This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/wVEf1NS4b-O0Ni3CxeEmmUuERc4.roa File: wVEf1NS4b-O0Ni3CxeEmmUuERc4.roa (raw, json) Hash identifier: vkr8YThgGtb/HWOzvUqPrMKIpMvPe7XiwXuw9lDFEHk= Subject key identifier: C1:51:1F:D4:D4:B8:6F:E3:B4:36:2D:C2:C5:E1:26:99:4B:84:45:CE Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C72E49F4E53CE3939F493C50AAA2C0 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/wVEf1NS4b-O0Ni3CxeEmmUuERc4.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16345 IP address blocks: 194.85.128.0/19 maxlen: 24 195.209.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2e:49:f4:e5:3c:e3:93:9f:49:3c:50:aa:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1511fd4d4b86fe3b4362dc2c5e126994b8445ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:ad:4f:1a:46:85:cd:43:44:75:8f:8f:1f: 70:b9:ae:7c:40:2a:b6:f4:3f:ce:24:13:64:3b:d4: 94:bc:60:46:d0:06:e9:2e:26:7b:4b:65:20:06:f7: e2:78:5a:24:26:f5:34:96:9f:f8:d1:63:63:71:22: 98:3d:85:2f:34:5a:ab:9e:6b:6c:5d:c6:6d:ec:6c: 1d:de:b9:14:a7:79:87:6a:a7:01:67:76:b8:53:b0: 21:34:b1:3d:97:53:e5:3d:37:0a:b4:09:32:67:4a: 6d:dc:68:87:e3:52:4d:13:9f:e3:80:ce:7b:be:f9: 6c:22:9e:2a:95:1d:90:05:ef:ee:95:ff:ef:9c:c6: af:d8:82:67:81:8a:49:86:55:43:08:9a:1c:bb:d0: b8:23:cf:6f:f5:e4:cb:a1:ce:90:f2:df:43:78:12: 65:6f:b7:96:11:f4:df:3f:32:7c:b5:b3:20:8e:34: d4:71:89:b7:10:d1:40:e1:13:b1:0c:71:06:84:31: cd:74:8e:0a:e0:e5:01:d3:7e:a2:8e:2e:29:93:57: 42:78:f4:8d:33:8c:41:1e:1e:0a:4b:3b:9a:e5:63: 21:dd:0f:38:ec:df:25:1f:5f:d0:bd:2e:f4:2c:da: 00:46:0b:2a:fe:ba:db:af:6a:1a:0b:5a:36:79:ec: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:1F:D4:D4:B8:6F:E3:B4:36:2D:C2:C5:E1:26:99:4B:84:45:CE X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/wVEf1NS4b-O0Ni3CxeEmmUuERc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.85.128.0/19 195.209.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:9d:66:23:a0:3f:6e:01:ec:a1:69:bf:26:eb:12:50:9c:1d: ee:72:f9:75:a0:a7:08:7e:d6:d8:0e:fe:a3:d3:9e:69:1b:2e: 74:7b:11:12:0e:db:41:a9:c2:5c:ac:eb:20:72:5d:65:4d:cf: fb:5f:a7:9d:d5:e3:d5:88:9a:37:89:fb:aa:40:20:a4:da:7f: 7d:c5:e8:50:68:4b:76:e9:2d:58:0d:8e:35:41:a5:3b:0a:c4: c7:c5:9f:b1:c9:58:4b:63:eb:11:8b:49:49:d1:02:9a:09:d2: 12:8e:49:95:89:ea:4c:b1:3f:73:a9:f8:7e:af:68:3a:73:c9: bd:fa:4d:7c:ee:3c:ea:23:c4:91:23:d0:3f:1b:d4:ca:71:f6: 20:f8:96:27:29:c4:cf:82:ce:0e:6d:a3:ab:99:d5:26:a6:60: e6:3c:62:d8:bc:ca:78:cb:89:f3:2c:cc:65:8e:74:48:15:d6: 54:ec:3f:e6:11:b1:b2:e7:41:d9:60:50:e4:92:e8:dc:d8:89: 69:8e:94:62:be:84:d0:a3:98:76:e6:83:b5:55:4f:b5:01:2c: 0f:47:84:56:2e:d1:c1:1f:00:94:b3:4e:65:46:fd:99:2a:36: f9:d3:ed:6c:ac:b5:0c:ff:45:45:c9:81:65:77:e2:b7:61:31: 81:0c:c0:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xy5J9OU845OfSTxQqqLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTUxMWZkNGQ0Yjg2ZmUzYjQzNjJkYzJjNWUxMjY5OTRiODQ0NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdmtTxpGhc1DRHWPjx9wua58QCq2 9D/OJBNkO9SUvGBG0AbpLiZ7S2UgBvfieFokJvU0lp/40WNjcSKYPYUvNFqrnmts XcZt7Gwd3rkUp3mHaqcBZ3a4U7AhNLE9l1PlPTcKtAkyZ0pt3GiH41JNE5/jgM57 vvlsIp4qlR2QBe/ulf/vnMav2IJngYpJhlVDCJocu9C4I89v9eTLoc6Q8t9DeBJl b7eWEfTfPzJ8tbMgjjTUcYm3ENFA4ROxDHEGhDHNdI4K4OUB036iji4pk1dCePSN M4xBHh4KSzua5WMh3Q847N8lH1/QvS70LNoARgsq/rrbr2oaC1o2eez4vQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMFRH9TUuG/jtDYtwsXhJplLhEXOMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvd1ZFZjFOUzRiLU8wTmkzQ3hlRW1tVXVFUmM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFwlWAAwQE w9GgMA0GCSqGSIb3DQEBCwUAA4IBAQBvnWYjoD9uAeyhab8m6xJQnB3ucvl1oKcI ftbYDv6j055pGy50exESDttBqcJcrOsgcl1lTc/7X6ed1ePViJo3ifuqQCCk2n99 xehQaEt26S1YDY41QaU7CsTHxZ+xyVhLY+sRi0lJ0QKaCdISjkmViepMsT9zqfh+ r2g6c8m9+k187jzqI8SRI9A/G9TKcfYg+JYnKcTPgs4ObaOrmdUmpmDmPGLYvMp4 y4nzLMxljnRIFdZU7D/mEbGy50HZYFDkkujc2IlpjpRivoTQo5h25oO1VU+1ASwP R4RWLtHBHwCUs05lRv2ZKjb50+1srLUM/0VFyYFld+K3YTGBDMDw -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:01 2026 by rpki-client