This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VOEztR1c2HgQabG2AvSuavjI-kE.roa File: VOEztR1c2HgQabG2AvSuavjI-kE.roa (raw, json) Hash identifier: o3A84i5KukQ5qL5zRcUZJ4wqrBAFXO2hQ6fbPvgLehA= Subject key identifier: 54:E1:33:B5:1D:5C:D8:78:10:69:B1:B6:02:F4:AE:6A:F8:C8:FA:41 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C86F35E16D9CDD9AD77344724CBC Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VOEztR1c2HgQabG2AvSuavjI-kE.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57016 IP address blocks: 31.148.160.0/21 maxlen: 24 95.46.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c8:6f:35:e1:6d:9c:dd:9a:d7:73:44:72:4c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54e133b51d5cd8781069b1b602f4ae6af8c8fa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:77:3c:d4:b2:be:12:3c:58:0b:b9:0a:e9: 1d:cc:c4:21:4e:89:cd:6e:0b:36:ff:ca:e7:08:74: 9c:1f:f7:48:c9:16:af:b3:19:a5:63:17:9b:b6:12: db:99:2d:b8:58:a1:48:37:67:d0:90:52:81:02:1f: 9d:a6:0d:e9:43:a5:db:41:7f:b3:3a:cb:52:57:31: 05:b6:fe:39:fe:90:68:fc:8c:d9:c5:1a:d9:c7:7c: 83:1f:df:df:26:54:58:13:6a:ac:e1:0a:db:0c:81: f8:1e:fe:be:92:43:bf:ce:47:f3:35:76:ae:14:90: fa:a6:5d:93:0b:a9:67:94:a2:92:78:34:86:f9:da: 55:c0:57:5e:de:c5:f4:3d:21:af:d4:fd:ed:ce:c2: 42:46:81:2c:cc:42:65:55:ee:fa:fc:16:65:d3:c5: 48:c5:dd:f0:71:23:d5:b4:47:88:ad:c4:24:75:83: 72:4f:8a:81:64:ba:ce:42:8d:84:b7:88:1a:cf:0e: c6:f3:6e:3b:d8:a4:a4:e0:ce:cd:a6:c4:7c:96:cd: 10:ff:03:7f:89:8a:de:e1:30:ab:5c:dc:ed:29:38: e8:36:ef:3f:67:7d:c5:bd:68:ac:33:02:ee:37:19: 55:98:1e:55:75:06:ec:fa:c3:18:71:59:0a:76:f4: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E1:33:B5:1D:5C:D8:78:10:69:B1:B6:02:F4:AE:6A:F8:C8:FA:41 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VOEztR1c2HgQabG2AvSuavjI-kE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.160.0/21 95.46.80.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:85:00:c3:a2:f2:11:8e:d6:bf:e3:c2:c4:ff:7e:e9:f1:8b: c2:43:e6:19:41:37:39:76:16:33:eb:1e:22:36:13:2e:80:4e: cf:41:31:96:66:67:07:06:af:d2:ca:4a:74:25:40:51:f2:68: 33:4f:88:59:45:8a:0a:42:73:f2:f3:91:9f:47:3b:3b:36:df: d9:4f:a0:4f:4b:62:10:1a:6b:15:c7:03:6a:59:ee:72:a3:48: 57:4c:32:5d:bd:31:84:51:9c:16:e8:a6:d9:37:b5:44:88:c4: 21:78:8b:d8:c8:d7:84:d7:1e:17:08:34:71:c7:ba:1c:fa:b7: 15:34:6f:bf:47:55:07:65:67:99:2e:83:d3:8f:b1:26:0f:18: bc:48:7d:4d:88:5a:96:2c:5a:20:85:3d:fb:19:c4:af:8b:cb: 37:6c:96:3d:a6:95:73:27:19:ea:f6:f0:c1:a2:be:2f:a0:ed: cb:be:23:aa:ff:6f:4f:08:fc:03:8b:a4:47:ab:56:33:90:81: 19:04:22:28:65:a8:4f:15:2e:f5:02:d4:0a:e8:60:b1:04:47: 2d:d4:b2:11:64:05:63:75:f9:f4:e2:6a:08:6e:1f:f5:9a:17: 49:06:b4:59:2a:4a:b9:80:20:73:39:69:a2:6c:8a:1a:ff:a2: 83:d9:45:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMhvNeFtnN2a13NEcky8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGUxMzNiNTFkNWNkODc4MTA2OWIxYjYwMmY0YWU2YWY4YzhmYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeV3PNSyvhI8WAu5CukdzMQhTonN bgs2/8rnCHScH/dIyRavsxmlYxebthLbmS24WKFIN2fQkFKBAh+dpg3pQ6XbQX+z OstSVzEFtv45/pBo/IzZxRrZx3yDH9/fJlRYE2qs4QrbDIH4Hv6+kkO/zkfzNXau FJD6pl2TC6lnlKKSeDSG+dpVwFde3sX0PSGv1P3tzsJCRoEszEJlVe76/BZl08VI xd3wcSPVtEeIrcQkdYNyT4qBZLrOQo2Et4gazw7G82472KSk4M7NpsR8ls0Q/wN/ iYre4TCrXNztKTjoNu8/Z33FvWisMwLuNxlVmB5VdQbs+sMYcVkKdvQBvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFThM7UdXNh4EGmxtgL0rmr4yPpBMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVk9FenRSMWMySGdRYWJHMkF2U3VhdmpJLWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDH5SgAwQE Xy5QMA0GCSqGSIb3DQEBCwUAA4IBAQAthQDDovIRjta/48LE/37p8YvCQ+YZQTc5 dhYz6x4iNhMugE7PQTGWZmcHBq/Sykp0JUBR8mgzT4hZRYoKQnPy85GfRzs7Nt/Z T6BPS2IQGmsVxwNqWe5yo0hXTDJdvTGEUZwW6KbZN7VEiMQheIvYyNeE1x4XCDRx x7oc+rcVNG+/R1UHZWeZLoPTj7EmDxi8SH1NiFqWLFoghT37GcSvi8s3bJY9ppVz Jxnq9vDBor4voO3LviOq/29PCPwDi6RHq1YzkIEZBCIoZahPFS71AtQK6GCxBEct 1LIRZAVjdfn04moIbh/1mhdJBrRZKkq5gCBzOWmibIoa/6KD2UXc -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:54 2026 by rpki-client