This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VbGrX8p4jmxHZRzuDp0S4IJkrhQ.roa File: VbGrX8p4jmxHZRzuDp0S4IJkrhQ.roa (raw, json) Hash identifier: 2GdNeApphxV7YzzqpHm3LTkHv01+9YYODug0Qovgf24= Subject key identifier: 55:B1:AB:5F:CA:78:8E:6C:47:65:1C:EE:0E:9D:12:E0:82:64:AE:14 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EF211BF2A3418C9DE19032000DC7 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VbGrX8p4jmxHZRzuDp0S4IJkrhQ.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207506 IP address blocks: 194.15.54.0/24 maxlen: 24 194.242.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ef:21:1b:f2:a3:41:8c:9d:e1:90:32:00:0d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55b1ab5fca788e6c47651cee0e9d12e08264ae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:23:34:0a:75:00:f1:97:3f:a8:5a:6d:e5: 14:06:40:56:ff:f9:3b:53:fd:09:c5:02:cc:9c:bb: fd:a9:ee:6c:1c:ba:ab:da:ed:b4:e2:18:cc:ba:d3: 59:30:6d:cf:4e:93:87:5f:92:aa:93:34:5f:60:68: 21:f3:ee:89:ab:cc:df:ca:68:49:44:4a:e9:64:78: 1f:5a:36:7f:c5:cf:3f:61:f6:b3:62:71:7a:c2:73: f6:66:64:b6:20:f9:5f:ab:3d:97:3a:52:77:1d:6b: 6d:e1:b2:ff:2a:8b:34:99:97:46:a7:ff:46:b8:14: 70:32:b7:ad:de:06:ba:27:b1:06:37:c5:fd:ed:ac: be:53:fe:73:a8:28:2b:5a:e8:ad:41:b7:c9:ca:fc: 0d:70:8a:97:b8:6f:47:95:64:e3:d6:62:62:4d:e0: 09:b8:8e:6b:56:29:1d:f2:7c:33:9c:1d:a7:57:af: 77:a3:22:92:94:4c:ea:8c:f6:a6:46:59:1d:46:c3: e3:a2:8b:6d:10:b0:0f:1e:15:cd:23:6f:bd:c3:b0: ad:33:38:e7:4a:56:7f:5c:12:c5:f0:09:f3:17:29: 5f:74:fc:e8:b4:98:91:4c:66:2d:65:c2:e0:23:a7: ca:d5:53:94:c2:e0:37:80:84:84:e1:2d:38:0c:6d: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B1:AB:5F:CA:78:8E:6C:47:65:1C:EE:0E:9D:12:E0:82:64:AE:14 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VbGrX8p4jmxHZRzuDp0S4IJkrhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.54.0/24 194.242.97.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:1e:ef:ec:f7:f4:17:84:d3:ed:ca:47:e2:8b:69:5f:65:a2: 81:70:c4:05:c2:b7:03:71:62:16:51:0a:18:55:c7:5f:1e:8f: 60:de:18:fd:c7:be:ca:ae:c3:00:ec:1b:a0:83:60:e6:39:5a: a0:a3:2e:41:d2:f5:6c:d9:22:95:22:e3:d6:be:d9:b8:a5:b7: 59:09:aa:5d:f0:6b:5c:b8:ed:4b:77:ba:31:c5:40:0a:e5:87: 2d:d5:12:f0:e6:b5:a7:c2:fa:d0:b1:af:e2:3b:df:56:41:09: 41:3b:59:cd:e6:7c:cc:19:3b:fd:e3:7f:a5:4f:61:32:ac:ec: c1:15:bd:46:f2:ce:24:94:ac:c1:e7:e9:51:23:53:d6:18:76: c5:c8:ab:e9:dd:b8:7a:f0:5a:0b:75:14:15:60:59:20:6b:bc: ec:a5:a5:12:55:61:05:ae:f9:c8:90:ae:30:50:ca:1c:f3:39: 53:f0:74:d2:4b:ea:0b:13:67:44:32:ff:f7:0a:9a:26:b7:2a: 3e:fe:37:c3:c6:6f:7c:f9:f1:37:21:2f:0c:16:bb:36:f3:0c: c8:64:1c:84:95:44:b2:42:ef:96:3d:df:b5:01:f3:d4:03:71: 2c:39:00:04:78:1f:cb:e5:62:fd:16:0f:53:ee:2e:8e:94:5f: 6a:88:bd:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fe8hG/KjQYyd4ZAyAA3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWIxYWI1ZmNhNzg4ZTZjNDc2NTFjZWUwZTlkMTJlMDgyNjRhZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpcjNAp1APGXP6habeUUBkBW//k7 U/0JxQLMnLv9qe5sHLqr2u204hjMutNZMG3PTpOHX5KqkzRfYGgh8+6Jq8zfymhJ RErpZHgfWjZ/xc8/YfazYnF6wnP2ZmS2IPlfqz2XOlJ3HWtt4bL/Kos0mZdGp/9G uBRwMret3ga6J7EGN8X97ay+U/5zqCgrWuitQbfJyvwNcIqXuG9HlWTj1mJiTeAJ uI5rVikd8nwznB2nV693oyKSlEzqjPamRlkdRsPjoottELAPHhXNI2+9w7CtMzjn SlZ/XBLF8AnzFylfdPzotJiRTGYtZcLgI6fK1VOUwuA3gISE4S04DG1StwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFWxq1/KeI5sR2Uc7g6dEuCCZK4UMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvVmJHclg4cDRqbXhIWlJ6dURwMFM0SUprcmhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwg82AwQA wvJhMA0GCSqGSIb3DQEBCwUAA4IBAQBKHu/s9/QXhNPtykfii2lfZaKBcMQFwrcD cWIWUQoYVcdfHo9g3hj9x77KrsMA7Bugg2DmOVqgoy5B0vVs2SKVIuPWvtm4pbdZ Capd8GtcuO1Ld7oxxUAK5Yct1RLw5rWnwvrQsa/iO99WQQlBO1nN5nzMGTv943+l T2EyrOzBFb1G8s4klKzB5+lRI1PWGHbFyKvp3bh68FoLdRQVYFkga7zspaUSVWEF rvnIkK4wUMoc8zlT8HTSS+oLE2dEMv/3Cpomtyo+/jfDxm98+fE3IS8MFrs28wzI ZByElUSyQu+WPd+1AfPUA3EsOQAEeB/L5WL9Fg9T7i6OlF9qiL3Z -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:13 2026 by rpki-client