This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/vAouvOE7JSaMC475TpDqm8JvBho.roa File: vAouvOE7JSaMC475TpDqm8JvBho.roa (raw, json) Hash identifier: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo= Subject key identifier: BC:0A:2E:BC:E1:3B:25:26:8C:0B:8E:F9:4E:90:EA:9B:C2:6F:06:1A Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Certificate serial: 019B77C664990BBF0EB31ED3F915A951B8C7 Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/vAouvOE7JSaMC475TpDqm8JvBho.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 193.160.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:64:99:0b:bf:0e:b3:1e:d3:f9:15:a9:51:b8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc0a2ebce13b25268c0b8ef94e90ea9bc26f061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:4a:8e:8b:60:a0:0e:bd:ed:54:72:77:6b: f6:73:fe:85:70:7b:4b:9f:32:32:94:45:92:a2:07: 3b:c0:43:c3:b4:a0:ee:72:bd:eb:5f:9b:c6:39:3a: 05:f8:6e:97:bc:94:56:d0:87:78:28:2f:f4:91:68: ea:37:33:f5:0c:80:b7:27:e2:f5:84:35:be:da:6a: 21:78:59:cf:53:67:1b:3c:9e:d5:29:7d:71:22:b8: e2:7a:c8:e8:1c:97:3d:82:c8:68:7c:8d:a2:34:47: d3:8f:ae:13:3a:19:d7:66:2a:79:e3:fc:47:77:69: d9:a5:9a:3c:3e:a6:d3:2b:7e:6b:e2:58:d3:c4:84: a5:f4:93:f3:39:ad:0b:95:76:ac:d2:81:9e:60:86: d7:8a:fb:ef:62:b8:c5:f3:fb:a3:95:3b:e6:e3:fd: 25:9b:38:21:7c:62:42:9b:b5:ff:f3:ef:73:7d:c6: 95:08:48:b0:15:2b:cb:32:3f:a4:c1:6c:d0:8b:06: 29:9a:b6:e4:59:07:0e:76:bc:1b:1b:ae:90:a6:48: 0a:98:9f:26:f7:22:63:79:92:50:da:9a:71:22:38: 65:74:f0:dc:61:95:51:fb:ef:31:b1:bb:6a:d3:d1: 4f:ae:6c:0b:85:4c:e5:9f:37:c3:97:22:ef:c7:c7: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0A:2E:BC:E1:3B:25:26:8C:0B:8E:F9:4E:90:EA:9B:C2:6F:06:1A X509v3 Authority Key Identifier: keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/vAouvOE7JSaMC475TpDqm8JvBho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.40.0/21 Signature Algorithm: sha256WithRSAEncryption aa:a0:72:b8:85:f8:ab:ac:a4:93:1b:01:e4:91:2a:fd:42:c2: dd:d9:39:b2:4e:71:7a:ab:66:35:da:94:20:a0:f9:6a:a6:c5: 4e:9c:fc:c9:df:fb:11:fa:a1:14:ca:31:12:40:cb:7b:bd:a3: ae:e1:63:25:42:8a:d7:f6:f7:08:4e:ff:8a:e3:b4:e4:f1:3a: 9e:85:85:dd:13:80:3a:b4:11:ec:97:a1:48:5e:b1:25:af:f7: 38:f2:c0:2c:9b:40:60:84:ab:55:2c:b5:6a:9b:8b:14:e7:dc: 5b:08:1f:c1:ba:10:60:9b:73:d9:5c:74:3d:6f:49:56:06:82: bb:2c:ea:87:ca:4b:49:8d:aa:d1:ad:5f:da:c8:f8:eb:4f:03: 32:8e:d5:de:03:2e:a4:6c:3b:d1:e0:c0:c6:9b:83:d9:09:56: b5:b5:26:11:a9:d8:c7:92:29:dd:fa:08:d8:4a:ab:20:e3:8f: ac:19:ed:bd:29:70:30:43:8b:28:e3:db:ca:6c:12:5e:8e:95: 3b:5b:36:66:56:02:b5:c1:f9:16:4f:74:c8:85:ed:88:73:42: 62:69:29:e8:08:8e:0c:ea:86:8d:5c:64:5e:bb:db:60:e8:7d: 16:66:69:d5:8e:42:98:6c:45:a9:98:2b:54:92:f9:36:96:0c: 3b:85:92:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmSZC78Osx7T+RWpUbjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh MDFlNTcwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzBhMmViY2UxM2IyNTI2OGMwYjhlZjk0ZTkwZWE5YmMyNmYwNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJdKjotgoA697VRyd2v2c/6FcHtL nzIylEWSogc7wEPDtKDucr3rX5vGOToF+G6XvJRW0Id4KC/0kWjqNzP1DIC3J+L1 hDW+2moheFnPU2cbPJ7VKX1xIrjiesjoHJc9gshofI2iNEfTj64TOhnXZip54/xH d2nZpZo8PqbTK35r4ljTxISl9JPzOa0LlXas0oGeYIbXivvvYrjF8/ujlTvm4/0l mzghfGJCm7X/8+9zfcaVCEiwFSvLMj+kwWzQiwYpmrbkWQcOdrwbG66QpkgKmJ8m 9yJjeZJQ2ppxIjhldPDcYZVR++8xsbtq09FPrmwLhUzlnzfDlyLvx8domQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwKLrzhOyUmjAuO+U6Q6pvCbwYaMB8GA1UdIwQY MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt Yzk4ODAwOTBlM2M1LzEvdkFvdXZPRTdKU2FNQzQ3NVRwRHFtOEp2QmhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1 LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwaAoMA0G CSqGSIb3DQEBCwUAA4IBAQCqoHK4hfirrKSTGwHkkSr9QsLd2TmyTnF6q2Y12pQg oPlqpsVOnPzJ3/sR+qEUyjESQMt7vaOu4WMlQorX9vcITv+K47Tk8TqehYXdE4A6 tBHsl6FIXrElr/c48sAsm0BghKtVLLVqm4sU59xbCB/BuhBgm3PZXHQ9b0lWBoK7 LOqHyktJjarRrV/ayPjrTwMyjtXeAy6kbDvR4MDGm4PZCVa1tSYRqdjHkind+gjY Sqsg44+sGe29KXAwQ4so49vKbBJejpU7WzZmVgK1wfkWT3TIhe2Ic0JiaSnoCI4M 6oaNXGReu9tg6H0WZmnVjkKYbEWpmCtUkvk2lgw7hZIw -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:23 2026 by rpki-client