a81be801ae1ece97c0a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:b1:43:ab:7b:b8:03:09:d1:5a:76:72:55: 57:2a:d6:6f:f6:dd:23:07:af:27:12:0f:a0:a1:b0: aa:8e:97:b9:60:d8:c8:d0:43:a8:e9:e7:69:f2:bd: 09:c0:a5:7c:ae:a4:8f:9a:df:4e:a6:ae:fc:f8:c9: 05:9f:e8:86:70:ed:dd:f1:03:76:c4:8a:63:25:7d: 92:2b:10:58:8e:d1:ad:b6:c2:a4:6a:b0:92:70:bc: 19:ba:66:f4:8d:50:04:e5:da:a1:a9:38:4c:36:a6: 60:16:e0:d6:0b:2c:2a:5b:67:ff:f9:01:e1:50:c5: f5:94:63:d7:83:6c:6d:92:e0:19:5c:dd:5a:70:c6: 46:f1:eb:e8:30:4d:ae:1a:63:03:cc:c6:94:18:84: 5c:37:c1:45:c3:34:71:78:ae:4d:6e:4a:7b:52:f5: 7a:94:a5:b5:fe:ba:bf:0c:40:b9:c3:83:71:9f:34: 8d:a2:ca:75:46:0d:b0:ba:1d:3a:f4:ae:bd:34:22: d2:ad:17:a5:27:cc:48:a1:4b:a6:50:5f:a4:37:60: 3c:27:63:c1:51:c6:24:66:84:f6:a8:1b:86:f9:6c: af:0f:27:81:43:f1:58:b4:e1:b5:f8:e3:ef:db:4e: f6:3a:dc:c6:50:03:34:1f:b2:10:6c:1a:f0:df:07: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:29:71:04:78:72:97:F1:A8:1B:E8:01:AE:1E:CE:97:C0:A2:80 X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/vM4pcQR4cpfxqBvoAa4ezpfAooA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.201.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:00:54:2b:15:80:6b:a8:dd:54:d5:9e:d6:1d:57:b0:5f:3f: 32:ab:ad:65:cd:75:89:1e:1b:10:26:3c:ae:23:62:07:63:50: 58:4a:72:c9:34:13:98:8b:20:84:d5:e7:8b:89:86:65:31:d3: c0:aa:80:5d:7b:a3:54:98:30:1d:17:3a:ba:50:1d:ce:cc:20: 0c:b5:4b:bd:21:cf:49:10:d5:f4:3a:96:a1:c4:06:2b:9c:9e: 9e:2c:32:97:b8:c8:86:ab:00:1c:b4:06:a6:80:4b:f8:7c:cc: 71:24:72:f7:e0:b3:0a:c8:a0:13:59:ff:a2:57:1e:85:c8:67: 4c:c7:21:3c:cb:30:ce:19:36:71:63:2c:a4:ba:a1:ac:98:7c: 44:00:02:68:cd:29:ba:41:6c:99:17:d5:53:be:9a:29:88:32: 1e:e0:41:bb:5c:8b:a1:a4:48:71:23:53:df:45:ae:3e:4e:85: 58:dc:54:34:bd:46:46:3d:73:94:8a:15:d9:74:eb:5a:66:d7: 72:9c:45:a8:68:63:4c:dd:ca:72:5d:ed:5c:93:5e:94:5e:d3: d0:13:ea:3c:f4:1a:76:3e:de:15:f0:56:63:61:1e:4b:ea:fe: 47:99:83:90:06:37:16:39:e8:51:a3:cc:47:38:27:21:9f:75: d4:1e:52:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxR1Yc2NEcjiC7KAsgG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2NlMjk3MTA0Nzg3Mjk3ZjFhODFiZTgwMWFlMWVjZTk3YzBhMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+xQ6t7uAMJ0Vp2clVXKtZv9t0j B68nEg+gobCqjpe5YNjI0EOo6edp8r0JwKV8rqSPmt9Opq78+MkFn+iGcO3d8QN2 xIpjJX2SKxBYjtGttsKkarCScLwZumb0jVAE5dqhqThMNqZgFuDWCywqW2f/+QHh UMX1lGPXg2xtkuAZXN1acMZG8evoME2uGmMDzMaUGIRcN8FFwzRxeK5Nbkp7UvV6 lKW1/rq/DEC5w4NxnzSNosp1Rg2wuh069K69NCLSrRelJ8xIoUumUF+kN2A8J2PB UcYkZoT2qBuG+WyvDyeBQ/FYtOG1+OPv2072OtzGUAM0H7IQbBrw3wd4CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzOKXEEeHKX8agb6AGuHs6XwKKAMB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvdk00cGNRUjRjcGZ4cUJ2b0FhNGV6cGZBb29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHzJMA0G CSqGSIb3DQEBCwUAA4IBAQBrAFQrFYBrqN1U1Z7WHVewXz8yq61lzXWJHhsQJjyu I2IHY1BYSnLJNBOYiyCE1eeLiYZlMdPAqoBde6NUmDAdFzq6UB3OzCAMtUu9Ic9J ENX0OpahxAYrnJ6eLDKXuMiGqwActAamgEv4fMxxJHL34LMKyKATWf+iVx6FyGdM xyE8yzDOGTZxYyykuqGsmHxEAAJozSm6QWyZF9VTvpopiDIe4EG7XIuhpEhxI1Pf Ra4+ToVY3FQ0vUZGPXOUihXZdOtaZtdynEWoaGNM3cpyXe1ck16UXtPQE+o89Bp2 Pt4V8FZjYR5L6v5HmYOQBjcWOehRo8xHOCchn3XUHlKQ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:30 2026 by rpki-client