This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/zIdeJERtNI4YBciW3TqnOW_FhlI.roa File: zIdeJERtNI4YBciW3TqnOW_FhlI.roa (raw, json) Hash identifier: gb1oCn7StTANeNZVD37UKXQMlfOvC8/lLuU0st9zWGE= Subject key identifier: CC:87:5E:24:44:6D:34:8E:18:05:C8:96:DD:3A:A7:39:6F:C5:86:52 Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f Certificate serial: 019B79ED3ADAA29E102869DB870C722A8EAD Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/zIdeJERtNI4YBciW3TqnOW_FhlI.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44075 IP address blocks: 194.147.156.0/22 maxlen: 22 194.147.156.0/24 maxlen: 24 194.147.157.0/24 maxlen: 24 194.147.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:da:a2:9e:10:28:69:db:87:0c:72:2a:8e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc875e24446d348e1805c896dd3aa7396fc58652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:24:0f:33:1e:22:5b:51:1e:8f:90:f7:65: b3:b2:a1:22:35:ba:70:08:81:8c:ec:59:27:b2:ae: bb:f4:d8:0c:7c:64:90:d6:d8:bd:a9:3c:a7:cf:ff: 3c:8d:d1:38:d0:8d:8b:2b:b2:bb:f6:76:76:99:57: d0:b3:cc:8d:98:c4:f5:41:85:e3:21:45:03:98:79: 09:96:08:e2:8f:41:3f:cf:6f:cc:ae:e5:f0:35:ed: 8b:0b:b2:e6:bd:c4:ce:2e:b0:f5:13:58:cd:5a:53: fa:f0:f7:49:75:6d:72:97:71:52:cf:75:d5:fd:66: 1f:b7:2f:dc:95:34:cb:9a:f8:77:f1:3c:08:73:b6: dc:10:95:3f:f0:e3:5a:13:24:cb:ad:72:6f:49:9b: c1:38:46:2f:9c:77:77:5f:c8:3c:56:14:67:68:69: ac:3e:bb:a5:b1:e3:9d:b3:45:c0:c6:cd:a4:22:62: 55:9c:fc:9e:6e:da:3e:f5:54:3a:fb:d5:78:0c:ce: e7:e7:fc:2d:b1:84:80:09:dc:73:cb:ae:13:98:83: b7:26:76:6a:d7:1a:51:ed:4b:c1:2b:d5:f4:5e:82: 61:42:b0:6e:f6:5e:e7:52:3f:eb:4c:93:ac:ca:ac: 6a:18:02:2e:04:35:6c:09:9e:51:34:c6:69:17:f3: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:87:5E:24:44:6D:34:8E:18:05:C8:96:DD:3A:A7:39:6F:C5:86:52 X509v3 Authority Key Identifier: keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/zIdeJERtNI4YBciW3TqnOW_FhlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.156.0/22 Signature Algorithm: sha256WithRSAEncryption 06:4b:6f:ce:14:bc:ef:a4:ee:ae:96:16:3a:12:01:e4:61:0f: 46:36:37:b5:04:53:40:0f:c5:b5:af:66:0b:11:8a:3c:fd:82: 2a:3e:9b:08:5d:84:9d:3a:0a:b4:02:f7:cc:7f:65:c5:49:6c: 84:98:de:af:89:24:ec:1c:65:16:2e:64:5c:38:a1:3f:71:44: f3:e8:3a:97:7c:63:21:ec:bb:86:83:c9:ba:c7:32:41:a7:a7: 73:ee:91:c4:ae:14:9d:62:09:53:e1:0c:0a:4d:56:67:d3:ee: 3b:39:21:51:de:04:ec:95:1e:ed:98:6a:c4:aa:41:15:fb:85: 1b:35:ff:0f:1f:ed:50:fe:96:97:6c:ea:ce:1a:28:c5:38:51: cf:4f:a8:8d:23:c1:c1:ae:8e:d1:9e:85:f5:4e:0d:1a:fb:a2: 54:88:f6:00:69:64:db:33:e4:30:23:06:02:7b:0f:30:ab:34: e8:6d:fd:3a:c5:68:a0:4a:f0:58:4e:dc:67:13:10:3c:28:32: 0e:81:a5:3c:51:b6:7b:bf:93:35:d1:66:d4:09:13:2e:57:6b: e4:55:b3:b8:ed:31:a4:7d:fe:21:ef:c1:05:63:55:e1:67:0a: 20:52:46:35:1b:c9:90:ff:af:cc:76:57:46:01:90:ff:a3:eb: c6:a9:52:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Traop4QKGnbhwxyKo6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWQ3NDJkNTI3Zjk3MDBjYzAwNDdkN2Q2MWJmZDgyMjg3 OGRiMWYwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzg3NWUyNDQ0NmQzNDhlMTgwNWM4OTZkZDNhYTczOTZmYzU4NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ8kDzMeIltRHo+Q92WzsqEiNbpw CIGM7Fknsq679NgMfGSQ1ti9qTynz/88jdE40I2LK7K79nZ2mVfQs8yNmMT1QYXj IUUDmHkJlgjij0E/z2/MruXwNe2LC7LmvcTOLrD1E1jNWlP68PdJdW1yl3FSz3XV /WYfty/clTTLmvh38TwIc7bcEJU/8ONaEyTLrXJvSZvBOEYvnHd3X8g8VhRnaGms PrulseOds0XAxs2kImJVnPyebto+9VQ6+9V4DM7n5/wtsYSACdxzy64TmIO3JnZq 1xpR7UvBK9X0XoJhQrBu9l7nUj/rTJOsyqxqGAIuBDVsCZ5RNMZpF/PLqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyHXiREbTSOGAXIlt06pzlvxYZSMB8GA1UdIwQY MBaAFFVddC1Sf5cAzABH19Yb/YIoeNsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQt ZDVkZDQ2YWFhNDAxLzEveklkZUpFUnROSTRZQmNpVzNUcW5PV19GaGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQtZDVkZDQ2YWFhNDAx LzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpOcMA0G CSqGSIb3DQEBCwUAA4IBAQAGS2/OFLzvpO6ulhY6EgHkYQ9GNje1BFNAD8W1r2YL EYo8/YIqPpsIXYSdOgq0AvfMf2XFSWyEmN6viSTsHGUWLmRcOKE/cUTz6DqXfGMh 7LuGg8m6xzJBp6dz7pHErhSdYglT4QwKTVZn0+47OSFR3gTslR7tmGrEqkEV+4Ub Nf8PH+1Q/paXbOrOGijFOFHPT6iNI8HBro7RnoX1Tg0a+6JUiPYAaWTbM+QwIwYC ew8wqzTobf06xWigSvBYTtxnExA8KDIOgaU8UbZ7v5M10WbUCRMuV2vkVbO47TGk ff4h78EFY1XhZwogUkY1G8mQ/6/MdldGAZD/o+vGqVLd -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:28 2026 by rpki-client