This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa File: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (raw, json) Hash identifier: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM= Subject key identifier: 54:1E:D7:3B:4C:A6:4E:B1:66:5F:0A:85:C2:C4:20:A9:57:CB:79:1C Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B7F14E39720EF707E5EEE3D78F8A27A17 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8468 IP address blocks: 151.236.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e3:97:20:ef:70:7e:5e:ee:3d:78:f8:a2:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=541ed73b4ca64eb1665f0a85c2c420a957cb791c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:d9:49:a4:04:f8:3f:1b:42:47:e9:49:42: 34:65:62:3d:53:14:8f:ac:da:77:18:69:21:07:22: 3f:81:7a:f3:57:ba:61:d2:5c:ff:ab:d6:14:b7:62: c3:79:7c:30:9e:86:c0:fc:f3:50:36:00:e2:63:25: 55:3f:08:7b:c4:4f:24:bf:bd:46:bc:a4:df:27:30: e4:17:bc:d0:97:10:8c:39:62:38:44:a4:dd:44:17: af:04:69:14:3e:31:08:14:60:36:02:9f:e4:23:a3: e0:b7:43:70:2e:4d:80:b8:26:c1:37:f7:c1:a6:51: 4f:f5:c0:d4:d6:cf:84:0a:c9:5e:22:55:82:7b:17: bc:94:ed:64:ea:03:a8:84:ad:a5:91:34:2b:7c:95: b9:05:86:17:0a:dd:09:ac:94:a6:04:85:59:24:55: ce:98:cf:de:7a:9b:b8:fe:fb:bd:aa:64:f7:cf:05: e5:b3:eb:87:39:06:41:9a:66:2d:74:a2:57:4d:69: 71:84:a9:30:12:3c:f2:25:05:cc:5d:1f:83:bd:66: 90:8b:b7:cc:19:d4:86:31:08:de:91:69:45:45:28: 5b:e2:6c:42:87:cc:9e:1e:cf:a5:9c:1d:0f:5f:be: 89:83:d7:20:c7:16:20:ab:67:b4:48:38:d5:86:f1: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:D7:3B:4C:A6:4E:B1:66:5F:0A:85:C2:C4:20:A9:57:CB:79:1C X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.236.208.0/23 Signature Algorithm: sha256WithRSAEncryption 09:e8:3c:b2:9d:e3:3c:bd:a0:eb:f5:92:49:d2:75:c4:8a:9d: d2:19:c8:09:91:33:11:ff:63:cc:ca:85:c7:3c:9f:11:f6:ac: 74:70:55:aa:a1:4b:be:3a:f8:da:21:69:88:e5:76:cd:cf:57: 71:cd:da:3e:0c:43:9a:08:fe:ee:3f:3c:93:c5:29:5b:56:30: 37:dc:e8:74:7d:da:03:8d:0e:0a:81:03:6b:d1:b6:0d:b2:8c: 35:c6:c1:8b:e0:17:2c:2f:fa:31:c0:98:59:41:a7:0a:d1:f6: ff:cb:59:80:e2:10:25:9f:0c:38:21:92:c4:a5:f5:a3:0d:24: 47:1e:1f:da:c4:8b:d9:2b:35:a9:ea:4c:49:57:7f:bb:cc:7b: 21:9c:88:d9:d5:61:83:af:95:44:20:42:df:47:91:90:e8:81: c0:8b:e1:18:ac:59:08:c4:d3:51:b1:cb:b0:33:13:b4:79:10: 1d:45:f0:0b:42:70:82:8b:70:8d:79:a1:46:e6:a6:2d:91:84: 77:c7:8c:d5:81:fb:26:a9:a0:aa:44:42:0d:81:16:65:ff:d6: b2:68:fe:ef:8f:ab:68:1a:4c:c9:e4:37:30:07:46:19:49:2f: 6e:cd:62:25:07:04:cb:b9:b6:9b:02:ca:ea:7e:53:e2:7d:e8: e6:1a:d1:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FOOXIO9wfl7uPXj4onoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDFlZDczYjRjYTY0ZWIxNjY1ZjBhODVjMmM0MjBhOTU3Y2I3OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjLZSaQE+D8bQkfpSUI0ZWI9UxSP rNp3GGkhByI/gXrzV7ph0lz/q9YUt2LDeXwwnobA/PNQNgDiYyVVPwh7xE8kv71G vKTfJzDkF7zQlxCMOWI4RKTdRBevBGkUPjEIFGA2Ap/kI6Pgt0NwLk2AuCbBN/fB plFP9cDU1s+ECsleIlWCexe8lO1k6gOohK2lkTQrfJW5BYYXCt0JrJSmBIVZJFXO mM/eepu4/vu9qmT3zwXls+uHOQZBmmYtdKJXTWlxhKkwEjzyJQXMXR+DvWaQi7fM GdSGMQjekWlFRShb4mxCh8yeHs+lnB0PX76Jg9cgxxYgq2e0SDjVhvF+IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQe1ztMpk6xZl8KhcLEIKlXy3kcMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEvVkI3WE8weW1UckZtWHdxRndzUWdxVmZMZVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl+zQMA0G CSqGSIb3DQEBCwUAA4IBAQAJ6DyyneM8vaDr9ZJJ0nXEip3SGcgJkTMR/2PMyoXH PJ8R9qx0cFWqoUu+OvjaIWmI5XbNz1dxzdo+DEOaCP7uPzyTxSlbVjA33Oh0fdoD jQ4KgQNr0bYNsow1xsGL4BcsL/oxwJhZQacK0fb/y1mA4hAlnww4IZLEpfWjDSRH Hh/axIvZKzWp6kxJV3+7zHshnIjZ1WGDr5VEIELfR5GQ6IHAi+EYrFkIxNNRscuw MxO0eRAdRfALQnCCi3CNeaFG5qYtkYR3x4zVgfsmqaCqREINgRZl/9ayaP7vj6to GkzJ5DcwB0YZSS9uzWIlBwTLubabAsrqflPifejmGtGR -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:27 2026 by rpki-client