This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ve-gDBnO_hQxbRMOHyYvPAGjXiQ.roa File: Ve-gDBnO_hQxbRMOHyYvPAGjXiQ.roa (raw, json) Hash identifier: +V1VbVhqv923l0IyzbEbwCvnKQ0rw1QKxVCalSm1lYc= Subject key identifier: 55:EF:A0:0C:19:CE:FE:14:31:6D:13:0E:1F:26:2F:3C:01:A3:5E:24 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C760F95C7DF9844A19A3671D970418 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ve-gDBnO_hQxbRMOHyYvPAGjXiQ.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24913 IP address blocks: 213.172.3.0/24 maxlen: 24 217.195.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:f9:5c:7d:f9:84:4a:19:a3:67:1d:97:04:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55efa00c19cefe14316d130e1f262f3c01a35e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:fe:03:28:61:0d:64:d4:c6:42:7a:40:62: ec:8b:89:ac:a9:e3:c5:5e:b8:7c:38:fc:02:b4:c5: 31:34:f7:d7:e0:9d:af:fd:d9:9b:ec:99:17:a0:c5: 20:06:fe:de:a6:18:f9:c9:6d:94:50:70:3a:12:08: af:49:69:49:70:f0:4c:36:d1:62:8c:6b:5b:63:28: aa:d5:fd:41:32:39:58:ed:98:4a:e7:82:1e:2b:f1: c8:d9:2c:ba:07:b0:9e:ad:e5:53:ce:13:fe:c6:94: 1d:50:bd:cf:3b:8e:6c:fc:22:97:36:62:21:80:16: b2:8a:d2:d1:b4:df:a6:c5:84:c1:ba:ef:c1:7b:4e: b9:dc:6b:e5:46:57:af:9c:f1:04:34:12:25:9f:0b: 4d:d4:11:4c:ba:c5:8d:62:08:d8:be:89:4a:c5:31: 73:6b:ea:5c:4f:d0:78:ca:d7:6f:be:bb:33:ba:df: d2:5a:9b:48:28:aa:c6:fa:f8:26:1e:73:95:a4:7a: b4:3d:4d:11:fd:29:04:d0:97:41:ab:8f:26:9f:cf: 1c:4c:bd:dd:2a:64:70:45:fa:90:81:9e:c4:18:33: 6d:f1:e2:f2:e8:53:fe:e6:27:41:20:75:e0:ea:2b: 2a:04:81:2c:5e:21:2e:92:43:f8:80:b4:87:af:b8: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:A0:0C:19:CE:FE:14:31:6D:13:0E:1F:26:2F:3C:01:A3:5E:24 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ve-gDBnO_hQxbRMOHyYvPAGjXiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.172.3.0/24 217.195.86.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:07:2c:e4:e7:96:17:03:6c:56:d8:fe:a3:8c:72:41:65:04: 54:93:f5:06:3a:e0:ab:52:c6:4e:c2:b5:d4:c7:d7:a0:6e:78: 94:d9:41:f0:ed:ce:c9:ea:16:5a:72:ba:52:07:51:28:28:2f: 6d:a5:e9:ff:9a:1e:cc:e5:19:bc:36:39:c2:76:83:22:26:bb: e8:15:ab:04:db:0d:16:ea:84:4e:55:e1:30:3e:89:dd:9e:5f: 4f:28:9f:64:f6:d9:40:79:c5:4f:8e:32:24:8b:82:12:72:38: 27:c5:ed:ca:11:62:78:e0:2c:ea:e3:c8:0e:c1:41:0a:97:ca: 91:f1:c4:cb:7c:05:c0:1c:47:ef:59:ef:5e:f8:d6:d5:16:46: 51:51:c2:84:b5:b9:01:c3:39:a2:a3:63:68:fd:0a:4c:82:2f: 18:c6:4f:84:50:3f:3a:79:ab:0e:91:a8:65:52:eb:dc:cb:e4: fd:83:50:ff:cf:62:0e:90:88:fd:b0:77:79:75:28:4e:5e:0d: 43:85:51:e5:27:82:0f:16:ad:fd:07:aa:04:62:ef:bc:cc:c7: be:36:53:68:60:9a:22:28:31:f6:96:6b:ba:dd:d6:26:20:0c: bc:86:e6:05:e6:1d:91:b7:4a:42:9d:8e:5e:fb:cf:aa:99:d7: de:d2:55:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2D5XH35hEoZo2cdlwQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWVmYTAwYzE5Y2VmZTE0MzE2ZDEzMGUxZjI2MmYzYzAxYTM1ZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mj+AyhhDWTUxkJ6QGLsi4msqePF Xrh8OPwCtMUxNPfX4J2v/dmb7JkXoMUgBv7ephj5yW2UUHA6EgivSWlJcPBMNtFi jGtbYyiq1f1BMjlY7ZhK54IeK/HI2Sy6B7CereVTzhP+xpQdUL3PO45s/CKXNmIh gBayitLRtN+mxYTBuu/Be0653GvlRlevnPEENBIlnwtN1BFMusWNYgjYvolKxTFz a+pcT9B4ytdvvrszut/SWptIKKrG+vgmHnOVpHq0PU0R/SkE0JdBq48mn88cTL3d KmRwRfqQgZ7EGDNt8eLy6FP+5idBIHXg6isqBIEsXiEukkP4gLSHr7jP8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFXvoAwZzv4UMW0TDh8mLzwBo14kMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvVmUtZ0RCbk9faFF4YlJNT0h5WXZQQUdqWGlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1awDAwQA 2cNWMA0GCSqGSIb3DQEBCwUAA4IBAQAPByzk55YXA2xW2P6jjHJBZQRUk/UGOuCr UsZOwrXUx9egbniU2UHw7c7J6hZacrpSB1EoKC9tpen/mh7M5Rm8NjnCdoMiJrvo FasE2w0W6oROVeEwPondnl9PKJ9k9tlAecVPjjIki4IScjgnxe3KEWJ44Czq48gO wUEKl8qR8cTLfAXAHEfvWe9e+NbVFkZRUcKEtbkBwzmio2No/QpMgi8Yxk+EUD86 easOkahlUuvcy+T9g1D/z2IOkIj9sHd5dShOXg1DhVHlJ4IPFq39B6oEYu+8zMe+ NlNoYJoiKDH2lmu63dYmIAy8huYF5h2Rt0pCnY5e+8+qmdfe0lWJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client