This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/vUylfTDcwUjT9ws66e9wdAqPzcg.roa File: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (raw, json) Hash identifier: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ= Subject key identifier: BD:4C:A5:7D:30:DC:C1:48:D3:F7:0B:3A:E9:EF:70:74:0A:8F:CD:C8 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B79108456864D19315B897106D5670C41 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/vUylfTDcwUjT9ws66e9wdAqPzcg.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.163.69.0/24 maxlen: 24 194.195.101.0/24 maxlen: 24 195.252.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:56:86:4d:19:31:5b:89:71:06:d5:67:0c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd4ca57d30dcc148d3f70b3ae9ef70740a8fcdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:2a:99:e8:95:84:20:b3:2a:78:2c:ac:1e: 9e:68:a5:2e:d7:f9:54:d3:21:73:18:87:8a:23:9a: a4:36:7b:e4:30:2a:e9:c7:59:a4:f2:66:d1:9e:cc: 5c:51:04:fb:92:34:1e:02:a8:12:1a:f2:bf:7c:90: ba:44:a0:54:01:bd:d8:7b:e2:b2:99:40:65:3f:e3: e4:79:de:ad:49:d8:54:4a:4a:2f:4b:e7:48:3e:95: f4:d2:24:8a:04:5d:40:8e:19:50:14:ac:b2:d8:18: 9e:e7:0e:a7:02:92:dc:2c:11:16:4b:7f:af:24:b3: 5f:ff:bc:09:79:ec:30:1a:e3:a4:1b:18:b6:57:33: 5a:45:4d:2b:d2:a3:10:46:93:16:40:ff:54:55:22: db:b2:c0:9d:9d:c0:9d:e2:0f:d6:11:d8:c3:23:57: 20:cd:86:bf:18:7b:03:42:41:1a:0a:0c:96:91:cd: e8:6b:22:0e:67:68:b5:36:4b:00:32:98:0a:23:77: 15:c5:2c:b5:9d:db:cb:22:59:d3:00:0b:e5:9e:ba: 53:09:0c:db:82:5c:d2:8d:fe:10:4d:96:5a:93:e8: 2c:98:fa:e7:dd:99:7c:81:6d:b8:35:7c:32:da:10: 77:9a:b8:e6:4a:99:cf:20:25:eb:73:6d:8c:76:9b: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4C:A5:7D:30:DC:C1:48:D3:F7:0B:3A:E9:EF:70:74:0A:8F:CD:C8 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/vUylfTDcwUjT9ws66e9wdAqPzcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.69.0/24 194.195.101.0/24 195.252.172.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:00:a1:69:8a:ec:35:cf:eb:f5:32:90:bf:14:8c:13:08:17: db:12:11:4e:f2:e2:58:bb:78:6d:0c:f1:42:3c:ea:3c:eb:92: 84:d1:b1:67:54:18:eb:c0:8d:89:16:3a:19:47:eb:a6:c3:93: dd:bd:f7:04:68:a5:72:83:15:24:99:aa:a0:49:12:e4:43:4b: 7d:fa:28:d4:ec:01:aa:41:ba:24:35:a8:b0:13:dd:da:d7:94: cd:1e:1b:e2:ee:b3:6e:b6:95:21:30:5d:f9:1c:79:86:41:e5: e0:7d:a6:34:fd:30:29:62:c7:0e:e2:bf:56:da:6f:6d:4c:0e: a4:b3:ac:1e:8b:f1:88:c0:39:38:2f:3f:09:a6:c8:4c:55:17: 54:03:e5:90:89:6c:ca:7a:fd:26:72:93:4c:3f:5f:63:55:12: 03:4e:ea:2a:c6:03:a2:0d:64:6b:ae:c6:2d:28:bf:9f:29:7c: e2:d7:0f:30:73:88:d2:40:5e:31:f1:45:58:84:27:7f:d3:d5: 04:9f:ab:a9:51:91:d0:4a:57:de:6f:bb:f5:99:13:a0:d4:dc: f4:6d:b5:75:72:bf:9a:98:b2:2b:4d:f8:0a:4c:58:9d:cb:b4: 77:f0:eb:f7:1a:cf:cd:45:6e:01:7f:8a:8a:16:ca:0e:85:16: 51:7c:c0:4d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EIRWhk0ZMVuJcQbVZwxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDRjYTU3ZDMwZGNjMTQ4ZDNmNzBiM2FlOWVmNzA3NDBhOGZjZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kqmeiVhCCzKngsrB6eaKUu1/lU 0yFzGIeKI5qkNnvkMCrpx1mk8mbRnsxcUQT7kjQeAqgSGvK/fJC6RKBUAb3Ye+Ky mUBlP+Pked6tSdhUSkovS+dIPpX00iSKBF1AjhlQFKyy2Bie5w6nApLcLBEWS3+v JLNf/7wJeewwGuOkGxi2VzNaRU0r0qMQRpMWQP9UVSLbssCdncCd4g/WEdjDI1cg zYa/GHsDQkEaCgyWkc3oayIOZ2i1NksAMpgKI3cVxSy1ndvLIlnTAAvlnrpTCQzb glzSjf4QTZZak+gsmPrn3Zl8gW24NXwy2hB3mrjmSpnPICXrc22MdpvIQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL1MpX0w3MFI0/cLOunvcHQKj83IMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvdlV5bGZURGN3VWpUOXdzNjZlOXdkQXFQemNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwqNFAwQA wsNlAwQAw/ysMA0GCSqGSIb3DQEBCwUAA4IBAQBNAKFpiuw1z+v1MpC/FIwTCBfb EhFO8uJYu3htDPFCPOo865KE0bFnVBjrwI2JFjoZR+umw5PdvfcEaKVygxUkmaqg SRLkQ0t9+ijU7AGqQbokNaiwE93a15TNHhvi7rNutpUhMF35HHmGQeXgfaY0/TAp YscO4r9W2m9tTA6ks6wei/GIwDk4Lz8JpshMVRdUA+WQiWzKev0mcpNMP19jVRID TuoqxgOiDWRrrsYtKL+fKXzi1w8wc4jSQF4x8UVYhCd/09UEn6upUZHQSlfeb7v1 mROg1Nz0bbV1cr+amLIrTfgKTFidy7R38Ov3Gs/NRW4Bf4qKFsoOhRZRfMBN -----END CERTIFICATE-----Generated at Fri Jan 2 09:26:56 2026 by rpki-client