This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa File: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (raw, json) Hash identifier: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4= Subject key identifier: 54:38:B0:46:8F:C3:C3:75:50:9C:09:D6:C3:1B:25:56:5C:0B:1D:32 Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf Certificate serial: 019B7DCB185F6AF1FDEBCAB8C491D3F60DC8 Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa Signing time: Fri 02 Jan 2026 08:20:20 +0000 ROA not before: Fri 02 Jan 2026 08:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42659 IP address blocks: 194.110.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:18:5f:6a:f1:fd:eb:ca:b8:c4:91:d3:f6:0d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf Validity Not Before: Jan 2 08:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5438b0468fc3c375509c09d6c31b25565c0b1d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:c7:73:dd:a4:10:72:0c:3e:9c:0a:98:ca: 09:a5:96:27:4e:ca:32:7b:44:1c:ef:92:8e:7c:f1: 7b:3f:ad:28:22:79:ba:33:82:36:d9:c5:ed:c2:ac: c4:7e:3e:87:be:d8:56:21:ac:29:ec:df:2e:5f:a0: 44:59:be:fa:76:54:41:95:41:b2:98:83:79:e0:38: 42:ec:a0:33:ff:21:ae:bf:98:45:69:82:5f:35:7d: 1f:77:e1:9d:d5:5f:6f:ee:04:1c:42:72:ad:c3:6b: ed:a2:0b:93:66:df:d4:01:ac:3f:a6:f9:e8:a8:af: f3:d6:b8:fb:f6:31:5c:42:e1:44:14:30:5b:7f:2d: 6b:c1:d9:42:e4:8a:a9:32:16:bb:80:58:60:1d:06: 49:e0:f3:be:56:60:9a:6f:23:b6:fe:94:d9:2c:74: 19:8e:9f:a7:04:f0:25:d5:a3:2f:5b:ca:bd:92:24: f6:e2:a9:69:91:3a:ea:bc:be:f3:36:78:f4:af:46: d1:50:b5:8a:08:10:43:f6:98:51:5a:b5:97:e3:c5: 61:f2:17:80:b4:af:75:59:5a:6c:31:9e:61:3b:b7: 95:5f:f9:cc:89:6a:fa:41:ff:40:18:9b:e7:98:52: 1c:7f:07:3b:aa:5a:4e:6b:3b:c0:5e:54:3f:53:a1: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:38:B0:46:8F:C3:C3:75:50:9C:09:D6:C3:1B:25:56:5C:0B:1D:32 X509v3 Authority Key Identifier: keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.136.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:24:1c:9d:df:a8:c1:54:41:07:55:16:e6:1c:e8:cf:66:c9: 80:55:60:35:0a:bf:6e:43:10:5f:60:ad:23:8f:dc:a7:d8:ad: 98:b2:0b:af:1a:1e:93:34:c6:a3:3d:de:61:c2:8d:82:17:be: 13:fe:ad:06:c5:d2:3a:9a:6d:d2:af:46:9a:f4:f1:88:ce:d8: d0:98:03:74:39:db:f0:59:1e:ae:9e:9c:cb:8b:27:60:1b:08: a2:bf:e8:cd:7c:9c:e8:84:a2:41:c6:41:25:74:67:8c:eb:f0: 69:03:19:c8:38:74:01:25:7e:23:7e:3d:c9:53:8a:06:af:15: f8:0d:d4:9c:f1:f2:07:5c:94:57:97:70:8f:a8:62:16:29:a4: af:67:c4:b9:72:d7:01:7e:83:f6:83:b0:c6:9b:9b:97:66:4f: a3:52:86:29:d7:4c:c7:80:d3:e5:c5:b5:91:ed:f7:0f:b0:f7: 15:a8:11:45:a8:82:7b:f8:8d:3a:d8:15:0c:8b:fe:0d:ae:a8: b8:d3:c9:b0:23:a5:05:c1:08:c3:a4:c3:35:0f:4a:4f:d8:6e: 24:6c:5b:bb:fd:2e:50:dd:a2:78:5d:d3:40:df:46:60:08:c6: 2a:44:d5:83:24:92:b3:d0:9c:52:a5:5f:63:00:24:81:cc:f9: c2:c3:e2:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxhfavH968q4xJHT9g3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4 ZjNkYmYwHhcNMjYwMTAyMDgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDM4YjA0NjhmYzNjMzc1NTA5YzA5ZDZjMzFiMjU1NjVjMGIxZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/Hc92kEHIMPpwKmMoJpZYnTsoy e0Qc75KOfPF7P60oInm6M4I22cXtwqzEfj6HvthWIawp7N8uX6BEWb76dlRBlUGy mIN54DhC7KAz/yGuv5hFaYJfNX0fd+Gd1V9v7gQcQnKtw2vtoguTZt/UAaw/pvno qK/z1rj79jFcQuFEFDBbfy1rwdlC5IqpMha7gFhgHQZJ4PO+VmCabyO2/pTZLHQZ jp+nBPAl1aMvW8q9kiT24qlpkTrqvL7zNnj0r0bRULWKCBBD9phRWrWX48Vh8heA tK91WVpsMZ5hO7eVX/nMiWr6Qf9AGJvnmFIcfwc7qlpOazvAXlQ/U6HeqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQ4sEaPw8N1UJwJ1sMbJVZcCx0yMB8GA1UdIwQY MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt OGZlZDUwOTA5NzcwLzEvVkRpd1JvX0R3M1ZRbkFuV3d4c2xWbHdMSFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6IMA0G CSqGSIb3DQEBCwUAA4IBAQCbJByd36jBVEEHVRbmHOjPZsmAVWA1Cr9uQxBfYK0j j9yn2K2YsguvGh6TNMajPd5hwo2CF74T/q0GxdI6mm3Sr0aa9PGIztjQmAN0Odvw WR6unpzLiydgGwiiv+jNfJzohKJBxkEldGeM6/BpAxnIOHQBJX4jfj3JU4oGrxX4 DdSc8fIHXJRXl3CPqGIWKaSvZ8S5ctcBfoP2g7DGm5uXZk+jUoYp10zHgNPlxbWR 7fcPsPcVqBFFqIJ7+I062BUMi/4Nrqi408mwI6UFwQjDpMM1D0pP2G4kbFu7/S5Q 3aJ4XdNA30ZgCMYqRNWDJJKz0JxSpV9jACSBzPnCw+LO -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:08 2026 by rpki-client