This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/vQJYLzMPJ1DGw5KuCTeWvubYRko.roa File: vQJYLzMPJ1DGw5KuCTeWvubYRko.roa (raw, json) Hash identifier: C4uxBqKNfmkh7amc1k9zJztsNoE9Qyvw5gEkIeVrsLk= Subject key identifier: BD:02:58:2F:33:0F:27:50:C6:C3:92:AE:09:37:96:BE:E6:D8:46:4A Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Certificate serial: 019B77C70A4CB8F849E1DDD543D0F094916F Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/vQJYLzMPJ1DGw5KuCTeWvubYRko.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 185.111.160.0/24 maxlen: 24 185.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:4c:b8:f8:49:e1:dd:d5:43:d0:f0:94:91:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd02582f330f2750c6c392ae093796bee6d8464a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:be:51:b1:14:0c:72:84:0b:68:c7:74:9f: d3:bb:ef:c7:53:2b:a2:f4:27:e9:de:d5:10:c9:a6: 4b:1e:b7:62:80:05:d4:73:74:1f:da:37:3e:32:a8: fa:12:22:5a:da:02:55:2c:7c:05:8e:c4:a7:4e:64: 44:b8:68:b7:26:27:b9:ff:bc:2f:83:5a:bc:47:a1: 8f:c1:19:05:96:7c:4a:00:df:e5:3e:5c:39:c1:50: ff:37:2d:5d:d2:90:dc:36:f3:5c:50:ae:28:1d:2c: ea:65:fc:2a:70:1e:05:0d:22:c0:0c:c5:55:2a:a3: 8f:af:00:0f:b4:3f:00:95:53:ae:71:ec:aa:ce:32: ac:bc:de:4c:b5:a4:ad:20:a3:58:6a:e9:f9:23:08: ef:75:75:4c:d5:16:c8:7e:35:c8:85:1f:82:9e:46: de:05:e9:3d:4e:7c:5c:82:d6:10:94:d8:44:89:af: 77:3f:1b:9f:ba:92:a7:b8:8a:fd:ff:bc:56:f5:4a: 86:2d:08:48:80:2e:76:0d:af:10:a1:de:99:95:7e: a7:1a:1c:a2:b5:74:d9:3e:41:fe:2c:50:26:aa:52: bd:a4:b3:05:fa:8a:ca:f4:39:f9:1b:11:ce:c9:df: 96:06:8a:a8:6b:74:6c:1a:e0:68:e1:b4:43:9f:64: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:58:2F:33:0F:27:50:C6:C3:92:AE:09:37:96:BE:E6:D8:46:4A X509v3 Authority Key Identifier: keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/vQJYLzMPJ1DGw5KuCTeWvubYRko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.160.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:fb:92:cf:4f:b4:9b:3e:bc:1d:22:b0:52:e6:13:98:a2:92: c9:a1:52:fd:2a:12:00:3e:df:cb:50:03:d9:bd:d2:aa:06:7a: cd:4f:ff:c2:d5:2e:7f:e4:57:85:82:93:91:59:a3:3a:f4:62: e9:b2:09:6f:bc:7e:83:2a:9f:98:53:91:1c:f1:93:8c:fd:85: 98:f2:70:95:7d:83:34:c0:46:03:f8:ca:33:62:a6:12:47:86: a7:27:ac:32:03:dc:57:88:20:8a:fd:03:c0:89:59:b2:10:47: d6:9d:d1:52:1a:a9:24:bc:27:62:06:cd:c3:6b:5b:3d:92:fc: de:a1:44:e8:a7:4c:9b:a1:51:ee:d9:21:3c:71:3d:60:c0:21: 2c:a3:9a:42:a2:e2:80:b2:59:40:4b:b6:65:9e:6c:7a:f6:8c: 2b:2d:b0:7f:0e:58:8e:82:46:4d:c5:7e:09:38:06:5c:08:c3: 22:f3:04:dd:ad:2a:08:43:33:83:58:6d:7a:5d:a9:d4:e9:0f: cc:82:a9:23:4f:df:21:c9:21:80:6a:0b:b2:9a:1f:7f:0f:02: 1d:ca:d4:e3:25:a4:69:30:e1:aa:f9:2a:29:41:80:f1:70:92: 27:bd:6c:84:98:92:5c:9c:1f:0e:c0:d2:fc:11:64:6f:7a:c9: 85:e9:54:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwpMuPhJ4d3VQ9DwlJFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl YTAyZDAwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDAyNTgyZjMzMGYyNzUwYzZjMzkyYWUwOTM3OTZiZWU2ZDg0NjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSC+UbEUDHKEC2jHdJ/Tu+/HUyui 9Cfp3tUQyaZLHrdigAXUc3Qf2jc+Mqj6EiJa2gJVLHwFjsSnTmREuGi3Jie5/7wv g1q8R6GPwRkFlnxKAN/lPlw5wVD/Ny1d0pDcNvNcUK4oHSzqZfwqcB4FDSLADMVV KqOPrwAPtD8AlVOuceyqzjKsvN5MtaStIKNYaun5IwjvdXVM1RbIfjXIhR+Cnkbe Bek9TnxcgtYQlNhEia93PxufupKnuIr9/7xW9UqGLQhIgC52Da8Qod6ZlX6nGhyi tXTZPkH+LFAmqlK9pLMF+orK9Dn5GxHOyd+WBoqoa3RsGuBo4bRDn2QiLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL0CWC8zDydQxsOSrgk3lr7m2EZKMB8GA1UdIwQY MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt ZjIxMzYzMDcxNTkxLzEvdlFKWUx6TVBKMURHdzVLdUNUZVd2dWJZUmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQtZjIxMzYzMDcxNTkx LzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuW+gMA0G CSqGSIb3DQEBCwUAA4IBAQB6+5LPT7SbPrwdIrBS5hOYopLJoVL9KhIAPt/LUAPZ vdKqBnrNT//C1S5/5FeFgpORWaM69GLpsglvvH6DKp+YU5Ec8ZOM/YWY8nCVfYM0 wEYD+MozYqYSR4anJ6wyA9xXiCCK/QPAiVmyEEfWndFSGqkkvCdiBs3Da1s9kvze oUTop0yboVHu2SE8cT1gwCEso5pCouKAsllAS7Zlnmx69owrLbB/DliOgkZNxX4J OAZcCMMi8wTdrSoIQzODWG16XanU6Q/MgqkjT98hySGAaguymh9/DwIdytTjJaRp MOGq+SopQYDxcJInvWyEmJJcnB8OwNL8EWRvesmF6VRF -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:23 2026 by rpki-client