This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/VrD_z9WUzqoxuEFUeLh8zCfscNM.roa File: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (raw, json) Hash identifier: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g= Subject key identifier: 56:B0:FF:CF:D5:94:CE:AA:31:B8:41:54:78:B8:7C:CC:27:EC:70:D3 Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9 Certificate serial: 019B7BA3A92546BEA69F3D4458ECB0229616 Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/VrD_z9WUzqoxuEFUeLh8zCfscNM.roa Signing time: Thu 01 Jan 2026 22:18:01 +0000 ROA not before: Thu 01 Jan 2026 22:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35500 IP address blocks: 193.47.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a9:25:46:be:a6:9f:3d:44:58:ec:b0:22:96:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9 Validity Not Before: Jan 1 22:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56b0ffcfd594ceaa31b8415478b87ccc27ec70d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:dd:95:55:3a:58:80:6d:83:81:6b:a2:ee: 05:e4:b4:8c:fb:e5:fa:36:93:a7:b8:be:37:6e:36: f6:9f:84:fe:d7:f4:a9:b9:d6:c0:ec:aa:76:db:ab: 41:53:15:76:b9:33:2b:8d:a9:32:1d:b7:8b:66:1f: e8:90:90:c0:ec:dc:91:82:b3:9f:ea:c4:1f:64:8a: bc:7f:d4:6e:7d:27:62:0f:d0:dd:bf:3e:cc:b3:3e: c0:3f:b3:14:b9:5c:18:27:01:87:86:fe:dc:f4:f3: 8c:c9:e4:3b:72:23:0f:8c:40:c3:68:61:6f:3c:51: a1:2c:e2:d5:5a:ab:ff:0f:a3:09:5a:6d:18:42:93: 0f:ae:1f:05:44:eb:26:55:8d:fb:da:8d:f0:b0:09: 5b:ab:fc:ed:9b:71:48:01:20:62:f1:71:71:94:d3: d2:23:dc:98:37:e8:cf:ce:a9:34:b2:e3:93:0f:19: df:d6:a4:b9:a1:4d:7a:e7:69:2c:76:95:d1:56:17: 97:6b:e7:cc:53:ec:02:88:bd:fa:46:c6:5b:32:d4: 2c:de:53:46:45:5c:8c:31:96:17:bb:6c:b6:ca:2a: 6c:e8:b7:5f:32:32:4f:19:fc:de:4e:33:b1:b3:e3: 06:72:b2:d8:df:e8:7b:28:c5:df:f4:ab:13:e8:77: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B0:FF:CF:D5:94:CE:AA:31:B8:41:54:78:B8:7C:CC:27:EC:70:D3 X509v3 Authority Key Identifier: keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/VrD_z9WUzqoxuEFUeLh8zCfscNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.143.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a2:fb:99:63:55:df:05:41:26:cb:8a:d4:44:58:ac:a0:51: 96:00:5f:ec:22:a6:ae:52:1f:39:d1:89:4b:c0:80:5b:4d:6e: ab:38:03:b9:5b:7d:ff:84:10:b6:59:f7:41:55:9a:1a:3c:ce: fe:60:bd:84:21:a8:0b:d1:56:2d:1a:4a:80:42:e6:99:ac:8e: 54:84:78:a5:71:90:93:a3:c7:7d:f0:e7:e6:5d:61:b0:01:d1: 4b:e9:09:27:d7:f0:22:44:80:48:4c:bf:a0:ab:47:f0:2c:9f: 0e:b2:c9:78:53:54:c0:9f:e1:77:df:09:64:06:2b:ff:b1:ea: 16:50:69:0c:28:77:06:3f:d1:72:de:00:ea:9b:00:74:c4:f7: 8a:c9:36:11:86:7f:63:cc:43:35:d6:c6:59:cb:66:b5:65:3d: 73:39:99:0e:37:dd:fa:1d:84:49:2a:92:5e:07:7c:8a:8a:c8: 84:b7:29:9d:ee:d1:1e:b5:14:73:3b:00:60:2d:0e:16:c7:4e: 73:11:77:96:09:9e:19:54:37:e1:d3:29:c0:32:58:ed:fe:44: 6d:6e:43:49:8a:03:0f:ee:59:43:1d:ea:98:9d:e4:12:5a:fc: f6:db:20:14:fd:dc:7d:cd:b5:14:1f:50:1d:58:8f:47:24:15: 02:e0:df:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o6klRr6mnz1EWOywIpYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNTZmNWMyM2NjZWM2NDY0MDY4NWU0NGQ1OWJjNGI2ZDQ0 ZGFhYjkwHhcNMjYwMTAxMjIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmIwZmZjZmQ1OTRjZWFhMzFiODQxNTQ3OGI4N2NjYzI3ZWM3MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcfdlVU6WIBtg4Frou4F5LSM++X6 NpOnuL43bjb2n4T+1/SpudbA7Kp226tBUxV2uTMrjakyHbeLZh/okJDA7NyRgrOf 6sQfZIq8f9RufSdiD9Ddvz7Msz7AP7MUuVwYJwGHhv7c9POMyeQ7ciMPjEDDaGFv PFGhLOLVWqv/D6MJWm0YQpMPrh8FROsmVY372o3wsAlbq/ztm3FIASBi8XFxlNPS I9yYN+jPzqk0suOTDxnf1qS5oU1652ksdpXRVheXa+fMU+wCiL36RsZbMtQs3lNG RVyMMZYXu2y2yips6LdfMjJPGfzeTjOxs+MGcrLY3+h7KMXf9KsT6Hev9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFaw/8/VlM6qMbhBVHi4fMwn7HDTMB8GA1UdIwQY MBaAFONW9cI8zsZGQGheRNWbxLbUTaq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMt M2NhZGVjNDZlNWMzLzEvVnJEX3o5V1V6cW94dUVGVWVMaDh6Q2ZzY05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMtM2NhZGVjNDZlNWMz LzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS+PMA0G CSqGSIb3DQEBCwUAA4IBAQBAovuZY1XfBUEmy4rURFisoFGWAF/sIqauUh850YlL wIBbTW6rOAO5W33/hBC2WfdBVZoaPM7+YL2EIagL0VYtGkqAQuaZrI5UhHilcZCT o8d98OfmXWGwAdFL6Qkn1/AiRIBITL+gq0fwLJ8Ossl4U1TAn+F33wlkBiv/seoW UGkMKHcGP9Fy3gDqmwB0xPeKyTYRhn9jzEM11sZZy2a1ZT1zOZkON936HYRJKpJe B3yKisiEtymd7tEetRRzOwBgLQ4Wx05zEXeWCZ4ZVDfh0ynAMljt/kRtbkNJigMP 7llDHeqYneQSWvz22yAU/dx9zbUUH1AdWI9HJBUC4N/4 -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:04 2026 by rpki-client