This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/vCLyUWR776gkWz1fg6zz0ef3IxM.roa File: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (raw, json) Hash identifier: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M= Subject key identifier: BC:22:F2:51:64:7B:EF:A8:24:5B:3D:5F:83:AC:F3:D1:E7:F7:23:13 Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf Certificate serial: 019B791059451457E716F81C4764CB4557D3 Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/vCLyUWR776gkWz1fg6zz0ef3IxM.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48444 IP address blocks: 88.212.189.0/24 maxlen: 24 88.212.191.0/24 maxlen: 24 195.82.125.0/24 maxlen: 24 212.85.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:59:45:14:57:e7:16:f8:1c:47:64:cb:45:57:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc22f251647befa8245b3d5f83acf3d1e7f72313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:a0:64:88:62:68:dd:91:7e:a9:67:10:02: f6:84:b1:54:cf:0b:e7:83:c0:a9:4e:56:0e:2b:02: f0:2c:a7:6e:1e:87:67:b9:bb:10:bb:a5:65:28:3b: b6:a9:62:08:50:0d:55:cf:f7:0d:e0:5d:d7:fe:e5: 33:41:7d:ce:64:36:81:5f:ba:db:86:86:6d:8a:a2: bf:32:8f:d9:01:ac:72:89:fa:cc:43:b0:77:58:47: be:7b:f8:d2:f8:a1:15:0d:5c:a4:ae:55:94:9d:02: c0:ad:5a:f3:08:2c:26:e1:6f:6f:6d:66:a1:ef:fc: d6:8f:f3:f7:ce:ad:55:43:3d:fc:6e:92:04:11:f0: 97:6d:1b:3c:62:cc:a2:b0:7b:42:dc:ce:c9:12:25: 5a:25:01:60:19:b7:2e:90:9c:6a:23:15:66:c6:b5: ce:eb:c5:a7:32:fe:e1:40:af:d1:72:00:ee:97:52: 33:18:26:e7:97:70:77:94:0f:d6:a0:b8:6e:38:9d: 21:a2:b0:70:6a:d3:df:ef:d3:11:84:d6:97:da:81: 38:9a:65:7a:d1:84:68:52:f2:eb:a3:c4:c0:5e:f6: 1b:e8:1b:0e:b8:95:12:f6:84:5b:d4:e0:00:fd:cf: 73:c5:0a:c4:db:dc:c3:d9:f0:14:62:08:5d:e8:e9: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:22:F2:51:64:7B:EF:A8:24:5B:3D:5F:83:AC:F3:D1:E7:F7:23:13 X509v3 Authority Key Identifier: keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/vCLyUWR776gkWz1fg6zz0ef3IxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.212.189.0/24 88.212.191.0/24 195.82.125.0/24 212.85.228.0/24 Signature Algorithm: sha256WithRSAEncryption aa:36:8d:9d:a4:6b:3b:5c:3e:e4:2b:f9:79:7d:25:4d:32:1f: f2:7d:63:ef:0b:c3:f0:85:62:c7:be:78:97:c9:f0:31:34:4f: 6c:ee:83:40:0b:39:43:f1:a1:ab:1c:97:39:19:f2:5c:83:3c: 33:45:d1:64:ca:1e:b0:24:b9:ff:ac:3d:5a:04:d1:df:e4:c0: 59:d1:ac:ce:30:ad:4d:26:dd:36:64:d6:92:7f:fe:2a:71:4b: 5a:94:d1:11:21:b4:f4:d9:3b:08:62:07:54:20:0f:1f:22:99: 9a:fb:bb:d7:73:17:69:87:ad:1e:d8:36:b9:4a:96:79:63:2b: e9:b8:db:3d:43:02:e9:8f:a6:10:33:69:43:65:3f:ff:4f:52: 0f:d6:a6:cf:b2:4a:60:17:a3:69:ca:5d:8e:ec:a5:c4:44:fa: f5:7f:35:e9:c7:73:73:82:04:a9:54:29:b6:76:fd:b8:34:1a: fb:1b:9e:0e:48:ca:f5:df:a2:ae:4b:0c:f0:c6:a9:e5:44:7d: 18:72:f8:1a:05:73:a8:cc:e5:6a:2e:2b:c6:00:22:ba:d1:1f: 24:bf:e3:e3:9c:0d:e9:75:63:9a:de:f2:7c:23:95:c1:cb:8d: 0e:97:70:07:27:e0:d2:20:d4:21:2c:ea:e7:ed:c5:ef:19:77: 0c:ac:8a:99 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EFlFFFfnFvgcR2TLRVfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTRlY2NlNmNiYzljNTQ5MjllYWE0YjIyYjMzN2IwZmQ5 YjM2YmYwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzIyZjI1MTY0N2JlZmE4MjQ1YjNkNWY4M2FjZjNkMWU3ZjcyMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HCgZIhiaN2RfqlnEAL2hLFUzwvn g8CpTlYOKwLwLKduHodnubsQu6VlKDu2qWIIUA1Vz/cN4F3X/uUzQX3OZDaBX7rb hoZtiqK/Mo/ZAaxyifrMQ7B3WEe+e/jS+KEVDVykrlWUnQLArVrzCCwm4W9vbWah 7/zWj/P3zq1VQz38bpIEEfCXbRs8YsyisHtC3M7JEiVaJQFgGbcukJxqIxVmxrXO 68WnMv7hQK/RcgDul1IzGCbnl3B3lA/WoLhuOJ0horBwatPf79MRhNaX2oE4mmV6 0YRoUvLro8TAXvYb6BsOuJUS9oRb1OAA/c9zxQrE29zD2fAUYghd6OmMAQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLwi8lFke++oJFs9X4Os89Hn9yMTMB8GA1UdIwQY MBaAFExU7M5svJxUkp6qSyKzN7D9mza/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTct MzA1OWM4OWI3MmVhLzEvdkNMeVVXUjc3NmdrV3oxZmc2enowZWYzSXhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMmM1ZWMtN2M2Zi00YWUyLTk4OTctMzA1OWM4OWI3MmVh LzEvVEZUc3pteThuRlNTbnFwTElyTTNzUDJiTnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWNS9AwQA WNS/AwQAw1J9AwQA1FXkMA0GCSqGSIb3DQEBCwUAA4IBAQCqNo2dpGs7XD7kK/l5 fSVNMh/yfWPvC8PwhWLHvniXyfAxNE9s7oNACzlD8aGrHJc5GfJcgzwzRdFkyh6w JLn/rD1aBNHf5MBZ0azOMK1NJt02ZNaSf/4qcUtalNERIbT02TsIYgdUIA8fIpma +7vXcxdph60e2Da5SpZ5YyvpuNs9QwLpj6YQM2lDZT//T1IP1qbPskpgF6Npyl2O 7KXERPr1fzXpx3NzggSpVCm2dv24NBr7G54OSMr136KuSwzwxqnlRH0YcvgaBXOo zOVqLivGACK60R8kv+PjnA3pdWOa3vJ8I5XBy40Ol3AHJ+DSINQhLOrn7cXvGXcM rIqZ -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:06 2026 by rpki-client