This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/vxmucN7MwfwY4O7KULCcco-LMOo.roa File: vxmucN7MwfwY4O7KULCcco-LMOo.roa (raw, json) Hash identifier: LM+EAvwg71ia09ADFWQH++Rcqy8ftQKjbv/gLajVj5A= Subject key identifier: BF:19:AE:70:DE:CC:C1:FC:18:E0:EE:CA:50:B0:9C:72:8F:8B:30:EA Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8 Certificate serial: 019B7B35839906E60DF171137D5DC852B2E0 Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/vxmucN7MwfwY4O7KULCcco-LMOo.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202371 IP address blocks: 94.185.119.0/24 maxlen: 24 94.185.120.0/24 maxlen: 24 94.185.121.0/24 maxlen: 24 94.185.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:83:99:06:e6:0d:f1:71:13:7d:5d:c8:52:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf19ae70deccc1fc18e0eeca50b09c728f8b30ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:d5:f0:ac:7e:86:25:a1:8d:0c:e6:a1:47: 5a:94:84:2f:8d:f2:a3:c4:84:ca:6d:cf:36:90:23: 2d:08:ff:dc:c3:15:02:6f:b8:c3:9b:09:ef:33:95: 67:d5:79:52:22:a4:c9:a7:d3:0b:03:c3:8c:f4:87: ed:74:f1:96:8e:31:1e:b4:d1:06:d9:08:81:d5:70: 78:01:8f:2d:d9:46:fa:5e:73:0b:a6:a9:6e:96:df: e8:90:2d:9b:26:e8:74:70:f6:c6:ed:1a:10:6f:38: 18:d5:cd:64:5a:d7:78:a7:44:25:c7:e8:0c:ab:7a: 70:94:3c:b7:05:21:84:e3:a3:5a:0f:f7:e4:dc:39: 38:a5:ab:89:a3:cc:59:57:dd:56:d2:69:03:82:f2: 34:09:cd:83:47:c2:a7:92:eb:fb:6c:17:3f:ff:9e: 0f:c0:2e:76:1b:42:14:7c:e3:1e:2e:a6:10:68:8e: d3:08:40:69:4d:3e:5d:af:1b:32:1e:ee:3f:70:c5: 2d:50:90:6e:1f:72:4e:32:26:b1:a4:a8:f0:f8:eb: 3c:19:2b:04:08:11:c3:c0:ee:b6:9b:73:ce:96:d0: 21:e4:e6:18:52:4a:5d:1f:8d:e1:6c:39:30:f9:1f: 00:e8:7a:d2:fd:20:6c:cd:ee:2c:06:84:58:7e:3a: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:19:AE:70:DE:CC:C1:FC:18:E0:EE:CA:50:B0:9C:72:8F:8B:30:EA X509v3 Authority Key Identifier: keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/vxmucN7MwfwY4O7KULCcco-LMOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.185.119.0-94.185.122.255 Signature Algorithm: sha256WithRSAEncryption 52:cf:cb:74:27:97:e0:d9:76:71:f8:68:e6:cf:15:d2:fc:79: 6d:94:c0:3c:a2:00:0e:07:00:3f:05:ba:01:4b:1c:29:98:48: 2d:c1:04:19:0a:3d:af:35:0a:00:9c:e6:06:ac:ba:75:0b:1c: 51:68:04:7d:44:80:bb:c5:ee:ed:24:e0:2c:6c:9a:2d:01:bc: ae:eb:af:ea:4d:6d:ac:8a:86:48:b5:dd:bb:03:53:77:c3:ac: ab:f9:b3:1e:2c:6b:1c:f9:b8:a2:a6:8a:e8:a4:1c:9b:e8:6d: a8:56:d9:9c:54:b0:b0:0d:ac:1b:68:21:34:50:d0:6f:1f:13: 20:ab:d9:1d:4c:af:9e:e3:22:0e:c6:52:4d:5f:3c:01:49:8d: 8a:63:bb:14:dd:50:1d:b0:0a:2d:e7:b7:d0:f0:7f:b3:af:bc: 49:d6:86:e6:55:0d:86:17:b1:8e:27:10:80:d6:e6:7e:bd:f8: a5:78:7d:fd:3c:5a:6d:d5:1c:6c:a2:6a:eb:c1:5f:10:85:46: 8f:4e:ee:d7:ea:82:fa:d9:46:bd:4e:14:dc:a3:a7:a0:4c:79: 64:8e:c3:74:82:da:a8:e7:88:bd:82:60:4b:06:d5:04:32:89: ef:99:19:86:b5:73:a0:4d:e5:fa:65:94:86:2e:be:63:8b:81: 40:a9:fe:fd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NYOZBuYN8XETfV3IUrLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODhiMWI1NjBmOTk4ZWNjZDNhNmVmZjQwNTQzYjU5MjA0 ZDY3YjgwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjE5YWU3MGRlY2NjMWZjMThlMGVlY2E1MGIwOWM3MjhmOGIzMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYHV8Kx+hiWhjQzmoUdalIQvjfKj xITKbc82kCMtCP/cwxUCb7jDmwnvM5Vn1XlSIqTJp9MLA8OM9IftdPGWjjEetNEG 2QiB1XB4AY8t2Ub6XnMLpqlult/okC2bJuh0cPbG7RoQbzgY1c1kWtd4p0Qlx+gM q3pwlDy3BSGE46NaD/fk3Dk4pauJo8xZV91W0mkDgvI0Cc2DR8Knkuv7bBc//54P wC52G0IUfOMeLqYQaI7TCEBpTT5drxsyHu4/cMUtUJBuH3JOMiaxpKjw+Os8GSsE CBHDwO62m3POltAh5OYYUkpdH43hbDkw+R8A6HrS/SBsze4sBoRYfjoFjwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL8ZrnDezMH8GODuylCwnHKPizDqMB8GA1UdIwQY MBaAFCWIsbVg+ZjszTpu/0BUO1kgTWe4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEt OTlhMDE4OTg4OGI1LzEvdnhtdWNON013ZndZNE83S1VMQ2Njby1MTU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEtOTlhMDE4OTg4OGI1 LzEvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABeuXcD BABeuXowDQYJKoZIhvcNAQELBQADggEBAFLPy3Qnl+DZdnH4aObPFdL8eW2UwDyi AA4HAD8FugFLHCmYSC3BBBkKPa81CgCc5gasunULHFFoBH1EgLvF7u0k4Cxsmi0B vK7rr+pNbayKhki13bsDU3fDrKv5sx4saxz5uKKmiuikHJvobahW2ZxUsLANrBto ITRQ0G8fEyCr2R1Mr57jIg7GUk1fPAFJjYpjuxTdUB2wCi3nt9Dwf7OvvEnWhuZV DYYXsY4nEIDW5n69+KV4ff08Wm3VHGyiauvBXxCFRo9O7tfqgvrZRr1OFNyjp6BM eWSOw3SC2qjniL2CYEsG1QQyie+ZGYa1c6BN5fpllIYuvmOLgUCp/v0= -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:18 2026 by rpki-client