This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/vOzWPChss8TD9UUPLWu9ZYXkRZ0.roa File: vOzWPChss8TD9UUPLWu9ZYXkRZ0.roa (raw, json) Hash identifier: erN8YLfmmBWfaeU1n9+ayk671l+2aam6XZCtTahVjxE= Subject key identifier: BC:EC:D6:3C:28:6C:B3:C4:C3:F5:45:0F:2D:6B:BD:65:85:E4:45:9D Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17 Certificate serial: 019B78A2F83CE80CADFED1A60E841F14131C Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/vOzWPChss8TD9UUPLWu9ZYXkRZ0.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 37.99.128.0/18 maxlen: 24 46.184.0.0/17 maxlen: 24 46.184.90.0/24 maxlen: 24 94.77.192.0/18 maxlen: 24 185.139.120.0/22 maxlen: 24 188.248.0.0/15 maxlen: 24 2a02:888::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f8:3c:e8:0c:ad:fe:d1:a6:0e:84:1f:14:13:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcecd63c286cb3c4c3f5450f2d6bbd6585e4459d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:92:df:53:bb:dc:3c:98:9f:1b:5d:e5:44: e6:e2:91:c2:b9:4a:10:97:b2:a0:5f:67:e5:33:73: 9f:6d:38:bf:86:cb:10:be:23:b1:5d:17:8e:3e:6a: 74:83:8c:73:bc:9f:b2:10:a0:93:89:0c:7f:fb:cd: 22:c3:99:20:a4:9e:b1:db:63:cb:c7:0e:e6:c2:b2: 75:19:cc:f9:fe:3d:15:60:86:f6:81:08:7d:14:16: 3e:36:46:4f:fe:17:3b:68:27:e7:dc:41:79:9e:f7: 93:5d:71:43:5d:58:02:96:5e:cb:0e:d0:e8:24:3b: 1f:ab:94:83:50:fa:5e:52:33:cd:1f:d8:a0:9e:ce: 45:08:7f:15:6a:d7:ca:71:6d:30:a6:9b:3a:d1:37: ba:e4:ba:fb:0e:b2:18:16:ac:d0:50:6d:43:12:04: c6:c0:51:2c:cd:f1:90:dc:88:a4:5d:91:24:fb:2f: 88:c3:e9:9c:d1:37:89:9c:28:6a:30:1f:10:d3:70: 32:d8:da:ee:25:d1:0a:26:09:76:44:20:af:16:67: cc:bd:c5:ad:b3:4a:e2:a3:60:16:97:cb:18:43:25: 69:82:ec:de:b4:c0:53:ab:62:ef:4d:f3:b0:c1:56: ff:9d:26:ca:3b:7d:08:79:35:c3:13:24:b9:1a:5b: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EC:D6:3C:28:6C:B3:C4:C3:F5:45:0F:2D:6B:BD:65:85:E4:45:9D X509v3 Authority Key Identifier: keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/vOzWPChss8TD9UUPLWu9ZYXkRZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.99.128.0/18 46.184.0.0/17 94.77.192.0/18 185.139.120.0/22 188.248.0.0/15 IPv6: 2a02:888::/29 Signature Algorithm: sha256WithRSAEncryption 58:11:17:af:c0:8c:b0:c5:77:92:76:7b:c7:96:39:ff:64:c6: d9:4e:68:06:ef:77:19:11:f4:ac:08:9b:81:a9:82:85:c5:89: aa:50:27:af:38:88:fb:0d:33:4b:5c:a7:aa:c0:9d:30:0b:ec: e0:a3:ef:28:b7:98:77:2e:a0:83:f8:0e:ff:f5:05:4d:cf:df: cc:e1:c7:9f:25:7a:53:b5:35:50:ed:6f:fa:12:7b:2a:f1:22: 24:c5:24:66:f3:fe:a6:7d:f5:f7:4e:43:7d:e0:bd:0b:1a:40: e6:c7:e1:1a:76:c6:6c:26:b2:f3:b5:d9:f3:81:52:3d:41:a5: 15:ec:69:e8:cd:a8:db:b0:52:f2:cc:01:ed:f1:88:ab:1e:99: f1:20:cd:65:0f:8a:85:09:ed:45:49:cf:8b:1f:cd:2c:d3:87: 25:72:dd:aa:a3:f1:41:4c:97:00:71:ba:66:71:b8:90:bf:f6: 9f:d6:8a:64:ac:17:17:83:26:84:fa:bc:8e:2a:d8:c2:a1:e4: 23:a7:83:5a:e8:63:77:67:b3:a0:20:b3:d4:00:2b:1d:f5:48: a6:23:0c:f6:48:02:c3:f2:e8:70:8b:8e:27:5e:a3:50:1c:e0: 2f:dd:69:a1:23:0f:1c:12:19:84:dc:b9:75:8d:68:3d:b1:8c: 1b:fc:45:07 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt4ovg86Ayt/tGmDoQfFBMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzIxOTIyMWNjMGEyMTMyNmNlMDA2YzQyODI1YmFjMmJl MzFlMTcwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2VjZDYzYzI4NmNiM2M0YzNmNTQ1MGYyZDZiYmQ2NTg1ZTQ0NTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dWS31O73DyYnxtd5UTm4pHCuUoQ l7KgX2flM3OfbTi/hssQviOxXReOPmp0g4xzvJ+yEKCTiQx/+80iw5kgpJ6x22PL xw7mwrJ1Gcz5/j0VYIb2gQh9FBY+NkZP/hc7aCfn3EF5nveTXXFDXVgCll7LDtDo JDsfq5SDUPpeUjPNH9igns5FCH8VatfKcW0wpps60Te65Lr7DrIYFqzQUG1DEgTG wFEszfGQ3IikXZEk+y+Iw+mc0TeJnChqMB8Q03Ay2NruJdEKJgl2RCCvFmfMvcWt s0rio2AWl8sYQyVpguzetMBTq2LvTfOwwVb/nSbKO30IeTXDEyS5GltuVQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFLzs1jwobLPEw/VFDy1rvWWF5EWdMB8GA1UdIwQY MBaAFPEyGSIcwKITJs4AbEKCW6wr4x4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMt NDVlNjk2YTVhZTQ1LzEvdk96V1BDaHNzOFREOVVVUExXdTlaWVhrUlowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMtNDVlNjk2YTVhZTQ1 LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwQGJWOAAwQH LrgAAwQGXk3AAwQCuYt4AwMBvPgwDQQCAAIwBwMFAyoCCIgwDQYJKoZIhvcNAQEL BQADggEBAFgRF6/AjLDFd5J2e8eWOf9kxtlOaAbvdxkR9KwIm4GpgoXFiapQJ684 iPsNM0tcp6rAnTAL7OCj7yi3mHcuoIP4Dv/1BU3P38zhx58lelO1NVDtb/oSeyrx IiTFJGbz/qZ99fdOQ33gvQsaQObH4Rp2xmwmsvO12fOBUj1BpRXsaejNqNuwUvLM Ae3xiKsemfEgzWUPioUJ7UVJz4sfzSzThyVy3aqj8UFMlwBxumZxuJC/9p/WimSs FxeDJoT6vI4q2MKh5COng1roY3dns6Ags9QAKx31SKYjDPZIAsPy6HCLjideo1Ac 4C/daaEjDxwSGYTcuXWNaD2xjBv8RQc= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:08 2026 by rpki-client