This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/vGBPTsN1UTQ9ljsou8EYqesA-xA.roa File: vGBPTsN1UTQ9ljsou8EYqesA-xA.roa (raw, json) Hash identifier: KDijiFyY5rddvKU52MlKJXu0OVC57lOatdyVnFfXTSg= Subject key identifier: BC:60:4F:4E:C3:75:51:34:3D:96:3B:28:BB:C1:18:A9:EB:00:FB:10 Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Certificate serial: 019B79106B3335C6CBF8758F5C30D26CA996 Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/vGBPTsN1UTQ9ljsou8EYqesA-xA.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207827 IP address blocks: 185.180.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6b:33:35:c6:cb:f8:75:8f:5c:30:d2:6c:a9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc604f4ec37551343d963b28bbc118a9eb00fb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:8c:b0:da:b9:73:9c:ad:11:32:a8:af:84: aa:02:4c:37:1c:a4:90:02:be:56:de:39:6c:96:41: a2:2d:4e:62:81:a0:82:88:ee:78:1d:ed:5a:ab:a7: 67:d6:0f:73:18:07:96:e7:ba:ba:a9:58:80:5d:7c: 5e:20:6c:70:af:d2:dd:e4:55:15:d7:3f:f8:7f:94: e7:7a:eb:26:81:6e:25:7f:01:30:b2:82:bf:be:3d: 6a:70:82:f5:8f:e3:9e:1a:a0:68:e7:8d:ee:a4:9c: 0c:b0:37:71:a9:fa:d4:d1:b5:14:6b:af:6f:8b:e2: 1c:55:f6:99:51:69:56:67:fb:6a:44:81:fb:2f:ba: f7:61:7e:eb:51:c9:1b:f2:91:4e:1f:ae:95:8e:bb: 9e:8e:2c:68:aa:eb:b4:98:1a:f9:24:40:e1:0e:3d: 2b:bd:82:7f:cd:a3:fd:03:e9:7f:75:8f:99:56:6c: 60:2d:fb:78:5c:de:0a:94:71:d1:0d:79:9d:0d:8a: 95:1e:76:b1:3d:51:e6:64:ee:c3:97:d4:94:46:4d: bf:49:7d:e0:f7:6b:c5:ef:0a:2b:77:09:4c:e0:88: cd:11:f7:6c:c8:13:1f:3c:39:84:d5:f7:b1:f2:8d: e8:a7:0f:13:a1:7d:ba:97:eb:55:d2:cb:21:f6:fd: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:4F:4E:C3:75:51:34:3D:96:3B:28:BB:C1:18:A9:EB:00:FB:10 X509v3 Authority Key Identifier: keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/vGBPTsN1UTQ9ljsou8EYqesA-xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.174.0/23 Signature Algorithm: sha256WithRSAEncryption 97:1f:07:52:a9:2b:a9:9b:46:eb:d5:de:0e:31:d4:0f:01:fc: a3:91:75:8f:36:8d:e9:d9:48:84:3d:4b:b1:04:75:ab:17:80: 65:eb:19:9f:30:a3:78:ac:2f:be:30:98:68:6e:b7:2a:99:53: ec:d6:31:99:75:ca:e0:fb:13:58:da:0e:4d:e6:84:63:1e:8b: 77:da:05:f9:ed:12:4a:f0:a4:62:92:05:e3:cc:1a:a9:58:eb: 0e:34:08:3b:ca:59:9a:18:e8:91:26:0c:30:dc:d9:8a:98:ee: 81:4a:e4:a8:d9:63:0c:6a:a4:7d:76:d7:31:05:71:51:6f:a9: fa:af:a8:63:dc:7a:49:c7:ea:06:03:e2:b6:1e:c0:58:b5:f9: ab:f8:47:b9:6f:de:60:a4:41:3f:30:e1:ab:58:09:c1:bf:31: 78:68:1a:97:5a:a8:69:1f:56:55:4b:cb:2a:ab:e0:2f:08:41: f2:d1:e6:cc:18:40:a7:02:a4:14:b8:d2:06:d6:f3:63:92:ea: 5b:f7:ef:21:bc:01:e0:fe:5b:7d:46:6e:18:6f:98:b7:ea:48: ce:4f:23:c4:3d:18:4a:54:a9:d5:ad:fe:e9:99:87:7a:1d:28: 3d:53:9a:b7:95:46:05:d9:07:56:c9:ae:95:80:0a:76:ac:ec: fb:a8:22:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGszNcbL+HWPXDDSbKmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZTVlZmJmNjU4OTcxNjBkNTVhNTJkYzNhMjJjMDE3ODc2 Y2QwNmMwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzYwNGY0ZWMzNzU1MTM0M2Q5NjNiMjhiYmMxMThhOWViMDBmYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjGMsNq5c5ytETKor4SqAkw3HKSQ Ar5W3jlslkGiLU5igaCCiO54He1aq6dn1g9zGAeW57q6qViAXXxeIGxwr9Ld5FUV 1z/4f5TneusmgW4lfwEwsoK/vj1qcIL1j+OeGqBo543upJwMsDdxqfrU0bUUa69v i+IcVfaZUWlWZ/tqRIH7L7r3YX7rUckb8pFOH66Vjruejixoquu0mBr5JEDhDj0r vYJ/zaP9A+l/dY+ZVmxgLft4XN4KlHHRDXmdDYqVHnaxPVHmZO7Dl9SURk2/SX3g 92vF7wordwlM4IjNEfdsyBMfPDmE1fex8o3opw8ToX26l+tV0ssh9v1aeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxgT07DdVE0PZY7KLvBGKnrAPsQMB8GA1UdIwQY MBaAFB7l779liXFg1VpS3DoiwBeHbNBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUt N2MwZGI3YmFlMTM1LzEvdkdCUFRzTjFVVFE5bGpzb3U4RVlxZXNBLXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUtN2MwZGI3YmFlMTM1 LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubSuMA0G CSqGSIb3DQEBCwUAA4IBAQCXHwdSqSupm0br1d4OMdQPAfyjkXWPNo3p2UiEPUux BHWrF4Bl6xmfMKN4rC++MJhobrcqmVPs1jGZdcrg+xNY2g5N5oRjHot32gX57RJK 8KRikgXjzBqpWOsONAg7ylmaGOiRJgww3NmKmO6BSuSo2WMMaqR9dtcxBXFRb6n6 r6hj3HpJx+oGA+K2HsBYtfmr+Ee5b95gpEE/MOGrWAnBvzF4aBqXWqhpH1ZVS8sq q+AvCEHy0ebMGECnAqQUuNIG1vNjkupb9+8hvAHg/lt9Rm4Yb5i36kjOTyPEPRhK VKnVrf7pmYd6HSg9U5q3lUYF2QdWya6VgAp2rOz7qCIe -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:05 2026 by rpki-client