This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/VMZQ9NDd56nkh5RyTCLwouklkcA.roa File: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (raw, json) Hash identifier: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js= Subject key identifier: 54:C6:50:F4:D0:DD:E7:A9:E4:87:94:72:4C:22:F0:A2:E9:25:91:C0 Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7 Certificate serial: 019B78346879807111A84EDC7CFA9FFF19BB Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/VMZQ9NDd56nkh5RyTCLwouklkcA.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39900 IP address blocks: 194.26.27.0/24 maxlen: 24 2a0b:88c0:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:79:80:71:11:a8:4e:dc:7c:fa:9f:ff:19:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54c650f4d0dde7a9e48794724c22f0a2e92591c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:af:8d:b3:bf:0c:1f:38:b9:6b:98:e4:d0: 7d:a4:45:8e:da:7b:60:8b:fb:21:fa:bd:1d:02:e7: 61:53:18:99:a2:61:f6:22:86:42:af:e8:b5:fc:f5: 76:27:39:ee:dc:02:01:30:7e:55:d2:9f:4a:00:dd: 7f:af:17:c5:cf:37:a8:8a:4a:f0:9a:4c:8e:f7:93: 35:44:75:87:34:1b:fe:90:94:2d:c6:b2:ae:b7:ec: 6e:6b:e4:4b:63:89:29:b0:16:e0:04:0a:ea:42:4f: 90:c7:5e:81:81:35:92:9a:b3:ff:6e:28:21:8f:d5: 52:7d:48:99:6b:12:7c:b8:c6:06:25:6d:ae:26:f4: 0d:5a:36:64:11:7c:af:4d:8b:b4:bc:3c:9c:e9:3c: 1b:21:a6:31:f9:91:8b:96:9a:3c:6e:3d:4c:41:0d: 27:4c:0c:ac:55:71:8d:7d:84:96:8f:e2:2e:b5:a9: 84:5d:2c:0f:1d:ea:77:e6:44:bf:4e:6d:e8:c8:f2: 67:1f:69:92:99:8e:49:b3:ee:d4:04:b3:96:34:fe: 08:e7:fa:1f:a6:c0:12:6f:7e:4f:cf:db:a7:b1:a7: cd:97:2c:38:58:f3:93:8a:2e:9b:75:8c:7f:5a:50: 77:9f:ef:0a:03:86:e9:5d:3e:cb:3a:da:0d:5e:cb: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:50:F4:D0:DD:E7:A9:E4:87:94:72:4C:22:F0:A2:E9:25:91:C0 X509v3 Authority Key Identifier: keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/VMZQ9NDd56nkh5RyTCLwouklkcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.27.0/24 IPv6: 2a0b:88c0:48::/48 Signature Algorithm: sha256WithRSAEncryption 74:aa:15:e2:a2:0c:bd:35:48:92:2b:77:0f:8d:42:4b:c8:5d: cf:bc:1b:7b:25:3b:24:7b:5f:d0:38:fa:04:d9:a3:f8:21:b1: 42:13:4b:c3:b7:e2:c8:f6:2e:a2:e0:c9:18:77:89:0c:fb:0e: fe:94:61:b2:00:ce:c5:b1:c1:bc:a4:12:54:15:9f:bd:87:2e: 41:9e:e8:5b:fe:60:8e:40:18:fe:e8:65:81:e6:b2:d5:1e:44: 50:0e:1b:e3:b9:00:5b:4c:c0:c7:9a:cb:83:cf:d6:ee:9c:65: d9:3d:e1:49:99:a3:5c:e2:c2:c6:e5:a0:79:f4:d0:fe:34:df: 39:7b:9b:0e:b6:c2:0b:af:9c:0e:9d:72:39:a3:ee:ee:8e:e2: ce:e1:cd:cb:31:9e:13:93:b9:02:fa:62:0b:2f:db:f0:ee:7f: 20:ff:12:d2:fd:f0:b6:89:54:1c:17:6d:8a:b3:4e:f3:00:3b: f3:21:99:41:fc:34:ea:b9:2d:6b:43:db:fd:27:48:a1:ca:33: bf:6e:cc:ce:c6:ce:6f:22:4d:62:87:30:6a:5f:71:cd:7b:41: b9:35:03:f0:ab:64:9a:27:62:53:9c:2d:d4:ed:7c:69:0a:51: 53:fc:77:1a:d9:ff:65:6c:bf:2c:87:54:2f:b8:fb:0b:4f:00: 0d:51:d7:89 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NGh5gHERqE7cfPqf/xm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk ZWVhZDcwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGM2NTBmNGQwZGRlN2E5ZTQ4Nzk0NzI0YzIyZjBhMmU5MjU5MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygOvjbO/DB84uWuY5NB9pEWO2ntg i/sh+r0dAudhUxiZomH2IoZCr+i1/PV2Jznu3AIBMH5V0p9KAN1/rxfFzzeoikrw mkyO95M1RHWHNBv+kJQtxrKut+xua+RLY4kpsBbgBArqQk+Qx16BgTWSmrP/bigh j9VSfUiZaxJ8uMYGJW2uJvQNWjZkEXyvTYu0vDyc6TwbIaYx+ZGLlpo8bj1MQQ0n TAysVXGNfYSWj+IutamEXSwPHep35kS/Tm3oyPJnH2mSmY5Js+7UBLOWNP4I5/of psASb35Pz9unsafNlyw4WPOTii6bdYx/WlB3n+8KA4bpXT7LOtoNXsv5GQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFTGUPTQ3eep5IeUckwi8KLpJZHAMB8GA1UdIwQY MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt NDNlYWY3NTY3Y2FhLzEvVk1aUTlORGQ1Nm5raDVSeVRDTHdvdWtsa2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwhobMA8E AgACMAkDBwAqC4jAAEgwDQYJKoZIhvcNAQELBQADggEBAHSqFeKiDL01SJIrdw+N QkvIXc+8G3slOyR7X9A4+gTZo/ghsUITS8O34sj2LqLgyRh3iQz7Dv6UYbIAzsWx wbykElQVn72HLkGe6Fv+YI5AGP7oZYHmstUeRFAOG+O5AFtMwMeay4PP1u6cZdk9 4UmZo1ziwsbloHn00P403zl7mw62wguvnA6dcjmj7u6O4s7hzcsxnhOTuQL6Ygsv 2/DufyD/EtL98LaJVBwXbYqzTvMAO/MhmUH8NOq5LWtD2/0nSKHKM79uzM7Gzm8i TWKHMGpfcc17Qbk1A/CrZJonYlOcLdTtfGkKUVP8dxrZ/2VsvyyHVC+4+wtPAA1R 14k= -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:35 2026 by rpki-client