This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/vmkoqoQ_otv0F89R60xz-Vuo-2g.roa File: vmkoqoQ_otv0F89R60xz-Vuo-2g.roa (raw, json) Hash identifier: iq0VYDEcTpvgBWZIkkSwVuASLLS7URTHNl2Z2J0KqqE= Subject key identifier: BE:69:28:AA:84:3F:A2:DB:F4:17:CF:51:EB:4C:73:F9:5B:A8:FB:68 Certificate issuer: /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af Certificate serial: 019B7C80B7E08714CF4F736801F9435D5E8B Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/vmkoqoQ_otv0F89R60xz-Vuo-2g.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57525 IP address blocks: 185.150.228.0/24 maxlen: 24 185.150.229.0/24 maxlen: 24 185.150.230.0/24 maxlen: 24 185.150.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b7:e0:87:14:cf:4f:73:68:01:f9:43:5d:5e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be6928aa843fa2dbf417cf51eb4c73f95ba8fb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:a9:92:3b:08:32:a0:03:bb:91:54:db:6b: 93:7f:94:77:97:a3:4f:bb:5f:50:8b:03:66:60:b8: b5:6b:e3:9d:c7:d4:ee:eb:b5:f7:eb:ae:d0:9c:49: c4:95:5e:fa:e6:c2:79:f2:74:fc:69:6d:9d:a2:94: e1:15:de:49:58:f0:ac:92:fe:70:f2:84:fc:8b:7b: ce:4f:33:81:55:64:3f:3a:05:1e:f5:85:a9:f9:be: fa:98:c2:48:c8:56:71:67:38:10:69:59:29:ec:da: 0e:df:cf:45:95:88:c9:5a:0f:e8:08:ee:83:27:a0: 2e:13:fd:f3:1f:8b:24:b4:f0:cd:a8:4c:5c:c4:26: 94:51:86:d5:7d:b0:97:6e:55:c9:ac:d2:a6:e2:a5: 7d:59:6e:0a:77:ee:a9:a1:14:36:95:9d:fe:9c:89: 23:cf:bf:8e:bf:1b:5a:ad:75:fa:6f:df:49:b8:f9: 8c:67:65:8d:96:8d:66:33:eb:0d:42:d1:51:2a:df: 4d:6d:ad:00:a0:b9:c4:0c:b0:2a:bf:30:4a:61:54: a3:df:a0:c1:b9:1b:42:96:6e:6a:32:d7:a2:03:f7: 30:bd:9a:62:06:ef:d4:cb:bf:a4:59:d1:c8:3a:e9: 16:20:96:16:96:7d:d0:87:ff:a2:e7:6e:19:f7:5f: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:28:AA:84:3F:A2:DB:F4:17:CF:51:EB:4C:73:F9:5B:A8:FB:68 X509v3 Authority Key Identifier: keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/vmkoqoQ_otv0F89R60xz-Vuo-2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.228.0/22 Signature Algorithm: sha256WithRSAEncryption 22:31:d9:f9:8a:4e:25:07:2b:04:cc:54:2e:f6:b4:2c:a2:69: 53:5a:65:b1:80:78:10:aa:0c:42:30:5c:8e:5b:90:24:51:88: ab:e5:20:7c:6f:fe:10:09:41:08:1b:f9:2d:98:2b:ea:5d:8f: 42:94:46:cf:69:3d:55:cd:ae:e3:b5:64:51:e9:1b:40:f4:bc: 99:39:5c:eb:86:30:2d:92:dd:11:98:ea:dc:93:7a:ec:e4:c4: 6b:af:03:31:ef:e8:38:ad:10:99:26:c9:11:53:7b:6f:6d:57: 09:49:2e:62:59:16:a1:b3:af:fb:b5:39:8a:4c:1a:0a:d7:69: e6:ce:c8:d7:2d:59:7a:51:d4:11:d4:d8:85:72:e0:3d:46:35: 74:09:e8:d2:41:9d:72:6e:16:7d:05:06:fe:7f:6c:5e:5b:88: 3b:33:9d:e0:dc:04:03:37:54:1e:2e:6b:48:42:a7:84:34:10: e4:ee:94:33:d7:cf:0f:41:0d:5b:c5:a1:b3:67:8d:e5:b7:c6: cb:0b:74:3f:72:7f:12:12:c2:88:cb:ea:07:9d:9b:ee:5d:4d: bd:7e:f0:23:63:cc:d7:20:b8:d6:48:63:de:26:65:23:50:32: ab:25:17:c3:c0:09:94:5c:ad:a9:09:71:e6:29:ee:bf:b8:93: e8:06:92:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLfghxTPT3NoAflDXV6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjViMGY1Nzg4ZTU4MTEyM2U1ZTQ5ZjAwMWQ1MmQ3YTdm Y2Y1YWYwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTY5MjhhYTg0M2ZhMmRiZjQxN2NmNTFlYjRjNzNmOTViYThmYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGpkjsIMqADu5FU22uTf5R3l6NP u19QiwNmYLi1a+Odx9Tu67X3667QnEnElV765sJ58nT8aW2dopThFd5JWPCskv5w 8oT8i3vOTzOBVWQ/OgUe9YWp+b76mMJIyFZxZzgQaVkp7NoO389FlYjJWg/oCO6D J6AuE/3zH4sktPDNqExcxCaUUYbVfbCXblXJrNKm4qV9WW4Kd+6poRQ2lZ3+nIkj z7+OvxtarXX6b99JuPmMZ2WNlo1mM+sNQtFRKt9Nba0AoLnEDLAqvzBKYVSj36DB uRtClm5qMteiA/cwvZpiBu/Uy7+kWdHIOukWIJYWln3Qh/+i524Z9190OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5pKKqEP6Lb9BfPUetMc/lbqPtoMB8GA1UdIwQY MBaAFMElsPV4jlgRI+XknwAdUten/PWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NXdzlYaU9XQkVqNWVTZkFCMVMxNmY4OWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzY4MTQtZDIyNy00MGNhLWIzODMt NDY5M2Q4MDZlOGM5LzEvdm1rb3FvUV9vdHYwRjg5UjYweHotVnVvLTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzY4MTQtZDIyNy00MGNhLWIzODMtNDY5M2Q4MDZlOGM5 LzEvd1NXdzlYaU9XQkVqNWVTZkFCMVMxNmY4OWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZbkMA0G CSqGSIb3DQEBCwUAA4IBAQAiMdn5ik4lBysEzFQu9rQsomlTWmWxgHgQqgxCMFyO W5AkUYir5SB8b/4QCUEIG/ktmCvqXY9ClEbPaT1Vza7jtWRR6RtA9LyZOVzrhjAt kt0RmOrck3rs5MRrrwMx7+g4rRCZJskRU3tvbVcJSS5iWRahs6/7tTmKTBoK12nm zsjXLVl6UdQR1NiFcuA9RjV0CejSQZ1ybhZ9BQb+f2xeW4g7M53g3AQDN1QeLmtI QqeENBDk7pQz188PQQ1bxaGzZ43lt8bLC3Q/cn8SEsKIy+oHnZvuXU29fvAjY8zX ILjWSGPeJmUjUDKrJRfDwAmUXK2pCXHmKe6/uJPoBpJu -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:45 2026 by rpki-client