This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VsQCo1G__DUcl5DS6QRXt582ROw.roa File: VsQCo1G__DUcl5DS6QRXt582ROw.roa (raw, json) Hash identifier: SE07a2lg1se31aYHbViEcCjKuPjHLDrRhTr3FJF8pb4= Subject key identifier: 56:C4:02:A3:51:BF:FC:35:1C:97:90:D2:E9:04:57:B7:9F:36:44:EC Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3913E90DC2BA04BD64A8926F7C2939 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VsQCo1G__DUcl5DS6QRXt582ROw.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207168 IP address blocks: 85.142.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:e9:0d:c2:ba:04:bd:64:a8:92:6f:7c:29:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56c402a351bffc351c9790d2e90457b79f3644ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:4b:3d:1b:6b:c4:13:b7:7e:22:1a:5c:7c: 87:c7:f9:27:96:45:15:7e:0e:b3:95:e3:b9:b7:e2: d2:79:a8:34:b1:e4:d3:aa:1d:18:99:f7:87:d1:68: 37:d7:eb:ed:76:95:1b:b5:8d:81:06:54:7b:e7:c9: 23:d8:19:66:23:a1:89:62:9c:21:1d:82:bf:e4:00: 85:f2:56:71:0a:84:67:e1:e9:34:66:11:87:86:b3: 84:d8:ae:d4:33:39:be:c0:b1:28:9c:fc:a4:f8:b2: 18:0f:db:6b:2f:30:f6:38:df:27:be:3a:ab:8e:1b: 25:2c:44:36:fb:7f:bd:c6:c4:3e:af:be:77:48:e8: cb:00:80:b3:9e:df:c7:b6:90:a6:36:3d:65:c0:36: 97:b6:f6:ca:b9:40:89:15:d5:e6:48:c1:84:37:16: 51:9d:f4:f5:80:03:02:eb:81:3f:93:c4:fa:b2:37: 0f:13:f0:db:b4:2b:d2:70:a1:51:85:23:ce:ab:9d: 00:ea:44:a4:05:9a:61:56:77:a8:00:e0:1a:49:6c: a8:e9:6d:b1:03:94:93:5d:48:b4:30:17:3f:54:45: a2:f5:45:42:ff:76:05:fc:81:1e:4e:fb:9c:1a:17: ab:a4:fd:ba:78:a1:05:86:98:57:14:aa:cb:74:ac: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C4:02:A3:51:BF:FC:35:1C:97:90:D2:E9:04:57:B7:9F:36:44:EC X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VsQCo1G__DUcl5DS6QRXt582ROw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.180.0/22 Signature Algorithm: sha256WithRSAEncryption 96:a7:1b:ca:15:a1:34:70:44:83:6e:a2:2a:4f:38:c3:9d:5b: 11:97:cc:ea:08:a3:8d:50:e9:61:71:3a:d8:48:62:d1:a5:09: be:97:ae:f7:e3:b4:2b:73:6a:09:0d:d8:48:a7:9d:bb:01:3a: 44:5f:a3:c1:cc:43:ce:39:62:6d:80:32:f2:ec:a7:d5:41:f1: d0:45:cd:4b:d4:78:3e:92:16:bd:1d:5c:00:0a:b8:0b:1b:6f: 61:89:78:98:a9:a4:1b:c5:7c:43:31:55:53:d8:88:8a:87:87: ba:e3:6d:8f:7b:46:48:01:c8:06:a1:8b:51:04:4a:3b:2f:f7: 82:99:c4:73:08:37:40:ab:6b:c7:76:32:e4:bc:f4:92:ba:0b: 69:f2:ad:63:aa:6e:78:b6:6f:2f:fa:93:b6:d8:6c:b0:be:d1: c6:d6:94:0f:1b:5b:5d:48:9d:a5:9d:e2:ba:77:d0:06:80:41: 8a:d8:fd:97:76:93:e3:a8:3c:54:3f:b9:46:81:9f:b0:a4:7e: 73:67:7b:1a:e5:18:6b:20:56:56:1b:c9:32:3c:ba:c8:ad:a3: 89:8a:40:21:6d:6d:fd:21:bf:7e:10:e7:2c:4f:8e:79:c9:42: 09:b9:27:b0:32:09:3c:2e:d5:0a:5d:ec:31:3b:bf:aa:32:0c: 63:3f:be:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORPpDcK6BL1kqJJvfCk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmM0MDJhMzUxYmZmYzM1MWM5NzkwZDJlOTA0NTdiNzlmMzY0NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9tLPRtrxBO3fiIaXHyHx/knlkUV fg6zleO5t+LSeag0seTTqh0YmfeH0Wg31+vtdpUbtY2BBlR758kj2BlmI6GJYpwh HYK/5ACF8lZxCoRn4ek0ZhGHhrOE2K7UMzm+wLEonPyk+LIYD9trLzD2ON8nvjqr jhslLEQ2+3+9xsQ+r753SOjLAICznt/HtpCmNj1lwDaXtvbKuUCJFdXmSMGENxZR nfT1gAMC64E/k8T6sjcPE/DbtCvScKFRhSPOq50A6kSkBZphVneoAOAaSWyo6W2x A5STXUi0MBc/VEWi9UVC/3YF/IEeTvucGherpP26eKEFhphXFKrLdKxBTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbEAqNRv/w1HJeQ0ukEV7efNkTsMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvVnNRQ28xR19fRFVjbDVEUzZRUlh0NTgyUk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVY60MA0G CSqGSIb3DQEBCwUAA4IBAQCWpxvKFaE0cESDbqIqTzjDnVsRl8zqCKONUOlhcTrY SGLRpQm+l67347Qrc2oJDdhIp527ATpEX6PBzEPOOWJtgDLy7KfVQfHQRc1L1Hg+ kha9HVwACrgLG29hiXiYqaQbxXxDMVVT2IiKh4e6422Pe0ZIAcgGoYtRBEo7L/eC mcRzCDdAq2vHdjLkvPSSugtp8q1jqm54tm8v+pO22GywvtHG1pQPG1tdSJ2lneK6 d9AGgEGK2P2XdpPjqDxUP7lGgZ+wpH5zZ3sa5RhrIFZWG8kyPLrIraOJikAhbW39 Ib9+EOcsT455yUIJuSewMgk8LtUKXewxO7+qMgxjP74e -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:03 2026 by rpki-client