This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa File: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (raw, json) Hash identifier: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI= Subject key identifier: 77:E5:63:E0:64:09:8A:A5:8F:02:12:76:4B:FF:56:26:CF:95:D2:26 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019B7B36F2B23F7673A1276431AFBB03DF3D Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa Signing time: Thu 01 Jan 2026 20:19:17 +0000 ROA not before: Thu 01 Jan 2026 20:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 193.186.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f2:b2:3f:76:73:a1:27:64:31:af:bb:03:df:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Jan 1 20:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77e563e064098aa58f0212764bff5626cf95d226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:30:8b:f1:1b:77:de:fe:76:eb:82:5d:94: 47:f2:d7:b7:f7:c1:08:3b:63:90:39:ad:c0:91:39: db:79:d4:3d:c9:3b:ef:95:94:65:59:45:11:1a:ec: a9:17:b5:de:84:90:1a:e3:25:2c:30:39:ee:22:6d: 0b:41:6b:11:a8:ca:68:5b:68:6c:50:c7:6d:01:63: ca:b7:80:cd:a3:d4:a9:1b:51:53:6d:92:a7:47:f5: 6d:87:c3:d0:0b:e8:29:5e:83:06:b9:8b:31:48:a2: 01:6b:d1:3c:3e:ee:69:f3:a8:5f:85:e0:c4:2d:df: be:d5:ed:c9:bc:b0:89:5c:3b:fe:52:44:e5:7c:8e: c9:2b:99:0a:4b:18:4f:1c:ea:9d:ac:ef:1c:26:60: 34:d0:e3:19:38:af:67:1d:0b:26:c0:7b:b4:f5:4c: ac:68:60:f2:79:2a:36:25:7f:a1:92:95:f4:d1:42: 97:7a:13:f9:d5:70:d4:82:99:a9:50:f7:56:8d:87: ac:80:d3:33:ec:e7:22:c7:f3:14:57:1d:fc:14:3c: 3f:f9:64:6f:bd:8a:89:82:c5:19:cc:41:49:03:23: 4c:e3:11:fe:0a:81:4d:92:e7:b9:97:38:fd:c2:ed: d2:37:21:7a:59:af:0b:57:3b:9e:8b:a2:b2:db:2b: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E5:63:E0:64:09:8A:A5:8F:02:12:76:4B:FF:56:26:CF:95:D2:26 X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.35.0/24 Signature Algorithm: sha256WithRSAEncryption 93:72:30:b6:5b:83:ed:04:96:f1:89:fe:9e:0c:66:3a:72:b3: 63:b6:6f:3c:70:96:87:f7:79:8c:33:05:8a:45:fd:ef:b4:38: 6c:8c:40:6a:e2:01:c0:05:a2:2c:30:c4:80:1d:57:73:44:c4: 72:53:7c:19:00:70:2a:1d:36:3d:81:68:9a:9c:b6:5b:69:23: 83:04:92:37:4f:c6:8b:ca:5d:f4:63:35:39:76:bb:a3:09:c7: 3b:d7:22:ab:b0:50:6b:a7:45:55:be:4c:c0:e9:84:02:2e:e8: df:dc:46:fa:8c:0c:eb:51:78:c4:07:94:39:ea:47:b9:f7:f8: 59:bc:1a:37:41:da:b1:45:07:dd:0a:40:8b:21:de:c6:65:d9: 31:6f:85:ba:f8:73:30:2f:61:b0:9c:d7:46:a5:8a:0e:95:2f: 2b:55:52:df:a8:4d:0c:20:c9:0b:58:0f:72:b7:e3:02:bc:da: 64:88:95:36:ec:e4:9d:cb:98:ad:66:a4:bd:df:f3:24:c7:36: 5d:5f:67:84:d9:7d:0e:96:a7:8c:3f:d9:d0:5c:34:2c:9b:68: 49:ad:b9:d7:9d:53:b9:f7:93:f8:c9:46:8f:a2:9a:e8:9c:9f: 37:91:3b:3d:d4:d8:b2:13:1e:ba:60:05:2b:ea:8c:e1:d5:9a: 38:6a:87:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NvKyP3ZzoSdkMa+7A989MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjYwMTAxMjAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2U1NjNlMDY0MDk4YWE1OGYwMjEyNzY0YmZmNTYyNmNmOTVkMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wAwi/Ebd97+duuCXZRH8te398EI O2OQOa3AkTnbedQ9yTvvlZRlWUURGuypF7XehJAa4yUsMDnuIm0LQWsRqMpoW2hs UMdtAWPKt4DNo9SpG1FTbZKnR/Vth8PQC+gpXoMGuYsxSKIBa9E8Pu5p86hfheDE Ld++1e3JvLCJXDv+UkTlfI7JK5kKSxhPHOqdrO8cJmA00OMZOK9nHQsmwHu09Uys aGDyeSo2JX+hkpX00UKXehP51XDUgpmpUPdWjYesgNMz7Ocix/MUVx38FDw/+WRv vYqJgsUZzEFJAyNM4xH+CoFNkue5lzj9wu3SNyF6Wa8LVzuei6Ky2yso0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHflY+BkCYqljwISdkv/VibPldImMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvZC1WajRHUUppcVdQQWhKMlNfOVdKcy1WMGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbojMA0G CSqGSIb3DQEBCwUAA4IBAQCTcjC2W4PtBJbxif6eDGY6crNjtm88cJaH93mMMwWK Rf3vtDhsjEBq4gHABaIsMMSAHVdzRMRyU3wZAHAqHTY9gWianLZbaSODBJI3T8aL yl30YzU5drujCcc71yKrsFBrp0VVvkzA6YQCLujf3Eb6jAzrUXjEB5Q56ke59/hZ vBo3QdqxRQfdCkCLId7GZdkxb4W6+HMwL2GwnNdGpYoOlS8rVVLfqE0MIMkLWA9y t+MCvNpkiJU27OSdy5itZqS93/MkxzZdX2eE2X0OlqeMP9nQXDQsm2hJrbnXnVO5 95P4yUaPopronJ83kTs91NiyEx66YAUr6ozh1Zo4aoea -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:29 2026 by rpki-client