This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Vs10GLTv3Zg33SxVsR79qGmdpeY.roa File: Vs10GLTv3Zg33SxVsR79qGmdpeY.roa (raw, json) Hash identifier: +Nc+AwFqvxWZg3TAWHISVO3VAU5NhsQl8jD4360zoMs= Subject key identifier: 56:CD:74:18:B4:EF:DD:98:37:DD:2C:55:B1:1E:FD:A8:69:9D:A5:E6 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019BE96B1FD0A4ADE174DD292AAEE345FCC9 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Vs10GLTv3Zg33SxVsR79qGmdpeY.roa Signing time: Fri 23 Jan 2026 05:54:30 +0000 ROA not before: Fri 23 Jan 2026 05:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 212.116.228.0/23 maxlen: 23 212.116.238.0/23 maxlen: 24 212.116.238.0/24 maxlen: 24 212.116.243.0/24 maxlen: 24 212.116.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:6b:1f:d0:a4:ad:e1:74:dd:29:2a:ae:e3:45:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 23 05:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56cd7418b4efdd9837dd2c55b11efda8699da5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:54:34:12:ee:d7:22:7d:fe:73:2f:66:87: 99:5b:3c:05:62:b9:ce:9a:12:59:01:d3:b8:ce:e0: c8:c8:33:97:a7:00:03:e5:11:58:28:08:77:9f:3d: 82:3d:a4:ee:46:4b:78:17:ca:75:20:de:9e:6e:04: ab:22:ec:59:f5:84:58:39:eb:3e:12:fd:b3:77:d5: 6a:e9:85:4a:c7:24:67:a6:91:61:33:bd:42:53:c4: bd:82:cc:ac:8b:7b:72:cb:13:3f:32:39:bc:4a:e2: 62:66:8f:ad:84:39:b0:dc:b6:c8:e1:0d:0f:1c:09: 8d:61:8d:6b:c4:5a:16:e5:8e:f4:14:06:47:c7:9a: 55:ed:3c:90:cc:27:78:4f:43:1c:9a:5e:ff:29:24: c4:ec:5f:79:39:72:c6:75:35:f3:c0:65:40:b3:9b: f2:38:c0:98:5d:c7:31:7e:61:0c:23:b2:05:22:db: 50:6d:0e:85:6d:03:89:92:de:d3:d3:3a:7d:f8:be: 10:f8:a5:3c:f9:bd:ec:c0:f5:8c:32:23:3e:85:4e: 17:92:b8:0c:de:ab:d4:dc:f2:be:ef:23:94:a7:d7: 18:b1:08:31:b0:8a:8b:37:31:63:f8:64:07:e8:db: fc:dd:99:d6:0d:a7:ae:8a:91:82:a5:52:45:af:ff: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:74:18:B4:EF:DD:98:37:DD:2C:55:B1:1E:FD:A8:69:9D:A5:E6 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Vs10GLTv3Zg33SxVsR79qGmdpeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.228.0/23 212.116.238.0/23 212.116.243.0/24 212.116.245.0/24 Signature Algorithm: sha256WithRSAEncryption a5:db:fd:5c:84:ea:af:d7:91:77:a5:19:52:85:78:4d:d5:9a: 6f:89:a1:db:00:12:bb:09:ce:66:46:fb:7a:15:68:af:db:4c: 74:99:03:85:17:4c:8f:9c:21:ae:95:26:59:41:eb:08:18:7b: 21:54:94:f5:e8:fa:37:24:8e:4d:19:ee:dc:86:21:b5:33:b6: 95:4a:84:88:04:c7:ff:84:df:e6:a6:0e:f4:a9:15:ff:2c:67: e8:19:0e:e0:03:db:a2:60:8c:b7:bd:db:cb:ae:30:de:16:d8: 49:b1:03:4d:e1:6a:9f:fc:53:c8:4e:ab:7e:68:18:e0:27:b8: f0:4c:bc:f7:58:34:ee:5f:8d:e2:20:6c:9e:dc:3a:9c:74:89: 80:90:7c:91:56:c6:e0:33:a3:ee:b4:d6:ca:d9:de:b5:89:96: 20:a0:33:26:81:05:b4:6a:55:3f:01:95:9c:70:b7:e9:b1:39: 7b:6f:b4:06:36:f9:f4:4d:ee:26:ca:6d:ad:2b:ce:ec:a3:94: 51:a5:18:e9:c6:72:a9:d4:65:7f:e8:b4:7e:07:de:fb:8c:d2: 30:7a:67:51:db:69:8c:84:1b:42:d5:0f:5b:69:2c:af:c1:a6: a2:17:47:36:e9:b9:a0:d6:ff:b7:7a:eb:65:fe:27:a9:07:a8: f6:bd:99:d5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvpax/QpK3hdN0pKq7jRfzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTIzMDU1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmNkNzQxOGI0ZWZkZDk4MzdkZDJjNTViMTFlZmRhODY5OWRhNWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEFUNBLu1yJ9/nMvZoeZWzwFYrnO mhJZAdO4zuDIyDOXpwAD5RFYKAh3nz2CPaTuRkt4F8p1IN6ebgSrIuxZ9YRYOes+ Ev2zd9Vq6YVKxyRnppFhM71CU8S9gsysi3tyyxM/Mjm8SuJiZo+thDmw3LbI4Q0P HAmNYY1rxFoW5Y70FAZHx5pV7TyQzCd4T0Mcml7/KSTE7F95OXLGdTXzwGVAs5vy OMCYXccxfmEMI7IFIttQbQ6FbQOJkt7T0zp9+L4Q+KU8+b3swPWMMiM+hU4XkrgM 3qvU3PK+7yOUp9cYsQgxsIqLNzFj+GQH6Nv83ZnWDaeuipGCpVJFr/8JeQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFbNdBi0792YN90sVbEe/ahpnaXmMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvVnMxMEdMVHYzWmczM1N4VnNSNzlxR21kcGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQB1HTkAwQB 1HTuAwQA1HTzAwQA1HT1MA0GCSqGSIb3DQEBCwUAA4IBAQCl2/1chOqv15F3pRlS hXhN1ZpviaHbABK7Cc5mRvt6FWiv20x0mQOFF0yPnCGulSZZQesIGHshVJT16Po3 JI5NGe7chiG1M7aVSoSIBMf/hN/mpg70qRX/LGfoGQ7gA9uiYIy3vdvLrjDeFthJ sQNN4Wqf/FPITqt+aBjgJ7jwTLz3WDTuX43iIGye3DqcdImAkHyRVsbgM6PutNbK 2d61iZYgoDMmgQW0alU/AZWccLfpsTl7b7QGNvn0Te4mym2tK87so5RRpRjpxnKp 1GV/6LR+B977jNIwemdR22mMhBtC1Q9baSyvwaaiF0c26bmg1v+3eutl/iepB6j2 vZnV -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:46 2026 by rpki-client