This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vRISgxFoCUMw_VB-bKNbh5etUSY.roa File: vRISgxFoCUMw_VB-bKNbh5etUSY.roa (raw, json) Hash identifier: /QzODZGNjr03tlz7qL1pWlsvcGDshZKJmU+az71PUxE= Subject key identifier: BD:12:12:83:11:68:09:43:30:FD:50:7E:6C:A3:5B:87:97:AD:51:26 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37EFF21E786C7706EF5F4096EBB1A2 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vRISgxFoCUMw_VB-bKNbh5etUSY.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213727 IP address blocks: 178.239.144.0/24 maxlen: 24 178.239.156.0/24 maxlen: 24 178.239.159.0/24 maxlen: 24 185.26.33.0/24 maxlen: 24 185.26.34.0/24 maxlen: 24 185.26.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ef:f2:1e:78:6c:77:06:ef:5f:40:96:eb:b1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd1212831168094330fd507e6ca35b8797ad5126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:4e:e5:74:38:db:c1:45:cc:0c:c9:b3:8f: ce:c4:eb:5a:55:13:03:d5:e1:fd:6d:22:f5:0b:bd: 06:f0:77:d4:11:7b:18:e2:1f:ba:ce:48:a6:b5:f1: 1e:36:0c:b0:51:09:b9:c4:87:01:59:ac:22:a2:3c: f3:22:63:12:bc:39:b5:9b:91:34:ca:29:ff:ee:3c: d5:0c:19:e7:7c:a0:d1:f2:c5:6e:c5:a4:33:25:2a: b5:3a:be:a0:3b:cc:0d:76:2e:a7:6c:92:92:db:4c: 52:4b:8d:86:e3:6f:16:fe:1b:46:96:6b:c5:8d:1d: cc:89:b3:24:60:1c:57:a6:82:4a:4d:49:42:2c:b6: 2c:a2:e1:2c:ce:2c:9c:9e:b2:6c:05:9b:bd:73:55: 46:9d:e5:a6:b4:5c:79:cc:bc:6c:d0:44:0c:7e:96: 4f:ff:76:58:d5:59:2c:bd:85:3a:41:0a:e3:46:ca: 78:24:a7:cc:50:d7:4a:de:e7:42:c9:b6:af:c3:de: 38:40:e8:31:d5:ae:91:70:af:dc:09:cd:27:c4:a0: 3a:51:0d:11:df:80:33:05:c4:45:fd:e5:a3:5a:78: 43:a5:c7:2c:9b:33:65:1a:81:83:31:25:12:77:50: 0a:da:65:b8:fb:51:cf:6a:af:6f:fb:58:49:e6:cc: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:12:83:11:68:09:43:30:FD:50:7E:6C:A3:5B:87:97:AD:51:26 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vRISgxFoCUMw_VB-bKNbh5etUSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.144.0/24 178.239.156.0/24 178.239.159.0/24 185.26.33.0-185.26.35.255 Signature Algorithm: sha256WithRSAEncryption 0f:ac:90:76:90:16:02:c8:0e:b3:a6:86:3f:ec:3d:1b:81:49: ff:3f:25:8b:5a:03:9a:e7:2b:b2:2a:6f:1e:69:a5:8a:66:39: 56:5e:ef:83:b9:26:43:58:04:03:f8:d6:c1:75:00:15:b5:0c: 04:2d:a0:79:35:61:96:5b:81:83:b7:1e:55:64:29:48:4f:cf: a2:a1:e1:1a:23:49:8c:b8:ac:b1:24:ee:d9:9c:fa:11:a4:e6: 0c:54:08:f8:88:88:b6:ee:ed:da:08:d6:fe:73:d2:dd:f7:ca: 8d:3f:43:f2:d1:0e:ea:89:a2:43:7f:41:c8:f7:07:0b:11:3a: 06:bc:40:bb:05:a1:0d:da:33:54:5b:ad:e3:b5:79:6d:80:51: 4d:c0:08:0e:f9:6c:88:92:39:07:d3:e1:30:62:b5:69:26:05: 27:b1:a7:8e:0c:ec:3a:d0:4c:24:a3:2f:38:cd:d0:16:0d:c7: db:ef:b6:4f:a6:44:0b:41:89:9a:f8:98:0f:d5:ad:c3:57:e8: 3c:76:04:af:d2:36:72:91:13:6d:06:0d:f3:00:2e:9e:06:1c: 64:4a:45:7b:96:a5:b2:a4:28:3a:b5:ff:94:30:c2:98:e6:90: c2:1b:95:61:4e:d3:dd:89:d6:5c:00:da:97:58:d2:c0:1d:7e: 54:3a:ec:ee -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+N+/yHnhsdwbvX0CW67GiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDEyMTI4MzExNjgwOTQzMzBmZDUwN2U2Y2EzNWI4Nzk3YWQ1MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWlO5XQ428FFzAzJs4/OxOtaVRMD 1eH9bSL1C70G8HfUEXsY4h+6zkimtfEeNgywUQm5xIcBWawiojzzImMSvDm1m5E0 yin/7jzVDBnnfKDR8sVuxaQzJSq1Or6gO8wNdi6nbJKS20xSS42G428W/htGlmvF jR3MibMkYBxXpoJKTUlCLLYsouEsziycnrJsBZu9c1VGneWmtFx5zLxs0EQMfpZP /3ZY1VksvYU6QQrjRsp4JKfMUNdK3udCybavw944QOgx1a6RcK/cCc0nxKA6UQ0R 34AzBcRF/eWjWnhDpccsmzNlGoGDMSUSd1AK2mW4+1HPaq9v+1hJ5swBpQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFL0SEoMRaAlDMP1QfmyjW4eXrVEmMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvdlJJU2d4Rm9DVU13X1ZCLWJLTmJoNWV0VVNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAsu+QAwQA su+cAwQAsu+fMAwDBAC5GiEDBAK5GiAwDQYJKoZIhvcNAQELBQADggEBAA+skHaQ FgLIDrOmhj/sPRuBSf8/JYtaA5rnK7Iqbx5ppYpmOVZe74O5JkNYBAP41sF1ABW1 DAQtoHk1YZZbgYO3HlVkKUhPz6Kh4RojSYy4rLEk7tmc+hGk5gxUCPiIiLbu7doI 1v5z0t33yo0/Q/LRDuqJokN/Qcj3BwsROga8QLsFoQ3aM1RbreO1eW2AUU3ACA75 bIiSOQfT4TBitWkmBSexp44M7DrQTCSjLzjN0BYNx9vvtk+mRAtBiZr4mA/VrcNX 6Dx2BK/SNnKRE20GDfMALp4GHGRKRXuWpbKkKDq1/5QwwpjmkMIblWFO092J1lwA 2pdY0sAdflQ67O4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:29 2026 by rpki-client