This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa File: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (raw, json) Hash identifier: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ= Subject key identifier: BC:44:33:05:81:E8:3F:30:D7:BA:DC:BF:AF:1F:B9:1A:50:09:B5:F4 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3E004C9F8424F6C5B9B2B0190257B Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 81.90.29.0/24 maxlen: 24 93.94.51.0/24 maxlen: 24 93.94.52.0/24 maxlen: 24 178.17.53.0/24 maxlen: 24 178.17.57.0/24 maxlen: 24 178.17.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e0:04:c9:f8:42:4f:6c:5b:9b:2b:01:90:25:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc44330581e83f30d7badcbfaf1fb91a5009b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:9d:e0:d1:ce:1f:cf:78:a8:a0:7c:d7:3c: 57:96:d2:33:dc:13:33:12:76:59:f8:fe:28:f6:f5: 4f:a6:dc:4a:35:0f:2b:79:9b:62:af:68:9a:7c:91: 74:df:3d:bc:c1:e1:cd:5c:0b:1d:08:3d:f1:dc:80: af:b4:be:60:27:d1:35:b0:e0:50:31:ac:97:0b:50: 51:44:6c:c9:73:ee:45:77:ee:af:71:28:cf:47:31: 52:03:72:d9:39:c8:ee:20:1d:bb:94:cc:b5:56:41: 2b:58:93:49:8c:3e:5b:ed:5a:58:15:49:41:4c:59: 25:39:ed:52:c6:a6:84:f1:81:b8:ce:8f:93:29:66: f8:cc:86:af:45:d2:26:21:7c:47:6a:c7:a5:f1:db: fa:ed:15:df:f2:e2:14:9e:68:0d:41:be:48:1d:ce: d6:ec:90:b2:35:90:1a:e0:8f:d7:9d:39:45:38:d0: 52:d1:19:e4:6e:03:97:64:25:1f:98:ac:fa:4e:fd: 08:cb:80:b4:1e:4a:05:5a:47:4f:c0:95:1c:de:4e: fb:d3:89:0a:de:07:69:43:66:b9:7f:57:e6:6d:d6: 51:2f:7b:69:3f:34:81:8e:be:51:2f:13:a8:63:f0: 12:e8:d6:9c:24:bf:f5:2e:e7:5a:8f:06:bb:fb:d3: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:44:33:05:81:E8:3F:30:D7:BA:DC:BF:AF:1F:B9:1A:50:09:B5:F4 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.29.0/24 93.94.51.0-93.94.52.255 178.17.53.0/24 178.17.57.0-178.17.58.255 Signature Algorithm: sha256WithRSAEncryption 55:4a:7c:cd:2f:bc:65:83:00:55:c4:39:b1:48:0e:11:a9:12: 4e:19:0a:a5:4a:05:9b:f6:6c:f5:0d:15:c7:42:32:4e:32:bd: 58:df:2e:79:a1:03:31:98:f6:f6:a9:a6:39:98:61:36:bd:9b: 0e:0c:98:a0:bb:da:a1:76:6e:9a:ca:a1:37:7b:61:97:0f:bb: 75:a4:de:6f:09:e0:db:f4:ce:00:82:3f:d8:b2:46:e6:13:21: 39:00:e6:fa:80:80:eb:e3:cb:77:da:67:8d:c1:a0:3c:ae:b6: 41:6c:3d:fc:49:a3:8f:50:9b:0f:40:93:f6:bc:ec:86:e1:22: 86:16:d0:6b:bd:d6:63:97:b2:0d:03:7f:75:9e:23:80:5a:a0: 6d:cb:a3:6a:68:b5:25:39:78:46:bf:bc:fa:5d:6a:f5:5f:03: 08:68:e6:44:20:ba:1a:83:ac:7b:05:c9:4a:5f:21:02:7c:06: 2f:98:0c:63:6f:fe:9d:3a:60:1e:29:01:df:33:d4:d2:a7:1b: 92:8c:ac:5f:e5:44:f0:df:76:6e:97:e2:82:8e:30:0b:b9:08: 4b:a2:59:9b:15:0c:62:45:b7:d1:93:42:88:91:49:19:1b:13: 78:53:a7:2c:86:3c:7c:c5:ea:f9:2f:44:4b:f8:7f:b1:e3:88: e0:3e:e9:b4 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7o+AEyfhCT2xbmysBkCV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzQ0MzMwNTgxZTgzZjMwZDdiYWRjYmZhZjFmYjkxYTUwMDliNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK+d4NHOH894qKB81zxXltIz3BMz EnZZ+P4o9vVPptxKNQ8reZtir2iafJF03z28weHNXAsdCD3x3ICvtL5gJ9E1sOBQ MayXC1BRRGzJc+5Fd+6vcSjPRzFSA3LZOcjuIB27lMy1VkErWJNJjD5b7VpYFUlB TFklOe1SxqaE8YG4zo+TKWb4zIavRdImIXxHasel8dv67RXf8uIUnmgNQb5IHc7W 7JCyNZAa4I/XnTlFONBS0RnkbgOXZCUfmKz6Tv0Iy4C0HkoFWkdPwJUc3k7704kK 3gdpQ2a5f1fmbdZRL3tpPzSBjr5RLxOoY/AS6NacJL/1Ludajwa7+9PFkQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFLxEMwWB6D8w17rcv68fuRpQCbX0MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvdkVRekJZSG9QekRYdXR5X3J4LTVHbEFKdGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAUVodMAwD BABdXjMDBABdXjQDBACyETUwDAMEALIROQMEALIROjANBgkqhkiG9w0BAQsFAAOC AQEAVUp8zS+8ZYMAVcQ5sUgOEakSThkKpUoFm/Zs9Q0Vx0IyTjK9WN8ueaEDMZj2 9qmmOZhhNr2bDgyYoLvaoXZumsqhN3thlw+7daTebwng2/TOAII/2LJG5hMhOQDm +oCA6+PLd9pnjcGgPK62QWw9/Emjj1CbD0CT9rzshuEihhbQa73WY5eyDQN/dZ4j gFqgbcujami1JTl4Rr+8+l1q9V8DCGjmRCC6GoOsewXJSl8hAnwGL5gMY2/+nTpg HikB3zPU0qcbkoysX+VE8N92bpfigo4wC7kIS6JZmxUMYkW30ZNCiJFJGRsTeFOn LIY8fMXq+S9ES/h/seOI4D7ptA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:37 2026 by rpki-client