This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vSIvLIrNVcgyIYp5oev4_wZVH6g.roa File: vSIvLIrNVcgyIYp5oev4_wZVH6g.roa (raw, json) Hash identifier: Lgigs0UPKVxiC+CwnYI6whVYUzFC5PGd2Kh8UshKm18= Subject key identifier: BD:22:2F:2C:8A:CD:55:C8:32:21:8A:79:A1:EB:F8:FF:06:55:1F:A8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35B70BB7F58B3C3FBA42EFF1C4762 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vSIvLIrNVcgyIYp5oev4_wZVH6g.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 164.40.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5b:70:bb:7f:58:b3:c3:fb:a4:2e:ff:1c:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd222f2c8acd55c832218a79a1ebf8ff06551fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:1b:eb:08:a2:b1:0c:58:d1:31:5f:28:fe: d6:b7:64:f0:c4:08:db:17:60:88:08:a7:c8:4a:46: c5:0d:72:8f:a3:9a:2d:db:ed:44:39:06:43:7b:be: f1:8a:b1:32:59:c5:5e:45:73:31:3f:50:0c:b9:8d: 7f:c8:79:3b:b3:59:ea:b3:98:72:f1:50:83:e9:f1: 9b:27:16:e5:36:29:8c:91:b7:08:aa:d3:8d:d2:6f: 02:21:b1:d3:55:20:c1:32:43:77:dc:4c:d7:c4:70: aa:13:31:e3:ec:73:e7:64:6a:8c:b5:5f:8e:68:5b: da:7d:f7:46:8e:f4:6d:b4:ac:89:88:1f:69:29:66: 54:ce:c6:68:2e:96:6a:60:fb:a2:f1:ae:ce:a8:f0: 9f:bb:c7:25:7f:f7:09:df:30:b7:2b:44:3b:df:94: 90:0e:f1:ea:07:ca:a2:eb:d5:14:a1:68:20:c5:bc: 4a:9d:d7:d4:7b:86:ed:a4:22:48:a3:60:b0:68:7d: b8:33:3d:59:5c:fe:a1:cd:32:81:02:bb:86:d4:6b: e5:cc:c7:ee:a0:72:3c:9f:4d:d9:08:9e:b9:89:19: 8f:0f:7b:d0:72:8e:88:92:61:9b:08:97:c5:54:30: e1:8e:da:b3:89:28:cf:c6:68:5c:16:06:0f:75:2d: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:2F:2C:8A:CD:55:C8:32:21:8A:79:A1:EB:F8:FF:06:55:1F:A8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vSIvLIrNVcgyIYp5oev4_wZVH6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.40.185.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:7b:fa:87:fe:e7:12:8b:52:b7:fb:f7:c0:73:17:11:e5:73: e7:08:4d:e8:1f:cf:7b:0a:14:db:00:3c:1d:8a:1a:f4:6b:cf: 2e:9a:ec:dd:7c:d0:06:77:d1:76:c6:e7:f6:f0:5d:ed:43:37: f0:92:4c:1f:a2:0b:8b:66:82:d9:5a:bd:57:6e:be:da:b4:6a: fc:c1:e8:47:3a:dd:91:43:dc:17:cd:b2:49:73:bb:f4:03:36: 32:0e:d0:7d:69:30:60:9f:c6:0c:5c:a2:e8:10:06:51:77:63: 01:cf:0b:95:61:ec:a8:87:a8:a1:12:19:e8:e2:15:65:43:af: 02:44:7a:be:2b:2c:01:94:24:70:cf:bd:54:a2:48:d3:d4:76: b3:bf:2a:a5:0c:1a:a1:e7:5e:2c:d6:e4:64:2d:1f:6d:9e:d7: 98:88:60:92:4f:4a:04:96:59:7a:13:73:b4:f5:4e:db:de:dd: 01:51:fa:24:5d:30:fc:c1:5b:66:31:fd:d8:16:ce:66:70:e0: da:97:15:8b:3e:31:13:b2:c7:cd:59:0e:28:53:30:ca:12:38: d5:b5:bf:81:2e:13:a1:26:8c:c7:16:1a:de:da:3c:c4:61:01: 51:b6:14:92:d5:74:c0:c6:5b:a4:3b:06:61:42:26:5b:2c:55: 5c:57:fd:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1twu39Ys8P7pC7/HEdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDIyMmYyYzhhY2Q1NWM4MzIyMThhNzlhMWViZjhmZjA2NTUxZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Qb6wiisQxY0TFfKP7Wt2TwxAjb F2CICKfISkbFDXKPo5ot2+1EOQZDe77xirEyWcVeRXMxP1AMuY1/yHk7s1nqs5hy 8VCD6fGbJxblNimMkbcIqtON0m8CIbHTVSDBMkN33EzXxHCqEzHj7HPnZGqMtV+O aFvaffdGjvRttKyJiB9pKWZUzsZoLpZqYPui8a7OqPCfu8clf/cJ3zC3K0Q735SQ DvHqB8qi69UUoWggxbxKndfUe4btpCJIo2CwaH24Mz1ZXP6hzTKBAruG1GvlzMfu oHI8n03ZCJ65iRmPD3vQco6IkmGbCJfFVDDhjtqziSjPxmhcFgYPdS0WpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL0iLyyKzVXIMiGKeaHr+P8GVR+oMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdlNJdkxJck5WY2d5SVlwNW9ldjRfd1pWSDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCi5MA0G CSqGSIb3DQEBCwUAA4IBAQBve/qH/ucSi1K3+/fAcxcR5XPnCE3oH897ChTbADwd ihr0a88umuzdfNAGd9F2xuf28F3tQzfwkkwfoguLZoLZWr1Xbr7atGr8wehHOt2R Q9wXzbJJc7v0AzYyDtB9aTBgn8YMXKLoEAZRd2MBzwuVYeyoh6ihEhno4hVlQ68C RHq+KywBlCRwz71UokjT1HazvyqlDBqh514s1uRkLR9tnteYiGCST0oElll6E3O0 9U7b3t0BUfokXTD8wVtmMf3YFs5mcODalxWLPjETssfNWQ4oUzDKEjjVtb+BLhOh JozHFhre2jzEYQFRthSS1XTAxlukOwZhQiZbLFVcV/3E -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:24 2026 by rpki-client