This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/vSREg_6m_MabpC6JhPX3QzIHx78.roa File: vSREg_6m_MabpC6JhPX3QzIHx78.roa (raw, json) Hash identifier: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0= Subject key identifier: BD:24:44:83:FE:A6:FC:C6:9B:A4:2E:89:84:F5:F7:43:32:07:C7:BF Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB4AFB922C2E63A4247F06EBCBD8B Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/vSREg_6m_MabpC6JhPX3QzIHx78.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60548 IP address blocks: 37.114.50.0/23 maxlen: 23 37.114.52.0/24 maxlen: 24 37.114.54.0/23 maxlen: 23 37.114.63.0/24 maxlen: 24 43.251.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b4:af:b9:22:c2:e6:3a:42:47:f0:6e:bc:bd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd244483fea6fcc69ba42e8984f5f7433207c7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:44:ff:d1:5e:95:e6:f6:7c:01:98:99:bf: 88:18:ee:99:3c:14:f3:d2:54:4a:49:fa:e5:77:29: 1a:dc:03:9b:23:c3:9d:c4:18:8d:0a:30:ad:63:4d: 1d:f6:f2:de:59:42:ea:4d:ff:fd:17:7a:a7:31:9d: 08:1d:94:a5:3d:7d:ac:13:15:92:17:f1:5e:53:1b: bc:17:1a:4b:64:09:d1:05:a8:67:0e:82:11:b6:e7: 5e:ca:f0:ac:3d:37:57:55:db:22:6d:bd:f0:22:19: 55:31:85:fa:ac:61:74:ca:44:49:80:d1:36:cb:67: b1:89:9a:ab:14:87:ed:9a:ce:db:4d:d7:23:fa:d1: db:ef:ff:eb:aa:d2:6f:3d:66:12:47:66:78:d3:19: f1:89:f4:a2:62:a4:6c:57:b2:c7:e2:87:1f:d4:d4: 42:56:f8:29:2b:8e:39:ce:4a:40:ce:6f:53:4b:ae: ac:fb:19:c3:2e:00:45:7f:2e:2c:e5:2b:64:82:8b: 56:7d:15:9a:33:3c:b2:36:f5:a6:af:01:73:7e:b3: 61:58:e2:40:dd:3e:bd:b1:a2:28:f2:2f:88:ca:60: 44:a1:7c:23:b6:8d:2a:f1:d0:03:b0:d4:8a:4c:cd: b3:14:87:9c:a5:dd:b3:b8:b9:b8:16:9f:6a:e7:98: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:44:83:FE:A6:FC:C6:9B:A4:2E:89:84:F5:F7:43:32:07:C7:BF X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/vSREg_6m_MabpC6JhPX3QzIHx78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.50.0-37.114.52.255 37.114.54.0/23 37.114.63.0/24 43.251.160.0/24 Signature Algorithm: sha256WithRSAEncryption 61:03:ff:90:2e:ea:a1:f1:f4:70:6a:b0:17:a1:aa:e3:6a:cb: c7:13:a9:5b:db:70:17:ab:ff:5b:81:16:7e:f8:65:b2:6e:51: e4:0e:db:38:18:26:53:bf:9e:69:11:ba:a8:53:77:e9:0a:79: 54:d2:ea:fc:4a:5a:4f:64:0b:f8:37:b3:66:4e:ad:8a:ae:dc: 10:84:21:a0:78:3b:94:5c:d1:54:14:d7:89:55:e5:7d:f2:ef: 76:f9:73:f3:50:d9:8f:84:b5:18:cd:47:76:7d:fd:83:f8:68: 77:ea:00:7e:dc:74:1e:ae:5f:b8:72:03:9e:1b:3b:65:68:5b: ff:dc:2e:63:81:d9:a8:1d:d4:08:54:a4:c2:6f:b5:8e:87:cf: 4f:cd:a5:90:9f:38:e1:6d:9c:ef:65:5d:5e:0e:d1:1b:8c:3c: 15:c2:93:91:be:44:71:c0:d2:78:55:88:d9:b9:48:55:b5:a0: 2d:f3:59:2e:ac:3a:9f:75:57:85:4b:b7:65:8f:0d:46:8f:a2: 2d:c9:96:c0:0c:85:80:f6:1f:2a:91:0b:4f:5d:0b:39:69:9b: 7b:af:6f:a8:53:95:a6:36:96:71:e8:93:12:b5:ce:e5:70:a2: 0f:2a:7a:1d:df:d2:8f:b7:34:4b:e2:cd:77:cd:c5:b5:df:2e: 85:21:f2:6c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6WrSvuSLC5jpCR/BuvL2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDI0NDQ4M2ZlYTZmY2M2OWJhNDJlODk4NGY1Zjc0MzMyMDdjN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBE/9Feleb2fAGYmb+IGO6ZPBTz 0lRKSfrldyka3AObI8OdxBiNCjCtY00d9vLeWULqTf/9F3qnMZ0IHZSlPX2sExWS F/FeUxu8FxpLZAnRBahnDoIRtudeyvCsPTdXVdsibb3wIhlVMYX6rGF0ykRJgNE2 y2exiZqrFIftms7bTdcj+tHb7//rqtJvPWYSR2Z40xnxifSiYqRsV7LH4ocf1NRC VvgpK445zkpAzm9TS66s+xnDLgBFfy4s5StkgotWfRWaMzyyNvWmrwFzfrNhWOJA 3T69saIo8i+IymBEoXwjto0q8dADsNSKTM2zFIecpd2zuLm4Fp9q55hN0QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFL0kRIP+pvzGm6QuiYT190MyB8e/MB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvdlNSRWdfNm1fTWFicEM2SmhQWDNReklIeDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAElcjID BAAlcjQDBAElcjYDBAAlcj8DBAAr+6AwDQYJKoZIhvcNAQELBQADggEBAGED/5Au 6qHx9HBqsBehquNqy8cTqVvbcBer/1uBFn74ZbJuUeQO2zgYJlO/nmkRuqhTd+kK eVTS6vxKWk9kC/g3s2ZOrYqu3BCEIaB4O5Rc0VQU14lV5X3y73b5c/NQ2Y+EtRjN R3Z9/YP4aHfqAH7cdB6uX7hyA54bO2VoW//cLmOB2agd1AhUpMJvtY6Hz0/NpZCf OOFtnO9lXV4O0RuMPBXCk5G+RHHA0nhViNm5SFW1oC3zWS6sOp91V4VLt2WPDUaP oi3JlsAMhYD2HyqRC09dCzlpm3uvb6hTlaY2lnHokxK1zuVwog8qeh3f0o+3NEvi zXfNxbXfLoUh8mw= -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:27 2026 by rpki-client