This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VmHJNehSaSjf_RY01rDz-LkKqEo.roa File: VmHJNehSaSjf_RY01rDz-LkKqEo.roa (raw, json) Hash identifier: 2JsMgajit3cNjj0KEde3MujRcO1NdJZZV45oREiLK88= Subject key identifier: 56:61:C9:35:E8:52:69:28:DF:FD:16:34:D6:B0:F3:F8:B9:0A:A8:4A Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B7834445B247AF1BFE32F305440CCCE83 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VmHJNehSaSjf_RY01rDz-LkKqEo.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197540 IP address blocks: 94.16.30.0/23 maxlen: 23 94.16.30.128/25 maxlen: 25 94.16.104.0/22 maxlen: 24 94.16.108.0/22 maxlen: 24 94.16.112.0/21 maxlen: 24 94.16.120.0/22 maxlen: 24 185.216.176.0/22 maxlen: 22 185.232.68.0/22 maxlen: 22 188.172.228.0/23 maxlen: 24 193.26.156.0/22 maxlen: 22 194.36.144.0/22 maxlen: 22 2a00:11c0:47:1000::/52 maxlen: 52 2a00:11c0:47:2000::/56 maxlen: 56 2a00:11c0:47:3000::/52 maxlen: 52 2a00:11c0:5d::/48 maxlen: 48 2a00:11c0:5f::/48 maxlen: 48 2a00:11c0:5f:100::/56 maxlen: 56 2a00:11c0:5f:200::/56 maxlen: 56 2a00:11c0:5f:1000::/56 maxlen: 56 2a00:11c0:5f:2000::/52 maxlen: 52 2a00:11c0:5f:3000::/52 maxlen: 52 2a00:11c0:5f:4000::/52 maxlen: 52 2a00:11c0:60::/48 maxlen: 48 2a00:11c0:81::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:44:5b:24:7a:f1:bf:e3:2f:30:54:40:cc:ce:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5661c935e8526928dffd1634d6b0f3f8b90aa84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:f3:76:5b:e9:51:e5:33:a4:18:94:2c:e7: 8b:78:e1:8b:b0:5c:bd:d3:b2:28:df:35:f4:d8:b0: 87:fd:5e:6f:21:36:8d:e2:09:07:7a:50:86:b3:ad: df:da:1b:dd:03:9c:d8:92:8b:58:de:56:3e:01:f0: 71:f8:97:90:cb:59:a8:f3:05:f4:88:f4:c2:1f:09: ff:83:eb:c0:60:6a:a5:64:ab:c5:48:70:03:9a:92: 42:20:cb:3b:f1:6e:a2:69:3a:31:c1:fe:ed:f6:d8: a7:a0:b1:b3:7e:5b:8d:b1:f7:9e:13:29:95:8a:65: 8f:86:f3:07:32:5b:d8:c9:1b:cc:91:fe:60:d6:51: 22:21:65:d5:24:83:6e:2d:d4:0f:32:c7:70:93:54: 61:1d:70:94:48:50:92:dc:97:1e:3d:2a:ea:a2:1a: c6:0f:84:90:2b:c1:87:b0:df:fe:a8:d9:bc:52:9f: c0:89:50:ad:2b:28:a8:1d:fd:4f:16:19:cd:68:ef: fe:d4:b9:af:9d:c2:df:40:35:60:79:4f:21:3c:8d: 0f:29:83:39:7b:39:5a:c2:ff:f6:7c:fc:8e:93:b6: fd:d8:7a:59:7e:11:eb:f0:5d:5b:8f:1b:34:39:b6: d3:5d:89:c6:3b:3c:af:f4:a2:2a:36:2d:8b:68:08: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:C9:35:E8:52:69:28:DF:FD:16:34:D6:B0:F3:F8:B9:0A:A8:4A X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VmHJNehSaSjf_RY01rDz-LkKqEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.16.30.0/23 94.16.104.0-94.16.123.255 185.216.176.0/22 185.232.68.0/22 188.172.228.0/23 193.26.156.0/22 194.36.144.0/22 IPv6: 2a00:11c0:47:1000::-2a00:11c0:47:20ff:ffff:ffff:ffff:ffff 2a00:11c0:47:3000::/52 2a00:11c0:5d::/48 2a00:11c0:5f::-2a00:11c0:60:ffff:ffff:ffff:ffff:ffff 2a00:11c0:81::/56 Signature Algorithm: sha256WithRSAEncryption 6e:65:25:3a:dc:14:18:46:19:34:03:58:42:7a:6c:de:31:2f: 63:d8:b7:79:50:e5:1f:69:83:19:49:4b:f0:e9:00:dc:bb:54: 85:12:ab:81:f0:ce:ea:8e:36:9a:f8:d1:da:6c:73:41:29:d7: 25:eb:24:87:4d:78:ce:25:f5:e4:89:a4:d5:9a:3b:9c:2e:11: 1d:0d:43:7d:c1:35:df:e5:5a:9f:2b:f4:b2:d0:ca:79:7a:3f: 4b:21:2f:34:5e:73:8f:a4:8b:48:b9:1c:ce:3f:e8:de:1a:fe: b3:db:52:04:1d:8b:54:53:cc:9c:dd:f1:85:df:81:57:47:a7: 59:c4:0c:ad:af:90:4d:be:06:59:9d:3c:08:60:85:2f:f6:75: 38:c7:e7:9f:1f:cc:f7:62:7b:9d:6c:f4:bd:d3:6c:4d:21:3f: fb:18:90:af:7a:73:47:ee:ab:40:aa:ba:03:99:57:8e:a2:58: 67:a7:d5:68:cd:1d:92:05:a4:75:92:da:07:e6:25:aa:7c:83: 30:8c:d3:4d:e5:1c:5f:20:2b:fc:32:b6:f8:44:57:47:83:f6: 42:fc:92:c2:cc:4e:5d:97:17:1f:de:d6:42:70:33:36:90:d2: ae:56:c3:b6:c2:e7:68:20:bf:1e:7c:89:52:40:a9:00:ba:4f: 09:53:20:4c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt4NERbJHrxv+MvMFRAzM6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjYxYzkzNWU4NTI2OTI4ZGZmZDE2MzRkNmIwZjNmOGI5MGFhODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8rzdlvpUeUzpBiULOeLeOGLsFy9 07Io3zX02LCH/V5vITaN4gkHelCGs63f2hvdA5zYkotY3lY+AfBx+JeQy1mo8wX0 iPTCHwn/g+vAYGqlZKvFSHADmpJCIMs78W6iaToxwf7t9tinoLGzfluNsfeeEymV imWPhvMHMlvYyRvMkf5g1lEiIWXVJINuLdQPMsdwk1RhHXCUSFCS3JcePSrqohrG D4SQK8GHsN/+qNm8Up/AiVCtKyioHf1PFhnNaO/+1LmvncLfQDVgeU8hPI0PKYM5 ezlawv/2fPyOk7b92HpZfhHr8F1bjxs0ObbTXYnGOzyv9KIqNi2LaAhj6QIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFFZhyTXoUmko3/0WNNaw8/i5CqhKMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvVm1ISk5laFNhU2pmX1JZMDFyRHotTGtLcUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTA4BAIAATAyAwQBXhAe MAwDBANeEGgDBAJeEHgDBAK52LADBAK56EQDBAG8rOQDBALBGpwDBALCJJAwTQQC AAIwRzAUAwgEKgARwABHEAMIACoAEcAARyADCAQqABHAAEcwAwcAKgARwABdMBID BwAqABHAAF8DBwAqABHAAGADCAAqABHAAIEAMA0GCSqGSIb3DQEBCwUAA4IBAQBu ZSU63BQYRhk0A1hCemzeMS9j2Ld5UOUfaYMZSUvw6QDcu1SFEquB8M7qjjaa+NHa bHNBKdcl6ySHTXjOJfXkiaTVmjucLhEdDUN9wTXf5VqfK/Sy0Mp5ej9LIS80XnOP pItIuRzOP+jeGv6z21IEHYtUU8yc3fGF34FXR6dZxAytr5BNvgZZnTwIYIUv9nU4 x+efH8z3YnudbPS902xNIT/7GJCvenNH7qtAqroDmVeOolhnp9VozR2SBaR1ktoH 5iWqfIMwjNNN5RxfICv8Mrb4RFdHg/ZC/JLCzE5dlxcf3tZCcDM2kNKuVsO2wudo IL8efIlSQKkAuk8JUyBM -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:10 2026 by rpki-client