This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/VYVYQF_ANofE0yejSfmiYhxR2Kk.roa File: VYVYQF_ANofE0yejSfmiYhxR2Kk.roa (raw, json) Hash identifier: yiaUDLovZhIcie7kurnGCzzLjpUZchXMWKa1PjoJ5M8= Subject key identifier: 55:85:58:40:5F:C0:36:87:C4:D3:27:A3:49:F9:A2:62:1C:51:D8:A9 Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B79ED441A9251DF532A500C5D2A60591D Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/VYVYQF_ANofE0yejSfmiYhxR2Kk.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205570 IP address blocks: 203.202.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:44:1a:92:51:df:53:2a:50:0c:5d:2a:60:59:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=558558405fc03687c4d327a349f9a2621c51d8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:1f:bb:7d:53:f7:d0:0e:06:af:fb:4c:79: cd:af:e8:bc:c0:46:24:c4:63:6a:4b:d8:d6:99:9e: 15:0d:80:68:5f:33:7a:40:c5:c4:99:d0:1b:24:f0: 1b:9e:62:db:57:f0:19:bd:12:94:81:8f:d1:23:62: 8d:a2:46:19:e9:9b:cc:8d:05:52:6a:39:ae:d4:7c: 30:a0:39:de:03:3d:89:1b:59:a2:7e:97:33:3f:c2: 69:d3:f6:ba:73:28:6a:b3:72:eb:d4:8f:57:c0:c7: 23:28:95:a8:06:6b:14:15:e2:42:0f:9b:77:27:d8: 10:1b:3c:56:37:71:f2:26:6e:ee:3b:0b:06:d3:0e: c4:2d:c0:c8:0b:1c:22:03:70:7b:10:9e:81:b8:36: c7:24:15:5a:f7:d8:3b:5d:ee:0b:b4:94:a9:9d:de: 37:bd:7a:89:8f:28:b8:f3:1f:b5:5f:cc:3a:e7:7d: 62:03:77:1f:4d:9f:3a:a9:98:6c:2e:3b:cc:21:9c: 5a:40:e9:95:e2:94:dc:76:ae:69:b6:cf:35:bb:64: 96:1e:93:71:a9:9f:19:63:00:50:89:26:ba:ee:4e: f2:ea:ce:f9:77:9d:db:2a:cf:0d:43:ab:05:32:e5: 75:89:fc:f6:85:a5:e4:08:0e:e8:f3:d0:a3:79:2f: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:85:58:40:5F:C0:36:87:C4:D3:27:A3:49:F9:A2:62:1C:51:D8:A9 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/VYVYQF_ANofE0yejSfmiYhxR2Kk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.202.233.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:2f:63:d5:8c:2b:7f:35:58:76:2e:30:38:54:44:74:21:f6: 03:93:6f:1d:8a:14:16:cf:a3:fd:5c:c4:b5:1b:fd:f5:26:3f: 77:46:06:63:6f:4c:04:75:4d:a3:c5:c6:99:ec:a0:2d:b0:10: ce:65:25:be:16:f1:e1:5b:bd:e9:b0:8e:0a:e1:58:78:43:03: 74:00:b3:a1:ca:f6:73:a1:62:f5:08:43:b9:15:e2:c2:01:9f: 5d:b2:e9:a8:41:58:70:39:52:7f:4e:25:54:9b:6a:29:7b:cb: 81:3b:35:dc:47:24:ed:23:f9:f5:17:cf:90:cd:d2:86:55:80: 3f:58:a8:df:55:d4:19:66:0f:9e:7f:42:9b:4b:e9:d6:46:c3: bc:e0:6d:9e:1c:94:11:fd:49:4b:74:ab:25:ef:a1:6a:41:5e: d3:8f:f9:9b:55:50:55:dd:d7:f8:94:37:7a:32:d5:b8:52:a3: 2c:46:ad:92:29:93:d9:70:5c:94:50:31:e7:af:76:f1:1f:01: 45:a7:df:a3:28:3c:66:25:b4:cf:d9:3f:f5:01:37:14:7a:7c: 4c:6a:b2:76:0c:9f:a7:fd:f8:2d:eb:c2:41:36:64:8b:c8:07: a9:82:7a:5a:e1:76:a0:91:2e:61:2b:f0:34:cb:be:df:67:31: 71:7f:57:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UQaklHfUypQDF0qYFkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTg1NTg0MDVmYzAzNjg3YzRkMzI3YTM0OWY5YTI2MjFjNTFkOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaYfu31T99AOBq/7THnNr+i8wEYk xGNqS9jWmZ4VDYBoXzN6QMXEmdAbJPAbnmLbV/AZvRKUgY/RI2KNokYZ6ZvMjQVS ajmu1HwwoDneAz2JG1mifpczP8Jp0/a6cyhqs3Lr1I9XwMcjKJWoBmsUFeJCD5t3 J9gQGzxWN3HyJm7uOwsG0w7ELcDICxwiA3B7EJ6BuDbHJBVa99g7Xe4LtJSpnd43 vXqJjyi48x+1X8w6531iA3cfTZ86qZhsLjvMIZxaQOmV4pTcdq5pts81u2SWHpNx qZ8ZYwBQiSa67k7y6s75d53bKs8NQ6sFMuV1ifz2haXkCA7o89CjeS/LqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWFWEBfwDaHxNMno0n5omIcUdipMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvVllWWVFGX0FOb2ZFMHllalNmbWlZaHhSMktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8rpMA0G CSqGSIb3DQEBCwUAA4IBAQAaL2PVjCt/NVh2LjA4VER0IfYDk28dihQWz6P9XMS1 G/31Jj93RgZjb0wEdU2jxcaZ7KAtsBDOZSW+FvHhW73psI4K4Vh4QwN0ALOhyvZz oWL1CEO5FeLCAZ9dsumoQVhwOVJ/TiVUm2ope8uBOzXcRyTtI/n1F8+QzdKGVYA/ WKjfVdQZZg+ef0KbS+nWRsO84G2eHJQR/UlLdKsl76FqQV7Tj/mbVVBV3df4lDd6 MtW4UqMsRq2SKZPZcFyUUDHnr3bxHwFFp9+jKDxmJbTP2T/1ATcUenxMarJ2DJ+n /fgt68JBNmSLyAepgnpa4XagkS5hK/A0y77fZzFxf1fC -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:32 2026 by rpki-client