This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/Ve64xTr98MUDsiJSZXk12KQ3yVc.roa File: Ve64xTr98MUDsiJSZXk12KQ3yVc.roa (raw, json) Hash identifier: wfd77vHmSmUiY8IWmiT9ZwxLolfac6GRsY7+Cx91Rus= Subject key identifier: 55:EE:B8:C5:3A:FD:F0:C5:03:B2:22:52:65:79:35:D8:A4:37:C9:57 Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8 Certificate serial: 019B7B35A6EC788B2987E73CBB99217DAE07 Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/Ve64xTr98MUDsiJSZXk12KQ3yVc.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 185.72.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a6:ec:78:8b:29:87:e7:3c:bb:99:21:7d:ae:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55eeb8c53afdf0c503b22252657935d8a437c957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:82:5e:0d:42:6a:b4:1f:f5:6f:e2:2f:fc: 7c:42:ac:bf:d3:d9:5c:28:26:c5:f9:95:13:a6:08: 65:46:4d:c7:0e:d4:fd:86:c8:cb:4d:52:ab:71:90: 1e:84:0b:f6:86:9e:2e:77:ef:cc:54:ef:fe:4a:5b: 6c:2e:42:67:85:24:17:f3:06:09:1d:ff:b4:45:cf: 34:f7:5c:3c:71:9d:e2:0b:17:53:f5:87:84:4f:47: 03:5a:97:0e:b2:79:94:47:11:44:59:c8:7d:6a:1c: cd:79:73:cc:a8:8f:b3:0c:a3:95:ae:c0:21:18:55: a2:19:4b:e2:bd:6c:35:1d:f7:09:39:0c:6c:b1:6b: 18:21:d6:92:8c:6e:98:a3:8c:04:3f:49:07:19:36: 83:68:30:e7:b8:ce:49:7e:21:67:03:9b:f1:26:52: 96:6e:8d:43:65:fe:1c:ef:bd:c3:df:68:c2:25:af: 49:68:1c:f2:4d:a7:de:cc:22:24:c7:cd:06:d4:3d: 6c:ef:38:bf:45:ec:e4:b2:a3:03:8b:cb:f0:40:5f: 01:21:cf:57:29:b6:32:dd:30:a4:0b:c3:61:da:c2: 10:54:7a:ff:3c:f3:5d:59:0e:c2:f5:18:84:85:0d: c9:64:a9:1c:73:c4:3a:7b:81:ba:4e:8c:af:b8:b5: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EE:B8:C5:3A:FD:F0:C5:03:B2:22:52:65:79:35:D8:A4:37:C9:57 X509v3 Authority Key Identifier: keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/Ve64xTr98MUDsiJSZXk12KQ3yVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.142.0/24 Signature Algorithm: sha256WithRSAEncryption da:6a:85:f7:00:f9:d9:d6:47:3b:9f:f8:b3:34:83:04:68:ca: 7e:04:15:70:7c:c4:90:c6:bf:8b:48:04:db:cc:06:51:cc:e9: 13:c4:41:b5:3d:d0:da:78:32:ef:1e:4b:3c:56:ac:21:2b:cd: 9e:73:de:03:33:39:72:fc:00:63:0f:1d:2f:1d:72:f2:e4:6f: f9:b0:18:a8:ad:42:63:bc:9a:57:4b:fc:ed:92:90:ae:d9:c6: 98:4a:0b:ea:90:93:26:0a:b8:f8:4f:7e:cc:9a:4e:50:95:4e: 49:7f:8d:8d:88:8a:f0:e7:00:94:0a:58:c5:e9:5a:1d:69:7f: 48:37:f3:9a:7a:fe:b8:1c:b5:e0:31:f3:35:2e:de:0c:58:cc: 18:63:b4:d9:a4:33:26:18:39:ee:65:ff:c8:df:df:52:60:d0: 51:90:6f:9e:e5:b6:27:74:8a:65:47:d6:95:e0:4a:18:17:04: f9:21:35:26:c3:b3:c3:7b:dc:da:8c:0a:bf:53:47:56:30:b7: 5e:80:2b:a6:40:c8:18:e7:b3:43:c9:19:72:37:d0:10:b9:84: 8e:fa:9c:76:d8:29:9c:50:44:79:b6:bf:e0:6e:ad:ca:3d:20: d7:fb:04:56:22:eb:b6:c6:3d:19:0c:4a:d7:16:28:9a:08:4b: 19:17:32:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NabseIsph+c8u5khfa4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex NDI1ZDgwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWVlYjhjNTNhZmRmMGM1MDNiMjIyNTI2NTc5MzVkOGE0MzdjOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKCXg1CarQf9W/iL/x8Qqy/09lc KCbF+ZUTpghlRk3HDtT9hsjLTVKrcZAehAv2hp4ud+/MVO/+SltsLkJnhSQX8wYJ Hf+0Rc8091w8cZ3iCxdT9YeET0cDWpcOsnmURxFEWch9ahzNeXPMqI+zDKOVrsAh GFWiGUvivWw1HfcJOQxssWsYIdaSjG6Yo4wEP0kHGTaDaDDnuM5JfiFnA5vxJlKW bo1DZf4c773D32jCJa9JaBzyTafezCIkx80G1D1s7zi/RezksqMDi8vwQF8BIc9X KbYy3TCkC8Nh2sIQVHr/PPNdWQ7C9RiEhQ3JZKkcc8Q6e4G6ToyvuLVe5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFXuuMU6/fDFA7IiUmV5NdikN8lXMB8GA1UdIwQY MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt MTMwZTRkYzAxNWFiLzEvVmU2NHhUcjk4TVVEc2lKU1pYazEyS1EzeVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUiOMA0G CSqGSIb3DQEBCwUAA4IBAQDaaoX3APnZ1kc7n/izNIMEaMp+BBVwfMSQxr+LSATb zAZRzOkTxEG1PdDaeDLvHks8VqwhK82ec94DMzly/ABjDx0vHXLy5G/5sBiorUJj vJpXS/ztkpCu2caYSgvqkJMmCrj4T37Mmk5QlU5Jf42NiIrw5wCUCljF6VodaX9I N/Oaev64HLXgMfM1Lt4MWMwYY7TZpDMmGDnuZf/I399SYNBRkG+e5bYndIplR9aV 4EoYFwT5ITUmw7PDe9zajAq/U0dWMLdegCumQMgY57NDyRlyN9AQuYSO+px22Cmc UER5tr/gbq3KPSDX+wRWIuu2xj0ZDErXFiiaCEsZFzKN -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:15 2026 by rpki-client