This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa File: vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa (raw, json) Hash identifier: 4l/78DSO4hiILYf4bnV4O0t6abXmefY1wPnf8x4yQ70= Subject key identifier: BC:7D:50:7A:F3:4A:15:07:5D:15:E0:CC:67:E8:D0:73:89:8C:E1:54 Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019B7D5CBC133F210D93FD926A3A254ECDEB Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 178.239.128.0/20 maxlen: 24 195.93.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bc:13:3f:21:0d:93:fd:92:6a:3a:25:4e:cd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc7d507af34a15075d15e0cc67e8d073898ce154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:f7:53:de:bd:d3:dc:b5:6d:61:6b:7f:50: 36:d1:bc:9a:20:01:3f:2a:1d:19:c2:48:60:28:5a: 34:ae:4d:d2:ba:9d:fc:f3:94:a6:b5:83:37:a0:4a: 90:7c:50:30:ec:5d:54:dd:d3:0e:a0:93:6e:c8:4e: fa:72:20:9d:59:c1:3f:05:05:9d:65:6d:e1:68:bd: 31:45:87:c6:b8:b0:17:0f:16:fa:d2:2c:61:d8:93: 81:2d:06:fb:12:e0:95:b0:c5:0a:34:fb:7a:02:59: 7c:52:3c:80:6f:3c:18:3e:4a:ba:74:40:56:53:d7: 48:6b:3c:89:f1:8f:69:b4:47:f0:34:0b:96:27:15: 0e:0b:b3:69:04:13:f3:53:3f:53:ab:b7:97:83:e5: 7d:6b:00:41:06:91:d4:9c:6d:c8:81:3d:ac:6f:9f: 1a:ef:21:2d:84:66:b7:92:74:f3:3e:a5:39:94:ae: c6:b6:6c:e4:c3:90:e5:f6:69:c2:ea:e4:1b:8d:d0: ff:41:a9:5f:c3:ad:66:c0:37:6d:f4:05:29:ec:d1: 41:f8:24:5f:9f:fa:b0:cf:f4:d3:8d:4c:51:3e:cc: 63:5f:85:b1:6d:9d:29:ba:d2:f6:17:5e:3b:fb:ae: 3c:ae:e8:be:38:55:22:fe:97:28:9c:f0:e2:19:66: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:50:7A:F3:4A:15:07:5D:15:E0:CC:67:E8:D0:73:89:8C:E1:54 X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.128.0/20 195.93.178.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:84:1d:af:8c:f5:b5:8b:14:0e:d3:0c:4e:c4:04:c4:b7:bc: f9:63:62:06:6d:58:aa:fb:54:86:3f:3f:03:d1:85:4c:7b:e1: 5d:bc:6f:54:8d:9f:dc:d9:2b:1d:f5:59:89:23:03:40:9a:de: 9f:a1:c8:07:b0:c7:98:e3:12:0c:f2:33:b6:bf:8c:69:5e:d7: 86:91:43:50:0b:ab:4c:f8:99:e3:bd:7a:a1:d3:53:cb:ec:c1: 34:ff:ca:14:21:45:f9:e3:89:f7:33:24:96:89:17:65:08:08: 96:e5:f6:57:60:46:0b:59:04:e8:7e:ab:5a:e6:9b:4f:ac:d1: c1:04:58:6d:27:94:1c:f8:c8:ff:99:d1:ff:48:3d:fe:74:30: ba:91:e9:01:b7:20:cc:87:75:65:02:bf:3b:31:82:64:ea:c2: 84:dd:e1:68:fb:b0:09:65:32:48:1b:c7:d4:da:b8:25:a4:04: c6:50:cb:bc:d3:87:74:fe:38:4f:81:52:49:6c:ef:8b:06:0e: d4:43:bf:34:11:21:14:86:d2:77:71:a1:c5:c5:3a:cb:ad:40: 31:2c:51:70:52:68:6c:1b:97:9c:73:38:12:59:b7:79:ec:74: 59:8f:a3:01:78:11:bb:b7:41:2d:5a:d2:90:57:48:30:a7:2d: 17:7b:e6:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XLwTPyENk/2SajolTs3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzdkNTA3YWYzNGExNTA3NWQxNWUwY2M2N2U4ZDA3Mzg5OGNlMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBb3U96909y1bWFrf1A20byaIAE/ Kh0ZwkhgKFo0rk3Sup3885SmtYM3oEqQfFAw7F1U3dMOoJNuyE76ciCdWcE/BQWd ZW3haL0xRYfGuLAXDxb60ixh2JOBLQb7EuCVsMUKNPt6All8UjyAbzwYPkq6dEBW U9dIazyJ8Y9ptEfwNAuWJxUOC7NpBBPzUz9Tq7eXg+V9awBBBpHUnG3IgT2sb58a 7yEthGa3knTzPqU5lK7Gtmzkw5Dl9mnC6uQbjdD/Qalfw61mwDdt9AUp7NFB+CRf n/qwz/TTjUxRPsxjX4WxbZ0putL2F147+648rui+OFUi/pconPDiGWZzSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLx9UHrzShUHXRXgzGfo0HOJjOFUMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvdkgxUWV2TktGUWRkRmVETVotalFjNG1NNFZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEsu+AAwQB w12yMA0GCSqGSIb3DQEBCwUAA4IBAQCKhB2vjPW1ixQO0wxOxATEt7z5Y2IGbViq +1SGPz8D0YVMe+FdvG9UjZ/c2Ssd9VmJIwNAmt6focgHsMeY4xIM8jO2v4xpXteG kUNQC6tM+JnjvXqh01PL7ME0/8oUIUX544n3MySWiRdlCAiW5fZXYEYLWQTofqta 5ptPrNHBBFhtJ5Qc+Mj/mdH/SD3+dDC6kekBtyDMh3VlAr87MYJk6sKE3eFo+7AJ ZTJIG8fU2rglpATGUMu804d0/jhPgVJJbO+LBg7UQ780ESEUhtJ3caHFxTrLrUAx LFFwUmhsG5ecczgSWbd57HRZj6MBeBG7t0EtWtKQV0gwpy0Xe+YI -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:39 2026 by rpki-client