This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/vAlQFpaLpXoMpWo27m8dZRrzZKc.roa File: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (raw, json) Hash identifier: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg= Subject key identifier: BC:09:50:16:96:8B:A5:7A:0C:A5:6A:36:EE:6F:1D:65:1A:F3:64:A7 Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Certificate serial: 019B78A295DFF9B87ED311EDCF9E05A78E15 Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/vAlQFpaLpXoMpWo27m8dZRrzZKc.roa Signing time: Thu 01 Jan 2026 08:17:59 +0000 ROA not before: Thu 01 Jan 2026 08:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207945 IP address blocks: 185.183.72.0/22 maxlen: 22 194.63.152.0/22 maxlen: 22 2a0f:6b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:95:df:f9:b8:7e:d3:11:ed:cf:9e:05:a7:8e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Validity Not Before: Jan 1 08:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc095016968ba57a0ca56a36ee6f1d651af364a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:2f:66:f4:6d:9f:e7:ef:89:74:30:5c:8b: a8:22:b5:d9:31:b5:37:ae:f2:17:18:6d:99:0f:e8: 36:6b:37:ca:00:cf:dc:03:05:81:31:cb:19:1c:fa: 0e:94:43:75:07:f5:08:f6:50:4e:65:96:0c:e6:16: eb:a1:55:d4:0f:3b:7f:72:20:ba:72:de:06:29:63: 21:3c:a3:12:f2:21:86:f2:a3:be:32:ac:44:8a:a2: d3:61:29:d7:e6:b0:65:4b:ee:ff:0f:3f:43:48:9b: f6:e8:ba:fc:0b:20:4b:66:a8:1d:be:49:15:17:a4: 21:38:ff:2c:eb:2a:49:5b:68:d4:32:c8:71:62:a4: b4:bc:77:19:d4:6d:41:61:97:cc:cc:83:f9:60:02: 5e:72:e1:15:9c:59:16:53:6c:5c:54:92:74:0d:0e: 00:6c:b3:e2:ff:90:37:b7:20:61:f8:d8:4d:a6:62: 80:96:04:c2:34:4a:4d:6a:d1:2e:d3:c7:86:51:c1: ff:25:ff:72:67:72:ff:93:55:02:af:e2:6b:99:cc: 79:f4:7b:d0:e2:97:bb:b6:b6:17:cf:e2:9f:4e:66: 65:18:da:8e:58:ea:be:2e:4b:ae:e0:10:ae:58:b4: 2e:11:6a:9e:c5:0f:04:0b:22:e9:54:2b:94:25:39: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:09:50:16:96:8B:A5:7A:0C:A5:6A:36:EE:6F:1D:65:1A:F3:64:A7 X509v3 Authority Key Identifier: keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/vAlQFpaLpXoMpWo27m8dZRrzZKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.72.0/22 194.63.152.0/22 IPv6: 2a0f:6b80::/29 Signature Algorithm: sha256WithRSAEncryption 64:6d:d1:3c:2f:89:29:d6:0e:95:cd:53:12:dc:70:63:d7:07: bd:17:11:5b:f7:93:9b:45:a2:99:45:fe:39:50:ed:98:32:ad: 60:99:a0:a7:0c:54:81:1d:c5:47:61:43:d1:8b:35:0c:74:dd: 22:35:6c:16:1c:8b:56:d6:7f:7e:4e:34:9f:27:f6:4f:25:cf: df:8a:90:bd:dd:30:07:43:3d:7b:bb:d1:28:a5:cb:bb:6c:4d: 11:7e:80:9d:5f:57:54:ea:46:59:01:5e:2c:3e:7a:22:c7:2a: 5e:e2:87:5d:10:0b:55:2b:b2:b9:45:08:43:c0:17:bc:0e:97: 6c:64:ca:fb:39:39:37:ce:7f:53:58:20:d5:03:8c:b4:6a:3b: 11:33:ab:0f:9d:1f:29:09:3a:1a:5b:aa:34:a4:00:40:d3:1c: ef:e7:bc:43:de:88:be:54:67:7b:07:20:9b:a6:d3:ae:ea:d2: a5:67:95:fc:e6:ee:ba:d7:42:77:4e:f5:ae:57:b3:26:ab:af: 59:35:90:12:db:dc:3c:36:a0:cc:3d:3a:f0:69:53:39:de:02: 3b:75:35:ca:41:b2:af:90:bc:44:dc:02:57:5b:70:d2:e5:83: 10:90:be:ba:27:52:d9:90:2b:8d:3e:ab:48:32:73:6d:a0:04: 02:af:aa:70 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4opXf+bh+0xHtz54Fp44VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx MzUwYTEwHhcNMjYwMTAxMDgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzA5NTAxNjk2OGJhNTdhMGNhNTZhMzZlZTZmMWQ2NTFhZjM2NGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI8vZvRtn+fviXQwXIuoIrXZMbU3 rvIXGG2ZD+g2azfKAM/cAwWBMcsZHPoOlEN1B/UI9lBOZZYM5hbroVXUDzt/ciC6 ct4GKWMhPKMS8iGG8qO+MqxEiqLTYSnX5rBlS+7/Dz9DSJv26Lr8CyBLZqgdvkkV F6QhOP8s6ypJW2jUMshxYqS0vHcZ1G1BYZfMzIP5YAJecuEVnFkWU2xcVJJ0DQ4A bLPi/5A3tyBh+NhNpmKAlgTCNEpNatEu08eGUcH/Jf9yZ3L/k1UCr+Jrmcx59HvQ 4pe7trYXz+KfTmZlGNqOWOq+Lkuu4BCuWLQuEWqexQ8ECyLpVCuUJTkubQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLwJUBaWi6V6DKVqNu5vHWUa82SnMB8GA1UdIwQY MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt MGM2YTY3ODIwYTU4LzEvdkFsUUZwYUxwWG9NcFdvMjdtOGRaUnJ6WktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4 LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubdIAwQC wj+YMA0EAgACMAcDBQMqD2uAMA0GCSqGSIb3DQEBCwUAA4IBAQBkbdE8L4kp1g6V zVMS3HBj1we9FxFb95ObRaKZRf45UO2YMq1gmaCnDFSBHcVHYUPRizUMdN0iNWwW HItW1n9+TjSfJ/ZPJc/fipC93TAHQz17u9Eopcu7bE0RfoCdX1dU6kZZAV4sPnoi xype4oddEAtVK7K5RQhDwBe8DpdsZMr7OTk3zn9TWCDVA4y0ajsRM6sPnR8pCToa W6o0pABA0xzv57xD3oi+VGd7ByCbptOu6tKlZ5X85u6610J3TvWuV7Mmq69ZNZAS 29w8NqDMPTrwaVM53gI7dTXKQbKvkLxE3AJXW3DS5YMQkL66J1LZkCuNPqtIMnNt oAQCr6pw -----END CERTIFICATE-----Generated at Wed Jan 21 08:26:08 2026 by rpki-client