This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/VeUDemYMUkamvLNvu71jm8kXCWQ.roa File: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (raw, json) Hash identifier: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8= Subject key identifier: 55:E5:03:7A:66:0C:52:46:A6:BC:B3:6F:BB:BD:63:9B:C9:17:09:64 Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019B76EB21B4D190298A3D502E190FBEA0D2 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/VeUDemYMUkamvLNvu71jm8kXCWQ.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58431 IP address blocks: 5.226.176.0/21 maxlen: 24 178.237.166.0/23 maxlen: 24 2a03:a860:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:b4:d1:90:29:8a:3d:50:2e:19:0f:be:a0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55e5037a660c5246a6bcb36fbbbd639bc9170964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:1b:00:11:30:8d:95:8f:9d:a4:d6:2a:e7: 2b:64:54:61:4e:c3:2f:44:6d:93:45:05:f6:ca:9b: 29:3e:d8:5f:22:fd:cc:d5:b4:66:25:36:aa:04:a2: 82:64:09:b3:c7:f2:e8:94:fd:b5:0f:85:df:97:35: 7b:30:9d:d6:e0:69:8a:57:e5:86:c2:44:1f:00:49: 71:9e:27:8d:c1:18:79:83:7c:a4:bb:2e:9f:1a:97: 2f:64:e4:6f:83:d3:40:a9:86:8f:b0:fb:55:e2:4c: 4b:a3:5a:27:22:8e:51:8d:f2:99:1e:79:e6:96:50: 28:00:48:47:9f:58:75:66:13:8d:68:51:42:b6:79: 7a:b0:41:11:94:4b:01:dd:ec:5e:cd:99:1a:40:87: c2:a2:19:77:88:c7:43:67:73:9c:a5:20:4d:da:3b: 09:11:ce:26:44:84:a7:57:d0:97:5f:76:93:fe:23: 48:cc:55:ba:76:39:73:03:d8:41:02:56:c1:c1:e6: 9e:b8:70:50:09:62:4d:dd:48:b7:63:1c:f4:18:85: 5d:6b:4f:95:76:95:fa:8b:39:07:f4:00:24:7f:70: 51:80:2a:02:38:8c:e9:3d:e9:60:34:32:49:93:ec: 4e:78:2f:e1:a6:e6:64:20:16:f9:9f:52:cb:d8:cf: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:03:7A:66:0C:52:46:A6:BC:B3:6F:BB:BD:63:9B:C9:17:09:64 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/VeUDemYMUkamvLNvu71jm8kXCWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.176.0/21 178.237.166.0/23 IPv6: 2a03:a860:a00::/40 Signature Algorithm: sha256WithRSAEncryption 50:68:39:4f:f7:68:50:32:31:9a:94:a5:11:e0:9f:b0:89:6e: 35:9a:84:c5:00:c6:80:3a:83:b8:f4:cc:d8:e0:58:37:a5:dd: 92:5a:68:4d:7c:68:90:97:00:8c:7b:a2:a7:cf:a7:46:59:0b: 09:a0:5b:6c:95:2c:81:23:56:da:01:7f:ee:18:52:60:1b:8a: 8e:62:1e:91:61:24:c6:d5:b7:18:cf:30:84:a2:41:fc:84:0e: 1b:42:7c:dc:5d:1c:cd:36:4e:cb:6d:5f:71:33:f6:98:32:69: a7:02:90:f8:e0:db:c0:d4:b5:8d:9a:ab:9e:21:7a:5d:70:07: 61:df:f7:a4:37:80:be:dc:57:6d:ca:59:73:75:50:6d:d3:74: 00:92:68:17:18:be:28:12:a7:15:0e:cd:12:a4:a1:7e:6f:16: dc:05:86:8d:fa:b5:0a:39:9b:fe:19:92:e6:3a:44:fe:21:69: 0d:ba:45:fa:a0:ad:74:98:6b:7e:6f:c1:2c:56:c0:74:6e:bb: 66:52:a5:79:78:d8:f7:ff:8d:63:ec:fb:58:be:5c:4c:61:6b: 24:b4:94:6d:7c:f5:d0:9d:fa:2b:a0:d5:75:87:e6:99:8f:f1: 6a:75:0d:64:1b:ae:f9:77:93:42:af:3e:7f:66:ec:ab:b4:77: a0:95:4f:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt26yG00ZApij1QLhkPvqDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWU1MDM3YTY2MGM1MjQ2YTZiY2IzNmZiYmJkNjM5YmM5MTcwOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ScbABEwjZWPnaTWKucrZFRhTsMv RG2TRQX2ypspPthfIv3M1bRmJTaqBKKCZAmzx/LolP21D4XflzV7MJ3W4GmKV+WG wkQfAElxnieNwRh5g3ykuy6fGpcvZORvg9NAqYaPsPtV4kxLo1onIo5RjfKZHnnm llAoAEhHn1h1ZhONaFFCtnl6sEERlEsB3exezZkaQIfCohl3iMdDZ3OcpSBN2jsJ Ec4mRISnV9CXX3aT/iNIzFW6djlzA9hBAlbBweaeuHBQCWJN3Ui3Yxz0GIVda0+V dpX6izkH9AAkf3BRgCoCOIzpPelgNDJJk+xOeC/hpuZkIBb5n1LL2M+uGwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFXlA3pmDFJGpryzb7u9Y5vJFwlkMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvVmVVRGVtWU1Va2FtdkxOdnU3MWptOGtYQ1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDBeKwAwQB su2mMA4EAgACMAgDBgAqA6hgCjANBgkqhkiG9w0BAQsFAAOCAQEAUGg5T/doUDIx mpSlEeCfsIluNZqExQDGgDqDuPTM2OBYN6XdklpoTXxokJcAjHuip8+nRlkLCaBb bJUsgSNW2gF/7hhSYBuKjmIekWEkxtW3GM8whKJB/IQOG0J83F0czTZOy21fcTP2 mDJppwKQ+ODbwNS1jZqrniF6XXAHYd/3pDeAvtxXbcpZc3VQbdN0AJJoFxi+KBKn FQ7NEqShfm8W3AWGjfq1Cjmb/hmS5jpE/iFpDbpF+qCtdJhrfm/BLFbAdG67ZlKl eXjY9/+NY+z7WL5cTGFrJLSUbXz10J36K6DVdYfmmY/xanUNZBuu+XeTQq8+f2bs q7R3oJVPIA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:50 2026 by rpki-client