This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa File: VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa (raw, json) Hash identifier: r5/pQOXKpUYtcCqvwsl8tV8NEiMQb4SPmxXSKYvWd28= Subject key identifier: 55:C3:9C:77:CE:0A:42:39:28:66:10:CB:FB:61:BD:06:ED:4D:B2:B8 Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Certificate serial: 019B7E37989F1A6B579415DA098229E2EF0C Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29099 IP address blocks: 185.99.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:98:9f:1a:6b:57:94:15:da:09:82:29:e2:ef:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c39c77ce0a4239286610cbfb61bd06ed4db2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:26:02:71:89:05:5c:f1:26:7f:26:f6:5e: 93:d9:d9:34:8a:4b:33:8f:34:2a:19:23:31:9a:29: 28:4e:19:c9:92:33:ae:db:8d:cb:f9:95:38:59:4d: 56:85:75:71:24:5d:92:40:b8:8d:8d:fc:76:cd:19: 39:f5:7c:b2:15:de:5d:b6:2a:7b:15:bc:a2:4d:ee: ef:49:2a:ae:70:b4:86:8d:dd:09:87:60:c7:74:50: b5:ee:78:76:12:bb:d6:fc:27:b7:df:2f:3e:bc:56: 79:89:10:99:eb:6e:4e:69:bc:c8:52:de:93:2c:23: eb:5b:a2:01:eb:1b:1c:ba:4e:76:c2:c4:4e:cf:9e: c5:7a:f1:67:8d:a9:24:4f:f3:69:55:ab:23:d5:c9: e4:b6:1d:5e:c8:c9:2b:70:56:92:3f:93:29:91:59: a6:22:f6:71:d8:8f:bf:e3:b3:56:69:54:78:11:4d: 93:88:b6:ef:df:e8:96:f7:d8:b6:99:58:57:07:fb: a6:e6:95:9a:5b:88:10:c4:5e:83:ad:1e:3d:78:53: f3:1e:f8:c6:d7:5c:06:b3:30:e7:34:57:93:08:a1: 9e:eb:e9:17:4c:52:34:81:2f:a3:84:1b:6e:74:7c: 47:84:29:d8:9b:90:fb:93:58:cd:f2:e0:74:fc:fc: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C3:9C:77:CE:0A:42:39:28:66:10:CB:FB:61:BD:06:ED:4D:B2:B8 X509v3 Authority Key Identifier: keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/VcOcd84KQjkoZhDL-2G9Bu1Nsrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.34.0/24 Signature Algorithm: sha256WithRSAEncryption 50:23:34:73:81:7f:be:d4:5d:b7:30:ad:fe:94:10:7b:f1:83: 63:23:f4:f0:3d:f7:90:ce:16:47:26:19:e8:12:f9:a9:d4:7d: dd:5f:e5:0f:ea:3c:96:54:e2:0d:47:dd:1c:8c:b2:d4:0f:9a: 4d:e1:ec:06:5f:15:81:7f:0b:0e:3e:87:54:09:23:86:63:57: f8:5b:05:06:e8:4b:df:78:9b:ca:cc:30:53:ba:17:f2:25:6b: 39:40:2b:26:12:68:42:80:04:c2:fe:85:e2:06:38:64:c0:de: 2e:22:47:6d:50:60:09:32:06:f2:6d:38:a8:f3:e0:fd:b2:a6: dd:f0:3d:3e:64:c9:74:d4:ea:fc:1e:b9:d8:51:6a:5f:99:16: 45:a8:07:a5:18:d7:c8:6d:bb:64:e5:f7:e1:ec:f5:56:01:d9: 6a:86:27:fe:02:a9:3a:fc:89:c4:ac:4a:f5:c1:1b:50:84:aa: 42:36:7b:de:b6:f5:89:c3:df:54:df:b6:be:45:b4:fb:b4:5b: d4:f1:ba:46:05:59:db:d3:18:3b:e1:30:1e:11:79:c4:04:c7: 4c:43:e6:47:f2:59:15:2d:96:39:59:6c:8c:b2:fe:c0:57:70: 54:07:0d:0e:2b:7c:6e:af:84:d2:eb:af:c6:e8:bc:33:e3:ec: 8e:e6:65:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5ifGmtXlBXaCYIp4u8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi Mjc1ZWUwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWMzOWM3N2NlMGE0MjM5Mjg2NjEwY2JmYjYxYmQwNmVkNGRiMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHUmAnGJBVzxJn8m9l6T2dk0iksz jzQqGSMxmikoThnJkjOu243L+ZU4WU1WhXVxJF2SQLiNjfx2zRk59XyyFd5dtip7 FbyiTe7vSSqucLSGjd0Jh2DHdFC17nh2ErvW/Ce33y8+vFZ5iRCZ625OabzIUt6T LCPrW6IB6xscuk52wsROz57FevFnjakkT/NpVasj1cnkth1eyMkrcFaSP5MpkVmm IvZx2I+/47NWaVR4EU2TiLbv3+iW99i2mVhXB/um5pWaW4gQxF6DrR49eFPzHvjG 11wGszDnNFeTCKGe6+kXTFI0gS+jhBtudHxHhCnYm5D7k1jN8uB0/PynFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFXDnHfOCkI5KGYQy/thvQbtTbK4MB8GA1UdIwQY MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt YzhiNWRmYzVhMTNmLzEvVmNPY2Q4NEtRamtvWmhETC0yRzlCdTFOc3JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWMiMA0G CSqGSIb3DQEBCwUAA4IBAQBQIzRzgX++1F23MK3+lBB78YNjI/TwPfeQzhZHJhno Evmp1H3dX+UP6jyWVOINR90cjLLUD5pN4ewGXxWBfwsOPodUCSOGY1f4WwUG6Evf eJvKzDBTuhfyJWs5QCsmEmhCgATC/oXiBjhkwN4uIkdtUGAJMgbybTio8+D9sqbd 8D0+ZMl01Or8HrnYUWpfmRZFqAelGNfIbbtk5ffh7PVWAdlqhif+Aqk6/InErEr1 wRtQhKpCNnvetvWJw99U37a+RbT7tFvU8bpGBVnb0xg74TAeEXnEBMdMQ+ZH8lkV LZY5WWyMsv7AV3BUBw0OK3xur4TS66/G6Lwz4+yO5mVf -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:59 2026 by rpki-client