This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa File: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (raw, json) Hash identifier: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo= Subject key identifier: 54:C9:3F:F9:95:4C:CC:DB:24:D4:68:1B:25:37:C8:F4:B1:34:0C:C1 Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Certificate serial: 019B7F153BC22FEF0C4A131DB2B089B1CBCF Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 194.32.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3b:c2:2f:ef:0c:4a:13:1d:b2:b0:89:b1:cb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54c93ff9954cccdb24d4681b2537c8f4b1340cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:2c:6f:f3:6e:b2:c6:de:d2:4b:a6:69:a8: fa:ce:3a:83:25:81:19:81:86:5c:6c:1a:a4:b9:04: 6b:c9:48:d9:67:c9:c8:c3:68:0e:36:1f:2b:a4:fb: d6:19:58:69:00:a8:09:44:93:28:8a:6e:71:f6:13: 7d:88:ff:6b:be:40:79:fc:c2:6a:aa:60:b3:a7:6d: 5a:77:bd:9c:71:94:d3:7d:05:54:a2:3d:0f:6a:90: c9:03:24:c8:f9:ec:d4:d0:e6:77:ad:ef:d0:3c:9b: 98:d7:81:4a:30:f6:70:1c:a8:99:88:f5:e7:46:20: 3c:f7:28:a3:80:97:09:d9:c3:c6:c7:45:69:32:88: 3d:2e:cf:53:93:d1:52:63:e8:61:96:b0:9d:d1:97: 64:a0:eb:98:2d:17:b2:25:d7:1f:48:bd:96:80:0d: 09:fa:94:8d:6c:e4:5d:56:5f:32:7d:1f:d4:0b:a6: e8:43:07:61:f3:82:17:d6:7a:e6:43:5d:7c:08:ed: 2c:75:2f:6f:4c:20:d1:47:be:df:df:7c:4e:c0:24: 3a:da:61:2f:87:4f:9a:7d:be:a0:f0:be:10:be:af: eb:fb:35:22:e8:bb:13:5c:19:23:f3:64:de:3b:a3: d8:54:a9:07:31:48:63:5d:14:c0:da:23:4a:72:e6: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C9:3F:F9:95:4C:CC:DB:24:D4:68:1B:25:37:C8:F4:B1:34:0C:C1 X509v3 Authority Key Identifier: keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.146.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:75:18:4d:43:c1:57:15:20:f5:68:06:02:d0:3f:26:12:c4: 65:cc:56:c7:8e:b4:59:c6:44:5d:9f:ff:f9:1f:60:97:0a:ad: 8b:81:d7:af:24:a2:8f:f9:97:7f:71:f9:37:5a:b1:dc:1c:90: a7:c3:59:d5:af:0e:ce:87:b9:1a:9f:d3:e1:eb:5e:f4:e4:3b: 35:b0:aa:8d:95:81:34:45:9b:95:6b:12:0d:1c:38:c0:25:ba: 44:08:15:81:29:ca:84:72:ef:4d:9e:68:6f:f1:e8:a5:22:af: 19:31:e2:c0:2e:a1:39:09:31:f8:7f:7c:01:5d:50:ff:d0:95: a9:32:ab:1c:77:b2:73:d5:15:4a:50:6e:29:a4:b7:6a:71:fb: 43:d5:b6:3a:db:72:c4:d4:57:34:f5:ba:a4:02:f2:ce:ce:f9: 7b:49:6e:66:db:02:b1:74:b8:26:f7:cf:c1:44:e4:5f:eb:a5: ae:27:fc:c0:5d:1d:b7:69:9f:71:75:c1:15:c8:ce:b9:81:ad: f9:ba:e2:61:f1:9f:3b:3a:25:79:73:72:40:19:b9:56:48:a3: 89:6a:bb:f1:3f:13:a2:8a:e6:62:16:7b:1e:d5:24:0f:78:b5: 06:e3:78:4d:13:22:c4:d0:fe:b5:cf:df:2a:d3:14:45:3d:b9: c2:1f:8c:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTvCL+8MShMdsrCJscvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0 NDg4NzgwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGM5M2ZmOTk1NGNjY2RiMjRkNDY4MWIyNTM3YzhmNGIxMzQwY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZYsb/Nussbe0kumaaj6zjqDJYEZ gYZcbBqkuQRryUjZZ8nIw2gONh8rpPvWGVhpAKgJRJMoim5x9hN9iP9rvkB5/MJq qmCzp21ad72ccZTTfQVUoj0PapDJAyTI+ezU0OZ3re/QPJuY14FKMPZwHKiZiPXn RiA89yijgJcJ2cPGx0VpMog9Ls9Tk9FSY+hhlrCd0ZdkoOuYLReyJdcfSL2WgA0J +pSNbORdVl8yfR/UC6boQwdh84IX1nrmQ118CO0sdS9vTCDRR77f33xOwCQ62mEv h0+afb6g8L4Qvq/r+zUi6LsTXBkj82TeO6PYVKkHMUhjXRTA2iNKcuZThQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTJP/mVTMzbJNRoGyU3yPSxNAzBMB8GA1UdIwQY MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt YzBiMWFkNDM1Yjk1LzEvVk1rXy1aVk16TnNrMUdnYkpUZkk5TEUwRE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1 LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiCSMA0G CSqGSIb3DQEBCwUAA4IBAQCNdRhNQ8FXFSD1aAYC0D8mEsRlzFbHjrRZxkRdn//5 H2CXCq2LgdevJKKP+Zd/cfk3WrHcHJCnw1nVrw7Oh7kan9Ph61705Ds1sKqNlYE0 RZuVaxINHDjAJbpECBWBKcqEcu9Nnmhv8eilIq8ZMeLALqE5CTH4f3wBXVD/0JWp Mqscd7Jz1RVKUG4ppLdqcftD1bY623LE1Fc09bqkAvLOzvl7SW5m2wKxdLgm98/B RORf66WuJ/zAXR23aZ9xdcEVyM65ga35uuJh8Z87OiV5c3JAGblWSKOJarvxPxOi iuZiFnse1SQPeLUG43hNEyLE0P61z98q0xRFPbnCH4z6 -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:12 2026 by rpki-client