This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa File: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (raw, json) Hash identifier: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI= Subject key identifier: BF:3E:51:69:41:99:E5:44:0C:BF:91:DF:4C:AE:FE:C5:D2:5A:32:2B Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f Certificate serial: 019B79105CAAC7BE86C70228A5EFDE4E59C4 Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.234.137.0/24 maxlen: 24 185.234.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5c:aa:c7:be:86:c7:02:28:a5:ef:de:4e:59:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf3e51694199e5440cbf91df4caefec5d25a322b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:14:cf:59:4d:35:1f:83:12:47:c3:6e:de: 8f:34:12:7a:15:53:4c:68:11:32:89:5f:c4:9c:94: 46:ad:ae:ee:f4:8a:a7:12:a1:64:08:4e:ec:8f:70: 58:43:81:d4:54:17:33:e1:5b:2e:23:14:f3:23:8e: 3b:03:87:4a:bd:3e:24:4c:44:1d:99:23:9a:91:50: d3:2f:e1:19:4a:2a:44:dd:64:da:8d:47:d6:74:82: a3:1b:62:67:80:b0:ac:9d:d1:27:3e:d9:40:18:f8: f8:25:21:2e:7d:eb:7b:f6:bf:cb:ea:a4:7f:ec:3f: ae:f3:8f:10:2a:3d:42:e8:01:63:c3:ee:80:d1:4e: 2d:ed:b6:90:8b:7e:e0:b8:15:6e:e1:a5:f7:62:23: 55:fb:e4:8c:c0:21:d7:6a:be:fe:d5:6c:33:5a:7e: ca:3b:ec:c2:0d:4e:c3:f3:fd:ac:e6:d0:6f:62:70: de:5f:cb:9a:69:fb:d3:e9:4e:06:7a:26:97:c1:67: 1c:2f:db:a7:20:a5:c5:c4:2d:4f:02:13:09:76:9e: 01:38:86:dd:74:de:3d:6b:dd:7f:fa:ec:8e:f6:30: 31:0a:65:cb:70:fb:89:14:83:c7:a5:16:3b:d8:7e: 5e:9b:01:50:e2:7a:03:d0:16:79:af:87:b4:f7:34: ef:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3E:51:69:41:99:E5:44:0C:BF:91:DF:4C:AE:FE:C5:D2:5A:32:2B X509v3 Authority Key Identifier: keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.137.0-185.234.138.255 Signature Algorithm: sha256WithRSAEncryption 73:b9:b5:43:23:d7:42:27:a6:9e:aa:49:9d:6a:38:25:6a:0d: da:01:44:62:f1:b3:b7:57:45:1d:c8:79:0b:a3:91:71:1a:85: 19:2a:eb:4b:5d:c0:2f:5b:e8:4a:d2:c5:d7:c5:1d:ae:a5:5f: 04:bd:3c:0f:00:60:57:8e:5e:a6:6e:3d:a5:9f:7a:4a:db:9c: aa:ce:c2:50:26:0a:a1:7f:d7:93:e1:4b:b1:49:4e:08:7f:c9: ca:0d:4f:c5:9f:72:ee:0a:de:dd:84:46:08:54:cf:1f:3a:f4: 5d:2c:9c:db:4f:d1:44:4a:cb:6e:87:c2:48:25:fc:5d:04:da: e2:e7:74:a6:3a:ed:3a:1b:17:f1:97:0e:0b:60:da:0b:30:04: 8f:54:5b:68:f7:a3:90:10:7d:a6:03:5e:60:d3:3a:24:39:fc: 98:cf:bc:24:d6:2c:da:2c:f4:d5:d7:5a:7a:33:2b:43:2b:f2: 88:d9:9a:fb:08:cb:32:09:05:4d:6b:8c:c1:a2:4c:14:fc:57: 21:61:6b:8f:f5:b6:36:3a:ee:41:3d:6d:2b:0e:f9:16:f0:54: 58:52:5d:2a:2c:43:f6:22:bc:38:8b:06:2b:7e:ac:9e:8e:25: 85:ab:6d:ae:2c:48:1f:00:fb:a7:fe:1e:3b:da:eb:50:c4:4b: 83:29:52:a4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EFyqx76GxwIope/eTlnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx ZjQwNWYwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjNlNTE2OTQxOTllNTQ0MGNiZjkxZGY0Y2FlZmVjNWQyNWEzMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA630Uz1lNNR+DEkfDbt6PNBJ6FVNM aBEyiV/EnJRGra7u9IqnEqFkCE7sj3BYQ4HUVBcz4VsuIxTzI447A4dKvT4kTEQd mSOakVDTL+EZSipE3WTajUfWdIKjG2JngLCsndEnPtlAGPj4JSEufet79r/L6qR/ 7D+u848QKj1C6AFjw+6A0U4t7baQi37guBVu4aX3YiNV++SMwCHXar7+1WwzWn7K O+zCDU7D8/2s5tBvYnDeX8uaafvT6U4GeiaXwWccL9unIKXFxC1PAhMJdp4BOIbd dN49a91/+uyO9jAxCmXLcPuJFIPHpRY72H5emwFQ4noD0BZ5r4e09zTv5QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL8+UWlBmeVEDL+R30yu/sXSWjIrMB8GA1UdIwQY MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt OTg2NzY0MmMyZjEwLzEvdno1UmFVR1o1VVFNdjVIZlRLNy14ZEphTWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC56okD BAC56oowDQYJKoZIhvcNAQELBQADggEBAHO5tUMj10Inpp6qSZ1qOCVqDdoBRGLx s7dXRR3IeQujkXEahRkq60tdwC9b6ErSxdfFHa6lXwS9PA8AYFeOXqZuPaWfekrb nKrOwlAmCqF/15PhS7FJTgh/ycoNT8Wfcu4K3t2ERghUzx869F0snNtP0URKy26H wkgl/F0E2uLndKY67TobF/GXDgtg2gswBI9UW2j3o5AQfaYDXmDTOiQ5/JjPvCTW LNos9NXXWnozK0Mr8ojZmvsIyzIJBU1rjMGiTBT8VyFha4/1tjY67kE9bSsO+Rbw VFhSXSosQ/YivDiLBit+rJ6OJYWrba4sSB8A+6f+Hjva61DES4MpUqQ= -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:25 2026 by rpki-client