This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vgFc0Uh_MgrlizJZvhlwuychk-E.roa File: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (raw, json) Hash identifier: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg= Subject key identifier: BE:01:5C:D1:48:7F:32:0A:E5:8B:32:59:BE:19:70:BB:27:21:93:E1 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF278E1D27ABDFF327482C39AC05C3A Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vgFc0Uh_MgrlizJZvhlwuychk-E.roa Signing time: Fri 02 Jan 2026 18:22:35 +0000 ROA not before: Fri 02 Jan 2026 18:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204281 IP address blocks: 194.12.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:78:e1:d2:7a:bd:ff:32:74:82:c3:9a:c0:5c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be015cd1487f320ae58b3259be1970bb272193e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:17:db:ac:b5:66:d9:c5:40:d3:86:4b:5f:08: 71:e2:a9:ab:87:ae:09:bb:f0:a7:d0:61:b9:a6:99: b6:3b:60:8e:1f:63:c3:aa:c8:03:8d:11:5b:71:d0: 76:61:7b:0a:47:0e:a8:30:60:c5:85:1e:19:2e:a4: 9c:58:f2:f3:cc:2f:9b:6b:0b:1a:bc:fd:b4:8f:ca: fe:d5:b0:f3:34:d3:51:cf:8e:02:2f:aa:b8:bf:6d: 1b:f6:49:33:06:52:d7:0b:72:c2:ac:79:38:47:fc: 05:01:67:a8:af:6c:37:0b:2d:65:2e:e5:92:14:26: 39:51:00:04:c9:12:b1:3e:d8:1c:9c:b7:bd:4b:3a: b5:42:c8:da:a0:df:8b:27:3d:59:42:57:62:4e:d5: 63:53:44:67:9f:7f:2a:cf:fb:a5:03:4d:ae:32:b4: fd:fa:c3:a3:18:4f:08:c1:4e:80:03:a5:96:6a:8c: 8b:35:d9:c0:2e:95:97:8e:f5:47:6f:9a:90:81:c7: 3b:91:39:8a:b3:36:90:37:21:3f:fd:45:19:8b:23: a9:6a:33:8d:be:73:d7:65:36:0b:25:6f:9a:8f:77: f7:2c:f4:62:3e:b2:53:55:15:5c:f0:5d:3a:78:14: d3:bd:70:70:b8:8d:27:5b:1a:c4:1b:e4:c8:1a:ad: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:01:5C:D1:48:7F:32:0A:E5:8B:32:59:BE:19:70:BB:27:21:93:E1 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vgFc0Uh_MgrlizJZvhlwuychk-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.12.237.0/24 Signature Algorithm: sha256WithRSAEncryption 00:38:ed:9f:2a:24:ea:4d:19:6d:95:31:81:65:15:e6:4f:7e: 94:b2:57:ee:81:77:b3:c9:91:81:2a:66:a6:9d:de:49:3b:21: ae:f5:8d:1d:a8:ba:f8:6e:05:d3:24:20:4f:2a:3e:c7:5d:d5: 02:e2:34:d1:07:d7:4b:a2:18:4d:ec:85:d0:f5:e5:f1:f7:cd: f4:1e:c4:3e:e1:60:1e:1e:ca:cc:d1:9d:00:bf:a9:9d:ba:63: 2d:49:17:07:6d:ac:0e:09:25:7f:32:a6:24:a9:ff:53:bd:b0: 4d:5c:4a:b8:e9:79:04:ec:e9:75:87:eb:de:f5:34:89:e7:80: a1:77:8c:29:82:81:13:c9:04:30:61:7a:fd:a7:65:bb:dc:ae: e5:73:c8:e3:2a:73:9e:d4:99:6e:a9:6c:9e:fb:3c:6a:a3:f1: 00:b8:59:30:d9:99:b6:1d:ec:dd:60:66:75:8c:14:c6:2a:5a: c6:2b:8c:65:d9:cf:dc:85:29:d5:d4:af:67:d1:33:60:ca:4f: cb:83:d7:a8:f1:53:87:21:61:ba:0a:39:c1:74:81:b5:5a:35: 81:de:4f:17:31:7f:70:82:ad:0f:60:90:db:8f:de:c3:3d:a3: 04:74:ae:4a:6a:48:87:5b:f8:75:a0:f9:8c:41:6a:fa:7f:a8: f3:1a:e3:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8njh0nq9/zJ0gsOawFw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTAxNWNkMTQ4N2YzMjBhZTU4YjMyNTliZTE5NzBiYjI3MjE5M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RfbrLVm2cVA04ZLXwhx4qmrh64J u/Cn0GG5ppm2O2COH2PDqsgDjRFbcdB2YXsKRw6oMGDFhR4ZLqScWPLzzC+bawsa vP20j8r+1bDzNNNRz44CL6q4v20b9kkzBlLXC3LCrHk4R/wFAWeor2w3Cy1lLuWS FCY5UQAEyRKxPtgcnLe9Szq1QsjaoN+LJz1ZQldiTtVjU0Rnn38qz/ulA02uMrT9 +sOjGE8IwU6AA6WWaoyLNdnALpWXjvVHb5qQgcc7kTmKszaQNyE//UUZiyOpajON vnPXZTYLJW+aj3f3LPRiPrJTVRVc8F06eBTTvXBwuI0nWxrEG+TIGq2xzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL4BXNFIfzIK5YsyWb4ZcLsnIZPhMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvdmdGYzBVaF9NZ3JsaXpKWnZobHd1eWNoay1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgztMA0G CSqGSIb3DQEBCwUAA4IBAQAAOO2fKiTqTRltlTGBZRXmT36UslfugXezyZGBKmam nd5JOyGu9Y0dqLr4bgXTJCBPKj7HXdUC4jTRB9dLohhN7IXQ9eXx9830HsQ+4WAe HsrM0Z0Av6mdumMtSRcHbawOCSV/MqYkqf9TvbBNXEq46XkE7Ol1h+ve9TSJ54Ch d4wpgoETyQQwYXr9p2W73K7lc8jjKnOe1JluqWye+zxqo/EAuFkw2Zm2HezdYGZ1 jBTGKlrGK4xl2c/chSnV1K9n0TNgyk/Lg9eo8VOHIWG6CjnBdIG1WjWB3k8XMX9w gq0PYJDbj97DPaMEdK5KakiHW/h1oPmMQWr6f6jzGuPp -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:29 2026 by rpki-client