This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/vDjy1KPMAH3TSiV_hZ5--50wyxI.roa File: vDjy1KPMAH3TSiV_hZ5--50wyxI.roa (raw, json) Hash identifier: FQd9Beaa45JqvD9rVmO9+h26srDEKaBKJdaetcwtkio= Subject key identifier: BC:38:F2:D4:A3:CC:00:7D:D3:4A:25:7F:85:9E:7E:FB:9D:30:CB:12 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F47C9EE6CF97294FBF113623803D5 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/vDjy1KPMAH3TSiV_hZ5--50wyxI.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198520 IP address blocks: 213.238.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:47:c9:ee:6c:f9:72:94:fb:f1:13:62:38:03:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc38f2d4a3cc007dd34a257f859e7efb9d30cb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:17:b0:1b:18:e3:51:73:4a:c6:78:94:90: c8:59:aa:86:0d:87:b3:d4:c5:e3:a0:36:7d:70:f9: 32:16:47:b9:5d:26:15:5b:f2:6c:43:4d:73:de:1c: 7b:d6:71:bd:55:6c:c8:36:15:82:ab:bf:a0:89:ac: 57:ea:6c:07:e5:95:f2:74:37:55:62:a4:6e:57:9c: ba:37:1d:50:71:8d:9f:7b:5f:6f:54:bd:11:fe:83: f7:11:dd:ea:cb:b5:c1:22:2b:a4:ae:b3:eb:3c:f0: ba:9c:60:48:94:9b:d5:46:c1:30:f3:7f:36:76:de: 1a:33:22:37:33:60:a8:21:d3:9d:d1:4e:3d:fd:23: 0f:45:b5:a6:d6:9d:8c:f8:fa:b4:c9:01:ef:79:64: 6c:51:e1:cb:1f:c5:97:0c:db:33:5b:52:98:f0:b4: ad:63:89:02:24:38:0a:25:26:bf:a4:04:51:67:1e: b5:f3:cc:3d:a6:ff:2d:cc:d9:da:2c:00:1f:c3:2c: 04:ee:2d:22:53:42:a9:84:fc:93:ef:32:a6:18:d5: 43:2a:d6:8a:50:c0:9c:ef:2c:23:7d:8b:e5:77:af: e1:fd:5a:98:2e:3c:30:24:2b:c4:48:95:e1:d8:0f: bc:8e:3f:78:07:9d:a7:38:21:4a:2d:b0:f5:6f:da: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:38:F2:D4:A3:CC:00:7D:D3:4A:25:7F:85:9E:7E:FB:9D:30:CB:12 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/vDjy1KPMAH3TSiV_hZ5--50wyxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.186.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:02:3f:c5:0b:d8:60:a0:85:cc:36:5d:5c:8b:62:6d:81:c5: 86:38:a2:33:e1:42:ff:85:3b:fe:7d:60:22:1a:9e:17:f5:76: ae:47:fd:ae:e5:5d:17:2c:9a:ed:8b:a1:3b:9c:4f:75:60:29: 27:89:23:76:5d:fb:f8:60:d8:25:9b:d4:a4:d4:d0:d8:6c:aa: 42:5d:70:f8:a4:a0:e0:e6:6e:be:0d:15:a0:c2:bc:5e:41:19: 7e:b5:a1:73:87:e4:01:ef:f1:a9:ad:70:0b:51:a7:71:75:7f: e4:46:dc:e1:af:19:d2:09:84:8d:71:f3:15:20:9c:81:3b:38: d8:bd:05:89:ee:60:e9:e9:6d:6a:0e:16:95:83:ae:d9:f3:e1: b4:dd:48:93:84:21:f2:5f:fc:29:70:c0:96:4f:74:44:ab:db: 85:e2:55:5d:ca:80:ca:8f:70:2f:bd:fd:81:20:0d:98:4e:f0: 5f:62:3e:fa:d5:ac:92:32:8e:0c:0b:b0:5a:77:36:d5:49:d1: db:fd:c7:b6:3a:43:61:d7:60:ed:bf:4c:32:87:82:cc:fb:8f: 01:f0:2d:76:01:cb:cc:0d:5b:15:6d:d8:17:d7:41:e3:64:1b: d3:80:b1:e8:b7:59:88:91:26:35:9d:0c:0d:98:5f:bc:3c:02: 8b:db:64:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0fJ7mz5cpT78RNiOAPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzM4ZjJkNGEzY2MwMDdkZDM0YTI1N2Y4NTllN2VmYjlkMzBjYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57gXsBsY41FzSsZ4lJDIWaqGDYez 1MXjoDZ9cPkyFke5XSYVW/JsQ01z3hx71nG9VWzINhWCq7+giaxX6mwH5ZXydDdV YqRuV5y6Nx1QcY2fe19vVL0R/oP3Ed3qy7XBIiukrrPrPPC6nGBIlJvVRsEw8382 dt4aMyI3M2CoIdOd0U49/SMPRbWm1p2M+Pq0yQHveWRsUeHLH8WXDNszW1KY8LSt Y4kCJDgKJSa/pARRZx6188w9pv8tzNnaLAAfwywE7i0iU0KphPyT7zKmGNVDKtaK UMCc7ywjfYvld6/h/VqYLjwwJCvESJXh2A+8jj94B52nOCFKLbD1b9rDtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLw48tSjzAB900olf4WefvudMMsSMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvdkRqeTFLUE1BSDNUU2lWX2haNS0tNTB3eXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e66MA0G CSqGSIb3DQEBCwUAA4IBAQBsAj/FC9hgoIXMNl1ci2JtgcWGOKIz4UL/hTv+fWAi Gp4X9XauR/2u5V0XLJrti6E7nE91YCkniSN2Xfv4YNglm9Sk1NDYbKpCXXD4pKDg 5m6+DRWgwrxeQRl+taFzh+QB7/GprXALUadxdX/kRtzhrxnSCYSNcfMVIJyBOzjY vQWJ7mDp6W1qDhaVg67Z8+G03UiThCHyX/wpcMCWT3REq9uF4lVdyoDKj3Avvf2B IA2YTvBfYj761aySMo4MC7BadzbVSdHb/ce2OkNh12Dtv0wyh4LM+48B8C12AcvM DVsVbdgX10HjZBvTgLHot1mIkSY1nQwNmF+8PAKL22T3 -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:58 2026 by rpki-client