This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa File: VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa (raw, json) Hash identifier: Ivq9B7fCTNtjnlU9FptxC9e2xrpHUztFCNXJ+qaH7LQ= Subject key identifier: 54:4B:D7:AA:98:ED:A6:75:AA:3E:11:6C:2B:55:63:2C:F5:9C:67:CE Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4 Certificate serial: 019B7C12897F6910D1F7183EA207B730C9DE Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29075 IP address blocks: 185.204.188.0/22 maxlen: 24 2a0a:fc40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:89:7f:69:10:d1:f7:18:3e:a2:07:b7:30:c9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=544bd7aa98eda675aa3e116c2b55632cf59c67ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c8:f1:69:b2:8c:c3:2c:4a:10:44:eb:05:a4: 47:af:3f:f6:29:06:aa:79:93:e8:00:1b:00:89:2e: 05:1a:16:f3:a1:fe:2d:d4:cb:77:0d:e6:95:99:ee: 77:83:42:b7:65:d5:19:c3:e1:63:f5:05:be:da:7a: 76:54:95:10:ad:5e:1a:8c:71:92:07:b5:b1:53:e2: e3:a0:7b:dc:76:96:8e:80:ec:23:37:bf:3f:ec:fd: 46:37:66:e9:39:ee:05:fe:50:e0:8d:9e:c6:e4:58: 5e:b8:97:ce:f7:cf:13:2c:2d:b5:a9:20:c5:d7:02: 06:cf:da:c7:15:5b:ca:c6:e9:e7:b5:20:85:8a:0c: e1:19:72:fd:bf:5e:f0:93:a1:82:89:0b:04:79:3a: f4:a3:92:2c:7c:28:1c:ae:ff:44:47:d9:8f:7d:7d: 15:79:d1:47:26:0d:07:f6:09:b0:f6:5f:e7:73:b8: 85:96:dd:06:a8:f9:93:4e:36:d9:61:35:1d:bd:72: 85:e5:ea:84:46:ad:c4:fe:98:ab:f9:25:4e:e9:a5: 9b:10:41:da:67:3a:a5:10:0a:52:b4:3b:5b:3f:62: c6:2f:6f:27:a2:07:4d:23:9c:35:c5:a2:c7:30:92: 79:2d:17:ae:36:fb:f5:26:74:dd:12:fd:d5:f2:13: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4B:D7:AA:98:ED:A6:75:AA:3E:11:6C:2B:55:63:2C:F5:9C:67:CE X509v3 Authority Key Identifier: keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.188.0/22 IPv6: 2a0a:fc40::/29 Signature Algorithm: sha256WithRSAEncryption 76:84:68:ac:44:0a:be:c7:d8:19:f4:cf:3e:47:c3:1a:7e:b4: aa:4a:85:db:80:71:27:2f:5b:4d:a2:b3:fe:5c:e1:3f:b2:b0: 5b:fa:e4:33:83:56:16:55:de:4c:f0:13:10:07:3b:a8:37:d0: e9:83:c7:0e:7c:55:aa:d6:0f:47:a3:d5:77:9b:85:18:af:01: 54:02:27:cd:df:ad:66:c9:29:e2:1d:c5:6f:98:3c:3d:41:6b: ca:4b:2e:e8:2c:60:2e:ee:55:ec:99:5d:03:5d:c8:e4:86:60: cf:13:1c:c1:a7:33:2b:e1:90:f9:0d:86:56:c7:db:f4:d9:23: 47:e4:92:a7:46:f4:aa:71:02:ec:a2:84:2d:a6:7b:22:2b:98: a5:c6:81:d9:e5:55:c5:61:5a:c4:32:a1:f9:48:c5:0a:54:70: 49:de:32:c5:cd:3c:b0:56:eb:4e:78:0a:19:b9:8c:be:30:b6: 74:f8:b1:17:2d:40:65:d8:d9:fe:75:ec:ff:48:1b:af:31:f0: 83:3b:e6:6d:67:82:e7:c4:70:64:4d:c8:d8:5a:bc:1b:ea:17: f1:46:75:b5:4a:4b:5e:02:0f:48:b6:35:b0:bd:2b:6b:5c:e5: 4a:7b:ab:0d:a5:6d:6d:59:f2:61:9d:d5:7c:9c:90:93:67:70: 68:b8:32:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Eol/aRDR9xg+oge3MMneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwM2IzYWI4ZDkwMTE0MzlkNGJhODRkZmQ0YWZlNjE2ZDQx OTZjYzQwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDRiZDdhYTk4ZWRhNjc1YWEzZTExNmMyYjU1NjMyY2Y1OWM2N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78jxabKMwyxKEETrBaRHrz/2KQaq eZPoABsAiS4FGhbzof4t1Mt3DeaVme53g0K3ZdUZw+Fj9QW+2np2VJUQrV4ajHGS B7WxU+LjoHvcdpaOgOwjN78/7P1GN2bpOe4F/lDgjZ7G5FheuJfO988TLC21qSDF 1wIGz9rHFVvKxunntSCFigzhGXL9v17wk6GCiQsEeTr0o5IsfCgcrv9ER9mPfX0V edFHJg0H9gmw9l/nc7iFlt0GqPmTTjbZYTUdvXKF5eqERq3E/pir+SVO6aWbEEHa ZzqlEApStDtbP2LGL28nogdNI5w1xaLHMJJ5LReuNvv1JnTdEv3V8hOylwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFRL16qY7aZ1qj4RbCtVYyz1nGfOMB8GA1UdIwQY MBaAFCA7OrjZARQ51LqE39Sv5hbUGWzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURzNnVOa0JGRG5VdW9UZjFLX21GdFFaYk1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZjI3NzctMTg5OS00YTM1LWIyODQt YTYyYWYyODZmOWIzLzEvVkV2WHFwanRwbldxUGhGc0sxVmpMUFdjWjg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZjI3NzctMTg5OS00YTM1LWIyODQtYTYyYWYyODZmOWIz LzEvSURzNnVOa0JGRG5VdW9UZjFLX21GdFFaYk1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucy8MA0E AgACMAcDBQMqCvxAMA0GCSqGSIb3DQEBCwUAA4IBAQB2hGisRAq+x9gZ9M8+R8Ma frSqSoXbgHEnL1tNorP+XOE/srBb+uQzg1YWVd5M8BMQBzuoN9Dpg8cOfFWq1g9H o9V3m4UYrwFUAifN361mySniHcVvmDw9QWvKSy7oLGAu7lXsmV0DXcjkhmDPExzB pzMr4ZD5DYZWx9v02SNH5JKnRvSqcQLsooQtpnsiK5ilxoHZ5VXFYVrEMqH5SMUK VHBJ3jLFzTywVutOeAoZuYy+MLZ0+LEXLUBl2Nn+dez/SBuvMfCDO+ZtZ4LnxHBk TcjYWrwb6hfxRnW1SkteAg9ItjWwvStrXOVKe6sNpW1tWfJhndV8nJCTZ3BouDLU -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:45 2026 by rpki-client