This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/vemKapMmkStR7tolVhfdLCFIHqo.roa File: vemKapMmkStR7tolVhfdLCFIHqo.roa (raw, json) Hash identifier: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig= Subject key identifier: BD:E9:8A:6A:93:26:91:2B:51:EE:DA:25:56:17:DD:2C:21:48:1E:AA Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd Certificate serial: 019B7C124885C37BB873B57978C60C1074DD Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/vemKapMmkStR7tolVhfdLCFIHqo.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212033 IP address blocks: 193.3.45.0/24 maxlen: 32 2a10:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:48:85:c3:7b:b8:73:b5:79:78:c6:0c:10:74:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bde98a6a9326912b51eeda255617dd2c21481eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:aa:71:7f:d3:71:68:47:f0:d6:02:a6:c3: 09:19:fc:d1:c9:c3:ab:42:39:5b:16:31:e1:ee:18: a8:6f:59:85:57:f9:a3:3d:fa:15:ce:d8:eb:f1:6f: 85:5e:40:10:98:a8:c1:6b:ba:b4:ac:9d:ad:f7:9e: 95:c1:b0:77:bd:74:a8:26:c8:80:6e:77:de:97:66: 0a:2f:a9:ab:4b:87:35:0f:c6:5a:43:6d:ab:2d:f8: 0b:e6:3e:88:84:dc:d2:71:84:9f:ad:49:eb:6e:3e: a7:4c:30:0d:32:ff:19:a2:1b:d7:72:13:ae:7d:b3: 62:d1:ee:2b:f1:c2:b2:b3:41:f8:6c:bf:e5:d3:98: 8c:77:ae:7a:2f:3e:0d:e0:f7:90:b0:27:2d:c5:47: bd:c5:c3:7a:36:a7:72:7b:66:2e:59:38:72:16:3b: 62:04:a1:7f:02:6e:83:25:b7:61:95:8b:94:46:65: 99:c5:7c:57:ed:00:20:30:af:ed:97:4b:6e:cc:bc: 68:a8:2d:42:d4:7b:d0:f4:ef:01:29:52:36:55:63: 4d:a7:66:4e:a8:53:23:7e:4e:5c:d7:7a:70:87:6b: 69:69:26:d0:f2:86:2c:bf:a5:bd:66:ba:be:f4:a4: 2a:c4:08:71:db:64:79:a2:ce:e5:36:31:9b:d1:1d: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:8A:6A:93:26:91:2B:51:EE:DA:25:56:17:DD:2C:21:48:1E:AA X509v3 Authority Key Identifier: keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/vemKapMmkStR7tolVhfdLCFIHqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.45.0/24 IPv6: 2a10:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 08:7a:9a:8a:93:87:4d:cd:6c:ed:84:9a:7e:88:54:05:d8:a1: 9c:39:99:ca:79:62:f4:81:bb:34:e8:be:7b:8e:b0:95:14:6e: 84:5a:82:fd:9d:86:af:7a:db:54:10:40:a4:38:d4:96:8f:12: 2b:7c:9a:37:fd:f7:d3:3d:96:c8:03:a2:3a:9c:a2:5d:0b:36: 93:de:77:2d:49:f6:6c:a6:9f:d1:1f:d2:1a:99:16:b9:9a:22: 9c:ff:28:e7:16:1a:f7:41:8e:bf:cc:5c:23:51:0b:ac:f1:9b: 42:b6:53:6c:a3:d8:ff:82:69:11:6a:63:f0:10:5d:0e:79:df: 1c:39:36:87:11:c7:d9:72:e4:97:78:07:f5:62:3b:62:c2:8b: be:7e:f7:83:cf:95:39:17:90:92:51:b2:3b:09:b1:ba:f7:08: e9:cf:47:68:84:e9:f8:1b:57:fb:2c:37:bf:6e:25:dd:de:0b: 62:05:1b:84:ac:f1:a2:77:12:2c:f4:c9:10:52:5f:50:fe:48: 41:d6:d4:44:81:ce:92:bd:54:56:e1:21:27:cb:05:2e:6e:03: d8:f1:40:d7:b5:f8:67:39:1d:e2:84:c4:27:7e:9d:e3:d2:72: 90:a8:d0:ed:94:e5:8d:c1:75:47:e1:b0:b2:9b:77:a3:94:26: ea:4c:1b:02 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EkiFw3u4c7V5eMYMEHTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NmFiYjFhZDU2N2U1YmIxZTQ3NWE3MmEwYTY4NDUzZTNm YmExY2QwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGU5OGE2YTkzMjY5MTJiNTFlZWRhMjU1NjE3ZGQyYzIxNDgxZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEOqcX/TcWhH8NYCpsMJGfzRycOr QjlbFjHh7hiob1mFV/mjPfoVztjr8W+FXkAQmKjBa7q0rJ2t956VwbB3vXSoJsiA bnfel2YKL6mrS4c1D8ZaQ22rLfgL5j6IhNzScYSfrUnrbj6nTDANMv8ZohvXchOu fbNi0e4r8cKys0H4bL/l05iMd656Lz4N4PeQsCctxUe9xcN6Nqdye2YuWThyFjti BKF/Am6DJbdhlYuURmWZxXxX7QAgMK/tl0tuzLxoqC1C1HvQ9O8BKVI2VWNNp2ZO qFMjfk5c13pwh2tpaSbQ8oYsv6W9Zrq+9KQqxAhx22R5os7lNjGb0R2hMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL3pimqTJpErUe7aJVYX3SwhSB6qMB8GA1UdIwQY MBaAFCdquxrVZ+W7HkdacqCmhFPj+6HNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYt YmIwZWVkMTNmMjNiLzEvdmVtS2FwTW1rU3RSN3RvbFZoZmRMQ0ZJSHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYtYmIwZWVkMTNmMjNi LzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwQMtMA0E AgACMAcDBQAqEF3AMA0GCSqGSIb3DQEBCwUAA4IBAQAIepqKk4dNzWzthJp+iFQF 2KGcOZnKeWL0gbs06L57jrCVFG6EWoL9nYavettUEECkONSWjxIrfJo3/ffTPZbI A6I6nKJdCzaT3nctSfZspp/RH9IamRa5miKc/yjnFhr3QY6/zFwjUQus8ZtCtlNs o9j/gmkRamPwEF0Oed8cOTaHEcfZcuSXeAf1Yjtiwou+fveDz5U5F5CSUbI7CbG6 9wjpz0dohOn4G1f7LDe/biXd3gtiBRuErPGidxIs9MkQUl9Q/khB1tREgc6SvVRW 4SEnywUubgPY8UDXtfhnOR3ihMQnfp3j0nKQqNDtlOWNwXVH4bCym3ejlCbqTBsC -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:03 2026 by rpki-client