This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa File: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (raw, json) Hash identifier: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8= Subject key identifier: 55:32:C9:05:30:D3:21:0E:89:BB:97:BD:6E:DA:26:B5:C5:9E:2C:CA Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019B7C1258A20B784FC5F7CED0D06A23D74D Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209193 IP address blocks: 185.52.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:58:a2:0b:78:4f:c5:f7:ce:d0:d0:6a:23:d7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5532c90530d3210e89bb97bd6eda26b5c59e2cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:18:06:76:00:15:63:16:71:09:a1:e0:7b:20: d0:ef:49:ae:ac:05:f3:3f:cf:7b:08:00:43:0a:e7: 1d:76:41:4c:ac:79:13:2d:21:b2:c5:16:ba:ef:67: 09:31:80:25:1a:d2:7e:60:26:ef:33:d0:f0:4f:1f: 2f:20:bd:11:a8:65:5f:8c:97:79:c5:58:00:0b:91: 55:b1:a9:1c:d0:8e:a5:ad:27:71:1e:ff:9a:bb:4e: 11:5c:b0:83:2a:f5:e5:3c:99:ca:eb:13:cd:dd:95: 50:13:7f:1e:8f:09:93:14:3f:a9:51:a7:7a:db:05: 15:0e:31:f7:29:4f:81:7b:af:c3:8b:87:0a:f5:e0: f4:a6:1c:ce:e5:44:0f:e4:72:3e:95:f4:a3:09:89: cf:72:b9:29:5d:08:04:2a:a7:db:f5:e5:dc:e6:fd: 81:57:53:34:a8:6f:66:49:a8:b0:f4:d6:5a:7f:1d: a6:b4:ca:f1:6f:d5:5f:b9:77:5f:15:32:bf:a0:64: 90:ed:f9:51:e7:2e:1d:9c:91:84:77:91:cc:51:ef: 25:3e:a7:54:d3:37:41:97:f3:36:99:31:dc:65:71: 9a:29:1f:a1:89:4c:04:7c:a3:bc:1b:76:35:89:3d: ce:63:b4:4f:dc:77:ea:46:8d:1b:d0:2e:51:b8:f4: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:32:C9:05:30:D3:21:0E:89:BB:97:BD:6E:DA:26:B5:C5:9E:2C:CA X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.116.0/24 Signature Algorithm: sha256WithRSAEncryption 64:57:ad:5c:cc:92:cd:08:2f:a1:7e:9a:6e:b7:aa:80:96:92: 6b:eb:00:ce:48:ec:7c:91:50:00:f5:d5:37:b5:d8:11:67:4a: cb:eb:ab:e5:c0:de:01:da:74:9d:c2:83:dc:92:bf:e1:73:1d: 8c:0d:0c:65:52:d1:74:c5:66:85:42:d4:14:b1:88:12:51:41: 02:77:74:3a:13:c6:9e:dc:13:a7:7a:2e:c9:05:e4:3d:d5:aa: dd:00:0d:7c:16:3f:18:db:01:c8:d3:bb:6f:8b:f5:cb:3d:65: 22:de:c4:3d:2b:a5:7d:4b:16:ca:7b:2e:62:90:84:67:b0:e5: 7c:14:dc:57:a7:89:64:ce:14:2f:09:f4:a2:66:7e:71:74:98: 5e:6a:b4:79:c0:5f:99:e4:e4:63:52:f4:3d:b5:28:a6:7e:d6: fe:37:81:9e:13:ab:85:0e:11:25:43:af:39:79:03:2f:d8:a0: ee:93:ac:7e:cf:a2:bf:a4:11:af:05:f4:06:e1:97:99:a2:ef: ad:39:a4:b1:45:c1:55:29:6e:19:1a:4d:35:90:d7:52:18:f4: cd:a8:65:86:30:1c:01:ab:01:c7:86:d0:3e:a2:a9:c4:79:a7: cf:46:c5:c1:34:69:87:a1:95:99:fc:41:3b:83:11:99:12:3c: a5:86:ea:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EliiC3hPxffO0NBqI9dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTMyYzkwNTMwZDMyMTBlODliYjk3YmQ2ZWRhMjZiNWM1OWUyY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhgGdgAVYxZxCaHgeyDQ70murAXz P897CABDCucddkFMrHkTLSGyxRa672cJMYAlGtJ+YCbvM9DwTx8vIL0RqGVfjJd5 xVgAC5FVsakc0I6lrSdxHv+au04RXLCDKvXlPJnK6xPN3ZVQE38ejwmTFD+pUad6 2wUVDjH3KU+Be6/Di4cK9eD0phzO5UQP5HI+lfSjCYnPcrkpXQgEKqfb9eXc5v2B V1M0qG9mSaiw9NZafx2mtMrxb9VfuXdfFTK/oGSQ7flR5y4dnJGEd5HMUe8lPqdU 0zdBl/M2mTHcZXGaKR+hiUwEfKO8G3Y1iT3OY7RP3HfqRo0b0C5RuPRc3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFUyyQUw0yEOibuXvW7aJrXFnizKMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvVlRMSkJURFRJUTZKdTVlOWJ0b210Y1dlTE1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTR0MA0G CSqGSIb3DQEBCwUAA4IBAQBkV61czJLNCC+hfpput6qAlpJr6wDOSOx8kVAA9dU3 tdgRZ0rL66vlwN4B2nSdwoPckr/hcx2MDQxlUtF0xWaFQtQUsYgSUUECd3Q6E8ae 3BOnei7JBeQ91ardAA18Fj8Y2wHI07tvi/XLPWUi3sQ9K6V9SxbKey5ikIRnsOV8 FNxXp4lkzhQvCfSiZn5xdJhearR5wF+Z5ORjUvQ9tSimftb+N4GeE6uFDhElQ685 eQMv2KDuk6x+z6K/pBGvBfQG4ZeZou+tOaSxRcFVKW4ZGk01kNdSGPTNqGWGMBwB qwHHhtA+oqnEeafPRsXBNGmHoZWZ/EE7gxGZEjylhuoB -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:59 2026 by rpki-client