This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tVOX2uf11NejASRvEd8XuTvbYz4.roa File: tVOX2uf11NejASRvEd8XuTvbYz4.roa (raw, json) Hash identifier: 4/hQ/jdm5dv3t9r3Ns+INICr4iM1pFkFIGNBqvYO3YM= Subject key identifier: B5:53:97:DA:E7:F5:D4:D7:A3:01:24:6F:11:DF:17:B9:3B:DB:63:3E Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B3658F62C55F56F19822904FE7CD572 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tVOX2uf11NejASRvEd8XuTvbYz4.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31221 IP address blocks: 144.56.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:58:f6:2c:55:f5:6f:19:82:29:04:fe:7c:d5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b55397dae7f5d4d7a301246f11df17b93bdb633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:1a:07:f7:f1:51:1f:db:44:39:af:a5:22: 73:8f:a1:3c:94:61:34:16:0e:11:a6:f1:3a:c6:a6: 9c:9c:58:cd:70:bc:6e:74:7f:08:b2:fe:3f:50:80: 41:2c:19:fa:ab:f8:b1:9a:3c:d9:ae:d1:b7:8c:d8: db:79:da:0d:cb:f5:a2:d2:a7:89:9e:98:1e:02:4b: 42:82:5e:38:c3:0a:66:f8:70:a2:31:bf:31:61:d0: 9b:91:7a:92:b4:6c:12:4a:59:70:f0:51:f3:f2:ac: e4:dc:37:71:d2:f5:c9:58:24:02:71:f4:fa:fa:e4: c2:aa:31:a8:5f:b2:33:43:46:fc:82:aa:86:92:2a: 01:2f:71:34:c2:44:40:54:a9:85:0a:69:e7:d6:45: 0b:f9:21:51:e4:68:66:bc:0d:75:09:66:4f:e3:7e: 4f:40:47:fd:d5:8a:3e:ad:90:49:4c:dd:20:0b:9b: b4:ad:89:fa:fb:79:fb:40:5d:2c:db:7b:88:f3:ff: b2:88:ad:ef:22:fc:5e:27:e1:e8:08:af:3e:f3:f7: 42:67:5c:1e:10:6a:23:57:68:fc:68:5e:21:0f:e9: 0e:6c:87:53:48:ec:fd:04:df:e2:ea:7b:9c:81:16: cd:f6:02:47:a6:a9:03:24:48:73:d9:cf:86:e6:37: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:53:97:DA:E7:F5:D4:D7:A3:01:24:6F:11:DF:17:B9:3B:DB:63:3E X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tVOX2uf11NejASRvEd8XuTvbYz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.28.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:68:62:95:c1:64:9b:50:aa:63:2a:b8:de:e3:6d:84:6b:d4: ab:86:61:06:2a:19:c3:00:90:c6:3f:d2:4b:9d:e5:e6:78:c2: 66:65:7d:27:68:14:bc:fb:f0:47:ec:0b:1b:b8:4e:5b:0f:dd: a7:b0:de:11:4a:f5:73:b3:5a:a9:ed:6e:e7:51:75:a6:ea:12: fd:9e:85:1c:ca:bc:07:b7:56:5d:4c:32:48:46:2c:e3:21:b3: b7:59:7a:e0:6e:4d:c5:48:8e:24:99:c9:62:e5:e9:b0:71:42: 5b:81:61:71:c5:6a:d7:b6:d2:81:fc:56:43:33:30:a6:d6:ad: 0b:76:8f:a0:20:2b:0a:da:04:f0:d6:a4:16:7f:3d:9d:4b:2f: 29:3f:a4:6a:f7:df:6d:36:2b:4d:3d:07:01:3e:9f:29:5d:a4: ac:9d:a0:45:b6:fb:36:45:65:c4:62:1f:9f:09:98:35:70:6b: 1e:51:1a:3a:b0:c8:8f:0c:f6:b3:ab:f0:43:fd:d2:11:6b:c4: fd:48:e8:f0:ee:08:bc:3a:c2:d8:d9:60:21:51:f9:97:e7:e2: 6e:76:c2:60:19:b0:67:11:69:24:e8:a4:59:17:e1:86:06:86: 8d:1f:5f:19:e8:e8:7c:ef:3e:a4:9d:80:78:31:1d:4b:03:97: 34:87:2e:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nlj2LFX1bxmCKQT+fNVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTUzOTdkYWU3ZjVkNGQ3YTMwMTI0NmYxMWRmMTdiOTNiZGI2MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEsaB/fxUR/bRDmvpSJzj6E8lGE0 Fg4RpvE6xqacnFjNcLxudH8Isv4/UIBBLBn6q/ixmjzZrtG3jNjbedoNy/Wi0qeJ npgeAktCgl44wwpm+HCiMb8xYdCbkXqStGwSSllw8FHz8qzk3Ddx0vXJWCQCcfT6 +uTCqjGoX7IzQ0b8gqqGkioBL3E0wkRAVKmFCmnn1kUL+SFR5GhmvA11CWZP435P QEf91Yo+rZBJTN0gC5u0rYn6+3n7QF0s23uI8/+yiK3vIvxeJ+HoCK8+8/dCZ1we EGojV2j8aF4hD+kObIdTSOz9BN/i6nucgRbN9gJHpqkDJEhz2c+G5jfFpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVTl9rn9dTXowEkbxHfF7k722M+MB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvdFZPWDJ1ZjExTmVqQVNSdkVkOFh1VHZiWXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgcMA0G CSqGSIb3DQEBCwUAA4IBAQAPaGKVwWSbUKpjKrje422Ea9SrhmEGKhnDAJDGP9JL neXmeMJmZX0naBS8+/BH7AsbuE5bD92nsN4RSvVzs1qp7W7nUXWm6hL9noUcyrwH t1ZdTDJIRizjIbO3WXrgbk3FSI4kmcli5emwcUJbgWFxxWrXttKB/FZDMzCm1q0L do+gICsK2gTw1qQWfz2dSy8pP6Rq999tNitNPQcBPp8pXaSsnaBFtvs2RWXEYh+f CZg1cGseURo6sMiPDPazq/BD/dIRa8T9SOjw7gi8OsLY2WAhUfmX5+JudsJgGbBn EWkk6KRZF+GGBoaNH18Z6Oh87z6knYB4MR1LA5c0hy69 -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:59 2026 by rpki-client