This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VeCa-Ckkq__lR9QH3Ze2zeXxtZY.roa File: VeCa-Ckkq__lR9QH3Ze2zeXxtZY.roa (raw, json) Hash identifier: z3M9hw/6DVnPJ1fUBiq/zT/J4PJzGrigNcCqmL3N2ec= Subject key identifier: 55:E0:9A:F8:29:24:AB:FF:E5:47:D4:07:DD:97:B6:CD:E5:F1:B5:96 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019BDB064C993574527FE396186C91AC9751 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VeCa-Ckkq__lR9QH3Ze2zeXxtZY.roa Signing time: Tue 20 Jan 2026 10:49:41 +0000 ROA not before: Tue 20 Jan 2026 10:49:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.155.253.0/24 maxlen: 24 45.155.254.0/24 maxlen: 24 176.125.251.0/24 maxlen: 24 185.199.151.0/24 maxlen: 24 185.199.212.0/23 maxlen: 23 185.199.213.0/24 maxlen: 24 185.199.214.0/23 maxlen: 24 185.221.25.0/24 maxlen: 24 185.221.26.0/24 maxlen: 24 185.225.168.0/23 maxlen: 23 185.225.168.0/24 maxlen: 24 185.225.169.0/24 maxlen: 24 185.250.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:06:4c:99:35:74:52:7f:e3:96:18:6c:91:ac:97:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 20 10:49:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55e09af82924abffe547d407dd97b6cde5f1b596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:9b:e5:fd:2d:e7:a3:b2:c5:44:18:00:f6: e0:a5:66:b7:ab:dd:74:8a:11:6a:60:27:a1:b3:db: 05:ff:7a:8a:03:66:a1:e0:a3:70:4c:d0:4f:51:a0: 52:00:ed:6a:50:42:93:82:e7:01:2c:da:6e:ac:64: 65:33:e7:3d:dd:f8:5d:c5:84:18:cb:1b:59:55:c7: a8:6f:a4:cf:b7:cf:d9:ba:09:3f:e6:e9:2b:a2:06: 8e:4c:0b:a8:16:7f:e2:9c:5c:8e:1f:6a:f6:8e:31: 0d:dc:bc:74:8e:4e:10:43:c0:10:d4:3d:64:45:44: 47:00:6b:75:d0:10:27:81:f5:95:07:90:1e:e6:e7: 65:23:ac:98:64:e5:09:b8:c0:b2:49:f5:4f:76:6d: f7:ca:ba:46:7e:98:03:86:c0:ac:f0:b7:ce:57:2b: a6:58:09:70:d6:47:af:fd:d5:c0:82:ab:c5:bd:2e: 87:bc:d5:89:26:c4:8f:77:3f:d4:34:0a:11:9b:71: 40:78:11:22:34:c6:33:06:4c:79:2b:56:60:68:51: 48:af:25:0f:85:25:e3:0f:0f:9d:07:c0:0a:10:d0: 22:20:fc:7c:72:74:00:ab:29:c6:d1:24:4a:b9:10: 5a:e9:bf:12:13:10:62:c8:e6:a5:5f:b3:55:f5:56: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E0:9A:F8:29:24:AB:FF:E5:47:D4:07:DD:97:B6:CD:E5:F1:B5:96 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/VeCa-Ckkq__lR9QH3Ze2zeXxtZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.253.0-45.155.254.255 176.125.251.0/24 185.199.151.0/24 185.199.212.0/22 185.221.25.0-185.221.26.255 185.225.168.0/23 185.250.26.0/24 Signature Algorithm: sha256WithRSAEncryption a9:71:25:35:a1:5b:8a:54:d8:48:c3:96:82:7d:9c:ae:f7:fe: f7:41:a0:ed:9e:79:b5:d0:04:39:51:01:da:0a:25:4d:ec:2b: f7:08:0e:e9:18:f7:bd:be:51:78:a5:2a:bb:fd:41:f0:22:d1: 68:c2:b4:fc:04:d1:83:44:a3:4c:10:5e:f3:cd:c8:cb:43:2d: 93:00:43:ec:03:85:75:1d:01:be:1c:5e:12:ff:77:b2:e6:f0: ed:c5:3e:05:6a:e8:9f:f0:7d:f6:49:5c:bc:4c:ee:db:1d:a6: e6:2c:28:dd:fd:af:c8:8f:66:27:23:7e:14:e0:ee:b8:dd:5b: d9:f9:04:0e:e9:ee:71:d2:ac:5f:bf:84:b0:03:bd:f3:09:86: e3:b5:a1:9e:10:b1:9e:6f:1f:32:1a:5f:16:21:7a:e2:13:e2: 63:8b:6a:20:e6:a8:52:c5:c6:b4:80:30:1d:b2:43:b7:cb:98: c7:e2:0f:79:58:db:b9:f4:73:bc:38:00:ea:67:cf:19:3d:ef: 63:3c:28:f0:7a:ad:a3:fd:51:bd:ea:22:3b:f5:0a:87:d6:0c: dc:d0:95:2e:94:12:92:4b:fc:a7:7f:ee:09:27:96:83:c1:a7: d4:dd:35:f6:09:a2:c7:1f:7e:8b:5d:5d:f2:8b:50:de:08:d2: 80:e4:85:fb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZvbBkyZNXRSf+OWGGyRrJdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTIwMTA0OTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWUwOWFmODI5MjRhYmZmZTU0N2Q0MDdkZDk3YjZjZGU1ZjFiNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgab5f0t56OyxUQYAPbgpWa3q910 ihFqYCehs9sF/3qKA2ah4KNwTNBPUaBSAO1qUEKTgucBLNpurGRlM+c93fhdxYQY yxtZVceob6TPt8/Zugk/5ukrogaOTAuoFn/inFyOH2r2jjEN3Lx0jk4QQ8AQ1D1k RURHAGt10BAngfWVB5Ae5udlI6yYZOUJuMCySfVPdm33yrpGfpgDhsCs8LfOVyum WAlw1kev/dXAgqvFvS6HvNWJJsSPdz/UNAoRm3FAeBEiNMYzBkx5K1ZgaFFIryUP hSXjDw+dB8AKENAiIPx8cnQAqynG0SRKuRBa6b8SExBiyOalX7NV9VYMVwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFFXgmvgpJKv/5UfUB92Xts3l8bWWMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvVmVDYS1Da2txX19sUjlRSDNaZTJ6ZVh4dFpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAAtm/0D BAAtm/4DBACwffsDBAC5x5cDBAK5x9QwDAMEALndGQMEALndGgMEAbnhqAMEALn6 GjANBgkqhkiG9w0BAQsFAAOCAQEAqXElNaFbilTYSMOWgn2crvf+90Gg7Z55tdAE OVEB2golTewr9wgO6Rj3vb5ReKUqu/1B8CLRaMK0/ATRg0SjTBBe883Iy0MtkwBD 7AOFdR0BvhxeEv93subw7cU+BWron/B99klcvEzu2x2m5iwo3f2vyI9mJyN+FODu uN1b2fkEDunucdKsX7+EsAO98wmG47WhnhCxnm8fMhpfFiF64hPiY4tqIOaoUsXG tIAwHbJDt8uYx+IPeVjbufRzvDgA6mfPGT3vYzwo8Hqto/1RveoiO/UKh9YM3NCV LpQSkkv8p3/uCSeWg8Gn1N019gmixx9+i11d8otQ3gjSgOSF+w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:45 2026 by rpki-client