This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/VRfnoBYQXKHyTofr4lldUHUxRkU.roa File: VRfnoBYQXKHyTofr4lldUHUxRkU.roa (raw, json) Hash identifier: 2OIOxSXg3zk1Mb40ItiZyYX7LaAoiOaMTZBHGkZAeb8= Subject key identifier: 55:17:E7:A0:16:10:5C:A1:F2:4E:87:EB:E2:59:5D:50:75:31:46:45 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37E9EEB83E7E2627323AF8CC3E0F78 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/VRfnoBYQXKHyTofr4lldUHUxRkU.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 178.239.151.0/24 maxlen: 24 178.239.158.0/24 maxlen: 24 185.243.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e9:ee:b8:3e:7e:26:27:32:3a:f8:cc:3e:0f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5517e7a016105ca1f24e87ebe2595d5075314645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:1e:d2:34:94:f4:27:40:85:74:f8:72:3c: 69:5d:f2:d7:78:14:fb:29:77:5b:b8:58:15:41:b9: 99:68:16:2b:60:00:cd:a9:64:29:dd:e5:a7:d0:47: 05:50:89:a6:4e:41:b0:0e:28:d0:fd:ef:31:b7:bf: 5e:0b:36:7c:cc:0a:d3:f9:b3:8f:d4:2d:22:de:4b: 76:a9:64:34:bb:b1:18:da:cf:c4:f9:d5:c3:cd:a0: ae:a2:17:f0:5b:2d:c4:23:6c:33:b5:5c:ea:63:63: 55:83:35:fb:33:de:ae:96:87:ea:b5:44:7d:4c:84: 2b:49:57:98:d4:c3:88:9d:0a:ed:df:b2:24:bf:d5: 6e:2e:a4:b4:63:22:77:3c:b3:db:0a:1d:71:2c:4c: 7e:89:93:5c:20:e5:7b:26:07:e7:35:b0:8a:e1:cb: ec:05:2f:0d:89:6a:e6:ff:12:20:16:0a:52:ca:c9: 3e:57:b0:4e:f7:93:f8:0f:fd:19:a5:78:41:27:e8: f5:a0:4e:9a:94:25:74:8b:ba:f5:71:d5:44:4d:fc: 61:8a:ef:39:81:52:d1:af:79:f5:99:71:8c:ca:90: 05:92:26:87:ac:99:56:0b:a4:59:5f:b1:a3:ec:81: c9:53:6c:ae:c9:e2:50:54:ae:92:90:4c:3e:88:c7: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:17:E7:A0:16:10:5C:A1:F2:4E:87:EB:E2:59:5D:50:75:31:46:45 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/VRfnoBYQXKHyTofr4lldUHUxRkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.151.0/24 178.239.158.0/24 185.243.48.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e1:dc:4c:64:74:1f:82:da:ab:f9:2c:21:fc:a4:ab:d2:f5: c8:c3:2e:59:c1:04:54:72:0f:d5:57:f0:e4:30:01:ed:4c:84: 4f:d6:17:66:df:df:49:69:12:c5:b1:8a:b2:f4:99:5c:98:6a: d2:98:89:da:3a:c0:42:9e:c3:ac:16:84:6c:86:52:8a:60:5c: 65:ed:46:83:ca:90:ad:11:37:70:c4:2f:8d:f4:74:79:9d:26: b2:26:15:97:df:e0:39:be:59:60:2a:ef:a7:75:43:cf:6d:44: fd:d5:9f:f7:94:a3:23:f3:01:e0:7d:c8:b7:4b:1a:f2:bd:90: 26:d7:db:f6:cf:b9:92:81:30:04:63:cc:b1:f8:a1:09:b4:e5: 73:35:82:fc:af:51:cf:73:98:77:63:64:ad:97:81:76:f8:f6: ed:3f:fa:a1:9b:7e:7a:4e:40:ac:6e:b8:a5:e6:98:ad:30:f7: f2:20:5b:ab:06:71:3c:dd:b7:24:dc:fd:d8:14:23:2a:a4:36: 50:00:79:43:a9:47:47:e9:b0:5f:51:5e:bc:79:28:16:7f:ac: 68:1b:97:8f:dc:b6:4d:20:d3:37:11:bf:45:d6:30:69:f1:62: 01:ca:0c:16:79:93:f1:ac:de:b3:54:70:16:0a:fa:5a:70:4d: 32:16:15:f3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N+nuuD5+JicyOvjMPg94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTE3ZTdhMDE2MTA1Y2ExZjI0ZTg3ZWJlMjU5NWQ1MDc1MzE0NjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIIe0jSU9CdAhXT4cjxpXfLXeBT7 KXdbuFgVQbmZaBYrYADNqWQp3eWn0EcFUImmTkGwDijQ/e8xt79eCzZ8zArT+bOP 1C0i3kt2qWQ0u7EY2s/E+dXDzaCuohfwWy3EI2wztVzqY2NVgzX7M96ulofqtUR9 TIQrSVeY1MOInQrt37Ikv9VuLqS0YyJ3PLPbCh1xLEx+iZNcIOV7JgfnNbCK4cvs BS8NiWrm/xIgFgpSysk+V7BO95P4D/0ZpXhBJ+j1oE6alCV0i7r1cdVETfxhiu85 gVLRr3n1mXGMypAFkiaHrJlWC6RZX7Gj7IHJU2yuyeJQVK6SkEw+iMcJHwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFUX56AWEFyh8k6H6+JZXVB1MUZFMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvVlJmbm9CWVFYS0h5VG9mcjRsbGRVSFV4UmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsu+XAwQA su+eAwQAufMwMA0GCSqGSIb3DQEBCwUAA4IBAQB84dxMZHQfgtqr+Swh/KSr0vXI wy5ZwQRUcg/VV/DkMAHtTIRP1hdm399JaRLFsYqy9JlcmGrSmInaOsBCnsOsFoRs hlKKYFxl7UaDypCtETdwxC+N9HR5nSayJhWX3+A5vllgKu+ndUPPbUT91Z/3lKMj 8wHgfci3SxryvZAm19v2z7mSgTAEY8yx+KEJtOVzNYL8r1HPc5h3Y2Stl4F2+Pbt P/qhm356TkCsbril5pitMPfyIFurBnE83bck3P3YFCMqpDZQAHlDqUdH6bBfUV68 eSgWf6xoG5eP3LZNINM3Eb9F1jBp8WIBygwWeZPxrN6zVHAWCvpacE0yFhXz -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:06 2026 by rpki-client