This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/vTP-a1JInjsi0zs43YUjMr0tQhw.roa File: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (raw, json) Hash identifier: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk= Subject key identifier: BD:33:FE:6B:52:48:9E:3B:22:D3:3B:38:DD:85:23:32:BD:2D:42:1C Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f Certificate serial: 019B79ECEDF85722AEED3113894239BB3F72 Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/vTP-a1JInjsi0zs43YUjMr0tQhw.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60654 IP address blocks: 192.42.253.0/24 maxlen: 24 195.5.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ed:f8:57:22:ae:ed:31:13:89:42:39:bb:3f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd33fe6b52489e3b22d33b38dd852332bd2d421c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:61:c6:db:02:7b:fc:66:97:a8:c5:82:a8: 55:4e:63:a9:06:cf:26:f1:7e:2e:a5:98:1f:7d:f1: f1:b5:ab:f5:88:c9:1c:8d:49:b2:6c:6c:99:7c:a4: 3a:95:a6:9d:59:07:3e:14:ab:a8:ba:e7:dd:91:f5: 84:b7:fe:c4:94:90:d4:88:07:b0:ad:29:3a:0b:fe: 0a:00:1b:d1:6c:3d:07:3e:b4:d9:8e:37:ca:4e:0f: a2:ac:6e:b3:f7:a2:5f:be:27:15:3d:25:66:f8:25: 4b:5e:75:36:5d:c8:a4:3b:56:7b:df:40:f0:ee:43: 6d:4a:94:3f:7e:0d:cd:43:7e:aa:d0:0a:ef:00:9b: 8a:97:92:28:55:97:74:71:25:46:c1:2c:07:47:da: 8b:6f:3f:29:4f:e5:16:dd:4d:2b:b0:75:a0:21:c6: 4e:c0:ce:b0:61:85:20:08:b5:a3:8b:76:6f:36:45: ca:98:ef:05:73:4c:ac:fb:9e:c5:a3:22:bb:51:0c: 01:2e:fd:78:ee:82:bd:04:97:e2:2f:08:50:cf:d6: bc:a0:c3:1f:af:c5:50:d8:d5:52:fc:d8:16:7d:b0: 93:8f:8f:d7:49:19:a2:ee:87:1f:97:92:a3:41:ea: bf:e1:f3:2a:66:b1:84:5b:48:d1:00:1f:e7:05:ff: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:FE:6B:52:48:9E:3B:22:D3:3B:38:DD:85:23:32:BD:2D:42:1C X509v3 Authority Key Identifier: keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/vTP-a1JInjsi0zs43YUjMr0tQhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.42.253.0/24 195.5.189.0/24 Signature Algorithm: sha256WithRSAEncryption 79:8b:8e:d1:0e:ce:87:87:b7:7e:ec:f9:9e:01:6f:ec:ec:3a: 27:b3:7e:c6:5b:8f:91:3d:96:d8:c6:b4:1e:75:9b:30:ce:ce: 86:86:a2:2d:9a:16:d7:bb:30:1f:d2:80:c8:be:53:40:52:fd: 52:c2:5f:95:ad:30:9f:1f:73:59:8d:48:aa:8a:ed:80:f2:ae: a1:5d:97:19:08:cc:30:ee:15:2d:a7:d2:dc:54:d3:d9:cf:35: 7a:67:0b:ad:0b:98:5b:31:79:b3:6a:a7:74:94:f6:ec:9b:34: 7e:b2:b2:86:11:90:1e:c3:ac:7d:30:d1:9a:13:60:ad:ca:6d: 11:6c:fe:11:05:fd:ca:d3:74:af:64:5d:66:16:a4:d4:de:d2: 72:27:48:2a:01:14:c9:34:4f:80:47:ac:2d:06:57:66:21:b1: 7a:2a:3f:da:43:66:99:32:7d:8b:f1:5e:c9:fa:42:08:38:1b: aa:1a:34:91:3c:34:44:63:51:5f:2a:99:5f:93:f5:44:9d:0b: 38:f6:54:fa:b0:fc:0c:85:97:67:e1:dc:ac:33:85:27:0d:09: 3c:02:c9:4f:4d:84:99:92:d3:8f:7b:b3:e6:9e:7a:73:b3:ca: 3a:7a:e6:ae:56:a5:c1:74:c9:1a:9e:0e:90:32:fe:b3:c6:d2: c9:f3:2e:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57O34VyKu7TETiUI5uz9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGJmMzFmZDkzNzljYWI1YzUwYWZkMzkyYTJlZTkwNTcx ODgzNWYwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDMzZmU2YjUyNDg5ZTNiMjJkMzNiMzhkZDg1MjMzMmJkMmQ0MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mZhxtsCe/xml6jFgqhVTmOpBs8m 8X4upZgfffHxtav1iMkcjUmybGyZfKQ6laadWQc+FKuouufdkfWEt/7ElJDUiAew rSk6C/4KABvRbD0HPrTZjjfKTg+irG6z96JfvicVPSVm+CVLXnU2XcikO1Z730Dw 7kNtSpQ/fg3NQ36q0ArvAJuKl5IoVZd0cSVGwSwHR9qLbz8pT+UW3U0rsHWgIcZO wM6wYYUgCLWji3ZvNkXKmO8Fc0ys+57FoyK7UQwBLv147oK9BJfiLwhQz9a8oMMf r8VQ2NVS/NgWfbCTj4/XSRmi7ocfl5KjQeq/4fMqZrGEW0jRAB/nBf+wPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL0z/mtSSJ47ItM7ON2FIzK9LUIcMB8GA1UdIwQY MBaAFNHb8x/ZN5yrXFCv05Ki7pBXGINfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUt OGUwYjNmNTg5N2I5LzEvdlRQLWExSkluanNpMHpzNDNZVWpNcjB0UWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUtOGUwYjNmNTg5N2I5 LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCr9AwQA wwW9MA0GCSqGSIb3DQEBCwUAA4IBAQB5i47RDs6Hh7d+7PmeAW/s7Dons37GW4+R PZbYxrQedZswzs6GhqItmhbXuzAf0oDIvlNAUv1Swl+VrTCfH3NZjUiqiu2A8q6h XZcZCMww7hUtp9LcVNPZzzV6ZwutC5hbMXmzaqd0lPbsmzR+srKGEZAew6x9MNGa E2Ctym0RbP4RBf3K03SvZF1mFqTU3tJyJ0gqARTJNE+AR6wtBldmIbF6Kj/aQ2aZ Mn2L8V7J+kIIOBuqGjSRPDREY1FfKplfk/VEnQs49lT6sPwMhZdn4dysM4UnDQk8 AslPTYSZktOPe7Pmnnpzs8o6euauVqXBdMkang6QMv6zxtLJ8y6a -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:13 2026 by rpki-client