This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ROKVw7cZJS-8r1YilQPe6DbJS1E.roa File: ROKVw7cZJS-8r1YilQPe6DbJS1E.roa (raw, json) Hash identifier: Kr4gEj6a3b4o4sfT0NroyKyZCACkEWtgZ1S7M1dM7OE= Subject key identifier: 44:E2:95:C3:B7:19:25:2F:BC:AF:56:22:95:03:DE:E8:36:C9:4B:51 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F510984E91ACB62849E167C370ADA Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ROKVw7cZJS-8r1YilQPe6DbJS1E.roa Signing time: Thu 01 Jan 2026 12:19:05 +0000 ROA not before: Thu 01 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213107 IP address blocks: 213.238.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:51:09:84:e9:1a:cb:62:84:9e:16:7c:37:0a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44e295c3b719252fbcaf56229503dee836c94b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:7b:47:eb:56:27:53:43:d9:6f:de:0c:a3: 86:03:44:15:83:e8:47:6c:8a:3b:4a:05:bb:b3:16: 8a:11:f8:e9:9c:f6:67:f7:4e:31:db:f6:10:f6:1c: 86:c1:f2:bb:79:da:92:f7:65:ff:3f:a8:e7:8e:2f: bd:d2:30:e7:c0:84:cc:91:b0:6d:83:99:da:9c:eb: 64:7b:53:12:7b:36:ad:36:a6:17:9c:38:d4:67:d3: 1a:61:b6:ce:4d:35:9f:b6:fe:70:43:3b:aa:56:52: 84:3c:f5:47:8f:c7:b9:cd:20:88:83:e4:ad:8e:67: f3:66:32:d4:ec:22:66:95:00:8c:54:6a:1e:64:4f: dd:89:e8:52:ef:b2:02:c3:3f:3c:62:78:6a:2d:83: 8d:39:a4:2a:2f:08:40:9d:f8:11:20:8f:a4:30:96: eb:f8:aa:37:95:ea:25:6a:a1:30:27:b4:91:30:7f: ff:45:3a:f6:35:e5:80:90:36:ec:a2:08:1e:e1:fb: 66:b8:19:98:92:6c:7e:3a:9d:bc:6d:32:2a:83:08: 5c:78:26:c2:bc:7e:83:7d:d5:3c:af:e3:98:c8:cc: 5f:dd:d4:41:a2:19:8b:ed:7a:e3:4d:28:49:f1:a3: 3e:89:91:bf:23:fa:d1:4d:6d:d5:17:99:34:9b:95: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:95:C3:B7:19:25:2F:BC:AF:56:22:95:03:DE:E8:36:C9:4B:51 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ROKVw7cZJS-8r1YilQPe6DbJS1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.184.0/24 Signature Algorithm: sha256WithRSAEncryption 53:c2:61:f7:4d:b1:dd:93:06:36:45:d4:1a:46:a5:89:7f:42: 6f:64:c2:73:ef:94:c0:a5:84:3c:9a:59:5d:8e:1b:59:d6:6d: 9a:cb:4d:32:ff:a9:31:e6:b3:25:cf:7e:0c:01:18:76:24:74: 8a:89:36:95:c9:09:9a:bb:db:2d:78:18:75:9c:e4:af:f6:09: dc:ac:c6:bf:90:7c:2e:9e:fe:57:f3:f1:31:67:41:0e:e8:43: 6c:c7:91:a9:b2:39:41:89:aa:ef:10:90:53:9b:8d:97:bc:ea: 87:3f:cd:0c:5e:ee:1c:83:a0:ad:d2:0c:43:bd:1b:1d:65:19: 36:73:4b:8a:bc:a3:76:f5:e0:bb:12:07:ce:65:2f:fd:7d:83: 61:cf:83:f3:87:ca:bc:c0:6d:47:4b:a1:8a:9f:9e:f7:40:37: 9a:32:be:98:40:23:6b:dd:fa:3c:bd:43:14:9f:0a:09:bf:79: 40:51:c6:dc:7f:32:4a:79:a3:cd:55:3d:06:06:b8:c9:05:4d: b9:00:39:f4:f8:cd:26:63:6e:71:1e:d5:6e:38:e2:8d:e7:2e: f4:f2:d2:81:01:e4:eb:81:09:c8:aa:8b:f1:3a:c2:af:a2:99: 89:59:c0:ed:8c:d7:7a:ab:a9:c2:32:f8:9e:cf:6c:bd:9d:19: 02:47:0d:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f1EJhOkay2KEnhZ8NwraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGUyOTVjM2I3MTkyNTJmYmNhZjU2MjI5NTAzZGVlODM2Yzk0YjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWZ7R+tWJ1ND2W/eDKOGA0QVg+hH bIo7SgW7sxaKEfjpnPZn904x2/YQ9hyGwfK7edqS92X/P6jnji+90jDnwITMkbBt g5nanOtke1MSezatNqYXnDjUZ9MaYbbOTTWftv5wQzuqVlKEPPVHj8e5zSCIg+St jmfzZjLU7CJmlQCMVGoeZE/diehS77ICwz88YnhqLYONOaQqLwhAnfgRII+kMJbr +Ko3leolaqEwJ7SRMH//RTr2NeWAkDbsogge4ftmuBmYkmx+Op28bTIqgwhceCbC vH6DfdU8r+OYyMxf3dRBohmL7XrjTShJ8aM+iZG/I/rRTW3VF5k0m5XIYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETilcO3GSUvvK9WIpUD3ug2yUtRMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvUk9LVnc3Y1pKUy04cjFZaWxRUGU2RGJKUzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e64MA0G CSqGSIb3DQEBCwUAA4IBAQBTwmH3TbHdkwY2RdQaRqWJf0JvZMJz75TApYQ8mlld jhtZ1m2ay00y/6kx5rMlz34MARh2JHSKiTaVyQmau9steBh1nOSv9gncrMa/kHwu nv5X8/ExZ0EO6ENsx5GpsjlBiarvEJBTm42XvOqHP80MXu4cg6Ct0gxDvRsdZRk2 c0uKvKN29eC7EgfOZS/9fYNhz4Pzh8q8wG1HS6GKn573QDeaMr6YQCNr3fo8vUMU nwoJv3lAUcbcfzJKeaPNVT0GBrjJBU25ADn0+M0mY25xHtVuOOKN5y708tKBAeTr gQnIqovxOsKvopmJWcDtjNd6q6nCMviez2y9nRkCRw15 -----END CERTIFICATE-----Generated at Wed Jan 21 15:51:35 2026 by rpki-client