This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa File: VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa (raw, json) Hash identifier: GLPIQNk9SF4ckQrOTlAnl4nPM7oMaUINPgb3JIgnuFg= Subject key identifier: 54:A7:68:19:F2:D1:A5:2C:BE:89:2D:01:C9:3B:4B:67:73:88:51:92 Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04 Certificate serial: 019B78A23BD267C3CA420D62B22C63987638 Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34032 IP address blocks: 185.98.204.0/24 maxlen: 24 185.98.205.0/24 maxlen: 24 185.98.206.0/24 maxlen: 24 185.98.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3b:d2:67:c3:ca:42:0d:62:b2:2c:63:98:76:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54a76819f2d1a52cbe892d01c93b4b6773885192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:9c:5b:f6:e2:1e:7c:97:a0:76:fd:4a:2c: 4e:ce:6e:52:c5:92:af:5e:77:ef:36:bd:dc:78:c1: c5:11:32:1d:c1:38:e8:b3:d2:4d:48:34:ec:be:1d: 08:ab:33:31:4e:fc:a8:82:6d:d7:96:31:19:2c:73: 51:80:63:97:cb:95:60:5e:4b:83:35:ed:b1:3d:a9: 21:7e:2f:8d:2a:0f:7b:b4:a2:a6:1f:ec:22:f6:ef: 85:cb:df:e8:62:a0:a3:62:ef:d5:3a:f8:f1:ca:e5: 4d:5d:47:68:bc:3a:03:30:20:7b:04:13:39:ef:98: 5a:cf:ed:d8:0c:a0:b7:22:88:4d:a7:52:c3:3f:a8: 5d:a3:70:a1:7a:0d:12:e8:0b:38:c6:d7:8c:51:85: ff:92:f2:3f:1b:1c:a7:2c:d3:35:bf:c5:81:17:ea: e4:94:e1:b5:6b:d1:d2:b3:a5:7a:e2:66:eb:37:20: e6:4e:35:2b:85:e8:98:cf:7d:ee:e1:d3:ef:d5:26: 30:82:fe:c3:68:57:6b:0a:3a:f5:25:81:d4:30:f7: dd:3f:8f:ce:90:2b:75:e9:f2:f1:11:09:94:ec:9d: 8b:a0:fc:f9:0c:67:9f:8a:66:68:df:1c:0e:52:32: af:55:6b:85:02:7f:51:38:a7:80:13:47:31:51:f4: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A7:68:19:F2:D1:A5:2C:BE:89:2D:01:C9:3B:4B:67:73:88:51:92 X509v3 Authority Key Identifier: keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.204.0/22 Signature Algorithm: sha256WithRSAEncryption 55:dd:6d:3a:da:bc:94:6b:0c:59:c0:1a:22:a6:7c:e3:01:32: a7:7e:7b:78:bd:a6:ba:be:58:ab:01:55:b2:f8:90:f4:49:f5: c1:3e:b0:fc:55:7a:d3:82:e8:ab:40:75:1c:11:c4:f6:f2:cf: 9e:0b:61:28:6f:f2:68:7e:b1:88:a0:af:cf:a5:c0:74:bc:d7: 3b:a2:3e:cb:f5:e9:c4:39:1a:1e:80:2b:a5:41:8b:41:ff:30: 2c:a0:53:ef:d7:10:f8:99:71:e7:35:ae:23:0a:8a:96:81:10: 22:cd:49:a0:04:a2:86:c7:ad:3f:0e:3d:0e:0b:11:93:0c:c4: 6c:0f:29:9f:81:27:7a:78:16:00:e3:d2:b9:86:16:67:dc:8b: 9f:77:16:10:13:1f:f0:05:f6:1f:e4:52:d4:7d:c6:61:23:fc: 72:c3:9e:b3:1a:9a:c8:e6:aa:b3:94:93:38:1b:8a:26:f6:c3: 92:9b:98:0c:ae:06:e8:7f:ce:8d:b8:04:fc:b1:bb:4f:5d:ec: 22:b7:92:88:e5:7d:1f:b0:98:69:4a:62:4c:77:02:16:cd:58: ea:0e:df:d0:d0:37:a9:c0:0d:2b:2c:74:c1:da:25:59:67:21: cf:13:2f:3f:06:56:3d:e8:26:cd:f2:0e:ee:77:77:a8:82:06: 40:1a:77:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ojvSZ8PKQg1isixjmHY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQy NDliMDQwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGE3NjgxOWYyZDFhNTJjYmU4OTJkMDFjOTNiNGI2NzczODg1MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg6cW/biHnyXoHb9SixOzm5SxZKv XnfvNr3ceMHFETIdwTjos9JNSDTsvh0IqzMxTvyogm3XljEZLHNRgGOXy5VgXkuD Ne2xPakhfi+NKg97tKKmH+wi9u+Fy9/oYqCjYu/VOvjxyuVNXUdovDoDMCB7BBM5 75haz+3YDKC3IohNp1LDP6hdo3Cheg0S6As4xteMUYX/kvI/GxynLNM1v8WBF+rk lOG1a9HSs6V64mbrNyDmTjUrheiYz33u4dPv1SYwgv7DaFdrCjr1JYHUMPfdP4/O kCt16fLxEQmU7J2LoPz5DGefimZo3xwOUjKvVWuFAn9ROKeAE0cxUfTtCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFSnaBny0aUsvoktAck7S2dziFGSMB8GA1UdIwQY MBaAFDu7sfXZhmaKs71HzRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAt YzExN2YyN2JhOWMwLzEvVktkb0dmTFJwU3ktaVMwQnlUdExaM09JVVpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMw LzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWLMMA0G CSqGSIb3DQEBCwUAA4IBAQBV3W062ryUawxZwBoipnzjATKnfnt4vaa6vlirAVWy +JD0SfXBPrD8VXrTguirQHUcEcT28s+eC2Eob/JofrGIoK/PpcB0vNc7oj7L9enE ORoegCulQYtB/zAsoFPv1xD4mXHnNa4jCoqWgRAizUmgBKKGx60/Dj0OCxGTDMRs DymfgSd6eBYA49K5hhZn3IufdxYQEx/wBfYf5FLUfcZhI/xyw56zGprI5qqzlJM4 G4om9sOSm5gMrgbof86NuAT8sbtPXewit5KI5X0fsJhpSmJMdwIWzVjqDt/Q0Dep wA0rLHTB2iVZZyHPEy8/BlY96CbN8g7ud3eoggZAGnfT -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:07 2026 by rpki-client