This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VxowdBzPqof9vzEqLjnkNBo4yck.roa File: VxowdBzPqof9vzEqLjnkNBo4yck.roa (raw, json) Hash identifier: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw= Subject key identifier: 57:1A:30:74:1C:CF:AA:87:FD:BF:31:2A:2E:39:E4:34:1A:38:C9:C9 Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019B7AC8145CF8737F435E8C96BF75F2DB48 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VxowdBzPqof9vzEqLjnkNBo4yck.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 5.253.180.0/24 maxlen: 24 2a09:58c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:14:5c:f8:73:7f:43:5e:8c:96:bf:75:f2:db:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571a30741ccfaa87fdbf312a2e39e4341a38c9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:5a:47:f9:89:9d:c5:84:31:29:13:51:89: 73:fd:47:13:fb:40:8a:9f:26:d4:b8:fe:49:5c:9d: e6:94:b4:49:38:4d:f8:7a:af:6d:d9:d3:ca:08:31: fd:83:a2:36:13:ed:eb:ac:b6:a6:69:6e:9a:92:17: f8:68:24:f0:a0:3f:21:76:39:1a:8d:6c:2a:fc:42: cb:12:64:a8:29:01:ad:a2:61:08:4a:34:80:6b:e2: 3c:5f:c3:08:cf:d7:20:10:bc:24:b4:08:62:e5:a3: 33:b0:a1:57:82:c8:b5:91:55:bf:e8:bc:9b:c1:94: 12:da:46:f4:fe:65:d3:19:ad:ae:20:a8:c5:55:21: 3a:25:13:1b:f1:7d:cb:e7:4f:35:58:4e:96:b1:c7: 6a:a6:64:05:6c:5b:a6:08:b1:84:76:84:76:b9:64: 02:e6:c6:e8:01:2e:7c:6d:33:dd:85:2e:65:ba:68: f3:92:f5:12:5e:12:9c:8d:39:5d:8f:96:bc:39:e4: 16:08:f5:af:cd:db:cd:5c:69:7d:2b:7e:cc:3c:6f: 06:99:11:dc:a0:a4:17:1e:eb:62:53:e6:38:4e:33: 82:45:c5:44:43:d6:4b:34:58:35:a6:0b:d7:31:29: 4a:d8:27:47:f7:c6:6d:0d:fb:6f:7f:7f:58:3c:89: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:30:74:1C:CF:AA:87:FD:BF:31:2A:2E:39:E4:34:1A:38:C9:C9 X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VxowdBzPqof9vzEqLjnkNBo4yck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.180.0/24 IPv6: 2a09:58c0::/48 Signature Algorithm: sha256WithRSAEncryption 60:fb:37:b9:32:6b:23:59:55:48:d0:05:2f:97:5c:94:28:00: f5:df:1d:b4:bd:10:e8:7b:4c:51:19:21:24:ed:b6:bd:12:ba: 2e:19:17:51:9a:c4:fb:0d:81:7c:ac:95:7a:35:3a:2a:f0:29: c6:89:26:f0:56:7b:7a:d3:57:04:f8:9f:36:7f:2b:4e:df:e7: ec:64:4d:6a:ef:f4:32:0a:fd:18:a1:1e:c0:80:3f:68:98:d8: 20:85:7c:bd:1b:52:9b:cf:5a:7d:47:60:54:73:3b:64:52:45: f2:3c:8b:1b:63:6c:74:17:29:dd:0e:7e:68:6a:72:e8:56:c6: dc:b3:0a:f9:56:c5:f0:4b:e6:b5:cb:e5:02:4e:90:b7:46:78: b8:23:fb:6a:0e:52:fc:45:f3:b5:a4:c1:ea:b5:04:d5:01:c6: ad:5b:53:0a:95:1c:e4:44:e4:80:c4:25:18:00:32:58:74:ff: 84:65:ea:be:3a:99:9c:d6:0c:9b:41:68:17:42:9d:89:30:35: df:78:d6:83:df:59:3c:dc:92:e8:9e:52:62:43:73:85:64:a5: 1b:b6:b0:31:d2:79:7a:3f:96:3b:bf:f7:05:73:5f:76:b4:66: 5f:f6:ea:59:c0:1a:fd:16:6b:9c:db:e3:80:97:16:31:40:96: cc:cd:7a:64 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yBRc+HN/Q16Mlr918ttIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFhMzA3NDFjY2ZhYTg3ZmRiZjMxMmEyZTM5ZTQzNDFhMzhjOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkpaR/mJncWEMSkTUYlz/UcT+0CK nybUuP5JXJ3mlLRJOE34eq9t2dPKCDH9g6I2E+3rrLamaW6akhf4aCTwoD8hdjka jWwq/ELLEmSoKQGtomEISjSAa+I8X8MIz9cgELwktAhi5aMzsKFXgsi1kVW/6Lyb wZQS2kb0/mXTGa2uIKjFVSE6JRMb8X3L5081WE6WscdqpmQFbFumCLGEdoR2uWQC 5sboAS58bTPdhS5lumjzkvUSXhKcjTldj5a8OeQWCPWvzdvNXGl9K37MPG8GmRHc oKQXHutiU+Y4TjOCRcVEQ9ZLNFg1pgvXMSlK2CdH98ZtDftvf39YPIki9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFcaMHQcz6qH/b8xKi455DQaOMnJMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvVnhvd2RCelBxb2Y5dnpFcUxqbmtOQm80eWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABf20MA8E AgACMAkDBwAqCVjAAAAwDQYJKoZIhvcNAQELBQADggEBAGD7N7kyayNZVUjQBS+X XJQoAPXfHbS9EOh7TFEZISTttr0Sui4ZF1GaxPsNgXyslXo1OirwKcaJJvBWe3rT VwT4nzZ/K07f5+xkTWrv9DIK/RihHsCAP2iY2CCFfL0bUpvPWn1HYFRzO2RSRfI8 ixtjbHQXKd0OfmhqcuhWxtyzCvlWxfBL5rXL5QJOkLdGeLgj+2oOUvxF87Wkweq1 BNUBxq1bUwqVHORE5IDEJRgAMlh0/4Rl6r46mZzWDJtBaBdCnYkwNd941oPfWTzc kuieUmJDc4VkpRu2sDHSeXo/lju/9wVzX3a0Zl/26lnAGv0Wa5zb44CXFjFAlszN emQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:28 2026 by rpki-client