This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa File: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (raw, json) Hash identifier: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4= Subject key identifier: 55:51:D6:8C:B0:B9:81:78:64:C4:D4:3B:21:51:43:5F:39:B3:79:92 Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Certificate serial: 019B7BA4010CCF8BACA630F5CA43BEB3BB37 Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 194.246.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:01:0c:cf:8b:ac:a6:30:f5:ca:43:be:b3:bb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5551d68cb0b9817864c4d43b2151435f39b37992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:44:a2:17:b3:ca:1d:6c:71:ef:f5:58:dd: 02:fc:6d:de:d9:0a:fd:a8:11:d8:13:dc:51:ce:b7: d4:a8:27:fd:a9:45:96:ad:d1:49:5c:f0:77:b3:70: de:58:f8:e5:6c:de:8d:f9:48:3e:43:c6:9a:cd:cc: 4f:d2:28:52:27:49:50:9c:d4:2c:0b:f8:c4:cc:1d: 71:a3:33:63:96:9a:89:25:59:80:56:e2:9d:2f:a7: 5f:c4:99:ed:23:31:39:c3:1c:38:2e:79:4b:55:1e: 3b:cc:3d:8c:d2:64:62:fa:da:7b:48:b5:35:e8:6b: 3d:c8:7f:57:22:bf:36:1d:f1:57:52:0e:f3:f9:e7: 96:2d:b6:ac:72:b3:65:0f:8a:6b:7f:37:8e:f6:17: 6e:b5:87:fa:64:49:79:c7:52:fe:43:2b:00:1b:44: 78:26:8e:c8:1c:a1:bb:97:ff:5c:f7:d8:84:fe:6a: d0:dd:e9:b3:1a:86:76:d6:f1:82:7c:01:35:7e:82: d9:df:90:81:fb:12:bc:0e:97:bf:61:1f:2f:6e:e4: d4:e3:5f:6e:f8:ed:86:2e:04:0d:1a:9b:cc:6d:fe: 25:ea:6d:ff:c3:fe:e1:ab:03:c8:de:68:97:9a:fa: bb:22:c1:82:e6:05:80:b0:f5:cf:e5:fd:29:1b:78: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:D6:8C:B0:B9:81:78:64:C4:D4:3B:21:51:43:5F:39:B3:79:92 X509v3 Authority Key Identifier: keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.4.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:c9:9e:ba:80:45:66:11:af:c4:52:75:29:14:bf:d0:cb:49: e7:ba:bd:33:d9:1a:37:15:27:42:a3:e7:83:16:6e:c0:ca:cb: bf:42:1a:55:16:c2:9b:eb:37:9b:86:98:73:31:16:ef:6b:91: 64:3f:cc:e5:6c:bb:12:b5:b2:54:83:71:56:b9:82:b7:a8:3e: a4:9d:b8:64:6b:c5:fc:a3:12:2c:12:e3:01:d2:bf:9c:5d:27: 5b:2d:dc:2b:e0:c4:36:70:22:c7:59:9a:0f:e1:6b:d6:33:49: 85:e0:fe:28:87:d5:bc:8a:8e:73:90:67:35:fb:16:bd:4c:f0: 57:f5:76:d0:04:df:d2:65:c8:50:4c:24:08:89:0f:eb:58:64: 5a:1c:54:b7:53:18:22:1d:53:16:f4:f5:2f:19:2c:bb:bb:37: 37:a1:69:c3:99:68:e3:0c:3a:95:3e:14:24:a8:ae:d7:38:84: f6:3b:3c:b8:1e:3d:f4:1d:f5:0f:2b:0a:16:95:59:26:6e:64: a8:7c:c2:36:22:ee:be:5d:cf:ec:d3:99:e8:ed:bf:6a:15:d6: a7:9f:13:8e:6b:df:59:4a:50:5a:9e:a8:ea:3c:12:33:4c:c7: 11:8a:ce:63:42:cd:d4:6b:d0:29:4d:a5:87:1d:5c:60:aa:a5: ee:8c:28:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pAEMz4uspjD1ykO+s7s3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx NGRiYjMwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTUxZDY4Y2IwYjk4MTc4NjRjNGQ0M2IyMTUxNDM1ZjM5YjM3OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYBEohezyh1sce/1WN0C/G3e2Qr9 qBHYE9xRzrfUqCf9qUWWrdFJXPB3s3DeWPjlbN6N+Ug+Q8aazcxP0ihSJ0lQnNQs C/jEzB1xozNjlpqJJVmAVuKdL6dfxJntIzE5wxw4LnlLVR47zD2M0mRi+tp7SLU1 6Gs9yH9XIr82HfFXUg7z+eeWLbascrNlD4prfzeO9hdutYf6ZEl5x1L+QysAG0R4 Jo7IHKG7l/9c99iE/mrQ3emzGoZ21vGCfAE1foLZ35CB+xK8Dpe/YR8vbuTU419u +O2GLgQNGpvMbf4l6m3/w/7hqwPI3miXmvq7IsGC5gWAsPXP5f0pG3i48wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFVR1oywuYF4ZMTUOyFRQ185s3mSMB8GA1UdIwQY MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt NzMyNDkxMzk3NWQ1LzEvVlZIV2pMQzVnWGhreE5RN0lWRkRYem16ZVpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1 LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvYEMA0G CSqGSIb3DQEBCwUAA4IBAQCayZ66gEVmEa/EUnUpFL/Qy0nnur0z2Ro3FSdCo+eD Fm7Aysu/QhpVFsKb6zebhphzMRbva5FkP8zlbLsStbJUg3FWuYK3qD6knbhka8X8 oxIsEuMB0r+cXSdbLdwr4MQ2cCLHWZoP4WvWM0mF4P4oh9W8io5zkGc1+xa9TPBX 9XbQBN/SZchQTCQIiQ/rWGRaHFS3UxgiHVMW9PUvGSy7uzc3oWnDmWjjDDqVPhQk qK7XOIT2Ozy4Hj30HfUPKwoWlVkmbmSofMI2Iu6+Xc/s05no7b9qFdannxOOa99Z SlBanqjqPBIzTMcRis5jQs3Ua9ApTaWHHVxgqqXujCgl -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:16 2026 by rpki-client