This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa File: Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa (raw, json) Hash identifier: Etr28FcrasjMYjMvyTTIdEuz44C1hmgNsxU1F56W2gs= Subject key identifier: 55:BD:22:1A:AA:C0:40:F9:50:98:D1:92:76:14:27:D8:4C:7A:04:4A Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Certificate serial: 019B7B35491F1668CE842A0A4E573547763E Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2269 IP address blocks: 138.195.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:49:1f:16:68:ce:84:2a:0a:4e:57:35:47:76:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55bd221aaac040f95098d192761427d84c7a044a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:d2:bc:8f:18:cb:ea:2c:78:75:31:51:33: c8:8e:5e:37:ac:64:31:a3:da:d2:26:47:1e:54:80: ee:45:35:b7:27:d1:e8:74:92:74:fd:08:55:4d:b7: 69:6a:a5:5d:9e:cb:71:4e:f5:71:08:0b:44:51:ea: 4c:8b:38:9f:b5:e4:1e:51:cc:0e:f5:1b:96:43:e3: f7:18:9e:76:68:38:7d:c1:fa:71:6b:f4:2d:13:aa: 36:e1:b2:f0:1f:8b:3b:7f:b5:8f:5a:cf:1e:a2:7d: 77:95:14:f4:38:36:ba:80:1e:7a:e8:0c:0f:ee:ad: a1:fe:b1:fb:fb:dd:f2:f8:50:21:4f:e8:f1:22:4d: 2c:bb:0a:ed:b4:4a:7f:8c:6c:e8:7b:04:44:d5:e5: 21:70:c1:fd:00:6f:bc:af:8d:68:31:cd:4b:c0:cf: d5:db:3e:24:ed:39:96:0c:d4:71:af:cb:d0:9b:9a: 9f:79:99:8c:6c:62:73:dc:15:b1:ca:1d:8f:06:a7: 1b:1e:95:d1:1d:a3:b1:a2:25:b4:af:b4:0a:f8:4a: 22:a0:b0:9e:e9:de:4e:c6:30:4b:b0:31:65:0a:a1: 67:c6:5e:f0:8a:f6:bc:5a:05:bd:16:87:19:da:10: 36:85:d2:ed:2e:0c:08:82:f6:42:de:a4:f0:c9:2b: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BD:22:1A:AA:C0:40:F9:50:98:D1:92:76:14:27:D8:4C:7A:04:4A X509v3 Authority Key Identifier: keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.195.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:0b:79:57:9c:6b:d0:ce:8e:26:34:b5:df:0c:18:cb:37:0f: 3b:6a:4c:bc:8c:f7:9e:3b:53:d0:99:31:0b:5d:d4:ba:a5:81: 03:23:34:58:74:37:ef:a7:67:82:97:e2:5a:bd:ef:f8:e6:e6: ac:a3:93:d0:f6:29:7b:14:e7:25:d0:3f:2b:79:ef:cd:dc:eb: e9:45:a4:21:ea:97:f5:f6:5b:68:95:18:0d:80:31:0f:da:ec: 0f:44:96:cf:3b:45:42:f2:65:f4:ba:c0:b2:13:ab:e3:74:85: 76:8c:94:c0:24:20:09:77:ba:9a:7d:2f:2b:72:11:2c:e3:d5: b8:5f:88:3a:ef:e6:09:79:07:d8:81:69:d5:4c:ce:1d:07:04: 59:e8:25:a4:1f:87:06:c3:f4:da:70:e1:73:b8:68:9a:52:80: 1c:b0:88:7b:4d:df:e1:b2:4a:b2:b8:2a:39:22:7a:0a:de:fb: f7:0c:29:f7:5d:0c:98:02:f9:f4:89:22:cd:f4:b1:6f:55:87: 5d:af:47:01:46:4d:84:5d:26:16:d2:f9:10:fa:cf:1f:70:b4: 33:bf:87:cf:38:42:a8:46:33:94:47:90:1a:b3:9e:b6:1d:b8: 5c:5f:ac:db:bd:3b:46:9b:c3:64:1e:11:58:5b:7a:16:10:a8: 88:73:a5:8a -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7NUkfFmjOhCoKTlc1R3Y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3 ZmYzNjQwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWJkMjIxYWFhYzA0MGY5NTA5OGQxOTI3NjE0MjdkODRjN2EwNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tPSvI8Yy+oseHUxUTPIjl43rGQx o9rSJkceVIDuRTW3J9HodJJ0/QhVTbdpaqVdnstxTvVxCAtEUepMizifteQeUcwO 9RuWQ+P3GJ52aDh9wfpxa/QtE6o24bLwH4s7f7WPWs8eon13lRT0ODa6gB566AwP 7q2h/rH7+93y+FAhT+jxIk0suwrttEp/jGzoewRE1eUhcMH9AG+8r41oMc1LwM/V 2z4k7TmWDNRxr8vQm5qfeZmMbGJz3BWxyh2PBqcbHpXRHaOxoiW0r7QK+EoioLCe 6d5OxjBLsDFlCqFnxl7wiva8WgW9FocZ2hA2hdLtLgwIgvZC3qTwySvpRwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFFW9IhqqwED5UJjRknYUJ9hMegRKMB8GA1UdIwQY MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt YWIyZDVlN2Q0YTdiLzEvVmIwaUdxckFRUGxRbU5HU2RoUW4yRXg2QkVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAisMwDQYJ KoZIhvcNAQELBQADggEBAJkLeVeca9DOjiY0td8MGMs3DztqTLyM9547U9CZMQtd 1LqlgQMjNFh0N++nZ4KX4lq97/jm5qyjk9D2KXsU5yXQPyt5783c6+lFpCHql/X2 W2iVGA2AMQ/a7A9Els87RULyZfS6wLITq+N0hXaMlMAkIAl3upp9LytyESzj1bhf iDrv5gl5B9iBadVMzh0HBFnoJaQfhwbD9Npw4XO4aJpSgBywiHtN3+GySrK4Kjki egre+/cMKfddDJgC+fSJIs30sW9Vh12vRwFGTYRdJhbS+RD6zx9wtDO/h884QqhG M5RHkBqznrYduFxfrNu9O0abw2QeEVhbehYQqIhzpYo= -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:04 2026 by rpki-client