This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa File: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (raw, json) Hash identifier: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc= Subject key identifier: BE:4A:70:34:38:FB:C5:7C:31:EA:93:23:D9:75:56:67:10:42:C5:CE Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019B7C126AB8514353D5B9539FE782609D27 Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42864 IP address blocks: 185.198.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:b8:51:43:53:d5:b9:53:9f:e7:82:60:9d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be4a703438fbc57c31ea9323d97556671042c5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:1d:80:23:21:fc:ef:af:b3:6b:2d:35:d8: f8:3c:32:43:29:dc:69:8e:f8:36:79:b1:66:f0:77: 60:16:df:7e:7f:fe:9e:fb:ed:12:c4:40:54:d8:fe: 2a:3c:d2:3c:cd:09:c7:6d:56:95:6b:c7:e3:e4:86: 9b:ef:c0:e9:d2:b6:04:74:eb:ed:8d:8b:a1:51:60: af:3b:a7:5e:46:80:01:7a:9f:ae:e9:80:9d:00:4f: 6b:6d:ef:a6:08:2f:5c:9c:d4:3b:ee:30:70:1d:55: 15:62:b0:5b:d7:ae:38:99:3f:bc:cb:c1:58:50:62: c1:b4:73:87:64:35:cc:7a:fa:33:22:f8:30:71:6b: b0:25:92:81:ba:3f:17:ae:b7:53:7b:8b:e5:99:3a: f4:6f:da:30:6d:34:5e:0c:56:83:e4:4c:97:bf:d5: 45:ec:3d:83:c0:aa:57:47:1b:f8:16:19:58:4f:bf: 2d:b5:c1:51:10:62:f9:0a:60:28:72:bf:39:1d:a7: 43:e2:f2:d8:1a:b2:54:09:d9:4a:00:44:fe:9e:ab: c0:d6:38:48:1d:36:d0:15:1b:a9:ca:61:d7:4e:36: 0a:bc:fe:b1:61:bc:f9:ac:70:d6:4f:c8:eb:7d:db: df:97:4e:a8:8d:59:0e:6b:15:78:71:f6:a2:3b:ce: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4A:70:34:38:FB:C5:7C:31:EA:93:23:D9:75:56:67:10:42:C5:CE X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:a6:44:0b:88:fd:21:89:20:67:5a:31:1d:ee:21:b4:44:de: 31:86:53:b0:9c:fc:6a:bf:25:2a:9e:47:cc:09:39:2d:33:66: a5:2a:3e:e8:ca:10:05:53:e1:9a:7a:5f:7c:10:5b:33:14:e2: 07:29:a0:9c:e5:87:f8:48:d1:dd:59:c6:19:fb:c6:68:90:a7: 79:45:3c:18:f1:9e:b5:9f:17:dc:e8:08:4b:ee:68:2a:08:b5: 27:09:c4:cd:29:1a:9f:fe:d2:4e:d5:7a:60:d9:4f:10:32:04: 0a:c3:6f:93:5d:a4:c5:83:08:71:19:a3:84:80:76:74:0c:71: 09:ea:d4:18:d8:e6:bd:8e:ca:5b:8a:e1:fe:a5:7f:e7:9d:5a: 61:f6:52:a1:d5:58:0d:86:df:85:60:fc:ff:76:66:28:59:32: 38:0e:ba:a9:7b:e7:9a:26:27:b2:8e:fa:b1:2c:06:14:be:89: 44:51:b2:80:3a:e7:03:45:d1:8a:98:72:5a:a6:e6:f0:80:83: 45:0e:0d:a9:52:6e:65:53:f3:25:8a:d1:1f:67:77:cc:7c:31: 42:5d:d3:a7:4a:0b:ec:43:f8:84:42:d9:81:c8:f3:d5:62:d9: 69:4c:60:e8:9d:3b:eb:02:14:72:c3:89:f0:c5:5e:fa:49:cd: 25:02:29:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Emq4UUNT1blTn+eCYJ0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTRhNzAzNDM4ZmJjNTdjMzFlYTkzMjNkOTc1NTY2NzEwNDJjNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvMdgCMh/O+vs2stNdj4PDJDKdxp jvg2ebFm8HdgFt9+f/6e++0SxEBU2P4qPNI8zQnHbVaVa8fj5Iab78Dp0rYEdOvt jYuhUWCvO6deRoABep+u6YCdAE9rbe+mCC9cnNQ77jBwHVUVYrBb1644mT+8y8FY UGLBtHOHZDXMevozIvgwcWuwJZKBuj8XrrdTe4vlmTr0b9owbTReDFaD5EyXv9VF 7D2DwKpXRxv4FhlYT78ttcFREGL5CmAocr85HadD4vLYGrJUCdlKAET+nqvA1jhI HTbQFRupymHXTjYKvP6xYbz5rHDWT8jrfdvfl06ojVkOaxV4cfaiO85UZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5KcDQ4+8V8MeqTI9l1VmcQQsXOMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEvdmtwd05Eajd4WHd4NnBNajJYVldaeEJDeGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucaoMA0G CSqGSIb3DQEBCwUAA4IBAQAtpkQLiP0hiSBnWjEd7iG0RN4xhlOwnPxqvyUqnkfM CTktM2alKj7oyhAFU+Gael98EFszFOIHKaCc5Yf4SNHdWcYZ+8ZokKd5RTwY8Z61 nxfc6AhL7mgqCLUnCcTNKRqf/tJO1Xpg2U8QMgQKw2+TXaTFgwhxGaOEgHZ0DHEJ 6tQY2Oa9jspbiuH+pX/nnVph9lKh1VgNht+FYPz/dmYoWTI4Drqpe+eaJieyjvqx LAYUvolEUbKAOucDRdGKmHJapubwgINFDg2pUm5lU/MlitEfZ3fMfDFCXdOnSgvs Q/iEQtmByPPVYtlpTGDonTvrAhRyw4nwxV76Sc0lAikj -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:02 2026 by rpki-client