This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa File: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (raw, json) Hash identifier: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE= Subject key identifier: 56:85:02:E5:D2:E6:AF:0B:E8:E4:85:48:51:0F:6B:7B:25:EC:05:09 Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f Certificate serial: 019B7C7F2442CE341B4A34D8A99FDAA043DF Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa Signing time: Fri 02 Jan 2026 02:17:45 +0000 ROA not before: Fri 02 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 89.251.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:24:42:ce:34:1b:4a:34:d8:a9:9f:da:a0:43:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f Validity Not Before: Jan 2 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=568502e5d2e6af0be8e48548510f6b7b25ec0509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:9c:44:4e:fc:b9:05:72:80:71:26:e6:d0: 6a:38:b1:60:a2:14:dc:bf:db:9f:dc:3a:3c:77:04: a0:6e:ab:e5:51:71:ec:93:31:f5:92:8a:ea:10:fe: 3a:ef:64:4d:f1:e4:ed:a8:8d:85:5f:6d:1a:31:e8: 70:9a:97:56:a2:75:4a:20:f1:52:9c:23:c7:bf:ab: 60:18:d6:7b:a7:0b:51:63:8e:26:e9:fc:81:e2:28: 97:b6:09:5a:ad:98:c0:ea:ab:c2:48:58:4e:7c:5a: 43:fe:40:79:4f:57:37:68:ea:f1:fa:7b:d8:08:61: 4a:60:1a:96:d9:54:3a:49:8d:cc:1c:6f:a5:81:03: dd:66:50:32:5f:39:4a:f0:ea:55:32:d9:3a:37:ba: b7:84:73:e7:1b:f7:21:53:49:83:75:f1:34:fd:02: 83:93:63:34:1f:0d:82:e0:a8:f1:bc:ee:ae:10:74: 2f:ea:b6:c6:1a:79:c8:74:92:ab:a5:1c:d1:8f:f1: 84:b7:68:5c:e8:85:57:5b:7e:f9:b4:72:4d:d5:6e: da:65:d3:41:89:f0:26:cf:37:52:92:9d:f7:93:0f: 4f:eb:e0:83:00:c8:e0:6c:71:17:f1:8a:42:18:2c: 20:88:66:11:d4:dc:79:fc:bf:b9:6e:4e:72:2f:79: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:02:E5:D2:E6:AF:0B:E8:E4:85:48:51:0F:6B:7B:25:EC:05:09 X509v3 Authority Key Identifier: keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.12.0/22 Signature Algorithm: sha256WithRSAEncryption 42:75:4f:37:1a:87:cf:10:94:f7:d0:54:3e:7a:b4:f9:bc:33: d0:7b:2d:87:30:b0:48:dd:eb:f9:8b:ec:1d:28:2a:5d:3c:2e: 69:96:e3:b9:42:1a:95:dc:66:21:a2:7d:b1:c9:69:96:e5:de: 20:9b:6e:74:c4:87:55:53:79:8f:b5:07:5b:dc:92:62:97:5f: 5e:11:a4:c8:8f:49:07:37:e9:f6:92:48:de:18:8d:b5:8c:7f: 10:69:8a:8c:2c:36:36:0b:31:f8:4c:6d:a9:8b:1f:6d:b8:f0: b2:9f:5a:03:4b:db:72:77:6c:05:73:ae:a2:2a:ff:5c:3d:7a: 5b:40:c6:6f:3d:da:f3:59:ac:c9:d1:4c:d1:6e:ef:93:7d:c7: 9e:0b:c9:99:83:69:27:24:5e:00:86:d7:e3:66:cd:f4:47:6f: d5:ba:10:37:31:3e:1b:e4:7e:78:d7:7b:aa:a0:7d:be:f6:e7: 40:84:18:7c:09:aa:e3:d8:0e:0d:95:9f:4f:2e:e5:02:78:64: 87:04:4d:5c:c8:71:e2:22:96:54:d3:83:72:f2:cf:c8:8e:68: c8:21:a6:61:4d:48:e6:b0:26:a9:ae:6a:84:1a:dd:af:56:45: 37:99:d8:25:b1:22:15:07:1f:f3:bc:92:a7:46:e6:a4:52:b9: 15:d6:84:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fyRCzjQbSjTYqZ/aoEPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2NjYThhYTNmMTc4Yjk5OWE0NmU1ZmY0ZmE3ZGFmOWY5 ZjJlNmYwHhcNMjYwMTAyMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njg1MDJlNWQyZTZhZjBiZThlNDg1NDg1MTBmNmI3YjI1ZWMwNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ScRE78uQVygHEm5tBqOLFgohTc v9uf3Do8dwSgbqvlUXHskzH1korqEP4672RN8eTtqI2FX20aMehwmpdWonVKIPFS nCPHv6tgGNZ7pwtRY44m6fyB4iiXtglarZjA6qvCSFhOfFpD/kB5T1c3aOrx+nvY CGFKYBqW2VQ6SY3MHG+lgQPdZlAyXzlK8OpVMtk6N7q3hHPnG/chU0mDdfE0/QKD k2M0Hw2C4KjxvO6uEHQv6rbGGnnIdJKrpRzRj/GEt2hc6IVXW375tHJN1W7aZdNB ifAmzzdSkp33kw9P6+CDAMjgbHEX8YpCGCwgiGYR1Nx5/L+5bk5yL3lPGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFaFAuXS5q8L6OSFSFEPa3sl7AUJMB8GA1UdIwQY MBaAFO98yoqj8Xi5maRuX/T6fa+fny5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAt OTkwNzc3YzM1N2UzLzEvVm9VQzVkTG1yd3ZvNUlWSVVROXJleVhzQlFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAtOTkwNzc3YzM1N2Uz LzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWfsMMA0G CSqGSIb3DQEBCwUAA4IBAQBCdU83GofPEJT30FQ+erT5vDPQey2HMLBI3ev5i+wd KCpdPC5pluO5QhqV3GYhon2xyWmW5d4gm250xIdVU3mPtQdb3JJil19eEaTIj0kH N+n2kkjeGI21jH8QaYqMLDY2CzH4TG2pix9tuPCyn1oDS9tyd2wFc66iKv9cPXpb QMZvPdrzWazJ0UzRbu+TfceeC8mZg2knJF4AhtfjZs30R2/VuhA3MT4b5H5413uq oH2+9udAhBh8Carj2A4NlZ9PLuUCeGSHBE1cyHHiIpZU04Ny8s/IjmjIIaZhTUjm sCaprmqEGt2vVkU3mdglsSIVBx/zvJKnRuakUrkV1oR5 -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client