This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa File: VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa (raw, json) Hash identifier: DJIAA47Hj5H0/8WK2sFz3aZBYGT+yJ5AlaBSOLy7SpY= Subject key identifier: 55:C2:05:BB:87:EB:F2:99:BA:14:B2:14:8E:63:BB:D0:62:32:67:EB Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Certificate serial: 019B79ED1ED17CCF0170D37ABE3D75B58AC3 Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202757 IP address blocks: 185.255.216.0/24 maxlen: 24 185.255.217.0/24 maxlen: 24 185.255.218.0/24 maxlen: 24 185.255.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1e:d1:7c:cf:01:70:d3:7a:be:3d:75:b5:8a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c205bb87ebf299ba14b2148e63bbd0623267eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:cd:7e:a5:13:ff:24:71:3f:25:28:88:2f: c1:23:ef:18:d2:29:04:e3:2e:d1:9f:a0:27:fb:14: 35:22:31:97:7b:63:24:13:30:f6:c7:4a:ad:7e:76: 5b:4a:e9:64:49:f2:da:75:9f:cc:48:18:5e:3a:31: 19:e8:0d:4b:71:de:1a:e6:8f:a8:8c:0f:ad:d0:50: 7f:f7:eb:ff:48:b3:d1:11:a5:fa:a1:52:3d:d0:f0: 63:97:43:4a:c0:45:33:25:fd:35:c7:38:29:25:53: cf:4d:0b:e8:1f:88:4d:aa:53:d1:a0:55:56:d7:2d: 00:0f:45:e1:79:f3:31:89:d6:f3:98:9e:17:b7:6d: 01:2f:d2:1a:3d:52:ef:b1:00:22:9b:8e:81:01:2b: 55:11:25:ac:d3:bf:4c:ad:eb:ab:d9:1f:8e:11:46: 2c:6f:a4:8b:2b:48:67:57:10:e5:81:45:f5:d1:7d: dc:38:d6:04:0c:35:fa:d1:1b:f8:4b:95:b6:2a:3c: 66:b0:70:ba:d1:ce:79:01:ce:5f:14:a4:35:0a:78: 9e:d7:db:24:ca:a0:15:94:6f:c9:84:c4:0a:a6:cb: 7d:97:36:d5:3f:77:36:8f:b0:bf:e6:53:7b:e0:89: f0:b3:c5:35:46:6f:f3:93:ba:77:f2:59:e0:cb:bb: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C2:05:BB:87:EB:F2:99:BA:14:B2:14:8E:63:BB:D0:62:32:67:EB X509v3 Authority Key Identifier: keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.216.0/22 Signature Algorithm: sha256WithRSAEncryption 88:6a:1b:9b:54:4a:fb:f4:43:d4:5e:05:7c:14:18:84:d2:20: b9:57:e9:f5:65:e3:20:fa:4a:26:1b:aa:56:e4:60:0b:a8:08: 55:d5:7b:69:1c:78:02:a7:e6:a5:1b:02:92:60:59:e3:8f:76: 21:9c:d5:6a:9c:6f:a7:5f:15:34:62:63:1d:c5:2b:62:99:89: 31:50:e0:dd:02:32:2b:6f:11:75:d8:3f:eb:1f:76:ad:d7:90: 0c:d3:33:d0:2c:cc:ff:89:ec:d8:71:ef:f9:1e:7b:cd:af:be: 5b:6e:0c:ec:d1:ca:a7:43:de:68:cb:94:d2:d3:de:09:0e:42: 1b:55:16:e0:d9:4c:39:26:92:6d:e1:31:cb:04:10:8a:c6:52: 31:0a:c9:97:1b:44:0e:4a:57:ed:e1:72:d5:f6:b6:e8:a7:da: 5a:a3:86:5e:10:9e:e9:1a:4c:a4:6e:78:c9:e4:ae:50:c1:be: da:0a:b3:56:54:98:13:e6:e5:89:62:7d:d0:d0:e9:0a:b7:e8: 08:ee:02:db:1c:4a:ff:a8:d6:2c:98:10:74:70:cb:b5:6f:fb: ed:32:c3:bc:7f:21:78:38:4b:c1:39:4c:3c:3f:e1:16:fd:6d: 9f:8b:49:58:09:24:d8:74:f1:90:d0:3c:71:67:e9:53:6d:bb: 8f:f4:ca:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R7RfM8BcNN6vj11tYrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTZkMjVmMWZkZDAwZGM4MGRkNmQyMjViMjExMTliZjIx MjFlODkwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWMyMDViYjg3ZWJmMjk5YmExNGIyMTQ4ZTYzYmJkMDYyMzI2N2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNrNfqUT/yRxPyUoiC/BI+8Y0ikE 4y7Rn6An+xQ1IjGXe2MkEzD2x0qtfnZbSulkSfLadZ/MSBheOjEZ6A1Lcd4a5o+o jA+t0FB/9+v/SLPREaX6oVI90PBjl0NKwEUzJf01xzgpJVPPTQvoH4hNqlPRoFVW 1y0AD0XhefMxidbzmJ4Xt20BL9IaPVLvsQAim46BAStVESWs079Mreur2R+OEUYs b6SLK0hnVxDlgUX10X3cONYEDDX60Rv4S5W2KjxmsHC60c55Ac5fFKQ1Cnie19sk yqAVlG/JhMQKpst9lzbVP3c2j7C/5lN74Inws8U1Rm/zk7p38lngy7uAAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFXCBbuH6/KZuhSyFI5ju9BiMmfrMB8GA1UdIwQY MBaAFMJW0l8f3QDcgN1tIlshEZvyEh6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMt Y2YzMmEwZDkyODI1LzEvVmNJRnU0ZnI4cG02RkxJVWptTzcwR0l5Wi1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMtY2YzMmEwZDkyODI1 LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf/YMA0G CSqGSIb3DQEBCwUAA4IBAQCIahubVEr79EPUXgV8FBiE0iC5V+n1ZeMg+komG6pW 5GALqAhV1XtpHHgCp+alGwKSYFnjj3YhnNVqnG+nXxU0YmMdxStimYkxUODdAjIr bxF12D/rH3at15AM0zPQLMz/iezYce/5HnvNr75bbgzs0cqnQ95oy5TS094JDkIb VRbg2Uw5JpJt4THLBBCKxlIxCsmXG0QOSlft4XLV9rbop9pao4ZeEJ7pGkykbnjJ 5K5Qwb7aCrNWVJgT5uWJYn3Q0OkKt+gI7gLbHEr/qNYsmBB0cMu1b/vtMsO8fyF4 OEvBOUw8P+EW/W2fi0lYCSTYdPGQ0DxxZ+lTbbuP9MpN -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:37 2026 by rpki-client