This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/VFqJkoKX_P2e5DUSDfyccrd5zpE.roa File: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (raw, json) Hash identifier: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8= Subject key identifier: 54:5A:89:92:82:97:FC:FD:9E:E4:35:12:0D:FC:9C:72:B7:79:CE:91 Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Certificate serial: 019B76EB1EB4EEB076C82E34251C02C5C3B6 Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/VFqJkoKX_P2e5DUSDfyccrd5zpE.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139352 IP address blocks: 194.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1e:b4:ee:b0:76:c8:2e:34:25:1c:02:c5:c3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=545a89928297fcfd9ee435120dfc9c72b779ce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:ad:14:e4:26:84:c7:6d:d0:e2:62:7b:67: f5:59:ef:3d:b1:1f:d9:09:6c:6b:d0:c8:9a:ce:b6: 64:46:b4:cd:2c:a5:66:e8:1c:ab:de:52:9d:ea:13: ec:e6:0c:e4:59:8f:5b:98:5b:0d:9d:64:81:14:c4: 10:e5:73:37:cd:03:92:43:4d:d4:92:10:d2:99:8a: 13:51:9e:a2:39:db:1e:d4:14:5b:17:4a:94:36:83: 23:a1:c4:47:09:1c:05:da:0e:ee:bf:bf:87:4f:7f: 77:4d:45:08:ed:b8:41:ca:34:72:83:61:6f:8a:5f: a2:b3:53:82:65:6e:4c:3f:80:dd:28:11:b3:69:15: 3b:57:85:f1:b4:5d:bb:aa:08:37:ab:a9:f4:0b:57: f3:a2:51:55:e2:07:29:d8:de:a0:ea:c2:9c:0a:16: 04:b2:11:58:01:f6:20:d8:5d:f1:60:33:b3:52:6f: d6:c2:b2:4a:50:80:8b:a8:e0:94:d7:84:fb:59:b2: d1:c6:78:bc:8a:1e:14:c6:57:5e:b0:1b:a8:6f:b7: 71:a3:c4:63:28:52:0c:43:39:7f:2f:5d:08:b5:49: 09:24:67:5c:af:ad:ed:e8:b9:6f:24:26:c8:92:3f: 9c:54:1e:30:f7:8c:9f:7d:ac:c4:26:c5:34:15:c9: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:89:92:82:97:FC:FD:9E:E4:35:12:0D:FC:9C:72:B7:79:CE:91 X509v3 Authority Key Identifier: keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/VFqJkoKX_P2e5DUSDfyccrd5zpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.2.0/24 Signature Algorithm: sha256WithRSAEncryption 73:df:26:c6:9c:18:3d:17:46:f6:29:0e:33:9c:eb:49:fe:62: 36:e6:e0:17:05:5b:7b:85:13:e8:76:0c:d9:de:dc:a9:46:d4: ed:1b:23:95:7e:a8:ab:c0:28:89:bd:8f:a2:56:da:05:96:61: 8f:66:0b:27:7f:ab:59:be:29:51:48:19:8f:f1:3a:15:59:7e: 65:6e:20:47:2e:23:d7:3f:58:7b:f6:d7:14:a5:fc:34:b6:8c: 0d:60:08:03:f8:17:6d:6e:37:5f:77:df:90:40:0c:a1:8c:59: a7:2b:91:82:b0:95:3d:e5:cb:b9:94:74:d4:e4:dd:6f:9c:74: 7e:d4:da:50:27:e2:e5:e7:28:06:53:d8:54:f6:e8:14:3b:1b: de:f7:cc:c4:f5:c7:ba:94:3e:5e:cc:88:93:ff:b3:13:96:1f: 98:f6:d8:a0:27:77:c3:e6:b0:10:48:4c:95:21:07:a6:d6:43: 9d:0d:4f:59:fd:b4:57:d8:9a:82:31:e3:cd:b9:a3:3b:e5:f9: ef:69:3d:03:7f:d0:e1:ed:f0:ad:7d:a3:e0:be:d9:7b:0c:a5: 46:ee:c6:3d:41:2b:8e:d1:1a:83:8f:aa:2c:19:20:d4:3f:3d: 65:58:8c:23:77:a9:55:5f:af:29:75:5d:86:2e:a3:57:76:b0: 28:d2:ab:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26x607rB2yC40JRwCxcO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5 NWIyNjgwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDVhODk5MjgyOTdmY2ZkOWVlNDM1MTIwZGZjOWM3MmI3NzljZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFmtFOQmhMdt0OJie2f1We89sR/Z CWxr0MiazrZkRrTNLKVm6Byr3lKd6hPs5gzkWY9bmFsNnWSBFMQQ5XM3zQOSQ03U khDSmYoTUZ6iOdse1BRbF0qUNoMjocRHCRwF2g7uv7+HT393TUUI7bhByjRyg2Fv il+is1OCZW5MP4DdKBGzaRU7V4XxtF27qgg3q6n0C1fzolFV4gcp2N6g6sKcChYE shFYAfYg2F3xYDOzUm/WwrJKUICLqOCU14T7WbLRxni8ih4UxldesBuob7dxo8Rj KFIMQzl/L10ItUkJJGdcr63t6LlvJCbIkj+cVB4w94yffazEJsU0FckZ4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFRaiZKCl/z9nuQ1Eg38nHK3ec6RMB8GA1UdIwQY MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt YmNjZDMyYWY5N2ZlLzEvVkZxSmtvS1hfUDJlNURVU0RmeWNjcmQ1enBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiMCMA0G CSqGSIb3DQEBCwUAA4IBAQBz3ybGnBg9F0b2KQ4znOtJ/mI25uAXBVt7hRPodgzZ 3typRtTtGyOVfqirwCiJvY+iVtoFlmGPZgsnf6tZvilRSBmP8ToVWX5lbiBHLiPX P1h79tcUpfw0towNYAgD+Bdtbjdfd9+QQAyhjFmnK5GCsJU95cu5lHTU5N1vnHR+ 1NpQJ+Ll5ygGU9hU9ugUOxve98zE9ce6lD5ezIiT/7MTlh+Y9tigJ3fD5rAQSEyV IQem1kOdDU9Z/bRX2JqCMePNuaM75fnvaT0Df9Dh7fCtfaPgvtl7DKVG7sY9QSuO 0RqDj6osGSDUPz1lWIwjd6lVX68pdV2GLqNXdrAo0qtr -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:46 2026 by rpki-client