This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VEbCUSAoRRTE549OA0Njnk7c-sA.roa File: VEbCUSAoRRTE549OA0Njnk7c-sA.roa (raw, json) Hash identifier: quSWSfau81k6aTTbCd1Q7Iw3zFEI3Oppbo+irSQZQzw= Subject key identifier: 54:46:C2:51:20:28:45:14:C4:E7:8F:4E:03:43:63:9E:4E:DC:FA:C0 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CFA853AECE3D46749868D684EEE6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VEbCUSAoRRTE549OA0Njnk7c-sA.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 5.83.159.0/24 maxlen: 24 89.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cf:a8:53:ae:ce:3d:46:74:98:68:d6:84:ee:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5446c25120284514c4e78f4e0343639e4edcfac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:81:54:fe:20:61:d3:50:ba:62:3f:a4:0d: ea:cb:cb:60:e6:12:db:06:06:97:30:4f:4e:66:94: 6b:b2:b0:78:4f:74:4e:38:c6:54:5b:78:e9:0f:dd: 9c:a3:5c:ac:cf:03:5d:cd:af:60:8b:6f:b7:12:cf: 9f:a6:6d:ff:5b:69:89:e2:5a:c4:12:47:0e:45:25: f2:23:0a:ce:71:40:e3:bc:95:52:81:25:b3:51:8b: 88:7c:df:9c:54:d7:5f:fe:5b:38:a6:60:f6:3f:bc: 79:b5:e4:62:75:76:35:e8:f7:16:04:fd:b1:24:d0: 35:47:29:44:6a:04:6f:f2:fc:f5:91:84:9c:d8:97: ab:db:73:e8:61:d4:6a:f1:91:d6:53:87:ec:d1:29: 50:43:ad:56:45:9a:ae:9c:bc:88:5c:ac:ac:f1:16: 1d:fd:f8:eb:f9:2b:47:8f:17:a3:0b:6a:ba:0e:d0: d2:63:bd:1e:81:4f:b3:6e:c6:9a:45:8c:6d:84:15: 06:f9:23:85:c8:5d:da:3c:67:ab:ea:97:9c:76:97: f1:b6:50:35:cf:77:3b:17:47:65:94:a0:7d:f5:86: ad:7c:99:e3:b1:6c:f1:da:0f:dc:61:4a:af:f3:39: cf:cf:ca:50:f5:d2:c1:e9:0c:81:e4:55:ce:a4:2c: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:46:C2:51:20:28:45:14:C4:E7:8F:4E:03:43:63:9E:4E:DC:FA:C0 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VEbCUSAoRRTE549OA0Njnk7c-sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.159.0/24 89.144.43.0/24 Signature Algorithm: sha256WithRSAEncryption e8:ed:c0:bc:22:59:b0:4a:0e:14:19:dc:aa:b6:41:35:12:28: 85:f5:e8:98:94:95:14:75:56:98:9f:73:56:de:27:91:f8:b3: 6f:39:bd:6a:c2:46:fb:f0:dd:f0:50:e7:c2:ce:bf:22:df:4e: 1f:c9:07:ed:48:d2:b8:6c:3c:1f:b1:66:e2:f5:65:44:e5:2a: 5a:c4:4b:10:46:5c:95:ba:82:3d:37:fc:0c:ab:f0:3e:28:fd: b3:43:8b:73:0c:99:ef:9b:8f:02:24:ad:d9:08:86:af:a0:19: 94:e9:07:0d:9e:32:3b:1d:57:5a:ef:f3:70:d6:7d:e1:46:6d: e2:a9:65:7f:0e:06:8b:9f:bf:c0:4d:27:a6:3f:ad:cd:0f:be: 73:41:0c:67:6f:1d:03:94:c6:ab:3c:75:41:d6:cb:14:95:fc: 4a:07:76:83:f0:07:d5:f6:a4:75:81:f9:12:90:97:31:ac:00: f2:6b:eb:f1:a3:2f:c9:f3:4b:01:75:8f:ce:9a:8c:fa:3f:1c: 8c:79:de:a0:aa:93:df:b2:0c:df:61:80:79:ee:2f:b6:72:9c: b2:0b:3f:b4:27:d9:7f:1a:f8:c5:a8:f1:74:81:f7:23:07:5c: 7b:ed:12:55:ae:34:72:c0:bb:79:93:e0:32:34:52:73:aa:19: 9e:37:d4:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Es+oU67OPUZ0mGjWhO7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQ2YzI1MTIwMjg0NTE0YzRlNzhmNGUwMzQzNjM5ZTRlZGNmYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuaBVP4gYdNQumI/pA3qy8tg5hLb BgaXME9OZpRrsrB4T3ROOMZUW3jpD92co1yszwNdza9gi2+3Es+fpm3/W2mJ4lrE EkcORSXyIwrOcUDjvJVSgSWzUYuIfN+cVNdf/ls4pmD2P7x5teRidXY16PcWBP2x JNA1RylEagRv8vz1kYSc2Jer23PoYdRq8ZHWU4fs0SlQQ61WRZqunLyIXKys8RYd /fjr+StHjxejC2q6DtDSY70egU+zbsaaRYxthBUG+SOFyF3aPGer6pecdpfxtlA1 z3c7F0dllKB99YatfJnjsWzx2g/cYUqv8znPz8pQ9dLB6QyB5FXOpCxWmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFRGwlEgKEUUxOePTgNDY55O3PrAMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVkViQ1VTQW9SUlRFNTQ5T0EwTmpuazdjLXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOfAwQA WZArMA0GCSqGSIb3DQEBCwUAA4IBAQDo7cC8IlmwSg4UGdyqtkE1EiiF9eiYlJUU dVaYn3NW3ieR+LNvOb1qwkb78N3wUOfCzr8i304fyQftSNK4bDwfsWbi9WVE5Spa xEsQRlyVuoI9N/wMq/A+KP2zQ4tzDJnvm48CJK3ZCIavoBmU6QcNnjI7HVda7/Nw 1n3hRm3iqWV/DgaLn7/ATSemP63ND75zQQxnbx0DlMarPHVB1ssUlfxKB3aD8AfV 9qR1gfkSkJcxrADya+vxoy/J80sBdY/Omoz6PxyMed6gqpPfsgzfYYB57i+2cpyy Cz+0J9l/GvjFqPF0gfcjB1x77RJVrjRywLt5k+AyNFJzqhmeN9TB -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:28 2026 by rpki-client