This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/vrES8ZRPn5zCw67vXGrWdsUrlYU.roa File: vrES8ZRPn5zCw67vXGrWdsUrlYU.roa (raw, json) Hash identifier: SIvQo4/UCnsgnMUPzKF2UlSpxTrczb6UXhWdfVUU1JA= Subject key identifier: BE:B1:12:F1:94:4F:9F:9C:C2:C3:AE:EF:5C:6A:D6:76:C5:2B:95:85 Certificate issuer: /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3 Certificate serial: 019B79ECBC0B5A8A35AD86C0A47FC0B62F16 Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/vrES8ZRPn5zCw67vXGrWdsUrlYU.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51311 IP address blocks: 178.251.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:0b:5a:8a:35:ad:86:c0:a4:7f:c0:b6:2f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beb112f1944f9f9cc2c3aeef5c6ad676c52b9585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:4d:ef:54:32:1e:48:51:04:fe:0d:a7:eb: 07:65:60:1b:1d:84:63:f7:43:12:64:81:b4:d0:72: 55:c0:ee:6d:45:69:1b:f9:b6:cc:66:aa:47:f4:13: d3:db:bb:2f:58:2d:30:3a:0f:06:46:6e:16:90:7c: e0:1c:9f:8d:06:dc:36:67:f7:dc:fe:13:a5:d3:48: a0:91:cd:df:26:e6:60:cb:56:5b:15:91:66:5a:76: 92:80:2b:7f:f1:5a:bc:0c:a5:d2:c5:8e:15:55:a9: bf:7a:f0:08:1a:5c:7d:2c:c8:38:78:a1:64:a0:fa: f4:ef:25:b5:f8:3c:ff:fe:d6:73:46:46:c1:82:95: d6:70:b5:d5:32:ea:35:fb:b6:2f:52:4e:d9:f7:fd: d5:84:ea:40:83:78:9d:70:03:c3:0d:b5:44:fb:c3: 7b:27:12:6b:a1:b1:da:8b:7e:f4:21:b9:0a:01:49: 81:81:f0:cd:e9:88:99:ef:ce:70:49:52:40:ba:ab: e2:57:6b:88:cd:7d:c0:aa:3f:bf:59:b4:95:ee:36: 0e:d3:fd:04:10:35:d7:28:f4:c8:01:6b:aa:11:9a: 54:06:7d:0d:6c:51:74:5c:05:30:b6:65:2c:82:72: 68:57:80:3c:6f:6a:63:35:a0:a5:5a:7e:35:a5:3f: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B1:12:F1:94:4F:9F:9C:C2:C3:AE:EF:5C:6A:D6:76:C5:2B:95:85 X509v3 Authority Key Identifier: keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/vrES8ZRPn5zCw67vXGrWdsUrlYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.152.0/21 Signature Algorithm: sha256WithRSAEncryption 88:5b:8d:bc:64:8e:2d:cf:83:29:22:54:a8:69:85:36:c5:1a: 83:7f:0f:68:0c:55:e7:3c:dd:01:fa:79:26:b5:04:35:35:0b: a8:b3:42:5d:1a:19:43:e3:1e:0c:85:3c:1c:e9:bd:15:68:96: b3:51:ae:c4:90:42:a0:75:66:0c:c1:64:c6:52:52:cb:9e:b0: 6d:1b:42:b9:6c:f0:1d:bd:0c:ac:03:1f:65:0b:d9:8a:51:7b: 7d:96:ab:71:17:3b:9b:59:7a:2c:88:f6:6b:33:55:7a:c8:7f: e6:a0:d8:a5:bb:87:04:fe:df:26:19:7f:53:67:6c:46:a9:57: 88:38:43:aa:4f:f0:2c:38:2e:fb:6d:42:c3:b3:ab:eb:b8:9d: b6:5f:c5:fc:67:56:26:06:e6:0c:da:69:f1:18:62:fa:02:5e: 1c:b7:bd:07:8f:05:33:45:1c:c8:a8:aa:b2:71:fb:fc:44:a3: ec:d4:53:f6:ba:1e:43:28:ca:8e:fe:78:ad:9c:71:62:46:0b: 5b:55:db:96:dc:eb:94:e5:af:96:02:2c:e4:71:59:6a:44:8f: bc:00:21:68:02:e6:2a:79:86:66:c4:44:36:b2:15:16:4e:25: 9c:ce:91:65:6f:bc:27:e7:c6:54:0f:b7:48:f5:cc:1d:92:e5: e6:1e:46:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LwLWoo1rYbApH/Ati8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYWM4ZGZmNGU5OWQzZTIyODlhZjYzYjE1ZDU1ZDI0NTBj ODQyYzMwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWIxMTJmMTk0NGY5ZjljYzJjM2FlZWY1YzZhZDY3NmM1MmI5NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdlN71QyHkhRBP4Np+sHZWAbHYRj 90MSZIG00HJVwO5tRWkb+bbMZqpH9BPT27svWC0wOg8GRm4WkHzgHJ+NBtw2Z/fc /hOl00igkc3fJuZgy1ZbFZFmWnaSgCt/8Vq8DKXSxY4VVam/evAIGlx9LMg4eKFk oPr07yW1+Dz//tZzRkbBgpXWcLXVMuo1+7YvUk7Z9/3VhOpAg3idcAPDDbVE+8N7 JxJrobHai370IbkKAUmBgfDN6YiZ785wSVJAuqviV2uIzX3Aqj+/WbSV7jYO0/0E EDXXKPTIAWuqEZpUBn0NbFF0XAUwtmUsgnJoV4A8b2pjNaClWn41pT+7lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6xEvGUT5+cwsOu71xq1nbFK5WFMB8GA1UdIwQY MBaAFCKsjf9OmdPiKJr2OxXVXSRQyELDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUt ODI5OThhOTI4N2UyLzEvdnJFUzhaUlBuNXpDdzY3dlhHcldkc1VybFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUtODI5OThhOTI4N2Uy LzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvuYMA0G CSqGSIb3DQEBCwUAA4IBAQCIW428ZI4tz4MpIlSoaYU2xRqDfw9oDFXnPN0B+nkm tQQ1NQuos0JdGhlD4x4MhTwc6b0VaJazUa7EkEKgdWYMwWTGUlLLnrBtG0K5bPAd vQysAx9lC9mKUXt9lqtxFzubWXosiPZrM1V6yH/moNilu4cE/t8mGX9TZ2xGqVeI OEOqT/AsOC77bULDs6vruJ22X8X8Z1YmBuYM2mnxGGL6Al4ct70HjwUzRRzIqKqy cfv8RKPs1FP2uh5DKMqO/nitnHFiRgtbVduW3OuU5a+WAizkcVlqRI+8ACFoAuYq eYZmxEQ2shUWTiWczpFlb7wn58ZUD7dI9cwdkuXmHkYA -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:30 2026 by rpki-client