This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vV4kfM7-tPnyYx_K2ljxEExtxso.roa File: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (raw, json) Hash identifier: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA= Subject key identifier: BD:5E:24:7C:CE:FE:B4:F9:F2:63:1F:CA:DA:58:F1:10:4C:6D:C6:CA Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019B7B361610CA49650ED0E7B0E1EA877484 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vV4kfM7-tPnyYx_K2ljxEExtxso.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47957 IP address blocks: 160.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:16:10:ca:49:65:0e:d0:e7:b0:e1:ea:87:74:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd5e247ccefeb4f9f2631fcada58f1104c6dc6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:81:01:d4:d9:d4:4d:22:98:bb:98:4f:08: a1:c3:ca:01:d0:e0:40:3f:33:05:f2:c1:46:b4:1a: 11:d2:9c:a6:a7:0c:37:45:1f:25:db:6f:cf:8a:42: 87:a3:4f:50:5f:dd:e5:1f:56:55:67:1e:7f:d4:89: e5:df:f9:55:b0:a4:fa:68:ea:6d:08:9f:d0:68:24: c4:e3:0e:25:1a:31:fa:8d:26:a8:1b:c5:4d:75:24: f7:38:26:c1:7b:2a:e8:68:a1:ff:99:ef:fa:34:3c: e0:43:bf:b8:90:d1:ec:af:e8:2c:39:2e:07:c9:37: 94:d5:2b:c6:8c:c5:65:e2:97:f8:78:3a:ad:ff:c2: 7d:83:5d:9e:2f:34:30:9d:13:98:8e:01:e1:7b:b4: 47:ee:61:c2:f1:47:c8:ae:af:6b:c8:93:7d:05:70: 96:9e:8c:5a:ae:cc:63:fe:36:09:0e:27:70:19:c2: 3d:71:e6:43:81:84:2a:46:19:0f:89:9f:89:bb:f3: d9:39:c8:4c:bc:58:e8:ab:b6:1a:aa:97:d9:d7:1d: 49:91:de:1b:af:9f:d0:05:4b:1a:23:d1:09:a1:2e: ad:73:20:06:ef:6a:e7:9b:cc:b8:db:29:fe:20:e1: 32:36:48:57:46:05:bd:ec:52:cd:64:86:8a:37:1c: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:24:7C:CE:FE:B4:F9:F2:63:1F:CA:DA:58:F1:10:4C:6D:C6:CA X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vV4kfM7-tPnyYx_K2ljxEExtxso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.92.0.0/16 Signature Algorithm: sha256WithRSAEncryption cc:02:e7:58:29:51:76:dd:df:1d:72:af:7f:9d:9a:e5:56:16: 2a:9c:23:93:5d:19:ca:84:6d:31:8d:05:d9:56:8a:a4:9a:36: 34:a6:b3:8a:d5:c1:38:36:7b:f0:4d:84:4d:54:d4:ec:15:3c: 1f:71:27:1b:63:96:99:db:d7:fb:99:7f:86:d3:66:61:d1:8a: 93:14:8f:02:96:d5:db:07:c4:14:48:8e:44:5e:45:ad:ec:e1: fb:e2:bd:6f:34:9f:f6:8e:d7:1b:c4:c2:cb:39:3a:a7:43:55: 4b:25:c3:ac:9b:b8:ce:2e:5a:72:59:c7:73:eb:3a:04:56:37: 39:13:22:da:1b:3e:46:20:0e:46:cf:07:12:75:e6:31:fc:1d: 75:70:c0:12:d6:58:69:2a:28:e4:31:3d:7e:9c:4d:ed:0b:8c: 62:ba:c6:df:95:1c:04:73:01:a5:e7:b8:3e:ab:d2:f2:d0:6f: b6:e0:4c:51:13:35:b3:69:ff:e0:87:a8:e1:3b:81:1e:14:8f: fb:3e:ce:b9:55:55:32:34:bc:5e:79:cf:fb:e5:7a:51:12:7f: e3:b0:30:42:e5:63:be:ca:6f:cf:07:5c:48:e1:58:fb:11:8c: 19:7a:f5:a3:e3:57:b8:91:a1:d3:62:b5:88:e2:10:ba:a1:ec: fe:d4:9f:c6 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7NhYQykllDtDnsOHqh3SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDVlMjQ3Y2NlZmViNGY5ZjI2MzFmY2FkYTU4ZjExMDRjNmRjNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzaBAdTZ1E0imLuYTwihw8oB0OBA PzMF8sFGtBoR0pympww3RR8l22/PikKHo09QX93lH1ZVZx5/1Inl3/lVsKT6aOpt CJ/QaCTE4w4lGjH6jSaoG8VNdST3OCbBeyroaKH/me/6NDzgQ7+4kNHsr+gsOS4H yTeU1SvGjMVl4pf4eDqt/8J9g12eLzQwnROYjgHhe7RH7mHC8UfIrq9ryJN9BXCW noxarsxj/jYJDidwGcI9ceZDgYQqRhkPiZ+Ju/PZOchMvFjoq7YaqpfZ1x1Jkd4b r5/QBUsaI9EJoS6tcyAG72rnm8y42yn+IOEyNkhXRgW97FLNZIaKNxyUqQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFL1eJHzO/rT58mMfytpY8RBMbcbKMB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvdlY0a2ZNNy10UG55WXhfSzJsanhFRXh0eHNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoFwwDQYJ KoZIhvcNAQELBQADggEBAMwC51gpUXbd3x1yr3+dmuVWFiqcI5NdGcqEbTGNBdlW iqSaNjSms4rVwTg2e/BNhE1U1OwVPB9xJxtjlpnb1/uZf4bTZmHRipMUjwKW1dsH xBRIjkReRa3s4fvivW80n/aO1xvEwss5OqdDVUslw6ybuM4uWnJZx3PrOgRWNzkT ItobPkYgDkbPBxJ15jH8HXVwwBLWWGkqKOQxPX6cTe0LjGK6xt+VHARzAaXnuD6r 0vLQb7bgTFETNbNp/+CHqOE7gR4Uj/s+zrlVVTI0vF55z/vlelESf+OwMELlY77K b88HXEjhWPsRjBl69aPjV7iRodNitYjiELqh7P7Un8Y= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:07 2026 by rpki-client