This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1VDIB6OU0D92J-OHzCFSxjzRsBU.roa File: 1VDIB6OU0D92J-OHzCFSxjzRsBU.roa (raw, json) Hash identifier: IhOJmY1vNG/1cjZI8kkMj+rBnr3ef5uHqbQRbRaT3eo= Subject key identifier: D5:50:C8:07:A3:94:D0:3F:76:27:E3:87:CC:21:52:C6:3C:D1:B0:15 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3615183970E1C4D2B32348F081BBD3 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1VDIB6OU0D92J-OHzCFSxjzRsBU.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207027 IP address blocks: 2.59.176.0/22 maxlen: 22 193.36.228.0/24 maxlen: 24 193.37.34.0/24 maxlen: 24 193.176.220.0/24 maxlen: 24 193.193.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:15:18:39:70:e1:c4:d2:b3:23:48:f0:81:bb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d550c807a394d03f7627e387cc2152c63cd1b015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:1b:bb:69:c5:64:32:e5:18:37:a2:92:5a: c9:97:f8:49:f4:93:52:41:43:86:d3:b4:58:6f:8d: 7e:cb:e9:7f:6f:c3:d0:8a:90:2b:11:5e:ed:c1:21: 67:b4:c2:fb:6d:d9:e6:34:62:d1:db:d8:7f:e1:4e: 2e:d6:e1:71:e3:be:e0:26:1c:85:45:ce:11:b4:28: 31:f9:6c:57:3c:ea:94:ad:e6:6d:f1:1c:e4:27:40: 63:0f:66:6c:91:23:cf:d5:07:14:72:bc:3e:31:29: eb:52:01:7c:a9:4d:de:b6:3c:ef:11:70:74:24:04: 8b:50:4a:c5:60:7c:19:bd:a4:d7:93:03:30:9b:99: 2b:4d:ee:38:09:2b:ac:c0:d1:d3:28:f6:9f:08:59: 8b:01:16:a0:5a:cc:ec:ed:37:d5:00:1b:68:ae:5e: cf:24:dc:84:a1:32:f4:bd:4c:09:13:1a:37:e5:71: 20:29:ed:bc:41:64:54:6a:fe:da:9b:85:a8:3b:31: 75:d4:99:58:68:13:16:ce:89:55:1e:2d:09:a4:a3: 35:1c:15:92:26:1a:2d:72:83:95:7f:a1:19:df:03: 82:a7:09:a8:82:13:a5:12:fe:f7:80:8b:c0:5b:b2: 54:f9:68:45:88:6b:26:36:c4:9f:7e:50:d6:02:9d: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:C8:07:A3:94:D0:3F:76:27:E3:87:CC:21:52:C6:3C:D1:B0:15 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1VDIB6OU0D92J-OHzCFSxjzRsBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.176.0/22 193.36.228.0/24 193.37.34.0/24 193.176.220.0/24 193.193.160.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:09:95:34:79:01:45:82:b1:63:69:bd:6d:e5:2f:e7:3f:8d: aa:bc:de:65:a7:bd:6c:a7:8c:a5:74:6f:64:d8:4f:65:d0:8c: 8b:01:7f:07:d3:7b:51:f2:86:76:22:4e:49:d2:e3:52:58:bf: ad:27:4c:6a:7e:ef:d9:17:33:c6:23:bc:ae:85:14:a2:51:0d: 67:77:8e:80:80:5b:92:4b:bc:7b:db:e0:5c:a7:d7:59:84:c4: c2:59:84:d1:8c:17:14:9a:47:68:28:3c:e5:01:1c:d2:c5:22: 31:2e:89:1e:dc:84:f2:b0:ea:f8:8e:3c:2f:b9:18:a6:f3:dd: dc:10:5d:da:4a:75:7a:27:31:3e:c0:a2:8a:f5:21:28:94:12: a9:fe:95:b8:16:8d:e4:37:a8:fa:52:f9:11:1b:1a:8b:19:1b: 15:a8:b1:c6:a8:73:b9:62:85:d4:2b:f8:86:d4:d4:de:9d:d5: 47:61:f4:7e:fd:9b:71:b0:1e:ca:32:10:25:03:3a:38:b4:f6: c3:c8:a4:49:bf:a9:2e:23:0d:d6:9c:18:f9:1f:e4:6d:54:08: f4:0e:80:49:e8:f2:5d:fc:f6:fa:dc:9e:2c:ae:fa:b8:73:a0: b0:5f:24:6a:19:84:84:da:78:04:25:fb:1b:da:99:db:e4:0b: 5f:38:57:a2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7NhUYOXDhxNKzI0jwgbvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTUwYzgwN2EzOTRkMDNmNzYyN2UzODdjYzIxNTJjNjNjZDFiMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Mbu2nFZDLlGDeiklrJl/hJ9JNS QUOG07RYb41+y+l/b8PQipArEV7twSFntML7bdnmNGLR29h/4U4u1uFx477gJhyF Rc4RtCgx+WxXPOqUreZt8RzkJ0BjD2ZskSPP1QcUcrw+MSnrUgF8qU3etjzvEXB0 JASLUErFYHwZvaTXkwMwm5krTe44CSuswNHTKPafCFmLARagWszs7TfVABtorl7P JNyEoTL0vUwJExo35XEgKe28QWRUav7am4WoOzF11JlYaBMWzolVHi0JpKM1HBWS JhotcoOVf6EZ3wOCpwmoghOlEv73gIvAW7JU+WhFiGsmNsSfflDWAp0MJwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNVQyAejlNA/difjh8whUsY80bAVMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvMVZESUI2T1UwRDkySi1PSHpDRlN4anpSc0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCAjuwAwQA wSTkAwQAwSUiAwQAwbDcAwQAwcGgMA0GCSqGSIb3DQEBCwUAA4IBAQCcCZU0eQFF grFjab1t5S/nP42qvN5lp71sp4yldG9k2E9l0IyLAX8H03tR8oZ2Ik5J0uNSWL+t J0xqfu/ZFzPGI7yuhRSiUQ1nd46AgFuSS7x72+Bcp9dZhMTCWYTRjBcUmkdoKDzl ARzSxSIxLoke3ITysOr4jjwvuRim893cEF3aSnV6JzE+wKKK9SEolBKp/pW4Fo3k N6j6UvkRGxqLGRsVqLHGqHO5YoXUK/iG1NTendVHYfR+/ZtxsB7KMhAlAzo4tPbD yKRJv6kuIw3WnBj5H+RtVAj0DoBJ6PJd/Pb63J4srvq4c6CwXyRqGYSE2ngEJfsb 2pnb5AtfOFei -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:45 2026 by rpki-client