This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/VV6hLMuA5FAt5lW025-WXEyo20U.roa File: VV6hLMuA5FAt5lW025-WXEyo20U.roa (raw, json) Hash identifier: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo= Subject key identifier: 55:5E:A1:2C:CB:80:E4:50:2D:E6:55:B4:DB:9F:96:5C:4C:A8:DB:45 Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Certificate serial: 019B7C7F9B9D0EFF608ABA4BAA1550850167 Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/VV6hLMuA5FAt5lW025-WXEyo20U.roa Signing time: Fri 02 Jan 2026 02:18:16 +0000 ROA not before: Fri 02 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60893 IP address blocks: 178.211.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:9b:9d:0e:ff:60:8a:ba:4b:aa:15:50:85:01:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Validity Not Before: Jan 2 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=555ea12ccb80e4502de655b4db9f965c4ca8db45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:4e:c5:f9:f4:6d:18:8d:6e:94:d7:94:e2: 3e:0b:1c:56:92:dc:9c:0d:88:80:71:5c:d4:90:d5: 51:44:d4:15:79:3e:e1:65:5e:92:0d:6b:41:fb:3e: 81:c1:25:c4:31:69:65:d3:76:e3:db:fe:c7:bd:d3: 93:d7:fe:52:18:e4:f0:eb:9d:4f:b6:73:9b:bd:59: 8e:d6:ba:8e:57:c3:9f:cc:fb:fa:c6:00:a8:4e:7f: 4c:54:f2:49:75:f6:08:bd:7a:32:4d:09:1a:4c:5b: 74:a1:68:e8:b3:12:1a:7a:44:7e:03:97:7a:6c:03: e4:f9:1f:f2:e8:a6:eb:f9:14:1f:a0:f8:77:bd:20: 56:c4:bd:73:a9:74:51:ac:cf:00:a2:29:46:d9:6c: 88:ce:db:85:da:4f:f2:e9:59:77:4c:8b:70:d8:d7: e2:50:3b:13:3a:d1:1f:da:eb:60:01:8d:46:75:68: 27:07:76:0e:72:72:33:32:3c:07:87:52:ed:f1:e8: 42:11:ed:f7:ae:21:5f:2d:57:d2:26:76:20:75:30: 2f:00:8a:b5:f8:48:5e:31:7c:16:80:dd:04:b3:a1: 5c:59:c2:6a:c0:3c:e2:0c:e2:2e:dc:72:ae:85:09: fc:c9:3d:7b:a0:b6:6a:93:a1:62:0d:b0:32:f9:5f: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:A1:2C:CB:80:E4:50:2D:E6:55:B4:DB:9F:96:5C:4C:A8:DB:45 X509v3 Authority Key Identifier: keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/VV6hLMuA5FAt5lW025-WXEyo20U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.138.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:5d:e4:bc:28:40:1d:b3:d0:aa:26:c8:43:f8:ca:73:97:ac: 40:aa:df:ff:86:60:34:fe:78:1d:c4:63:b6:0a:b1:70:80:51: 97:ca:f6:82:73:6c:a9:4f:53:83:c3:7a:23:c0:fb:de:a9:90: fb:8b:a2:c8:e6:61:39:50:2f:9a:58:9b:2d:d1:22:f0:d1:47: 2c:03:e4:1d:4d:8b:6b:46:b1:da:27:dc:03:82:c7:d7:5a:8b: d6:fd:2b:e4:46:30:3a:24:85:fa:af:62:57:c9:3a:31:7b:a7: 5b:52:13:68:1f:45:a2:68:19:10:47:8e:d6:05:f9:16:a1:8f: 3a:9e:f3:93:17:f2:44:85:0e:16:2f:ee:12:01:e1:ff:a3:94: 3c:a8:15:22:f3:c6:85:64:a6:b1:b3:9f:67:01:23:c3:b6:c5: e3:de:fc:aa:69:d1:d5:32:41:43:64:20:94:c3:69:ce:7a:2b: 89:f0:85:2f:aa:51:d4:b9:1b:f1:3e:0c:05:da:45:e2:f3:f8: 50:d6:1a:53:7b:93:3f:a6:ac:67:cf:16:8f:fd:b5:d8:db:aa: b6:4f:52:1f:11:bc:a2:01:55:e3:e7:ec:62:2d:e5:4e:e2:cc: fe:2d:9c:66:2d:97:b0:56:b2:d8:77:a9:86:5e:bd:ff:89:af: 05:18:16:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f5udDv9girpLqhVQhQFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2M0ZjJiMzYyMTQ5OGIyYjEyYmM5M2U1NmU2OTgwYzJj NmRjODgwHhcNMjYwMTAyMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTVlYTEyY2NiODBlNDUwMmRlNjU1YjRkYjlmOTY1YzRjYThkYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxllOxfn0bRiNbpTXlOI+CxxWktyc DYiAcVzUkNVRRNQVeT7hZV6SDWtB+z6BwSXEMWll03bj2/7HvdOT1/5SGOTw651P tnObvVmO1rqOV8OfzPv6xgCoTn9MVPJJdfYIvXoyTQkaTFt0oWjosxIaekR+A5d6 bAPk+R/y6Kbr+RQfoPh3vSBWxL1zqXRRrM8AoilG2WyIztuF2k/y6Vl3TItw2Nfi UDsTOtEf2utgAY1GdWgnB3YOcnIzMjwHh1Lt8ehCEe33riFfLVfSJnYgdTAvAIq1 +EheMXwWgN0Es6FcWcJqwDziDOIu3HKuhQn8yT17oLZqk6FiDbAy+V+YIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFVeoSzLgORQLeZVtNufllxMqNtFMB8GA1UdIwQY MBaAFEHMTys2IUmLKxK8k+VuaYDCxtyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGIt YTljNWVlZDg1YmE3LzEvVlY2aExNdUE1RkF0NWxXMDI1LVdYRXlvMjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGItYTljNWVlZDg1YmE3 LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOKMA0G CSqGSIb3DQEBCwUAA4IBAQAuXeS8KEAds9CqJshD+Mpzl6xAqt//hmA0/ngdxGO2 CrFwgFGXyvaCc2ypT1ODw3ojwPveqZD7i6LI5mE5UC+aWJst0SLw0UcsA+QdTYtr RrHaJ9wDgsfXWovW/SvkRjA6JIX6r2JXyToxe6dbUhNoH0WiaBkQR47WBfkWoY86 nvOTF/JEhQ4WL+4SAeH/o5Q8qBUi88aFZKaxs59nASPDtsXj3vyqadHVMkFDZCCU w2nOeiuJ8IUvqlHUuRvxPgwF2kXi8/hQ1hpTe5M/pqxnzxaP/bXY26q2T1IfEbyi AVXj5+xiLeVO4sz+LZxmLZewVrLYd6mGXr3/ia8FGBZY -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:15 2026 by rpki-client