This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/1VuGqO-b5-MAfDRweaNuv06UwQE.roa File: 1VuGqO-b5-MAfDRweaNuv06UwQE.roa (raw, json) Hash identifier: 5cmqBdE+cZUafwo3gwOznhicqwBl1Y6l9Jg+XAX1liI= Subject key identifier: D5:5B:86:A8:EF:9B:E7:E3:00:7C:34:70:79:A3:6E:BF:4E:94:C1:01 Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b Certificate serial: 019B77C769ABA2059C63190E0374FE13F936 Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/1VuGqO-b5-MAfDRweaNuv06UwQE.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214169 IP address blocks: 185.172.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:ab:a2:05:9c:63:19:0e:03:74:fe:13:f9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d55b86a8ef9be7e3007c347079a36ebf4e94c101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fb:3f:05:ae:dc:36:43:68:76:d9:07:b9:5e: 76:b7:4b:96:a2:93:38:6d:06:07:20:5b:fb:f1:64: 58:50:55:5b:b4:b2:9a:8f:61:8a:9b:28:00:ca:99: 57:9a:b5:34:28:2a:c5:06:12:3f:ab:9b:2e:fd:b5: 8c:2d:07:03:0c:79:08:96:4e:04:09:17:91:61:e4: f2:51:55:c0:7d:fa:90:21:66:0a:7f:dc:7c:dc:a0: dc:bc:f2:43:7d:6a:0b:ab:7f:81:85:31:42:13:08: 53:38:bf:c2:e7:9b:fb:23:09:7e:72:7e:0b:30:dc: 7c:35:d0:47:f8:df:03:dd:62:62:a7:b0:86:0c:f7: 28:7f:f3:64:db:80:06:bd:db:35:58:1d:b5:b6:ec: 19:14:c4:40:c8:57:01:60:55:99:7a:e4:dd:1d:b7: 7a:43:8a:5e:39:ec:3b:b8:bc:c3:5b:9c:06:02:ba: cc:05:26:99:d8:f2:44:da:6b:c8:0d:50:50:e8:5a: 4d:36:6e:b3:31:90:a2:bc:5f:4d:a6:92:b3:55:d1: 85:2a:b4:00:da:4b:fe:b4:11:a4:0f:72:f3:ac:2a: cd:fa:41:b7:a5:eb:cb:60:ea:bb:7e:7a:ec:03:d0: a0:fc:f5:a9:1d:57:05:d0:82:db:6b:c6:fb:4e:c2: 07:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:86:A8:EF:9B:E7:E3:00:7C:34:70:79:A3:6E:BF:4E:94:C1:01 X509v3 Authority Key Identifier: keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/1VuGqO-b5-MAfDRweaNuv06UwQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.204.0/24 Signature Algorithm: sha256WithRSAEncryption c5:6c:c5:e5:8f:ea:89:39:c8:24:a4:5a:94:90:2c:a3:02:47: 0c:d3:95:e5:30:7e:e1:24:28:b6:07:8c:9e:69:9e:d0:cd:45: fc:53:09:b5:1a:6f:db:a8:09:b7:48:6c:e1:dd:d6:e9:56:d1: 15:3c:c9:c6:12:ee:82:e3:46:ad:71:3d:07:79:3a:73:3f:0e: 2a:ce:94:d4:92:c2:1c:2c:48:49:46:ce:c0:d9:89:e9:83:f4: 21:20:ee:ac:e5:a1:74:cd:3c:db:b9:3e:2e:31:17:18:e7:4d: 0c:be:a6:aa:5e:87:31:46:06:5e:8d:fc:c6:ff:c1:65:80:80: 74:3b:e5:7e:1d:6b:53:a7:03:4a:cb:07:0e:62:79:9e:e9:58: 44:e1:e5:3a:5b:a2:0b:a9:92:ad:07:8d:be:1d:d5:42:1d:9c: c0:bc:ec:40:1b:f5:91:02:98:67:b3:f6:fa:23:6c:12:63:89: c2:d3:f8:5b:67:4e:02:08:af:5d:8e:43:33:58:24:72:bc:b7: b6:77:de:ab:6c:b8:3e:5a:00:d0:85:46:39:ff:66:9a:77:7c: 5a:b4:79:9f:8f:84:24:6b:f9:99:6e:6b:81:81:ba:30:c6:db: a7:94:2a:f1:f9:84:ea:64:99:a1:c5:a6:12:5f:69:72:a2:fd: 77:f4:1c:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2mrogWcYxkOA3T+E/k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2 OTY4MWIwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTViODZhOGVmOWJlN2UzMDA3YzM0NzA3OWEzNmViZjRlOTRjMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fs/Ba7cNkNodtkHuV52t0uWopM4 bQYHIFv78WRYUFVbtLKaj2GKmygAyplXmrU0KCrFBhI/q5su/bWMLQcDDHkIlk4E CReRYeTyUVXAffqQIWYKf9x83KDcvPJDfWoLq3+BhTFCEwhTOL/C55v7Iwl+cn4L MNx8NdBH+N8D3WJip7CGDPcof/Nk24AGvds1WB21tuwZFMRAyFcBYFWZeuTdHbd6 Q4peOew7uLzDW5wGArrMBSaZ2PJE2mvIDVBQ6FpNNm6zMZCivF9NppKzVdGFKrQA 2kv+tBGkD3LzrCrN+kG3pevLYOq7fnrsA9Cg/PWpHVcF0ILba8b7TsIH1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVbhqjvm+fjAHw0cHmjbr9OlMEBMB8GA1UdIwQY MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct NjNiNTJhYTdmOGRhLzEvMVZ1R3FPLWI1LU1BZkRSd2VhTnV2MDZVd1FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuazMMA0G CSqGSIb3DQEBCwUAA4IBAQDFbMXlj+qJOcgkpFqUkCyjAkcM05XlMH7hJCi2B4ye aZ7QzUX8Uwm1Gm/bqAm3SGzh3dbpVtEVPMnGEu6C40atcT0HeTpzPw4qzpTUksIc LEhJRs7A2Ynpg/QhIO6s5aF0zTzbuT4uMRcY500MvqaqXocxRgZejfzG/8FlgIB0 O+V+HWtTpwNKywcOYnme6VhE4eU6W6ILqZKtB42+HdVCHZzAvOxAG/WRAphns/b6 I2wSY4nC0/hbZ04CCK9djkMzWCRyvLe2d96rbLg+WgDQhUY5/2aad3xatHmfj4Qk a/mZbmuBgbowxtunlCrx+YTqZJmhxaYSX2lyov139Byn -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:14 2026 by rpki-client