This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/vug7WwjDcsLWq0B1sdDRxAnsvu4.roa File: vug7WwjDcsLWq0B1sdDRxAnsvu4.roa (raw, json) Hash identifier: oG3YV+PmdtG6CGV+zbw1qmHUtciH3fi68Ulc4xoYCJM= Subject key identifier: BE:E8:3B:5B:08:C3:72:C2:D6:AB:40:75:B1:D0:D1:C4:09:EC:BE:EE Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Certificate serial: 019B7EA56A888E0BED2A65E3E9D40238E659 Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/vug7WwjDcsLWq0B1sdDRxAnsvu4.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207023 IP address blocks: 185.60.202.0/23 maxlen: 23 185.115.64.0/22 maxlen: 22 185.120.8.0/23 maxlen: 23 185.120.10.0/23 maxlen: 23 185.126.72.0/22 maxlen: 24 185.126.76.0/22 maxlen: 24 185.174.90.0/23 maxlen: 23 185.242.92.0/23 maxlen: 23 185.242.94.0/23 maxlen: 23 2a0a:d01::/32 maxlen: 32 2a0a:d02::/32 maxlen: 32 2a0a:d03::/32 maxlen: 32 2a0a:d04::/32 maxlen: 32 2a0a:d05::/32 maxlen: 32 2a0a:d06::/32 maxlen: 32 2a0a:d07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6a:88:8e:0b:ed:2a:65:e3:e9:d4:02:38:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bee83b5b08c372c2d6ab4075b1d0d1c409ecbeee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:86:d1:d6:cd:8d:30:85:aa:b2:72:28:96: b9:8d:7b:38:ec:c4:93:e7:8f:8a:eb:2a:95:a2:b8: 1e:34:b7:97:82:b5:18:67:9f:af:d5:9b:55:bc:72: e0:15:01:1b:c4:a8:15:9b:70:fb:24:64:31:56:b8: b1:f1:5a:55:e8:00:ea:f2:80:50:dc:8d:90:db:39: a8:c0:9d:81:3f:6a:d7:55:31:97:d1:98:d2:90:d9: b2:05:2d:62:9c:88:43:a9:8b:24:4b:ba:4e:49:dc: 68:3b:88:fa:dd:24:c8:50:26:9a:c8:50:6a:66:18: aa:f8:f7:92:61:58:33:71:98:b4:ea:03:5a:a4:c8: ea:fa:c0:7e:f2:25:1d:98:80:d0:08:9d:54:6a:8c: fc:43:ab:0c:0a:71:5a:cc:d1:77:58:f1:7a:99:0f: b6:74:5a:75:50:86:c7:22:46:51:61:be:42:6e:88: 18:53:d2:0d:bb:7e:ec:e0:21:b6:6d:33:88:1d:88: a5:48:d6:57:a3:0c:c1:2c:46:c2:6f:4e:5d:44:e0: 25:05:36:2f:b6:de:f2:f3:0d:0e:69:29:0d:0b:70: f7:59:58:7c:f7:fa:a5:a9:12:84:01:c7:8a:f3:7f: cf:5c:39:44:9d:b1:56:58:05:42:28:a0:1a:27:56: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E8:3B:5B:08:C3:72:C2:D6:AB:40:75:B1:D0:D1:C4:09:EC:BE:EE X509v3 Authority Key Identifier: keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/vug7WwjDcsLWq0B1sdDRxAnsvu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.202.0/23 185.115.64.0/22 185.120.8.0/22 185.126.72.0/21 185.174.90.0/23 185.242.92.0/22 IPv6: 2a0a:d01::-2a0a:d07:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 80:26:f7:3c:ed:2b:34:4c:00:73:09:0c:ca:ba:0a:bc:22:3a: ee:7a:a9:aa:03:e8:02:ab:ce:47:f9:1c:f5:13:be:f7:48:2b: 5a:d2:14:4e:9a:cc:98:f1:0b:c4:87:7d:37:28:0b:4d:4f:bc: a9:26:15:3a:c2:33:bb:99:d0:47:d8:2a:b1:bd:09:e7:dd:45: 6b:3e:90:e6:f5:9e:e9:ae:7d:5a:90:52:76:ab:fe:20:26:fc: 8f:af:17:e9:a6:d8:88:2f:52:83:66:b2:6f:fa:cc:01:be:b3: ee:f8:9c:14:21:fc:a5:3c:ef:8d:68:15:cc:41:cc:bc:e3:b4: 03:c6:45:39:19:74:af:7e:5c:a9:81:3b:c1:99:81:de:2d:de: 13:b3:76:03:96:e8:0d:d7:00:41:ba:1d:00:94:31:24:9f:1d: 11:ae:28:00:a4:bf:bd:48:4e:35:70:c3:fa:57:a7:0f:72:bf: 50:05:c4:68:ee:7f:1e:24:d9:5b:19:b6:dd:d6:d7:3c:9b:78: 50:3e:ef:53:6b:ee:0a:59:ab:6a:d3:a7:69:86:c1:86:98:af: f0:a6:2f:d0:fe:40:ee:ab:97:4c:19:8c:1a:cc:fb:88:1b:dd: 7c:63:3d:a3:01:f2:59:6e:04:72:1f:68:c0:86:f2:3f:95:ff: f3:b9:6e:c8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt+pWqIjgvtKmXj6dQCOOZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx MThiODUwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWU4M2I1YjA4YzM3MmMyZDZhYjQwNzViMWQwZDFjNDA5ZWNiZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpqG0dbNjTCFqrJyKJa5jXs47MST 54+K6yqVorgeNLeXgrUYZ5+v1ZtVvHLgFQEbxKgVm3D7JGQxVrix8VpV6ADq8oBQ 3I2Q2zmowJ2BP2rXVTGX0ZjSkNmyBS1inIhDqYskS7pOSdxoO4j63STIUCaayFBq Zhiq+PeSYVgzcZi06gNapMjq+sB+8iUdmIDQCJ1Uaoz8Q6sMCnFazNF3WPF6mQ+2 dFp1UIbHIkZRYb5CbogYU9INu37s4CG2bTOIHYilSNZXowzBLEbCb05dROAlBTYv tt7y8w0OaSkNC3D3WVh89/qlqRKEAceK83/PXDlEnbFWWAVCKKAaJ1ayaQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFL7oO1sIw3LC1qtAdbHQ0cQJ7L7uMB8GA1UdIwQY MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt MGRiYjNiOGRiMTVmLzEvdnVnN1d3akRjc0xXcTBCMXNkRFJ4QW5zdnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQBuTzKAwQC uXNAAwQCuXgIAwQDuX5IAwQBua5aAwQCufJcMBYEAgACMBAwDgMFACoKDQEDBQMq Cg0AMA0GCSqGSIb3DQEBCwUAA4IBAQCAJvc87Ss0TABzCQzKugq8IjrueqmqA+gC q85H+Rz1E773SCta0hROmsyY8QvEh303KAtNT7ypJhU6wjO7mdBH2CqxvQnn3UVr PpDm9Z7prn1akFJ2q/4gJvyPrxfpptiIL1KDZrJv+swBvrPu+JwUIfylPO+NaBXM Qcy847QDxkU5GXSvflypgTvBmYHeLd4Ts3YDlugN1wBBuh0AlDEknx0RrigApL+9 SE41cMP6V6cPcr9QBcRo7n8eJNlbGbbd1tc8m3hQPu9Ta+4KWatq06dphsGGmK/w pi/Q/kDuq5dMGYwazPuIG918Yz2jAfJZbgRyH2jAhvI/lf/zuW7I -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:50 2026 by rpki-client