This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa File: VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa (raw, json) Hash identifier: PrU9zmhMpmRMgh3C3teCNmvz1i0g6szB8JeyH7euSZk= Subject key identifier: 55:E2:6C:0A:DD:4F:07:96:E0:30:B5:5F:F8:CB:0B:60:7E:9E:EC:B4 Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Certificate serial: 019B7DCB4A8A50E961733BA101B7AB2A9221 Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3285 IP address blocks: 93.100.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:8a:50:e9:61:73:3b:a1:01:b7:ab:2a:92:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55e26c0add4f0796e030b55ff8cb0b607e9eecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:1c:64:88:4b:0a:42:f9:6d:c9:34:41:54: e8:22:ad:c0:c4:56:e2:4e:d0:e1:1d:78:49:91:7a: fe:21:cc:89:95:44:12:32:00:c7:fb:8c:63:f1:d4: 15:dd:e7:b4:2d:ee:e4:3e:f3:b2:13:ac:40:4a:53: 1b:0e:54:d4:7d:c6:8d:47:b7:aa:d6:1c:ea:ab:34: bc:6f:86:d6:01:57:a5:a0:4a:8e:ee:70:27:63:c3: 01:bb:b3:bc:96:7e:97:9a:4c:57:7c:bd:7b:b2:7f: b6:bc:24:a3:5d:41:b5:7c:e7:14:a0:4b:39:c8:fa: 2a:e7:c4:97:50:a3:58:13:50:e5:3f:68:da:1b:87: b0:de:ac:f7:d2:c7:3d:91:29:17:a3:79:3f:8b:78: 42:1e:45:3a:2b:7f:63:ee:e8:90:01:72:23:79:6e: 34:69:4c:98:7f:b5:5c:07:8d:b2:c7:fb:e2:2d:45: 02:a4:79:99:74:f7:85:65:4f:09:cc:89:57:c9:fd: 51:9d:ec:3d:81:3b:c1:bd:90:4f:b3:38:a5:35:5a: 7c:52:2f:d3:8c:2c:f6:7f:9e:6e:d4:19:85:ab:b0: a7:37:6c:36:79:09:4b:4d:24:17:6d:f8:e0:c5:fb: d7:8a:2f:b1:36:bf:d0:ee:41:52:cb:a6:ed:c9:d3: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E2:6C:0A:DD:4F:07:96:E0:30:B5:5F:F8:CB:0B:60:7E:9E:EC:B4 X509v3 Authority Key Identifier: keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.100.195.0/24 Signature Algorithm: sha256WithRSAEncryption b7:0c:ec:63:96:15:d0:cb:af:71:0b:87:5e:ab:ee:f5:d0:86: cf:a5:e0:f8:a7:10:07:6d:3e:ad:c3:10:b7:a5:89:22:f0:3f: 7a:47:40:10:6a:7f:9b:46:6d:1b:ac:f7:32:32:2e:ba:ba:f4: be:aa:ae:33:48:7e:68:a2:15:0f:fe:de:8f:38:e5:c3:06:b8: f7:7f:0c:ab:2d:f3:f0:fa:98:62:f2:c9:c8:c2:c1:5d:90:2f: 30:c2:3d:7a:56:0c:ec:91:ab:9a:97:66:9c:3c:01:b0:11:0e: 86:9f:a1:87:4c:d7:be:d4:b1:4f:fb:95:8c:42:ee:19:40:5d: 73:7a:d4:1b:f3:80:03:7d:35:77:a6:22:35:b4:1f:3b:2f:36: 38:89:37:e5:83:88:3f:0b:7c:00:cf:f3:fd:a1:01:ea:e1:ca: 9b:0c:d1:93:2d:0c:07:74:aa:42:c3:72:0e:53:f1:e7:a5:0a: c1:68:16:ed:bc:18:06:06:9c:69:40:26:32:23:ff:76:b3:ee: 41:c3:28:0e:48:68:82:f8:23:82:37:7b:34:b8:5b:17:09:f6: 77:d2:e1:0d:0f:6b:76:ea:27:53:be:68:37:e3:75:97:fe:f6: 43:58:15:bf:fb:76:a1:1c:e3:9b:c0:d5:d2:c0:3c:02:0f:b2: 2e:dc:92:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0qKUOlhczuhAberKpIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc5YmY0YzYyN2Q4NWZlZTJjZTEzYTUzYzQ0ODUxYjlk ZjA1NjMwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWUyNmMwYWRkNGYwNzk2ZTAzMGI1NWZmOGNiMGI2MDdlOWVlY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BscZIhLCkL5bck0QVToIq3AxFbi TtDhHXhJkXr+IcyJlUQSMgDH+4xj8dQV3ee0Le7kPvOyE6xASlMbDlTUfcaNR7eq 1hzqqzS8b4bWAVeloEqO7nAnY8MBu7O8ln6XmkxXfL17sn+2vCSjXUG1fOcUoEs5 yPoq58SXUKNYE1DlP2jaG4ew3qz30sc9kSkXo3k/i3hCHkU6K39j7uiQAXIjeW40 aUyYf7VcB42yx/viLUUCpHmZdPeFZU8JzIlXyf1Rnew9gTvBvZBPszilNVp8Ui/T jCz2f55u1BmFq7CnN2w2eQlLTSQXbfjgxfvXii+xNr/Q7kFSy6btydO36wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFXibArdTweW4DC1X/jLC2B+nuy0MB8GA1UdIwQY MBaAFKNnm/TGJ9hf7izhOlPESFG53wVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjct NTU2NzI2MzRjYmMxLzEvVmVKc0N0MVBCNWJnTUxWZi1Nc0xZSDZlN0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjctNTU2NzI2MzRjYmMx LzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXWTDMA0G CSqGSIb3DQEBCwUAA4IBAQC3DOxjlhXQy69xC4deq+710IbPpeD4pxAHbT6twxC3 pYki8D96R0AQan+bRm0brPcyMi66uvS+qq4zSH5oohUP/t6POOXDBrj3fwyrLfPw +phi8snIwsFdkC8wwj16Vgzskaual2acPAGwEQ6Gn6GHTNe+1LFP+5WMQu4ZQF1z etQb84ADfTV3piI1tB87LzY4iTflg4g/C3wAz/P9oQHq4cqbDNGTLQwHdKpCw3IO U/HnpQrBaBbtvBgGBpxpQCYyI/92s+5BwygOSGiC+COCN3s0uFsXCfZ30uEND2t2 6idTvmg343WX/vZDWBW/+3ahHOObwNXSwDwCD7Iu3JLk -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:18 2026 by rpki-client