This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VaeCaebzrSDwQCXgIDqv3Ak_woQ.roa File: VaeCaebzrSDwQCXgIDqv3Ak_woQ.roa (raw, json) Hash identifier: ubQJ80qYrGeWjOdTLg7JXBZ+61VxNBFJssDNZA+CiPo= Subject key identifier: 55:A7:82:69:E6:F3:AD:20:F0:40:25:E0:20:3A:AF:DC:09:3F:C2:84 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F62961C8521F9E5B551A871FE68BB Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VaeCaebzrSDwQCXgIDqv3Ak_woQ.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205308 IP address blocks: 77.79.201.0/24 maxlen: 24 206.252.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:62:96:1c:85:21:f9:e5:b5:51:a8:71:fe:68:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55a78269e6f3ad20f04025e0203aafdc093fc284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:62:8a:2e:16:ee:fe:2b:99:3d:4f:5a:43: 1d:da:c3:71:d5:72:1f:94:36:9f:0c:8c:4f:68:82: 6c:b8:43:6a:19:80:16:18:8c:57:b4:ad:51:26:9c: e0:84:84:c1:b7:d2:06:ad:20:eb:a9:b3:6e:7b:f2: 2a:3d:db:41:e4:fc:c1:37:49:ef:d7:b9:a5:8c:8c: 68:4d:d1:55:7d:e5:e0:40:6a:b7:56:8b:36:ac:69: d1:97:94:4c:91:c9:13:d7:2c:c7:bd:90:2c:7e:4a: 1b:7b:f0:16:88:b9:26:45:18:87:17:ac:b8:70:91: 2d:6a:c8:f9:41:2f:a9:12:9d:2f:09:2c:5d:68:d5: 98:d9:1a:c6:0a:ce:55:05:a4:86:aa:09:90:ef:2e: 99:63:e7:89:de:dc:b2:bd:b9:df:67:13:0d:f4:4f: 8a:01:0a:14:07:90:63:c9:ed:f5:52:9b:cc:c2:a6: 2b:9d:fe:45:f9:bd:60:37:15:c2:2e:8d:6c:01:f8: 7c:c8:ee:08:f7:5a:ac:1b:1d:31:83:af:4c:82:7e: 01:c4:02:d2:62:5d:c8:0f:02:03:5d:84:9b:75:1e: 82:31:3f:fe:c5:f8:46:85:c1:2c:5d:89:7b:db:06: 16:73:13:c7:61:cb:96:a3:da:95:54:e1:a7:da:f7: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A7:82:69:E6:F3:AD:20:F0:40:25:E0:20:3A:AF:DC:09:3F:C2:84 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/VaeCaebzrSDwQCXgIDqv3Ak_woQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.79.201.0/24 206.252.224.0/24 Signature Algorithm: sha256WithRSAEncryption a7:87:8c:39:6b:5a:63:62:91:3e:8f:d1:f6:8e:c5:86:29:83: eb:23:72:d6:88:c4:44:1c:14:70:42:95:cb:f8:90:f0:bb:71: 42:bb:dd:c3:4b:8e:f8:20:7a:6e:63:c6:94:83:68:a7:28:3a: 23:38:44:ed:ce:1a:11:22:08:4a:72:7f:92:59:6f:3b:72:3d: 6b:2a:2d:42:1e:d6:02:bd:16:60:57:4d:81:d6:c1:5c:44:bb: c9:a3:b5:05:32:51:3a:5f:fb:44:3c:5c:56:06:84:1c:fc:32: 4d:73:a7:3f:e0:f2:c1:2e:a9:dc:db:9d:2b:d0:75:a3:e0:06: 40:c8:d6:35:56:9a:1e:78:3c:de:8c:8d:d7:c4:67:08:81:1e: b4:3c:dc:9f:77:46:70:d3:9d:10:68:16:11:24:33:2b:e0:c6: 47:e6:0e:f3:34:3c:c2:ea:65:0e:67:06:76:a2:9e:b5:dd:dd: 20:a7:f2:60:07:94:37:6f:19:b6:f6:10:15:a2:53:e4:6b:2a: 50:00:81:77:81:a4:c4:b5:1f:98:28:69:cf:3c:d5:db:12:88: 2d:7c:e0:19:9d:23:07:bc:d3:fd:83:1d:32:60:8f:61:88:40: 62:3e:5e:80:76:57:e9:ca:de:6d:b2:6e:bf:ee:0b:f7:c1:cc: 5a:09:a1:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f2KWHIUh+eW1Uahx/mi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWE3ODI2OWU2ZjNhZDIwZjA0MDI1ZTAyMDNhYWZkYzA5M2ZjMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMtiii4W7v4rmT1PWkMd2sNx1XIf lDafDIxPaIJsuENqGYAWGIxXtK1RJpzghITBt9IGrSDrqbNue/IqPdtB5PzBN0nv 17mljIxoTdFVfeXgQGq3Vos2rGnRl5RMkckT1yzHvZAsfkobe/AWiLkmRRiHF6y4 cJEtasj5QS+pEp0vCSxdaNWY2RrGCs5VBaSGqgmQ7y6ZY+eJ3tyyvbnfZxMN9E+K AQoUB5Bjye31UpvMwqYrnf5F+b1gNxXCLo1sAfh8yO4I91qsGx0xg69Mgn4BxALS Yl3IDwIDXYSbdR6CMT/+xfhGhcEsXYl72wYWcxPHYcuWo9qVVOGn2vdYQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFWngmnm860g8EAl4CA6r9wJP8KEMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvVmFlQ2FlYnpyU0R3UUNYZ0lEcXYzQWtfd29RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATU/JAwQA zvzgMA0GCSqGSIb3DQEBCwUAA4IBAQCnh4w5a1pjYpE+j9H2jsWGKYPrI3LWiMRE HBRwQpXL+JDwu3FCu93DS474IHpuY8aUg2inKDojOETtzhoRIghKcn+SWW87cj1r Ki1CHtYCvRZgV02B1sFcRLvJo7UFMlE6X/tEPFxWBoQc/DJNc6c/4PLBLqnc250r 0HWj4AZAyNY1VpoeeDzejI3XxGcIgR60PNyfd0Zw050QaBYRJDMr4MZH5g7zNDzC 6mUOZwZ2op613d0gp/JgB5Q3bxm29hAVolPkaypQAIF3gaTEtR+YKGnPPNXbEogt fOAZnSMHvNP9gx0yYI9hiEBiPl6Adlfpyt5tsm6/7gv3wcxaCaFK -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:04 2026 by rpki-client