This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/vFUZGft4eh8sB9jmvQvIC9A9ahI.roa File: vFUZGft4eh8sB9jmvQvIC9A9ahI.roa (raw, json) Hash identifier: co60/dSweeBatucEa6f9VHZWOL9AWXu258IpFZNdLCA= Subject key identifier: BC:55:19:19:FB:78:7A:1F:2C:07:D8:E6:BD:0B:C8:0B:D0:3D:6A:12 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC83320834959D91E07E7D6D9BACE98 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/vFUZGft4eh8sB9jmvQvIC9A9ahI.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213999 IP address blocks: 5.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:33:20:83:49:59:d9:1e:07:e7:d6:d9:ba:ce:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc551919fb787a1f2c07d8e6bd0bc80bd03d6a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:e5:38:06:c3:8d:a8:e3:31:ea:9a:95:fe: b6:c0:4e:ee:a0:54:ae:33:2f:a5:be:9b:a2:a8:2f: c3:7f:fc:e8:d7:6e:95:9f:12:97:a3:4c:46:f6:b1: 25:7d:80:1d:99:71:87:cd:74:3c:b3:a8:cc:05:11: 4e:96:35:0c:38:05:b7:27:08:24:cc:8d:4e:67:a9: b2:42:5b:47:13:ac:35:1f:9d:b6:f6:de:d3:0f:cc: 2f:34:38:8c:58:ea:bd:07:8b:f2:c3:ba:f2:1d:0c: 5b:5c:0e:f6:5a:fc:2e:4d:bd:a0:e6:67:e2:0c:22: ba:e8:bb:20:1f:85:90:fc:0a:1f:e0:a8:06:47:06: ad:dd:06:e4:c7:6c:dc:bc:59:a6:8b:7c:69:3f:9c: ab:be:b9:0a:5c:6a:a9:ca:10:34:35:f1:1a:b9:8c: 90:96:86:05:9d:09:5e:6d:87:ee:ae:e1:66:7b:be: 53:2d:3b:db:3e:09:5a:3b:25:e0:1f:9d:4c:8e:7e: b1:44:1b:10:6e:9b:8c:ca:11:4b:d0:cd:7a:99:bc: 4c:62:25:95:11:27:a1:ab:78:93:8c:7a:6e:bc:9a: 12:4a:92:c5:19:cd:8c:dc:12:6c:f2:62:eb:16:0e: db:13:ec:63:86:f8:8f:13:c2:37:c2:20:de:a3:e9: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:55:19:19:FB:78:7A:1F:2C:07:D8:E6:BD:0B:C8:0B:D0:3D:6A:12 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/vFUZGft4eh8sB9jmvQvIC9A9ahI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.20.0/24 Signature Algorithm: sha256WithRSAEncryption 60:a0:f9:a7:eb:86:00:f7:1c:99:28:31:1b:96:d4:93:c7:48: 07:8c:19:2b:41:90:91:5d:76:97:6c:54:d4:f6:b0:81:c3:2c: d0:5e:aa:c4:89:72:a4:6e:63:1d:bd:6b:02:bc:81:c3:77:ed: 42:d7:25:ab:00:b9:85:1a:0f:37:19:15:d2:c1:d3:32:3a:26: 79:eb:ce:c4:ac:69:74:66:94:0c:31:33:b4:3f:74:9b:b7:44: b8:bd:02:16:37:48:fc:ca:b2:4c:9b:b7:1f:ec:24:53:b5:fc: 1b:06:03:07:7d:f1:35:c4:99:6f:21:21:aa:de:65:58:51:dd: 20:df:5b:40:98:d5:aa:21:92:fc:ef:0e:c1:73:62:e8:6a:06: e9:e7:38:1b:05:75:73:e2:04:ec:c2:26:0c:2c:fc:d7:1a:e2: 29:88:ce:2f:45:30:e9:41:dd:9f:39:ac:21:f2:3f:9e:e4:2f: 2e:5c:65:27:32:e1:fb:2b:b4:8e:73:01:89:e4:27:8d:c1:87: ad:c5:8d:b7:b9:9a:91:6d:35:14:68:3b:08:a6:10:5a:98:22: bc:1e:1e:40:dd:50:f9:b1:b9:5b:73:3f:a3:cd:03:74:45:0c: ec:5a:48:97:eb:2d:7c:de:ce:3d:07:61:d4:c2:cc:61:6d:b3: 8e:8b:2e:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDMgg0lZ2R4H59bZus6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzU1MTkxOWZiNzg3YTFmMmMwN2Q4ZTZiZDBiYzgwYmQwM2Q2YTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKblOAbDjajjMeqalf62wE7uoFSu My+lvpuiqC/Df/zo126VnxKXo0xG9rElfYAdmXGHzXQ8s6jMBRFOljUMOAW3Jwgk zI1OZ6myQltHE6w1H5229t7TD8wvNDiMWOq9B4vyw7ryHQxbXA72WvwuTb2g5mfi DCK66LsgH4WQ/Aof4KgGRwat3Qbkx2zcvFmmi3xpP5yrvrkKXGqpyhA0NfEauYyQ loYFnQlebYfuruFme75TLTvbPglaOyXgH51Mjn6xRBsQbpuMyhFL0M16mbxMYiWV ESehq3iTjHpuvJoSSpLFGc2M3BJs8mLrFg7bE+xjhviPE8I3wiDeo+lRvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxVGRn7eHofLAfY5r0LyAvQPWoSMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvdkZVWkdmdDRlaDhzQjlqbXZRdklDOUE5YWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfwUMA0G CSqGSIb3DQEBCwUAA4IBAQBgoPmn64YA9xyZKDEbltSTx0gHjBkrQZCRXXaXbFTU 9rCBwyzQXqrEiXKkbmMdvWsCvIHDd+1C1yWrALmFGg83GRXSwdMyOiZ5687ErGl0 ZpQMMTO0P3Sbt0S4vQIWN0j8yrJMm7cf7CRTtfwbBgMHffE1xJlvISGq3mVYUd0g 31tAmNWqIZL87w7Bc2Loagbp5zgbBXVz4gTswiYMLPzXGuIpiM4vRTDpQd2fOawh 8j+e5C8uXGUnMuH7K7SOcwGJ5CeNwYetxY23uZqRbTUUaDsIphBamCK8Hh5A3VD5 sblbcz+jzQN0RQzsWkiX6y183s49B2HUwsxhbbOOiy5x -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:15 2026 by rpki-client