This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/vrjp4UC1_-klQk8a0d2Jw7eUkDk.roa File: vrjp4UC1_-klQk8a0d2Jw7eUkDk.roa (raw, json) Hash identifier: 7yocnWrpE0HRuW2D4A9hX7dSDx4fCoT0LRXrI0miZIE= Subject key identifier: BE:B8:E9:E1:40:B5:FF:E9:25:42:4F:1A:D1:DD:89:C3:B7:94:90:39 Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Certificate serial: 019B78A347A50EFB6C3A2859097BCDFF0564 Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/vrjp4UC1_-klQk8a0d2Jw7eUkDk.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 192.94.58.0/24 maxlen: 24 193.150.189.0/24 maxlen: 24 193.150.190.0/24 maxlen: 24 193.150.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:47:a5:0e:fb:6c:3a:28:59:09:7b:cd:ff:05:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beb8e9e140b5ffe925424f1ad1dd89c3b7949039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f4:16:5f:13:1d:0c:a2:18:1d:19:0b:b2:4b: 5b:3d:27:c7:51:1f:78:3f:5c:b5:53:fc:1b:be:1b: d4:80:e9:e5:01:63:80:b5:7f:6e:29:6f:62:98:33: 84:a8:6a:af:07:c5:07:6d:b0:a2:ad:bc:72:6a:c7: 57:a8:25:94:87:c0:6f:3a:ed:c9:be:c4:65:48:d7: 3f:fb:b5:1d:57:a5:f4:d9:d1:1a:bc:c2:47:5a:8b: 68:73:8c:75:02:7b:bf:df:67:5c:0e:ce:c0:5e:7c: 7c:ca:a4:85:b9:1f:50:db:05:0d:e7:c3:ac:64:8e: 4f:55:86:ea:64:9f:c1:dd:2c:6c:f6:47:10:08:92: 78:83:fd:7a:2d:b0:68:f4:c6:a5:ea:c3:02:2c:05: 46:9a:5d:4f:17:4a:3f:67:3e:1f:d9:1d:c9:85:ea: 23:02:6c:40:6f:12:c0:92:db:05:30:64:8a:01:23: 0a:9d:ab:e8:08:96:b3:43:0d:5a:ee:8d:18:97:06: 18:7f:6f:29:11:b7:4c:bf:dd:33:1a:1f:9c:20:e6: 67:a5:37:49:34:aa:1f:86:18:a1:ac:98:3e:ab:89: ed:b0:b4:53:d3:58:40:00:15:ca:bb:95:5b:16:33: 16:5b:92:ca:a1:80:4e:68:ac:ab:21:69:0f:9e:5f: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B8:E9:E1:40:B5:FF:E9:25:42:4F:1A:D1:DD:89:C3:B7:94:90:39 X509v3 Authority Key Identifier: keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/vrjp4UC1_-klQk8a0d2Jw7eUkDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.94.58.0/24 193.150.189.0-193.150.191.255 Signature Algorithm: sha256WithRSAEncryption 54:24:7b:02:7a:96:04:f8:85:19:1d:98:52:86:76:2a:f0:6d: a7:b8:82:2c:32:00:1d:d3:c1:31:b2:1d:3a:e6:26:92:a8:0c: c5:f6:15:9b:74:af:48:b4:18:f5:04:d6:de:11:a0:6f:d9:62: c7:00:11:f3:0a:ae:8f:c6:86:83:2c:3c:9e:ca:d7:3d:dd:86: 86:14:ee:c6:14:24:f3:57:0b:40:75:a3:4d:28:23:93:3f:d7: 6a:14:42:6e:7f:26:25:4e:19:ce:7c:26:8f:f6:1d:2c:8b:82: b5:42:b4:3d:0b:d3:d6:0b:d3:42:15:36:7e:93:3a:d6:4c:bc: c7:a1:9c:5e:a3:c0:4a:84:69:9b:15:2c:44:c7:1f:35:09:5b: 84:81:69:0b:ff:a7:23:e9:9a:30:08:4a:47:80:31:b2:b8:d4: c1:a9:57:db:68:88:82:f5:52:be:ce:ec:65:ec:3c:46:23:6a: 69:28:b5:f4:65:93:21:d7:7a:2f:a3:16:ed:4e:bd:f9:58:2c: 5a:07:04:f1:88:f6:3d:eb:c8:3f:18:b6:2d:26:a0:30:7e:a3: c5:dc:96:c9:7d:a3:a7:8c:79:40:d3:6e:35:e5:aa:42:48:21: 90:05:9d:60:5e:ff:9a:35:7d:0a:8e:ea:81:e4:e2:aa:91:57: 90:91:f6:50 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4o0elDvtsOihZCXvN/wVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk MmQ0OTkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWI4ZTllMTQwYjVmZmU5MjU0MjRmMWFkMWRkODljM2I3OTQ5MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvQWXxMdDKIYHRkLsktbPSfHUR94 P1y1U/wbvhvUgOnlAWOAtX9uKW9imDOEqGqvB8UHbbCirbxyasdXqCWUh8BvOu3J vsRlSNc/+7UdV6X02dEavMJHWotoc4x1Anu/32dcDs7AXnx8yqSFuR9Q2wUN58Os ZI5PVYbqZJ/B3Sxs9kcQCJJ4g/16LbBo9Mal6sMCLAVGml1PF0o/Zz4f2R3Jheoj AmxAbxLAktsFMGSKASMKnavoCJazQw1a7o0YlwYYf28pEbdMv90zGh+cIOZnpTdJ NKofhhihrJg+q4ntsLRT01hAABXKu5VbFjMWW5LKoYBOaKyrIWkPnl9pZwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFL646eFAtf/pJUJPGtHdicO3lJA5MB8GA1UdIwQY MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt ZDE1ZmViZGY1ZWNmLzEvdnJqcDRVQzFfLWtsUWs4YTBkMkp3N2VVa0RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwF46MAwD BADBlr0DBAbBloAwDQYJKoZIhvcNAQELBQADggEBAFQkewJ6lgT4hRkdmFKGdirw bae4giwyAB3TwTGyHTrmJpKoDMX2FZt0r0i0GPUE1t4RoG/ZYscAEfMKro/GhoMs PJ7K1z3dhoYU7sYUJPNXC0B1o00oI5M/12oUQm5/JiVOGc58Jo/2HSyLgrVCtD0L 09YL00IVNn6TOtZMvMehnF6jwEqEaZsVLETHHzUJW4SBaQv/pyPpmjAISkeAMbK4 1MGpV9toiIL1Ur7O7GXsPEYjamkotfRlkyHXei+jFu1OvflYLFoHBPGI9j3ryD8Y ti0moDB+o8Xclsl9o6eMeUDTbjXlqkJIIZAFnWBe/5o1fQqO6oHk4qqRV5CR9lA= -----END CERTIFICATE-----Generated at Sat Jan 10 00:25:22 2026 by rpki-client