This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/Vd994I8OewATsGGSa4zEfrPZRM0.roa File: Vd994I8OewATsGGSa4zEfrPZRM0.roa (raw, json) Hash identifier: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM= Subject key identifier: 55:DF:7D:E0:8F:0E:7B:00:13:B0:61:92:6B:8C:C4:7E:B3:D9:44:CD Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Certificate serial: 019B775914226658D3194926D50B4B80744B Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/Vd994I8OewATsGGSa4zEfrPZRM0.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42518 IP address blocks: 91.192.188.0/22 maxlen: 22 91.192.188.0/23 maxlen: 23 91.192.190.0/23 maxlen: 23 91.215.120.0/22 maxlen: 22 91.215.120.0/23 maxlen: 23 91.215.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:14:22:66:58:d3:19:49:26:d5:0b:4b:80:74:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55df7de08f0e7b0013b061926b8cc47eb3d944cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:04:f5:cc:0e:b1:3b:33:a3:63:e5:3e:be: 51:ee:a5:b2:e8:ae:61:61:78:8b:f7:5f:fd:6a:d0: 41:70:c6:94:cb:45:6f:3d:25:bf:70:76:4d:a9:26: f2:6e:45:2c:1f:1e:9d:9c:23:fb:22:c3:02:d8:75: 4f:97:e9:25:5d:26:f1:66:f5:88:0f:5f:1b:5c:35: 3f:7b:a5:db:12:10:44:6b:6d:cf:0f:05:7e:a6:07: 2c:7c:11:5f:f4:6a:a3:ad:e7:1a:88:3b:71:4e:9e: 8b:40:1e:84:d5:0e:4c:1e:ed:ec:6e:63:5b:35:21: 13:79:4a:ba:bb:b4:e9:82:68:9d:5d:38:38:91:0b: 82:91:23:db:23:fa:dd:ef:f7:1c:9d:a9:e5:e9:06: bf:21:6e:91:18:f6:19:c3:31:bc:12:98:cf:4c:af: 03:8a:f9:37:e9:ce:c9:7b:72:62:3c:85:e5:32:f5: 94:4a:a6:c6:37:21:7e:53:33:1b:1c:e9:83:2c:12: b0:b7:a2:8a:a2:01:8b:2f:9b:67:84:4f:0b:1c:34: 37:5f:d6:f6:ec:21:6e:4d:7b:ef:30:ac:6e:3c:2f: 99:d3:17:86:c2:ec:66:20:0f:13:8c:ee:d6:ac:dc: 64:8f:d7:a8:bb:58:b7:9c:74:b4:a3:c7:23:e1:94: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DF:7D:E0:8F:0E:7B:00:13:B0:61:92:6B:8C:C4:7E:B3:D9:44:CD X509v3 Authority Key Identifier: keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/Vd994I8OewATsGGSa4zEfrPZRM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.188.0/22 91.215.120.0/22 Signature Algorithm: sha256WithRSAEncryption a5:da:fb:55:e6:f0:1d:52:a2:a3:b9:91:05:32:2b:d0:66:4a: ae:11:4b:8d:35:9c:66:37:dc:4e:b2:15:8e:15:f3:b2:0a:1d: fb:28:f5:be:ba:8b:60:b7:3c:eb:2b:e8:0e:38:cf:d5:57:82: 40:b4:b2:c4:bf:51:9a:3b:11:fb:83:21:88:19:1a:5e:ab:41: d2:12:f5:40:06:b1:76:54:5a:14:80:bd:22:0e:39:e1:86:f5: 90:1a:f5:6b:1a:52:0f:15:f2:f9:79:83:35:cd:43:30:61:16: 67:b8:ae:39:ce:cb:ed:da:48:0b:e8:3b:4b:fb:12:19:6d:52: 62:95:33:18:cd:02:01:90:06:28:5e:00:44:12:5a:b7:0d:6f: 73:4b:95:6c:ce:6b:b9:08:ca:84:70:87:79:66:68:0d:e5:f4: 0a:1b:f7:bb:f8:c3:0f:14:5f:b0:f2:99:cc:4c:71:6c:26:ee: c0:15:f2:1a:17:32:fb:1a:8e:68:84:09:ac:d2:96:89:04:c6: 01:4e:ed:df:12:40:52:86:4e:ff:90:c1:12:23:48:37:ad:71: 8e:e6:0d:d1:9b:04:73:f2:0d:d8:2b:0c:fb:15:b1:ae:0c:c8: 08:d8:df:8d:cf:76:4a:65:d4:16:a4:dd:df:e4:96:d4:e7:26: d3:0e:63:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WRQiZljTGUkm1QtLgHRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz ZDA0YTcwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWRmN2RlMDhmMGU3YjAwMTNiMDYxOTI2YjhjYzQ3ZWIzZDk0NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSwE9cwOsTszo2PlPr5R7qWy6K5h YXiL91/9atBBcMaUy0VvPSW/cHZNqSbybkUsHx6dnCP7IsMC2HVPl+klXSbxZvWI D18bXDU/e6XbEhBEa23PDwV+pgcsfBFf9GqjrecaiDtxTp6LQB6E1Q5MHu3sbmNb NSETeUq6u7TpgmidXTg4kQuCkSPbI/rd7/ccnanl6Qa/IW6RGPYZwzG8EpjPTK8D ivk36c7Je3JiPIXlMvWUSqbGNyF+UzMbHOmDLBKwt6KKogGLL5tnhE8LHDQ3X9b2 7CFuTXvvMKxuPC+Z0xeGwuxmIA8TjO7WrNxkj9eou1i3nHS0o8cj4ZQu8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFXffeCPDnsAE7BhkmuMxH6z2UTNMB8GA1UdIwQY MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt NDNmNWJjZjY3NzVkLzEvVmQ5OTRJOE9ld0FUc0dHU2E0ekVmclBaUk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8C8AwQC W9d4MA0GCSqGSIb3DQEBCwUAA4IBAQCl2vtV5vAdUqKjuZEFMivQZkquEUuNNZxm N9xOshWOFfOyCh37KPW+uotgtzzrK+gOOM/VV4JAtLLEv1GaOxH7gyGIGRpeq0HS EvVABrF2VFoUgL0iDjnhhvWQGvVrGlIPFfL5eYM1zUMwYRZnuK45zsvt2kgL6DtL +xIZbVJilTMYzQIBkAYoXgBEElq3DW9zS5Vszmu5CMqEcId5ZmgN5fQKG/e7+MMP FF+w8pnMTHFsJu7AFfIaFzL7Go5ohAms0paJBMYBTu3fEkBShk7/kMESI0g3rXGO 5g3RmwRz8g3YKwz7FbGuDMgI2N+Nz3ZKZdQWpN3f5JbU5ybTDmOV -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:34 2026 by rpki-client