This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/VCo9Gy3ac0ijwbWb-rW2CLlkx4k.roa File: VCo9Gy3ac0ijwbWb-rW2CLlkx4k.roa (raw, json) Hash identifier: UpkeZzua3g2qypyZlQaUvnR0XOXOnRimcQWmDDMRGzE= Subject key identifier: 54:2A:3D:1B:2D:DA:73:48:A3:C1:B5:9B:FA:B5:B6:08:B9:64:C7:89 Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019B7F14BE74D752D2DCF4F607AFACBE1168 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/VCo9Gy3ac0ijwbWb-rW2CLlkx4k.roa Signing time: Fri 02 Jan 2026 14:20:24 +0000 ROA not before: Fri 02 Jan 2026 14:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200220 IP address blocks: 63.251.122.0/24 maxlen: 24 162.248.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:be:74:d7:52:d2:dc:f4:f6:07:af:ac:be:11:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=542a3d1b2dda7348a3c1b59bfab5b608b964c789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:f3:d8:f8:40:33:aa:ca:83:c4:30:de:a7: 1b:ff:7a:f8:29:da:06:d6:d4:ff:03:8d:6d:67:14: 7e:aa:99:f1:04:e4:cb:09:36:a8:4c:7d:bd:ad:47: 04:88:3c:4f:ad:62:48:04:46:af:a1:e5:cd:16:82: 74:56:93:10:5f:14:11:b8:88:9d:b8:64:61:30:4d: 0c:fe:7c:35:2f:1a:9e:e7:40:cd:01:e5:3b:c8:1f: 2c:a7:4a:a6:18:41:b2:c8:3c:0e:a3:ca:92:04:bc: 78:2b:51:ad:2c:60:43:94:5c:55:7c:07:42:69:f3: ab:b3:03:fa:ab:01:75:cc:f6:7e:79:a4:b6:65:f0: 3b:68:94:b8:77:50:64:7c:53:29:cb:52:dc:04:5d: 85:90:2b:a8:b0:e6:29:d9:81:53:43:a6:af:db:79: 10:72:49:84:c8:70:cd:88:df:5b:9c:fc:75:41:92: 94:78:9f:62:d9:68:41:63:f4:19:33:50:ee:8e:22: 4a:7f:b3:b7:f4:25:5f:08:69:32:2b:19:55:91:da: cf:68:ad:e3:10:86:d8:82:93:ec:37:fb:3b:d5:49: 76:7b:cc:ff:67:b4:8a:54:a1:aa:0d:3f:b7:dd:cf: 15:54:bd:2c:c0:56:fc:ce:a1:d6:ac:a4:e5:b4:d6: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2A:3D:1B:2D:DA:73:48:A3:C1:B5:9B:FA:B5:B6:08:B9:64:C7:89 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/VCo9Gy3ac0ijwbWb-rW2CLlkx4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.251.122.0/24 162.248.162.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:2e:2e:3f:56:85:14:97:c3:5b:eb:cf:de:64:69:ee:82:81: 22:10:9d:84:11:c2:02:27:7f:17:4a:bb:cf:29:92:27:39:ae: a4:bd:49:09:ab:7f:10:b2:33:da:42:6f:28:01:27:cd:30:fe: 3d:17:5e:a3:bf:83:f8:30:dd:49:71:6b:63:b5:4a:22:6c:6d: 60:3f:28:f4:ff:a7:73:a1:01:ad:06:fe:f2:db:f0:f4:60:44: d2:1b:b6:a8:9d:3a:9f:bc:95:51:15:3b:cc:a5:af:6e:97:50: 36:4e:e0:b7:42:54:b9:ea:6c:bc:a7:3a:bb:06:4b:72:b6:40: d4:76:43:7c:82:50:a9:d9:b9:b3:93:fb:93:95:91:1e:e4:73: c9:85:1b:17:bb:56:19:f9:06:45:28:5a:e2:69:85:5d:8e:ad: b9:7f:87:9d:d0:6b:58:eb:74:0f:97:50:c4:4c:ad:4a:44:d7: 36:95:1a:c8:b8:53:0b:b6:3e:2c:2d:43:6a:a5:8d:c7:9b:9e: 56:d5:e2:16:a2:95:5d:23:34:91:0c:3f:e4:1a:a3:0a:f8:c2: bb:7f:e3:a0:ac:f4:a8:fa:8e:1e:b9:5b:57:3d:07:d1:05:74: b1:9c:25:30:44:24:25:7b:aa:48:b8:37:c1:2d:12:72:2d:be: 41:c0:51:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FL5011LS3PT2B6+svhFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDJhM2QxYjJkZGE3MzQ4YTNjMWI1OWJmYWI1YjYwOGI5NjRjNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FPz2PhAM6rKg8Qw3qcb/3r4KdoG 1tT/A41tZxR+qpnxBOTLCTaoTH29rUcEiDxPrWJIBEavoeXNFoJ0VpMQXxQRuIid uGRhME0M/nw1Lxqe50DNAeU7yB8sp0qmGEGyyDwOo8qSBLx4K1GtLGBDlFxVfAdC afOrswP6qwF1zPZ+eaS2ZfA7aJS4d1BkfFMpy1LcBF2FkCuosOYp2YFTQ6av23kQ ckmEyHDNiN9bnPx1QZKUeJ9i2WhBY/QZM1DujiJKf7O39CVfCGkyKxlVkdrPaK3j EIbYgpPsN/s71Ul2e8z/Z7SKVKGqDT+33c8VVL0swFb8zqHWrKTltNbg9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFQqPRst2nNIo8G1m/q1tgi5ZMeJMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvVkNvOUd5M2FjMGlqd2JXYi1yVzJDTGxreDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAP/t6AwQA oviiMA0GCSqGSIb3DQEBCwUAA4IBAQA+Li4/VoUUl8Nb68/eZGnugoEiEJ2EEcIC J38XSrvPKZInOa6kvUkJq38QsjPaQm8oASfNMP49F16jv4P4MN1JcWtjtUoibG1g Pyj0/6dzoQGtBv7y2/D0YETSG7aonTqfvJVRFTvMpa9ul1A2TuC3QlS56my8pzq7 BktytkDUdkN8glCp2bmzk/uTlZEe5HPJhRsXu1YZ+QZFKFriaYVdjq25f4ed0GtY 63QPl1DETK1KRNc2lRrIuFMLtj4sLUNqpY3Hm55W1eIWopVdIzSRDD/kGqMK+MK7 f+OgrPSo+o4euVtXPQfRBXSxnCUwRCQle6pIuDfBLRJyLb5BwFG+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:45 2026 by rpki-client