This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/VcFoEEh31jZuhpy4eun_Hj-dma8.roa File: VcFoEEh31jZuhpy4eun_Hj-dma8.roa (raw, json) Hash identifier: mbX6NMnSp6JT7rNp55SfsGeTE0wIj+qPbFrQAy6TmYw= Subject key identifier: 55:C1:68:10:48:77:D6:36:6E:86:9C:B8:7A:E9:FF:1E:3F:9D:99:AF Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Certificate serial: 019B79EC914ACA0477B4EC77E3F51702812E Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/VcFoEEh31jZuhpy4eun_Hj-dma8.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 185.63.152.0/22 maxlen: 24 185.84.140.0/22 maxlen: 24 185.103.172.0/22 maxlen: 24 2a03:7e0::/32 maxlen: 64 2a05:a640::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:91:4a:ca:04:77:b4:ec:77:e3:f5:17:02:81:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c168104877d6366e869cb87ae9ff1e3f9d99af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:f0:bc:c5:26:c2:b7:f9:58:dc:ff:83:0d: da:d5:5d:81:29:b6:90:80:14:74:b0:f5:e7:26:18: 9d:78:1e:11:18:ea:1c:b9:b3:4a:e6:85:b8:a7:c1: ae:52:3d:4e:5e:bb:41:33:d0:c9:5e:06:65:b9:8c: c8:65:72:3c:92:5a:f1:92:83:17:26:e5:82:f6:eb: 9f:77:59:70:96:6d:f0:9d:bc:e0:4e:a7:b8:a0:64: 0c:91:5d:0d:c3:9d:1f:02:81:b8:bd:a4:ef:fe:ad: 8b:53:c0:19:ff:7b:6a:06:2a:16:93:1c:e4:9f:11: 13:4c:1c:d3:2b:51:da:45:20:67:34:97:c2:16:ee: 70:dd:f0:fc:fc:83:10:38:b1:d1:2d:c3:3a:97:05: 03:27:3c:43:39:2c:63:47:c1:76:7f:ef:70:d8:51: b1:0f:50:55:e0:ac:ea:d3:43:8e:6d:b4:de:d3:25: e6:c6:61:05:7c:7c:ed:d3:13:ba:02:81:ff:30:b4: a9:d4:a0:40:52:e1:b6:9f:cf:60:06:40:5d:30:1c: d4:39:f7:ee:ad:25:f9:0a:73:60:8d:ce:86:e5:23: c3:f2:86:a8:91:90:3d:1a:e8:4c:77:bc:d8:a7:21: 34:2f:55:42:dd:e5:6b:c5:f2:11:fa:d6:0d:b3:d5: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C1:68:10:48:77:D6:36:6E:86:9C:B8:7A:E9:FF:1E:3F:9D:99:AF X509v3 Authority Key Identifier: keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/VcFoEEh31jZuhpy4eun_Hj-dma8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.152.0/22 185.84.140.0/22 185.103.172.0/22 IPv6: 2a03:7e0::/32 2a05:a640::/29 Signature Algorithm: sha256WithRSAEncryption 13:a7:67:09:05:82:14:6e:98:aa:cb:5c:2d:f0:a2:ae:d5:92: 8d:f5:02:88:56:8a:f4:91:51:b5:42:64:7e:c1:8d:b0:e4:49: a0:c5:fd:e6:4e:ab:bb:06:4e:ec:92:2f:3d:6a:68:b4:e7:72: 79:cf:7c:ac:79:b0:3c:b9:a1:96:06:c0:39:6e:59:93:33:f9: e8:3c:43:10:6f:05:01:d0:ce:43:5f:0e:94:1f:80:9f:68:18: 09:18:0d:fa:62:53:e8:fa:77:72:f8:bd:d1:bc:44:ad:a9:a0: 41:3f:18:35:c5:fd:ca:b0:2c:cc:38:a0:77:2f:0f:9d:d3:ba: aa:c4:74:35:ea:6d:fa:a3:4b:bb:06:ef:61:46:f1:2a:8b:30: e7:9c:df:a3:db:c0:f3:03:82:78:cf:e3:00:49:61:b6:6f:e0: a7:32:5b:bb:3e:42:47:1e:4d:09:b0:b6:30:a6:22:00:59:1e: 0d:0e:44:40:2f:d0:d4:2c:65:b2:ba:75:4f:0d:9b:b1:0a:67: 26:19:82:2b:7a:af:80:8a:36:74:75:4b:04:c0:c3:b0:8a:4f: 15:05:ec:f2:66:b5:80:3d:a8:f4:d6:42:a6:03:bc:0d:d7:cd: 85:27:db:69:19:be:0f:5a:fd:38:79:f2:be:5f:73:68:f2:dd: 47:db:22:26 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt57JFKygR3tOx34/UXAoEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl Zjg4NTcwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWMxNjgxMDQ4NzdkNjM2NmU4NjljYjg3YWU5ZmYxZTNmOWQ5OWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA217wvMUmwrf5WNz/gw3a1V2BKbaQ gBR0sPXnJhideB4RGOocubNK5oW4p8GuUj1OXrtBM9DJXgZluYzIZXI8klrxkoMX JuWC9uufd1lwlm3wnbzgTqe4oGQMkV0Nw50fAoG4vaTv/q2LU8AZ/3tqBioWkxzk nxETTBzTK1HaRSBnNJfCFu5w3fD8/IMQOLHRLcM6lwUDJzxDOSxjR8F2f+9w2FGx D1BV4Kzq00OObbTe0yXmxmEFfHzt0xO6AoH/MLSp1KBAUuG2n89gBkBdMBzUOffu rSX5CnNgjc6G5SPD8oaokZA9GuhMd7zYpyE0L1VC3eVrxfIR+tYNs9UKaQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFFXBaBBId9Y2boacuHrp/x4/nZmvMB8GA1UdIwQY MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt MzI5MzZjM2E0YTlkLzEvVmNGb0VFaDMxalp1aHB5NGV1bl9Iai1kbWE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuT+YAwQC uVSMAwQCuWesMBQEAgACMA4DBQAqAwfgAwUDKgWmQDANBgkqhkiG9w0BAQsFAAOC AQEAE6dnCQWCFG6YqstcLfCirtWSjfUCiFaK9JFRtUJkfsGNsORJoMX95k6ruwZO 7JIvPWpotOdyec98rHmwPLmhlgbAOW5ZkzP56DxDEG8FAdDOQ18OlB+An2gYCRgN +mJT6Pp3cvi90bxEramgQT8YNcX9yrAszDigdy8PndO6qsR0Nept+qNLuwbvYUbx Kosw55zfo9vA8wOCeM/jAElhtm/gpzJbuz5CRx5NCbC2MKYiAFkeDQ5EQC/Q1Cxl srp1Tw2bsQpnJhmCK3qvgIo2dHVLBMDDsIpPFQXs8ma1gD2o9NZCpgO8DdfNhSfb aRm+D1r9OHnyvl9zaPLdR9siJg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:52 2026 by rpki-client