This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/gid3PHY7_WHPVtbluwSuNieeZ-Q.roa File: gid3PHY7_WHPVtbluwSuNieeZ-Q.roa (raw, json) Hash identifier: 4gqwUBOsuCwNSypnwWO7WCLX7NlTT/vUufoeKcrMUME= Subject key identifier: 82:27:77:3C:76:3B:FD:61:CF:56:D6:E5:BB:04:AE:36:27:9E:67:E4 Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70 Certificate serial: 019B7F8236028B720A2EAE6618009462E9B7 Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/gid3PHY7_WHPVtbluwSuNieeZ-Q.roa Signing time: Fri 02 Jan 2026 16:19:58 +0000 ROA not before: Fri 02 Jan 2026 16:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205814 IP address blocks: 185.234.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:36:02:8b:72:0a:2e:ae:66:18:00:94:62:e9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70 Validity Not Before: Jan 2 16:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8227773c763bfd61cf56d6e5bb04ae36279e67e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:d3:61:1f:27:5d:35:77:3e:7a:3a:51:da: 2d:b7:cb:2c:12:c8:36:77:68:0c:5f:62:0d:ba:57: 58:70:46:a8:b9:1b:3c:98:ae:b0:d8:d8:8a:29:b9: 4e:a3:de:d7:8a:5e:d5:50:44:74:06:32:8a:af:5b: fc:d3:22:20:23:d2:4c:95:52:80:1d:3f:c9:91:31: 20:c9:70:a5:64:b7:d5:4b:ca:a5:88:e0:a1:a8:d0: 46:b5:ff:49:55:a7:06:9d:13:0e:14:a6:da:aa:47: 13:d0:cd:0a:69:ec:f3:01:99:46:f3:6e:31:41:be: 26:ed:82:7b:b4:5e:54:12:9f:cf:e8:7f:4c:e8:d7: dd:88:cd:37:14:e5:9d:0c:da:13:3d:98:8b:df:07: 45:ce:1a:a3:48:37:54:1c:45:c9:f2:54:80:ea:4a: cf:d5:d8:2d:cc:aa:b1:f6:9a:54:c3:e1:5e:23:3f: 37:8d:74:31:ef:d0:9a:5c:a7:42:27:3f:fc:c5:1e: ae:b4:de:bb:e9:60:05:2d:37:69:45:23:5c:60:b0: 20:57:84:b4:df:9e:b8:53:40:88:32:81:31:54:43: cd:7b:83:05:56:39:bc:f1:eb:2b:47:c6:27:f6:59: 61:eb:b6:f9:4b:71:ef:11:0c:ed:43:d0:37:43:7f: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:77:3C:76:3B:FD:61:CF:56:D6:E5:BB:04:AE:36:27:9E:67:E4 X509v3 Authority Key Identifier: keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/gid3PHY7_WHPVtbluwSuNieeZ-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.244.0/24 Signature Algorithm: sha256WithRSAEncryption c6:03:09:fd:44:a2:66:e3:03:2c:06:97:c1:1a:3f:73:00:c1: 79:9c:2b:66:6b:91:cc:5b:54:44:fe:85:83:e4:69:47:c0:50: 88:d1:74:29:ff:08:0c:ed:4d:09:c9:48:5b:57:2c:18:c4:b2: 2c:ec:9a:f9:11:d6:33:ad:b2:9d:65:75:e1:17:57:83:f7:39: 74:08:a1:b0:4e:f5:e0:23:f4:9a:50:f3:ef:5d:c9:b6:87:40: 63:2c:a6:1e:fe:a3:a8:97:86:a0:1b:8f:05:3c:f6:d0:a5:51: 20:0f:b9:d2:16:53:19:1c:f2:90:95:e4:02:0b:d6:91:e6:4f: 69:d9:36:c4:84:fb:fa:17:2d:8d:55:3c:e3:e6:b8:15:ad:93: 43:a7:90:32:22:10:04:9b:e0:0f:20:75:87:55:04:f7:f0:05: e0:c7:fe:9a:ee:45:e1:2a:04:02:62:9f:8d:f0:14:b1:5d:22: 02:7d:3e:c0:85:90:a2:2f:04:4e:d2:42:22:70:eb:e1:95:68: dc:bd:45:68:d0:df:c7:37:a8:4c:3f:b0:03:68:22:7d:86:8d: d1:c8:8e:92:1e:a1:d8:f6:9d:34:e9:1b:8f:72:e6:98:27:b6: 4b:fe:47:e4:b0:14:13:25:1d:3c:61:33:96:b3:e5:66:e5:49: 01:ed:21:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gjYCi3IKLq5mGACUYum3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3 NDJjNzAwHhcNMjYwMTAyMTYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjI3NzczYzc2M2JmZDYxY2Y1NmQ2ZTViYjA0YWUzNjI3OWU2N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8fTYR8nXTV3Pno6Udott8ssEsg2 d2gMX2INuldYcEaouRs8mK6w2NiKKblOo97Xil7VUER0BjKKr1v80yIgI9JMlVKA HT/JkTEgyXClZLfVS8qliOChqNBGtf9JVacGnRMOFKbaqkcT0M0KaezzAZlG824x Qb4m7YJ7tF5UEp/P6H9M6NfdiM03FOWdDNoTPZiL3wdFzhqjSDdUHEXJ8lSA6krP 1dgtzKqx9ppUw+FeIz83jXQx79CaXKdCJz/8xR6utN676WAFLTdpRSNcYLAgV4S0 3564U0CIMoExVEPNe4MFVjm88esrR8Yn9llh67b5S3HvEQztQ9A3Q38mPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIndzx2O/1hz1bW5bsErjYnnmfkMB8GA1UdIwQY MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct MzM4OTg2MTc2YjFmLzEvZ2lkM1BIWTdfV0hQVnRibHV3U3VOaWVlWi1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuer0MA0G CSqGSIb3DQEBCwUAA4IBAQDGAwn9RKJm4wMsBpfBGj9zAMF5nCtma5HMW1RE/oWD 5GlHwFCI0XQp/wgM7U0JyUhbVywYxLIs7Jr5EdYzrbKdZXXhF1eD9zl0CKGwTvXg I/SaUPPvXcm2h0BjLKYe/qOol4agG48FPPbQpVEgD7nSFlMZHPKQleQCC9aR5k9p 2TbEhPv6Fy2NVTzj5rgVrZNDp5AyIhAEm+APIHWHVQT38AXgx/6a7kXhKgQCYp+N 8BSxXSICfT7AhZCiLwRO0kIicOvhlWjcvUVo0N/HN6hMP7ADaCJ9ho3RyI6SHqHY 9p006RuPcuaYJ7ZL/kfksBQTJR08YTOWs+Vm5UkB7SFf -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:37 2026 by rpki-client