This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/VkW9wv564hDafmgem7iN4Pq0eg0.roa File: VkW9wv564hDafmgem7iN4Pq0eg0.roa (raw, json) Hash identifier: rHiCzFG5HzMXM3bkuQnCSkoGdPunuITBDMRZQXzh+hU= Subject key identifier: 56:45:BD:C2:FE:7A:E2:10:DA:7E:68:1E:9B:B8:8D:E0:FA:B4:7A:0D Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8385665268161F141E586E16076417 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/VkW9wv564hDafmgem7iN4Pq0eg0.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.83.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:85:66:52:68:16:1f:14:1e:58:6e:16:07:64:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5645bdc2fe7ae210da7e681e9bb88de0fab47a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:3e:2e:15:32:5d:df:97:32:3d:6c:d6:03: 6a:25:36:b5:4e:b4:66:c4:d6:46:24:d8:35:95:59: 82:22:b7:21:df:7f:bd:10:92:cf:1b:78:4a:0b:32: 97:0a:57:17:6f:09:15:81:19:a2:ef:56:7d:e8:cb: 1d:46:8b:22:58:ec:6b:32:4b:97:be:4e:95:ae:c1: 90:08:41:64:0b:2e:b4:f3:74:e0:c0:84:49:1f:5b: 5f:d5:cb:ea:fe:65:79:f5:f1:c7:f8:ce:3f:89:79: e4:c8:24:f0:d1:b7:d8:00:f1:74:0c:c0:7d:4c:34: 74:12:e5:c0:21:d4:16:09:2e:b1:54:8a:e7:56:98: a5:b9:b9:d2:ca:bc:92:ff:9d:58:f2:38:eb:03:c1: f3:d5:6d:46:5a:55:a1:2e:85:d5:35:6c:5d:f2:3b: 14:8d:c0:ba:14:2d:25:4c:4c:52:eb:b5:36:29:62: c1:77:12:e1:9f:95:c3:8a:6b:3d:ac:0c:40:a5:c6: 3b:c8:67:b8:69:04:e3:d2:40:42:ac:75:0f:43:70: e5:7f:6a:f2:3c:6c:0c:e6:88:13:a9:d4:2d:8f:3f: bd:cf:27:ed:04:aa:fe:21:91:df:80:df:1f:03:cb: ab:99:d0:47:8a:65:8f:f8:4c:e0:a2:45:02:fd:6c: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:BD:C2:FE:7A:E2:10:DA:7E:68:1E:9B:B8:8D:E0:FA:B4:7A:0D X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/VkW9wv564hDafmgem7iN4Pq0eg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.202.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:d1:16:84:ec:29:29:8d:b2:42:62:e1:f6:17:7b:c6:6c:f9: f1:68:90:a3:00:b1:3c:91:cc:fd:b6:58:ae:75:a1:56:a5:dc: 54:88:da:f7:c5:27:17:f6:9a:d7:a3:7a:32:a0:fc:8d:ab:9a: 70:0b:fa:33:78:fa:0a:55:28:4f:3c:00:26:d3:97:82:3b:0a: 84:ee:9a:71:e8:40:87:31:8c:ee:dc:29:2b:ef:35:78:fd:7e: ea:74:40:91:b6:b2:25:f5:d8:fc:87:61:d8:d5:ba:8e:3e:c6: a0:be:c7:79:8c:43:80:7c:73:98:ca:31:bd:17:34:30:ef:d8: c8:90:dd:bf:18:8a:ca:67:96:a1:60:07:34:54:74:be:9a:87: ab:59:cc:05:97:f2:fb:32:77:ba:18:b4:f7:36:96:7e:89:b1: 32:85:f6:00:ae:4d:4d:bf:02:3b:20:d9:80:3c:7a:a1:ec:38: f5:b5:9f:9a:7b:60:9e:c8:38:63:19:e2:a6:1c:cc:a8:f9:6e: ee:4b:f9:5f:03:29:a2:30:65:a4:14:6a:ab:76:a9:89:42:23: 65:e1:70:3c:b6:05:09:19:d9:ec:be:f2:dc:c9:7f:e3:e7:54: 7a:d3:62:5e:67:d0:97:cb:d0:32:9d:30:73:fa:85:7f:29:0d: b2:27:df:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4VmUmgWHxQeWG4WB2QXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjQ1YmRjMmZlN2FlMjEwZGE3ZTY4MWU5YmI4OGRlMGZhYjQ3YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ0+LhUyXd+XMj1s1gNqJTa1TrRm xNZGJNg1lVmCIrch33+9EJLPG3hKCzKXClcXbwkVgRmi71Z96MsdRosiWOxrMkuX vk6VrsGQCEFkCy6083TgwIRJH1tf1cvq/mV59fHH+M4/iXnkyCTw0bfYAPF0DMB9 TDR0EuXAIdQWCS6xVIrnVpilubnSyryS/51Y8jjrA8Hz1W1GWlWhLoXVNWxd8jsU jcC6FC0lTExS67U2KWLBdxLhn5XDims9rAxApcY7yGe4aQTj0kBCrHUPQ3Dlf2ry PGwM5ogTqdQtjz+9zyftBKr+IZHfgN8fA8urmdBHimWP+EzgokUC/Wx9JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZFvcL+euIQ2n5oHpu4jeD6tHoNMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvVmtXOXd2NTY0aERhZm1nZW03aU40UHEwZWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVPKMA0G CSqGSIb3DQEBCwUAA4IBAQBu0RaE7CkpjbJCYuH2F3vGbPnxaJCjALE8kcz9tliu daFWpdxUiNr3xScX9prXo3oyoPyNq5pwC/ozePoKVShPPAAm05eCOwqE7ppx6ECH MYzu3Ckr7zV4/X7qdECRtrIl9dj8h2HY1bqOPsagvsd5jEOAfHOYyjG9FzQw79jI kN2/GIrKZ5ahYAc0VHS+moerWcwFl/L7Mne6GLT3NpZ+ibEyhfYArk1NvwI7INmA PHqh7Dj1tZ+ae2CeyDhjGeKmHMyo+W7uS/lfAymiMGWkFGqrdqmJQiNl4XA8tgUJ GdnsvvLcyX/j51R602JeZ9CXy9AynTBz+oV/KQ2yJ98u -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:58 2026 by rpki-client