This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa File: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (raw, json) Hash identifier: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo= Subject key identifier: 54:00:2F:05:58:A4:28:CE:8C:B9:12:7E:78:6F:A2:50:1F:57:75:1C Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Certificate serial: 019B7BA500C1AA993CF20A9FDE3E8E5157F1 Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8680 IP address blocks: 185.16.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:00:c1:aa:99:3c:f2:0a:9f:de:3e:8e:51:57:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54002f0558a428ce8cb9127e786fa2501f57751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:6e:ca:04:e4:b4:30:52:d4:c1:1b:11:36: 89:5e:9d:de:0d:1c:ef:e0:c6:93:39:0a:fa:35:9e: ce:20:c9:86:3e:3e:53:dd:98:0f:07:ef:a8:f6:7f: 90:7a:c9:6d:88:c2:a2:80:a3:7a:59:b8:be:0f:59: da:ac:7d:50:d0:d6:62:92:b0:09:e1:5e:c9:20:e5: 78:46:8a:4c:96:fa:f6:d4:8c:3f:05:8d:ef:5c:45: d4:a2:7d:39:37:d4:5b:a3:f7:1a:9d:cf:1d:0c:31: 67:da:f9:e7:24:2c:b7:5f:82:9e:26:2e:cb:89:93: 1e:12:f9:60:e0:34:5b:80:76:82:f4:ac:54:a8:4b: bd:d9:3e:74:99:e4:42:30:08:d3:24:9b:2a:00:8a: 4d:57:14:c5:7f:71:8e:fc:f9:5a:5e:e0:ed:4e:14: b2:f4:f7:87:47:b5:30:ff:ad:61:62:79:f1:b0:a9: e5:fc:8d:04:9b:04:46:6d:18:a5:f2:97:30:8e:48: 17:49:4e:cb:47:07:17:51:86:27:8c:32:f8:bc:4d: 9b:7d:5a:4f:69:5f:d1:24:f3:7f:04:c5:4d:f4:5c: 28:20:f0:a7:af:d8:11:78:57:be:85:ca:23:ed:ca: 9e:41:db:97:b6:1e:8c:82:22:fd:f9:73:f1:dd:56: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:00:2F:05:58:A4:28:CE:8C:B9:12:7E:78:6F:A2:50:1F:57:75:1C X509v3 Authority Key Identifier: keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.78.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:c2:88:bc:41:81:bd:86:1a:42:6f:8d:dc:51:17:85:7f:34: f1:31:c8:48:62:ea:e3:ab:c6:4a:53:95:56:d7:cd:0a:e1:ac: e0:66:e3:af:e1:b7:4a:62:b3:a1:ae:46:b2:99:b7:7f:9e:62: 77:21:cf:36:74:33:4c:16:d2:24:73:95:ed:1f:d1:22:d5:98: 41:c9:0f:61:90:21:18:c4:84:e1:65:5c:60:a4:81:63:50:23: d7:f6:75:40:a8:36:1b:65:d2:00:a2:2d:f9:f9:1b:27:c5:0a: d2:fa:9c:1b:15:63:62:ef:ac:a9:07:6b:13:f1:06:b1:db:68: 74:86:34:82:1e:22:42:4e:9a:94:1f:22:ee:8f:ec:1e:a1:c3: d3:09:f4:02:64:17:de:4a:2b:bd:dd:4f:fd:c6:aa:d2:6e:de: 65:4c:f2:d1:33:1d:fa:49:63:32:6a:b9:e6:0d:b2:7d:25:37: 11:e7:d8:a2:12:da:f9:53:5f:d9:12:79:9f:5a:66:cf:f7:ca: d5:fe:f7:1d:ca:f2:7e:a6:46:a6:26:d3:4e:bf:fc:66:be:26: db:01:bb:57:7c:86:6f:b5:b8:5e:3f:24:e9:c7:84:4b:a3:38: 28:c8:ef:ea:0b:cd:f7:d0:33:8c:22:94:c3:cb:c9:b6:86:c7: 09:64:bd:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQDBqpk88gqf3j6OUVfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0 ZjRlZWQwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDAwMmYwNTU4YTQyOGNlOGNiOTEyN2U3ODZmYTI1MDFmNTc3NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KtuygTktDBS1MEbETaJXp3eDRzv 4MaTOQr6NZ7OIMmGPj5T3ZgPB++o9n+QesltiMKigKN6Wbi+D1narH1Q0NZikrAJ 4V7JIOV4RopMlvr21Iw/BY3vXEXUon05N9Rbo/canc8dDDFn2vnnJCy3X4KeJi7L iZMeEvlg4DRbgHaC9KxUqEu92T50meRCMAjTJJsqAIpNVxTFf3GO/PlaXuDtThSy 9PeHR7Uw/61hYnnxsKnl/I0EmwRGbRil8pcwjkgXSU7LRwcXUYYnjDL4vE2bfVpP aV/RJPN/BMVN9FwoIPCnr9gReFe+hcoj7cqeQduXth6MgiL9+XPx3VaIIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQALwVYpCjOjLkSfnhvolAfV3UcMB8GA1UdIwQY MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt ZTE1NDRjNTdlMzhiLzEvVkFBdkJWaWtLTTZNdVJKLWVHLWlVQjlYZFJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRBOMA0G CSqGSIb3DQEBCwUAA4IBAQBLwoi8QYG9hhpCb43cUReFfzTxMchIYurjq8ZKU5VW 180K4azgZuOv4bdKYrOhrkaymbd/nmJ3Ic82dDNMFtIkc5XtH9Ei1ZhByQ9hkCEY xIThZVxgpIFjUCPX9nVAqDYbZdIAoi35+RsnxQrS+pwbFWNi76ypB2sT8Qax22h0 hjSCHiJCTpqUHyLuj+weocPTCfQCZBfeSiu93U/9xqrSbt5lTPLRMx36SWMyarnm DbJ9JTcR59iiEtr5U1/ZEnmfWmbP98rV/vcdyvJ+pkamJtNOv/xmvibbAbtXfIZv tbhePyTpx4RLozgoyO/qC8330DOMIpTDy8m2hscJZL0z -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:58 2026 by rpki-client