This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa File: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (raw, json) Hash identifier: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU= Subject key identifier: BD:24:01:1C:53:9B:66:59:B6:E0:F8:F1:BF:C1:7E:54:82:7F:32:43 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B7BA51F22E285B2C8A5D3CCE48E8FA345 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60890 IP address blocks: 185.24.64.0/24 maxlen: 24 2a04:2b00:13cc::/48 maxlen: 48 2a04:2b00:a006::/48 maxlen: 48 2a04:2b00:a034::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1f:22:e2:85:b2:c8:a5:d3:cc:e4:8e:8f:a3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd24011c539b6659b6e0f8f1bfc17e54827f3243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:f8:d5:13:da:29:4e:fb:35:13:b3:27:be: d3:33:ba:82:5c:b5:14:54:07:a1:1d:15:28:dc:43: df:ef:39:92:ab:cc:af:d4:0c:bd:fb:ea:38:11:98: 6a:01:89:47:b1:54:cf:d9:0e:da:6e:e8:a3:2d:e1: bc:9e:ff:8c:85:ac:8b:78:df:76:37:87:e0:11:b8: 86:f6:47:2b:38:46:93:84:7c:e7:6b:78:0b:ac:05: 84:37:5f:4e:01:3b:53:95:27:34:22:24:08:ab:8c: 9c:29:89:e4:19:fb:8b:8e:e5:c3:78:8a:1e:70:f4: 2b:be:2b:40:14:d2:c9:45:93:7f:c0:d1:d6:ee:df: 02:1e:f4:68:f8:e0:da:50:6b:a7:6d:2b:a1:1f:89: f1:83:d7:5e:c8:e8:ed:86:41:95:9e:a0:33:b6:de: 2e:75:4a:c1:09:78:45:d2:a6:3e:11:4b:dd:a4:b0: 7b:fd:d0:87:74:4b:9b:ca:08:aa:04:d5:f8:49:37: 0f:11:ff:7e:80:2e:0b:61:13:79:fb:88:f4:60:40: bc:4a:47:66:ff:ca:42:0c:d3:43:f9:03:ad:84:c0: a0:56:d0:df:cf:08:49:8a:5c:96:a3:a9:32:cc:41: 2b:f5:15:a2:29:f7:75:34:a1:33:a9:d7:36:e0:9c: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:01:1C:53:9B:66:59:B6:E0:F8:F1:BF:C1:7E:54:82:7F:32:43 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.64.0/24 IPv6: 2a04:2b00:13cc::/48 2a04:2b00:a006::/48 2a04:2b00:a034::/48 Signature Algorithm: sha256WithRSAEncryption 81:cc:67:1c:cd:7c:53:fe:93:27:6e:59:60:8d:6a:fe:6d:85: 32:92:68:e0:1a:5b:1c:07:54:05:f4:8d:15:73:93:8f:43:26: 65:44:e9:af:89:77:da:28:b5:3d:51:f4:43:31:37:07:cc:38: c1:1f:ea:d0:98:8a:58:e0:fd:55:0c:a5:0d:e2:30:fa:b6:0c: 21:4b:b1:fb:87:ac:e7:9f:08:df:2c:69:7a:4b:05:a8:eb:e7: f3:63:4b:b7:bc:51:b5:cf:88:08:86:b4:26:88:4f:91:73:6f: fc:c3:8a:42:96:84:52:de:21:2f:f5:8e:65:5d:31:42:f9:9b: 70:d0:69:88:f1:22:68:d0:a2:cd:94:90:4d:52:61:74:92:7c: ee:2f:98:3a:be:76:a1:cd:75:57:b4:33:9c:f9:e8:f7:61:f4: cb:27:64:24:f2:99:73:eb:8c:68:94:fa:84:35:70:05:cb:7a: 9c:0c:99:26:9a:4e:3e:9e:62:54:19:b9:c6:eb:c3:c8:fe:de: 4d:6e:c7:ef:11:e1:4e:7c:a2:52:f2:98:02:57:ec:d8:90:8f: b8:46:49:9b:a4:65:e7:62:39:3c:93:e3:6d:9e:16:fa:21:1c: f5:f6:c2:cc:d5:ad:f5:bc:0c:d2:41:b2:ff:72:8f:d2:99:28: b7:2d:c2:f0 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7pR8i4oWyyKXTzOSOj6NFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDI0MDExYzUzOWI2NjU5YjZlMGY4ZjFiZmMxN2U1NDgyN2YzMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYr41RPaKU77NROzJ77TM7qCXLUU VAehHRUo3EPf7zmSq8yv1Ay9++o4EZhqAYlHsVTP2Q7abuijLeG8nv+MhayLeN92 N4fgEbiG9kcrOEaThHzna3gLrAWEN19OATtTlSc0IiQIq4ycKYnkGfuLjuXDeIoe cPQrvitAFNLJRZN/wNHW7t8CHvRo+ODaUGunbSuhH4nxg9deyOjthkGVnqAztt4u dUrBCXhF0qY+EUvdpLB7/dCHdEubygiqBNX4STcPEf9+gC4LYRN5+4j0YEC8Skdm /8pCDNND+QOthMCgVtDfzwhJilyWo6kyzEEr9RWiKfd1NKEzqdc24JzYxwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFL0kARxTm2ZZtuD48b/BflSCfzJDMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvdlNRQkhGT2JabG0yNFBqeHY4Ri1WSUpfTWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAuRhAMCEE AgACMBsDBwAqBCsAE8wDBwAqBCsAoAYDBwAqBCsAoDQwDQYJKoZIhvcNAQELBQAD ggEBAIHMZxzNfFP+kyduWWCNav5thTKSaOAaWxwHVAX0jRVzk49DJmVE6a+Jd9oo tT1R9EMxNwfMOMEf6tCYiljg/VUMpQ3iMPq2DCFLsfuHrOefCN8saXpLBajr5/Nj S7e8UbXPiAiGtCaIT5Fzb/zDikKWhFLeIS/1jmVdMUL5m3DQaYjxImjQos2UkE1S YXSSfO4vmDq+dqHNdVe0M5z56Pdh9MsnZCTymXPrjGiU+oQ1cAXLepwMmSaaTj6e YlQZucbrw8j+3k1ux+8R4U58olLymAJX7NiQj7hGSZukZediOTyT422eFvohHPX2 wszVrfW8DNJBsv9yj9KZKLctwvA= -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:39 2026 by rpki-client