This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/VvJI38JGDekOxVcMxVaYWILfhDA.roa File: VvJI38JGDekOxVcMxVaYWILfhDA.roa (raw, json) Hash identifier: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI= Subject key identifier: 56:F2:48:DF:C2:46:0D:E9:0E:C5:57:0C:C5:56:98:58:82:DF:84:30 Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b Certificate serial: 019B7E39223125DC85F09315805B625C3EFC Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/VvJI38JGDekOxVcMxVaYWILfhDA.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205209 IP address blocks: 141.226.250.0/23 maxlen: 23 141.226.250.0/24 maxlen: 24 185.223.0.0/22 maxlen: 22 2a0d:2800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:22:31:25:dc:85:f0:93:15:80:5b:62:5c:3e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56f248dfc2460de90ec5570cc556985882df8430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:58:cf:ea:a8:00:85:5d:9e:42:c8:22:17: 01:72:2f:ae:31:22:f0:a6:a6:e1:0e:b8:86:55:9d: d6:35:4e:24:f2:cd:b7:ff:5d:dd:e1:12:86:7b:c3: 69:2e:71:e2:db:59:f9:37:ce:ba:39:d8:6f:16:1e: ab:44:99:75:5f:fa:91:8c:79:fa:40:65:13:91:af: de:38:2c:a9:18:d0:bf:08:17:12:06:d5:ff:14:30: 73:7d:f0:34:aa:e0:48:e1:e0:72:98:9f:31:28:aa: ec:0d:6b:89:1f:f7:a8:ad:e9:58:86:34:d0:43:fd: 4d:bc:91:81:f6:84:58:69:a4:07:fd:22:9a:b2:f1: 51:a8:58:00:6f:e8:0d:b1:3b:a2:f1:44:4a:d0:6d: d5:69:6f:13:21:1d:3f:58:32:c8:2f:68:d8:ae:1c: 06:15:21:40:9a:6a:ea:6d:5e:3d:ed:3a:fa:f5:32: 8c:62:b3:1f:b2:ca:26:91:d6:57:6d:52:48:94:3a: a2:d5:45:d6:ca:65:7a:99:c0:85:25:63:62:24:23: db:65:23:bf:42:11:9b:4f:43:53:72:57:d9:42:3a: d4:bf:3e:12:39:b0:86:af:0b:da:df:e8:a3:60:d9: 63:aa:6c:c9:c4:55:4d:55:b1:f9:4a:c3:4e:5b:c7: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F2:48:DF:C2:46:0D:E9:0E:C5:57:0C:C5:56:98:58:82:DF:84:30 X509v3 Authority Key Identifier: keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/VvJI38JGDekOxVcMxVaYWILfhDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.250.0/23 185.223.0.0/22 IPv6: 2a0d:2800::/29 Signature Algorithm: sha256WithRSAEncryption 8b:3f:3b:04:02:8f:f6:8f:fa:9e:54:c6:3c:78:32:2e:29:fa: 37:5d:40:b3:fb:da:03:54:c7:2f:22:27:81:9a:2e:40:44:38: fc:c8:81:47:80:e7:b0:e3:ea:d1:4b:aa:c5:5c:df:3e:80:8d: b4:72:52:52:9c:a2:db:cb:fa:bf:f2:b3:90:9c:86:6b:86:32: 20:47:58:96:dd:66:33:a2:90:61:57:e8:b0:7f:65:51:c5:88: 07:26:76:20:ff:a4:9c:55:6c:2d:92:1f:b2:d8:4d:ca:70:16: 16:30:ae:a8:29:40:12:15:86:ca:d8:af:0c:43:54:b6:60:9d: 34:30:ad:98:34:62:02:85:98:02:bb:a2:a6:a8:cf:08:a3:83: 07:4f:97:37:7d:4f:6d:de:37:59:32:11:ba:d7:8e:94:85:0f: 84:0a:d4:7e:fa:21:81:33:56:45:4d:19:52:74:7b:93:1f:1d: 36:76:6c:a0:68:f6:18:d7:6d:0c:b7:bd:c4:b5:6b:8d:00:73: e9:d3:1a:d3:7c:0a:bc:b2:07:d8:b9:72:13:24:9a:93:c7:c7: 17:77:bd:02:c4:d8:f1:3a:e3:a6:94:2d:7a:36:cc:01:d8:3f: de:5d:ff:db:df:a4:3b:29:52:fc:9f:b6:e1:c6:40:65:f9:33: aa:78:7c:b8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OSIxJdyF8JMVgFtiXD78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTc1NTMyOTJhZjU5NTQyNmVlMWQ3ZGM5MTlhMjEwNDg5 NDc1MmIwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmYyNDhkZmMyNDYwZGU5MGVjNTU3MGNjNTU2OTg1ODgyZGY4NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+xYz+qoAIVdnkLIIhcBci+uMSLw pqbhDriGVZ3WNU4k8s23/13d4RKGe8NpLnHi21n5N866OdhvFh6rRJl1X/qRjHn6 QGUTka/eOCypGNC/CBcSBtX/FDBzffA0quBI4eBymJ8xKKrsDWuJH/eorelYhjTQ Q/1NvJGB9oRYaaQH/SKasvFRqFgAb+gNsTui8URK0G3VaW8TIR0/WDLIL2jYrhwG FSFAmmrqbV497Tr69TKMYrMfssomkdZXbVJIlDqi1UXWymV6mcCFJWNiJCPbZSO/ QhGbT0NTclfZQjrUvz4SObCGrwva3+ijYNljqmzJxFVNVbH5SsNOW8e0NwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFbySN/CRg3pDsVXDMVWmFiC34QwMB8GA1UdIwQY MBaAFGTnVTKSr1lUJu4dfckZohBIlHUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAt YzE0ZmFmNDNiZTE0LzEvVnZKSTM4SkdEZWtPeFZjTXhWYVlXSUxmaERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAtYzE0ZmFmNDNiZTE0 LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBjeL6AwQC ud8AMA0EAgACMAcDBQMqDSgAMA0GCSqGSIb3DQEBCwUAA4IBAQCLPzsEAo/2j/qe VMY8eDIuKfo3XUCz+9oDVMcvIieBmi5ARDj8yIFHgOew4+rRS6rFXN8+gI20clJS nKLby/q/8rOQnIZrhjIgR1iW3WYzopBhV+iwf2VRxYgHJnYg/6ScVWwtkh+y2E3K cBYWMK6oKUASFYbK2K8MQ1S2YJ00MK2YNGIChZgCu6KmqM8Io4MHT5c3fU9t3jdZ MhG6146UhQ+ECtR++iGBM1ZFTRlSdHuTHx02dmygaPYY120Mt73EtWuNAHPp0xrT fAq8sgfYuXITJJqTx8cXd70CxNjxOuOmlC16NswB2D/eXf/b36Q7KVL8n7bhxkBl +TOqeHy4 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:30 2026 by rpki-client