This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/VT3JMz1z0jbN38x85_GPgDiIFxU.roa File: VT3JMz1z0jbN38x85_GPgDiIFxU.roa (raw, json) Hash identifier: 72TztmXHst0nborQVePoZB2l0l3iiUcQvPO38qPkaNM= Subject key identifier: 55:3D:C9:33:3D:73:D2:36:CD:DF:CC:7C:E7:F1:8F:80:38:88:17:15 Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Certificate serial: 019B77C691521DA1409D1CB1E240D4C22457 Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/VT3JMz1z0jbN38x85_GPgDiIFxU.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 185.233.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:91:52:1d:a1:40:9d:1c:b1:e2:40:d4:c2:24:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=553dc9333d73d236cddfcc7ce7f18f8038881715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:65:b2:34:10:42:53:ce:c4:fd:8d:89:cc:ea: a7:8d:7b:fd:e1:6a:77:94:f5:f9:04:6b:56:60:cc: ba:25:de:88:70:ec:ef:03:2a:e3:85:51:0b:6e:2d: ff:38:60:00:0c:46:f7:e1:5e:5a:96:fc:0a:61:c9: dc:b4:20:4a:4e:39:62:23:04:44:93:ba:65:96:f1: a6:1c:b6:20:c7:91:e6:d6:d5:c6:8f:5d:ad:40:d2: 43:d9:fb:d8:52:de:64:3e:f9:66:06:b0:c4:7e:47: 12:03:69:df:7b:21:f0:5b:71:79:af:e9:9e:76:35: c8:f9:1b:1b:99:e6:2d:27:60:db:eb:f9:3d:55:7c: b2:25:b1:9c:92:ce:4e:10:f7:4b:aa:f6:5a:ba:d3: c5:d3:8a:93:43:9a:e1:02:2e:76:52:65:56:ef:4c: 38:fa:69:52:54:c7:46:b7:fc:12:b2:ea:2c:2f:01: f7:38:0a:38:e6:70:cf:49:70:34:ae:d8:8f:45:11: 11:31:d2:74:04:7e:fd:09:a8:54:99:2d:ea:02:2a: ff:a9:c1:cd:1c:9b:f3:ef:20:e3:10:c7:20:40:4d: d7:47:60:ac:c7:8e:c7:35:08:44:ec:1a:ef:bd:40: 20:32:b1:95:29:0c:1b:28:bc:a5:b6:56:49:07:0a: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3D:C9:33:3D:73:D2:36:CD:DF:CC:7C:E7:F1:8F:80:38:88:17:15 X509v3 Authority Key Identifier: keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/VT3JMz1z0jbN38x85_GPgDiIFxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.165.0/24 Signature Algorithm: sha256WithRSAEncryption 42:60:05:4b:62:10:33:f3:2f:b6:96:c0:4a:f5:35:d3:96:19: 8f:8e:bf:fc:47:8d:22:af:de:39:97:65:25:e3:49:af:5b:c6: 03:e8:57:23:c3:2d:85:36:c0:13:0f:67:76:9c:2e:4f:22:25: 90:c3:03:0c:0a:91:23:cd:8d:17:36:22:c5:81:30:a7:a9:9e: cd:3d:46:87:a2:ce:c4:fe:ed:63:cc:6b:4f:85:7c:3b:5d:8a: 73:68:ba:70:90:78:70:57:ab:9d:db:b8:32:10:34:87:9c:ca: 13:56:53:8d:bb:54:b5:ce:08:4b:5a:3a:d0:3b:cc:a2:c0:e4: 05:24:31:53:05:cd:36:a5:f1:dc:9b:ae:70:bd:a7:08:d2:53: a9:83:ba:61:64:b7:cf:60:e9:0f:b1:e0:29:23:62:e7:12:69: 16:31:e5:1e:ab:3c:50:99:85:43:c0:ee:f0:06:58:82:66:98: f6:1b:e7:83:c7:d9:2f:2b:e2:78:cf:5b:c8:15:85:af:54:60: a9:b5:cc:42:7a:17:04:dc:f6:2d:11:1d:24:31:16:d5:7f:79: f3:9c:ea:8d:27:9b:59:06:40:2e:b7:86:b2:56:6b:eb:c7:9a: ae:9b:b2:4f:dc:f0:90:e3:56:ac:20:c6:0d:e7:f3:a5:11:0f: ad:0a:2b:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpFSHaFAnRyx4kDUwiRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl NWFlYWEwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTNkYzkzMzNkNzNkMjM2Y2RkZmNjN2NlN2YxOGY4MDM4ODgxNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GWyNBBCU87E/Y2JzOqnjXv94Wp3 lPX5BGtWYMy6Jd6IcOzvAyrjhVELbi3/OGAADEb34V5alvwKYcnctCBKTjliIwRE k7pllvGmHLYgx5Hm1tXGj12tQNJD2fvYUt5kPvlmBrDEfkcSA2nfeyHwW3F5r+me djXI+RsbmeYtJ2Db6/k9VXyyJbGcks5OEPdLqvZautPF04qTQ5rhAi52UmVW70w4 +mlSVMdGt/wSsuosLwH3OAo45nDPSXA0rtiPRRERMdJ0BH79CahUmS3qAir/qcHN HJvz7yDjEMcgQE3XR2Csx47HNQhE7BrvvUAgMrGVKQwbKLyltlZJBwqCZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFU9yTM9c9I2zd/MfOfxj4A4iBcVMB8GA1UdIwQY MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt MzRlNGUwNjc5MzMzLzEvVlQzSk16MXowamJOMzh4ODVfR1BnRGlJRnhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemlMA0G CSqGSIb3DQEBCwUAA4IBAQBCYAVLYhAz8y+2lsBK9TXTlhmPjr/8R40ir945l2Ul 40mvW8YD6Fcjwy2FNsATD2d2nC5PIiWQwwMMCpEjzY0XNiLFgTCnqZ7NPUaHos7E /u1jzGtPhXw7XYpzaLpwkHhwV6ud27gyEDSHnMoTVlONu1S1zghLWjrQO8yiwOQF JDFTBc02pfHcm65wvacI0lOpg7phZLfPYOkPseApI2LnEmkWMeUeqzxQmYVDwO7w BliCZpj2G+eDx9kvK+J4z1vIFYWvVGCptcxCehcE3PYtER0kMRbVf3nznOqNJ5tZ BkAut4ayVmvrx5qum7JP3PCQ41asIMYN5/OlEQ+tCiua -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:12 2026 by rpki-client