This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/VOWlrP6uxrDIr-SPRswUzsamv9U.roa File: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (raw, json) Hash identifier: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM= Subject key identifier: 54:E5:A5:AC:FE:AE:C6:B0:C8:AF:E4:8F:46:CC:14:CE:C6:A6:BF:D5 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F1599877A11D3AC0E59AE8AEDA7E452 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/VOWlrP6uxrDIr-SPRswUzsamv9U.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 46.182.207.0/24 maxlen: 24 85.208.46.0/24 maxlen: 24 193.149.179.0/24 maxlen: 24 194.179.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:99:87:7a:11:d3:ac:0e:59:ae:8a:ed:a7:e4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54e5a5acfeaec6b0c8afe48f46cc14cec6a6bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:92:b3:e0:ea:0d:6d:36:30:4f:78:19:49: 70:2d:6d:5e:f8:38:a4:e4:e9:13:f9:41:ff:4c:4c: ed:72:83:33:01:f3:b0:90:44:e4:16:c3:ff:70:c9: 06:95:b3:33:0f:0c:d3:c9:90:84:0f:0f:35:dc:1a: a0:6e:82:55:16:68:ce:99:05:f6:e1:b9:23:70:37: d2:ec:94:e9:96:63:64:2d:f6:f8:f5:78:29:36:a4: bf:df:6a:89:9e:f5:11:c3:b4:9d:35:d1:6e:b0:96: ef:4e:87:e1:97:ab:b3:0c:19:63:0c:b9:ef:64:b6: 1b:95:86:6c:4f:8a:80:ec:a7:1b:a8:e2:05:02:c6: de:c4:ee:c3:9d:49:94:2b:f4:10:30:48:0c:82:cf: e8:08:f9:94:d2:be:e9:6d:94:7a:06:a8:8d:d3:d1: 81:e5:7b:f1:9c:d0:79:35:2c:61:e7:62:c0:f7:cb: f9:ca:a5:70:a9:bc:d8:61:f5:f2:7f:d6:e6:e4:fb: 02:3d:c8:73:12:7e:b7:6c:68:ac:e1:8c:c1:78:50: 29:f3:1c:91:32:6d:7a:5d:2b:60:c6:73:7a:4e:d8: 06:a6:6b:db:95:52:b0:70:5a:10:cd:87:e9:f7:02: b4:ef:be:ea:ac:98:19:bb:d1:b4:0f:2e:94:ae:58: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:A5:AC:FE:AE:C6:B0:C8:AF:E4:8F:46:CC:14:CE:C6:A6:BF:D5 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/VOWlrP6uxrDIr-SPRswUzsamv9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.207.0/24 85.208.46.0/24 193.149.179.0/24 194.179.136.0/23 Signature Algorithm: sha256WithRSAEncryption 08:00:34:d7:03:c7:ae:42:03:90:d8:b3:9e:fe:b8:90:2d:d0: 4a:dc:4e:d4:fb:f7:7b:b5:67:7b:86:30:c4:e0:4e:d1:f9:ce: f0:8e:81:64:7d:8b:79:19:52:b3:03:ef:60:a7:8d:e9:0e:c8: 5f:44:f1:e4:c8:48:d3:0f:11:10:11:af:9d:cb:8f:fd:54:a2: e5:4d:0a:78:5e:d2:78:9e:44:5f:d6:a2:96:d5:c7:a8:fa:16: fd:f8:ba:1d:fb:4a:30:3a:f5:3e:7a:14:28:bf:cd:88:2e:2a: d4:ef:6b:fe:bd:60:7c:eb:3a:31:55:ee:5c:94:cc:75:87:5f: 5e:f3:dd:ca:a9:ef:3e:b7:ca:8a:72:7e:93:f8:61:a0:91:7d: 55:3f:8d:fe:d4:15:8d:9a:4b:bb:7b:c6:9b:de:55:0e:4d:d6: 39:ac:df:34:c2:df:f1:52:9f:8e:9e:8f:f2:aa:22:a4:a7:40: 76:c8:90:f3:93:ee:13:79:4e:6a:4b:38:30:e8:c9:95:72:c6: 70:ec:27:02:44:f4:db:f6:7d:1a:cf:4f:9b:8f:23:96:6a:4b: f7:e1:b4:fa:13:a8:3c:4b:11:64:80:e0:0a:1b:3e:2e:5c:83: c4:6d:c1:c6:c5:f5:95:eb:7e:0a:1e:5b:29:48:e7:56:4d:23: 36:db:d1:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FZmHehHTrA5Zrortp+RSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGU1YTVhY2ZlYWVjNmIwYzhhZmU0OGY0NmNjMTRjZWM2YTZiZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcOSs+DqDW02ME94GUlwLW1e+Dik 5OkT+UH/TEztcoMzAfOwkETkFsP/cMkGlbMzDwzTyZCEDw813BqgboJVFmjOmQX2 4bkjcDfS7JTplmNkLfb49XgpNqS/32qJnvURw7SdNdFusJbvTofhl6uzDBljDLnv ZLYblYZsT4qA7KcbqOIFAsbexO7DnUmUK/QQMEgMgs/oCPmU0r7pbZR6BqiN09GB 5XvxnNB5NSxh52LA98v5yqVwqbzYYfXyf9bm5PsCPchzEn63bGis4YzBeFAp8xyR Mm16XStgxnN6TtgGpmvblVKwcFoQzYfp9wK0777qrJgZu9G0Dy6UrljorQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFTlpaz+rsawyK/kj0bMFM7Gpr/VMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvVk9XbHJQNnV4ckRJci1TUFJzd1V6c2FtdjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALrbPAwQA VdAuAwQAwZWzAwQBwrOIMA0GCSqGSIb3DQEBCwUAA4IBAQAIADTXA8euQgOQ2LOe /riQLdBK3E7U+/d7tWd7hjDE4E7R+c7wjoFkfYt5GVKzA+9gp43pDshfRPHkyEjT DxEQEa+dy4/9VKLlTQp4XtJ4nkRf1qKW1ceo+hb9+Lod+0owOvU+ehQov82ILirU 72v+vWB86zoxVe5clMx1h19e893Kqe8+t8qKcn6T+GGgkX1VP43+1BWNmku7e8ab 3lUOTdY5rN80wt/xUp+Ono/yqiKkp0B2yJDzk+4TeU5qSzgw6MmVcsZw7CcCRPTb 9n0az0+bjyOWakv34bT6E6g8SxFkgOAKGz4uXIPEbcHGxfWV634KHlspSOdWTSM2 29FP -----END CERTIFICATE-----Generated at Wed Jan 21 04:57:28 2026 by rpki-client