This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/vvUMzJMS3YN2PdWIsXTg73pWUMU.roa File: vvUMzJMS3YN2PdWIsXTg73pWUMU.roa (raw, json) Hash identifier: jqHmBZCizBRZOJ6dgt21LSpJ/Vl6QvBloIY8Xls6yuc= Subject key identifier: BE:F5:0C:CC:93:12:DD:83:76:3D:D5:88:B1:74:E0:EF:7A:56:50:C5 Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17 Certificate serial: 019B775888963FDBB682888C17278B69A892 Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/vvUMzJMS3YN2PdWIsXTg73pWUMU.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42714 IP address blocks: 195.230.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:88:96:3f:db:b6:82:88:8c:17:27:8b:69:a8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bef50ccc9312dd83763dd588b174e0ef7a5650c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:b3:b8:9e:69:ee:e2:26:10:79:4e:e9:5d: cf:56:6d:32:69:41:40:32:d3:89:fd:e1:b9:93:29: 58:fd:4e:c7:f1:46:76:bd:f3:3c:c3:c6:63:04:51: 14:8c:59:f3:7a:07:87:96:40:7a:13:f9:ce:45:1a: c6:2b:7c:10:b2:6b:44:e5:c0:32:fd:2a:e2:5b:ef: 17:fb:b5:e1:12:60:d0:b5:7f:a0:ec:94:e5:fa:f5: ea:bf:71:73:0d:1c:f1:89:d1:d9:d8:1b:17:f2:3c: 4a:51:2c:f8:7f:61:c9:e6:45:f4:09:6b:51:33:8f: e7:c8:ca:e5:3b:c5:c2:00:7a:d9:90:28:e4:98:3d: 50:9d:46:71:38:6d:45:98:ad:7a:a4:1b:6d:ad:28: 31:1f:52:d6:7e:42:28:b5:01:9d:73:83:8e:6a:31: 86:d7:9c:28:3e:b5:d1:68:3c:8d:06:10:5b:78:77: e3:e9:85:05:ab:ae:78:90:7d:07:69:b9:9b:eb:6e: 32:32:57:08:e9:c9:45:6e:92:f6:61:cc:e8:b9:eb: 3b:3a:b8:9c:e6:54:6d:ec:00:d2:9d:97:5a:4c:45: ec:38:ac:84:52:d4:64:36:20:7c:e6:1f:ef:72:1a: 66:61:48:78:e2:ff:ed:35:c6:2a:9f:23:cc:77:57: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:0C:CC:93:12:DD:83:76:3D:D5:88:B1:74:E0:EF:7A:56:50:C5 X509v3 Authority Key Identifier: keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/vvUMzJMS3YN2PdWIsXTg73pWUMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.129.0/24 Signature Algorithm: sha256WithRSAEncryption b2:c8:31:25:b3:d1:4f:ef:14:99:03:6f:01:8d:4a:98:29:21: cc:65:bd:57:51:fd:31:45:25:0a:4a:9a:58:4f:0e:6b:20:1a: 2a:b8:85:f7:c3:d4:5e:01:cc:89:4c:b0:ad:1f:3f:f2:e0:52: 50:14:42:5b:00:a6:4f:88:52:8f:25:b6:2d:9d:33:bd:d0:1c: 13:78:17:9f:6b:ff:31:2d:67:63:cd:36:ad:f5:64:4a:5e:7d: 59:88:24:0e:b8:63:e6:c1:09:73:15:5c:53:3c:80:d5:d5:bc: f8:23:fd:70:33:2b:3c:7e:3a:a2:65:30:b2:1e:e2:d9:2b:d8: 6d:f3:17:be:3a:cb:cf:9c:71:84:da:e7:96:f4:33:7f:ca:c2: 11:c1:20:9f:5b:e7:03:2f:14:dd:bd:eb:5b:2c:db:c8:4a:7c: f7:f8:4a:ed:a4:5e:24:d8:7e:8c:37:7b:e6:c2:95:e6:1d:0d: 35:a3:22:1f:f3:ad:d5:af:64:6d:e5:de:9b:97:5e:8a:8f:b6: ee:a8:25:c3:f5:2d:81:62:50:19:b3:05:3f:0e:eb:2e:29:9d: 2d:5a:a2:04:07:14:5e:4a:39:bf:3b:e8:06:db:ed:82:3d:85: 35:4f:9c:51:f8:d8:06:c0:2e:d3:d3:5f:52:ab:18:c6:a2:5a: 07:6b:d6:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIiWP9u2goiMFyeLaaiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj MDJmMTcwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWY1MGNjYzkzMTJkZDgzNzYzZGQ1ODhiMTc0ZTBlZjdhNTY1MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D2zuJ5p7uImEHlO6V3PVm0yaUFA MtOJ/eG5kylY/U7H8UZ2vfM8w8ZjBFEUjFnzegeHlkB6E/nORRrGK3wQsmtE5cAy /SriW+8X+7XhEmDQtX+g7JTl+vXqv3FzDRzxidHZ2BsX8jxKUSz4f2HJ5kX0CWtR M4/nyMrlO8XCAHrZkCjkmD1QnUZxOG1FmK16pBttrSgxH1LWfkIotQGdc4OOajGG 15woPrXRaDyNBhBbeHfj6YUFq654kH0Habmb624yMlcI6clFbpL2Yczoues7Oric 5lRt7ADSnZdaTEXsOKyEUtRkNiB85h/vchpmYUh44v/tNcYqnyPMd1fPtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL71DMyTEt2Ddj3ViLF04O96VlDFMB8GA1UdIwQY MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt OTM3ZTI3ZWUxYjViLzEvdnZVTXpKTVMzWU4yUGRXSXNYVGc3M3BXVU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+aBMA0G CSqGSIb3DQEBCwUAA4IBAQCyyDEls9FP7xSZA28BjUqYKSHMZb1XUf0xRSUKSppY Tw5rIBoquIX3w9ReAcyJTLCtHz/y4FJQFEJbAKZPiFKPJbYtnTO90BwTeBefa/8x LWdjzTat9WRKXn1ZiCQOuGPmwQlzFVxTPIDV1bz4I/1wMys8fjqiZTCyHuLZK9ht 8xe+OsvPnHGE2ueW9DN/ysIRwSCfW+cDLxTdvetbLNvISnz3+ErtpF4k2H6MN3vm wpXmHQ01oyIf863Vr2Rt5d6bl16Kj7buqCXD9S2BYlAZswU/DusuKZ0tWqIEBxRe Sjm/O+gG2+2CPYU1T5xR+NgGwC7T019SqxjGoloHa9YT -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:25 2026 by rpki-client