This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vZUc2mijOdQOW-2nC2VnB4qHw00.roa File: vZUc2mijOdQOW-2nC2VnB4qHw00.roa (raw, json) Hash identifier: iaeaOKRhXPtkv/53cxZB4AtlwGoJNqroiWLGkU6UJns= Subject key identifier: BD:95:1C:DA:68:A3:39:D4:0E:5B:ED:A7:0B:65:67:07:8A:87:C3:4D Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B358802E08344D544107DF049D4FE53 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vZUc2mijOdQOW-2nC2VnB4qHw00.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 85.122.229.0/24 maxlen: 24 85.122.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:88:02:e0:83:44:d5:44:10:7d:f0:49:d4:fe:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd951cda68a339d40e5beda70b6567078a87c34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:0e:2b:76:e0:61:fd:41:39:cc:02:2b:ab: d0:77:30:0e:f3:a0:1e:e3:21:fd:d7:fc:47:4e:71: a3:9c:68:61:f4:92:7b:a6:ae:eb:22:dd:81:9e:27: 10:a9:22:c3:0a:7e:b3:e6:b6:8b:18:b5:cc:2b:6c: ed:0a:d6:77:aa:93:c0:9b:72:d7:bc:99:79:79:df: 23:89:c7:04:12:a1:7a:89:08:52:ca:69:1d:c5:8e: 20:59:86:82:0a:06:bf:00:26:69:c4:c0:24:12:51: 94:ff:ae:85:e4:b7:8b:d5:24:da:43:34:8e:a9:82: c0:ec:8e:eb:7c:fa:1f:cb:a0:96:0d:39:1b:d2:c0: 9b:87:55:2d:5b:70:d5:b7:e7:6e:4c:5a:5f:17:91: 5d:86:1d:e3:a1:55:0a:8e:4c:4b:41:f0:f3:e0:e0: 85:24:c0:65:5c:20:59:b7:4c:e2:71:47:21:fd:9e: 96:d6:62:1e:8a:38:a8:c5:b5:f4:f3:f2:b8:a4:ff: 3e:89:dc:a0:a6:8a:f0:13:a7:0f:a5:64:5f:db:d9: 06:7d:eb:c3:68:85:3f:d7:14:8f:94:b8:0c:22:15: 51:d4:34:64:92:42:5e:f5:f5:b7:9f:4c:79:46:65: 89:43:69:29:c3:7c:09:08:21:17:22:0e:42:1f:b0: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:1C:DA:68:A3:39:D4:0E:5B:ED:A7:0B:65:67:07:8A:87:C3:4D X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vZUc2mijOdQOW-2nC2VnB4qHw00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.122.229.0-85.122.230.255 Signature Algorithm: sha256WithRSAEncryption a7:76:2a:17:e1:52:15:22:c4:44:17:0a:47:2d:f6:a4:f0:81: f5:fb:a4:53:99:c2:98:3d:4d:51:e1:74:24:2b:d4:2f:c7:95: a5:d8:58:d0:e2:5e:3f:28:43:fc:3e:fd:92:1b:b7:b1:67:05: 2f:45:49:a8:a6:cd:b8:dc:e1:21:50:72:2f:0d:5e:3a:e7:8c: 3c:9d:fa:cb:b0:18:6e:f2:66:3b:12:fe:0b:d3:14:54:64:03: ca:15:a3:27:c8:fc:1a:43:52:31:82:b7:15:01:a9:77:c3:a3: 93:ca:4f:a1:86:96:f0:4a:18:62:a9:b3:d9:1b:07:9b:20:66: fc:00:a0:51:23:d6:51:9e:a4:6a:1e:ff:62:7c:17:52:2f:01: 2c:95:75:cf:44:8c:e6:7c:67:67:24:40:77:32:9e:75:f9:27: 1e:ce:5b:72:86:ae:94:80:3f:40:3b:aa:49:63:6c:f4:96:c2: 9e:94:63:c1:8f:71:7b:52:d4:a2:59:a2:2f:cb:5c:b9:0b:a0: 55:ca:76:5d:db:e2:99:10:60:69:78:0b:4b:5a:43:4e:f0:65: 6f:24:24:cc:b5:f9:a3:53:b4:44:06:29:13:32:88:cc:ea:31: c9:95:cf:6c:7f:d4:59:61:cc:fb:3a:3f:09:f8:3b:27:84:c9: 60:46:7d:56 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NYgC4INE1UQQffBJ1P5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDk1MWNkYTY4YTMzOWQ0MGU1YmVkYTcwYjY1NjcwNzhhODdjMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5wOK3bgYf1BOcwCK6vQdzAO86Ae 4yH91/xHTnGjnGhh9JJ7pq7rIt2BnicQqSLDCn6z5raLGLXMK2ztCtZ3qpPAm3LX vJl5ed8jiccEEqF6iQhSymkdxY4gWYaCCga/ACZpxMAkElGU/66F5LeL1STaQzSO qYLA7I7rfPofy6CWDTkb0sCbh1UtW3DVt+duTFpfF5Fdhh3joVUKjkxLQfDz4OCF JMBlXCBZt0zicUch/Z6W1mIeijioxbX08/K4pP8+idygporwE6cPpWRf29kGfevD aIU/1xSPlLgMIhVR1DRkkkJe9fW3n0x5RmWJQ2kpw3wJCCEXIg5CH7AoZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL2VHNpooznUDlvtpwtlZweKh8NNMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvdlpVYzJtaWpPZFFPVy0ybkMyVm5CNHFIdzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVeuUD BABVeuYwDQYJKoZIhvcNAQELBQADggEBAKd2KhfhUhUixEQXCkct9qTwgfX7pFOZ wpg9TVHhdCQr1C/HlaXYWNDiXj8oQ/w+/ZIbt7FnBS9FSaimzbjc4SFQci8NXjrn jDyd+suwGG7yZjsS/gvTFFRkA8oVoyfI/BpDUjGCtxUBqXfDo5PKT6GGlvBKGGKp s9kbB5sgZvwAoFEj1lGepGoe/2J8F1IvASyVdc9EjOZ8Z2ckQHcynnX5Jx7OW3KG rpSAP0A7qkljbPSWwp6UY8GPcXtS1KJZoi/LXLkLoFXKdl3b4pkQYGl4C0taQ07w ZW8kJMy1+aNTtEQGKRMyiMzqMcmVz2x/1FlhzPs6Pwn4OyeEyWBGfVY= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:43 2026 by rpki-client