This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VRP7kO1ADpRb5GgPA9EmYScIG-s.roa File: VRP7kO1ADpRb5GgPA9EmYScIG-s.roa (raw, json) Hash identifier: Mgu6Uzu9MCdc0cDxq0Z2cQVqV+e2/cftFzWPyH9xJg8= Subject key identifier: 55:13:FB:90:ED:40:0E:94:5B:E4:68:0F:03:D1:26:61:27:08:1B:EB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DBCF41909EB1AF1671AD6B4D9A19 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VRP7kO1ADpRb5GgPA9EmYScIG-s.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9260 IP address blocks: 94.154.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:db:cf:41:90:9e:b1:af:16:71:ad:6b:4d:9a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5513fb90ed400e945be4680f03d1266127081beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:4a:f0:81:2e:67:90:fb:92:a1:4f:68:6c: 6e:c7:b6:b2:f7:4e:92:66:59:ac:4e:a2:65:94:0f: ef:95:14:65:6d:69:80:d4:c7:5e:9f:58:b2:ed:40: 09:b8:c2:6f:f0:58:1b:2b:61:d2:12:0c:33:1d:84: bf:c3:e5:55:ed:0d:be:b7:20:a4:1b:e2:9e:16:79: 97:55:dd:e0:b6:70:ba:7e:b2:23:c2:8d:72:3d:31: d2:e1:ca:6c:f7:2e:e4:50:2d:3b:18:f4:ba:28:01: b3:f2:a4:ce:41:99:36:96:65:2d:6a:b0:14:1b:29: 18:31:b8:4f:98:a9:88:2d:06:e3:c5:8c:89:0a:dc: 8a:9e:e1:d2:b1:cd:e7:f2:c9:2d:05:43:50:30:20: c5:d6:67:cd:09:c8:be:b5:0b:06:34:31:a1:7a:55: b8:d5:04:0e:4a:97:a4:bb:5e:a3:db:6e:ba:6a:54: 3b:68:ce:1f:e1:ba:e3:24:01:83:0c:0d:36:16:54: 84:7e:9e:0b:b9:45:30:eb:4b:d1:49:cd:85:b6:6b: 96:0c:b7:89:d9:fd:71:e0:d4:c5:36:8d:38:53:ac: 31:cf:bb:e8:e8:0a:d9:37:55:e9:07:ce:c4:48:19: fd:b5:82:47:a1:95:22:20:d7:33:4f:48:98:d8:c0: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:13:FB:90:ED:40:0E:94:5B:E4:68:0F:03:D1:26:61:27:08:1B:EB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VRP7kO1ADpRb5GgPA9EmYScIG-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.160.0/24 Signature Algorithm: sha256WithRSAEncryption 05:66:88:7d:1f:5d:55:2e:10:31:33:62:df:45:28:96:9c:bb: a2:c0:a9:39:db:5c:63:8f:77:ee:3f:31:ad:9a:67:05:d0:e3: 70:aa:99:c6:2a:97:b6:70:41:64:4d:fa:79:33:e5:0b:ad:ce: c9:37:a5:58:c4:d3:5f:ff:fd:70:e9:a9:46:54:cf:08:63:09: f9:9c:64:95:c5:a5:cd:a8:d4:fa:77:f8:d7:b7:c3:fe:a4:4a: a6:0d:a9:06:d1:46:b9:2f:a2:17:d1:07:2f:f8:45:b6:75:38: f3:3a:67:97:55:28:9f:91:65:75:0e:84:86:7c:70:ae:5f:a1: a5:06:cb:bd:e7:97:f5:b2:61:0f:8d:99:5b:37:a3:c4:38:fb: 20:cb:96:8a:08:92:9c:a8:fb:97:08:51:7f:de:45:26:0e:cd: b2:6c:28:87:d8:ee:0a:a8:ba:4b:13:f3:d1:03:fe:9b:63:c7: 73:38:f2:30:9d:a0:61:34:5b:07:6c:09:e2:bc:d5:41:69:63: c8:5b:18:3d:11:c6:ab:cf:c5:7e:8d:60:ec:25:2e:90:9b:37: d3:e4:26:f6:0b:ea:25:cd:1d:e2:00:7e:65:eb:aa:69:39:1e: 2d:db:a5:05:9b:a5:e1:3b:e5:cd:c5:e0:16:21:9e:72:c3:9d: d6:1f:e5:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otvPQZCesa8Wca1rTZoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTEzZmI5MGVkNDAwZTk0NWJlNDY4MGYwM2QxMjY2MTI3MDgxYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzclK8IEuZ5D7kqFPaGxux7ay906S ZlmsTqJllA/vlRRlbWmA1Mden1iy7UAJuMJv8FgbK2HSEgwzHYS/w+VV7Q2+tyCk G+KeFnmXVd3gtnC6frIjwo1yPTHS4cps9y7kUC07GPS6KAGz8qTOQZk2lmUtarAU GykYMbhPmKmILQbjxYyJCtyKnuHSsc3n8sktBUNQMCDF1mfNCci+tQsGNDGhelW4 1QQOSpeku16j2266alQ7aM4f4brjJAGDDA02FlSEfp4LuUUw60vRSc2FtmuWDLeJ 2f1x4NTFNo04U6wxz7vo6ArZN1XpB87ESBn9tYJHoZUiINczT0iY2MDDxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFUT+5DtQA6UW+RoDwPRJmEnCBvrMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVlJQN2tPMUFEcFJiNUdnUEE5RW1ZU2NJRy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpqgMA0G CSqGSIb3DQEBCwUAA4IBAQAFZoh9H11VLhAxM2LfRSiWnLuiwKk521xjj3fuPzGt mmcF0ONwqpnGKpe2cEFkTfp5M+ULrc7JN6VYxNNf//1w6alGVM8IYwn5nGSVxaXN qNT6d/jXt8P+pEqmDakG0Ua5L6IX0Qcv+EW2dTjzOmeXVSifkWV1DoSGfHCuX6Gl Bsu955f1smEPjZlbN6PEOPsgy5aKCJKcqPuXCFF/3kUmDs2ybCiH2O4KqLpLE/PR A/6bY8dzOPIwnaBhNFsHbAnivNVBaWPIWxg9Ecarz8V+jWDsJS6QmzfT5Cb2C+ol zR3iAH5l66ppOR4t26UFm6XhO+XNxeAWIZ5yw53WH+US -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:11 2026 by rpki-client