This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VmNcPIFLFmt8lASZRcTotORQggs.roa File: VmNcPIFLFmt8lASZRcTotORQggs.roa (raw, json) Hash identifier: 4s0uFoDgWGmc6B8fcskIBEcAU4dr7LjBKY1u+A6rmEQ= Subject key identifier: 56:63:5C:3C:81:4B:16:6B:7C:94:04:99:45:C4:E8:B4:E4:50:82:0B Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34D6F4C6D42A7BED7A2D05803631D Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VmNcPIFLFmt8lASZRcTotORQggs.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211522 IP address blocks: 83.147.192.0/24 maxlen: 24 83.147.216.0/24 maxlen: 24 83.147.222.0/24 maxlen: 24 83.147.252.0/24 maxlen: 24 83.147.253.0/24 maxlen: 24 83.147.254.0/24 maxlen: 24 83.147.255.0/24 maxlen: 24 91.186.212.0/24 maxlen: 24 91.186.213.0/24 maxlen: 24 91.186.216.0/24 maxlen: 24 91.186.217.0/24 maxlen: 24 91.186.218.0/24 maxlen: 24 91.186.219.0/24 maxlen: 24 178.253.31.0/24 maxlen: 24 178.253.38.0/24 maxlen: 24 178.253.39.0/24 maxlen: 24 178.253.44.0/24 maxlen: 24 178.253.45.0/24 maxlen: 24 178.253.52.0/24 maxlen: 24 178.253.53.0/24 maxlen: 24 178.253.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4d:6f:4c:6d:42:a7:be:d7:a2:d0:58:03:63:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56635c3c814b166b7c94049945c4e8b4e450820b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:bb:64:2f:c5:53:61:24:b8:ce:75:a1:de: bc:9a:62:aa:c2:26:f9:d8:13:fd:d7:c1:d7:54:93: b9:be:e8:90:cc:18:a3:98:ee:84:88:f9:3c:90:3c: 58:17:36:ef:7f:d8:4d:a6:51:f7:61:6a:15:2e:a6: c5:3a:c6:55:dc:b6:3f:83:73:21:07:58:d0:d4:e8: 7c:70:5f:a9:55:25:7f:27:8c:f1:9f:09:2b:21:ab: 2f:ed:24:05:9e:c1:50:c1:58:6a:cd:10:cd:be:23: 24:3c:2f:5f:eb:ab:a0:f5:37:b2:d6:ca:63:57:ea: 05:db:2f:dd:54:36:6f:c1:17:40:dd:2d:09:de:11: db:a2:61:39:9c:59:ff:ea:b1:4d:57:d4:7e:82:f4: f6:04:35:6c:52:1d:66:45:eb:1e:17:e7:77:bc:87: 5c:1c:48:d7:80:d7:40:d2:83:42:06:6b:47:29:68: 34:67:fe:e6:17:07:91:b9:b7:92:f8:71:e8:bb:7b: c2:aa:bf:5b:b5:74:2e:80:48:4e:eb:a2:88:3a:c7: ee:69:a9:bf:58:19:56:96:d9:5e:53:6b:f4:be:6b: d7:15:33:d7:4e:91:84:41:42:a3:eb:3d:62:8c:09: 5c:69:cf:04:40:4b:7e:6e:13:b4:89:5f:7a:c2:af: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:63:5C:3C:81:4B:16:6B:7C:94:04:99:45:C4:E8:B4:E4:50:82:0B X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VmNcPIFLFmt8lASZRcTotORQggs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.192.0/24 83.147.216.0/24 83.147.222.0/24 83.147.252.0/22 91.186.212.0/23 91.186.216.0/22 178.253.31.0/24 178.253.38.0/23 178.253.44.0/23 178.253.52.0/23 178.253.55.0/24 Signature Algorithm: sha256WithRSAEncryption bb:1c:d6:ad:bc:07:4c:0f:1e:eb:81:1f:56:8a:1d:d9:da:2d: 73:bc:86:1e:c7:2f:e7:29:40:10:ee:12:6e:c2:6a:44:d0:32: fe:83:4d:52:e6:bf:fe:88:6c:7b:e1:1a:05:11:08:08:27:d5: 47:8d:4b:f6:6c:64:db:ab:f8:aa:c4:39:0c:1d:17:2b:d4:93: 6f:52:f6:40:ea:0c:d2:b4:d9:70:05:90:6b:25:0c:f8:fe:a7: 7e:f9:a5:48:fe:9c:94:65:ee:53:f7:fb:1c:28:6a:e9:59:cd: 55:13:52:e4:4a:b9:ab:55:26:db:32:f9:5f:d8:c6:90:57:a6: 54:e7:a6:39:1d:23:1a:2c:bd:b7:63:85:52:3f:d4:9f:d0:ff: 3b:36:e0:4d:3e:bf:f1:ce:34:f6:1b:86:41:7c:ba:4b:dd:a9: 12:8a:93:55:60:7c:9b:4f:a3:e5:31:58:72:e2:16:7a:4e:27: 78:66:82:10:c7:05:85:81:bf:52:cb:02:6b:e1:45:a8:fe:aa: 70:61:bd:e1:7f:1a:70:f3:72:ad:bd:f4:55:d7:16:cb:b9:66: 78:c0:b7:9c:30:b6:22:9b:56:79:a4:6d:17:6c:a5:02:3d:0b: ce:7a:50:d1:da:7d:fb:93:4b:77:f1:99:f7:97:27:85:de:26: 8b:e7:34:f3 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt4o01vTG1Cp77XotBYA2MdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjYzNWMzYzgxNGIxNjZiN2M5NDA0OTk0NWM0ZThiNGU0NTA4MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFG7ZC/FU2EkuM51od68mmKqwib5 2BP918HXVJO5vuiQzBijmO6EiPk8kDxYFzbvf9hNplH3YWoVLqbFOsZV3LY/g3Mh B1jQ1Oh8cF+pVSV/J4zxnwkrIasv7SQFnsFQwVhqzRDNviMkPC9f66ug9Tey1spj V+oF2y/dVDZvwRdA3S0J3hHbomE5nFn/6rFNV9R+gvT2BDVsUh1mReseF+d3vIdc HEjXgNdA0oNCBmtHKWg0Z/7mFweRubeS+HHou3vCqr9btXQugEhO66KIOsfuaam/ WBlWltleU2v0vmvXFTPXTpGEQUKj6z1ijAlcac8EQEt+bhO0iV96wq+2SwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFFZjXDyBSxZrfJQEmUXE6LTkUIILMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVm1OY1BJRkxGbXQ4bEFTWlJjVG90T1JRZ2dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAU5PAAwQA U5PYAwQAU5PeAwQCU5P8AwQBW7rUAwQCW7rYAwQAsv0fAwQBsv0mAwQBsv0sAwQB sv00AwQAsv03MA0GCSqGSIb3DQEBCwUAA4IBAQC7HNatvAdMDx7rgR9Wih3Z2i1z vIYexy/nKUAQ7hJuwmpE0DL+g01S5r/+iGx74RoFEQgIJ9VHjUv2bGTbq/iqxDkM HRcr1JNvUvZA6gzStNlwBZBrJQz4/qd++aVI/pyUZe5T9/scKGrpWc1VE1LkSrmr VSbbMvlf2MaQV6ZU56Y5HSMaLL23Y4VSP9Sf0P87NuBNPr/xzjT2G4ZBfLpL3akS ipNVYHybT6PlMVhy4hZ6Tid4ZoIQxwWFgb9SywJr4UWo/qpwYb3hfxpw83KtvfRV 1xbLuWZ4wLecMLYim1Z5pG0XbKUCPQvOelDR2n37k0t38Zn3lyeF3iaL5zTz -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:04 2026 by rpki-client