This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa File: vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa (raw, json) Hash identifier: I6XTBHfwaQQIOTboVRUtz1BJpRM00zCr9ZjaQJkslfg= Subject key identifier: BE:64:01:E6:B6:FC:53:C6:52:29:61:0E:8D:BC:C5:AE:70:5C:F0:C4 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F81339897AB42C8A365027527D8A2B9 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa Signing time: Fri 02 Jan 2026 16:18:52 +0000 ROA not before: Fri 02 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204242 IP address blocks: 213.152.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:33:98:97:ab:42:c8:a3:65:02:75:27:d8:a2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be6401e6b6fc53c65229610e8dbcc5ae705cf0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:8d:61:6d:60:5a:4b:c0:17:a9:a6:fa:49: 73:4b:dd:81:20:f8:8c:dd:79:90:ef:8a:40:95:de: 8c:b3:7a:84:71:53:2c:b9:d0:a1:2e:94:41:cf:c7: d2:73:97:3d:85:80:ad:df:3c:51:85:d6:6c:14:55: 65:d8:8a:da:64:9c:9c:ee:25:f2:7e:44:1a:2f:d0: f5:d6:3f:dc:3c:ce:0f:df:95:6d:d9:81:a6:7d:6c: 58:ef:48:15:9b:33:8c:07:34:ce:c0:7a:1a:99:89: 29:f0:d8:0c:65:eb:43:1d:ad:3e:3c:48:e3:08:6f: 91:2f:bc:d4:fa:bd:39:55:55:d4:92:1f:58:fb:b7: b6:4e:8f:e7:11:45:7c:de:86:84:33:14:2b:c1:ce: d7:96:dc:0e:43:17:e6:90:b9:d8:9e:60:74:6d:51: 1b:06:9c:8c:71:c3:a4:6a:4b:ea:3a:5a:4c:99:34: df:92:62:73:c3:66:4a:ea:42:94:e4:43:06:5a:c6: 21:b3:ec:03:f2:33:87:28:f9:13:a3:f8:fa:99:d4: 19:cf:f1:63:04:c7:f4:37:00:f2:fb:72:c9:c1:4e: a8:b4:52:23:35:e9:cd:7a:be:83:78:32:97:7b:b6: 62:c6:9d:71:3b:d4:55:68:4e:29:6c:68:52:bf:dd: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:64:01:E6:B6:FC:53:C6:52:29:61:0E:8D:BC:C5:AE:70:5C:F0:C4 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.152.241.0/24 Signature Algorithm: sha256WithRSAEncryption 40:75:b0:54:17:84:72:58:5a:9e:60:4a:a2:d4:65:48:cf:82: 47:2f:eb:80:1c:60:37:ea:3a:3e:e9:30:e7:28:91:4b:73:66: 9f:3a:9f:25:e5:73:87:65:ec:5f:f2:34:c9:cf:96:cb:bc:82: ba:38:0a:ca:c5:89:87:04:be:af:ef:10:50:c0:45:d2:39:df: 9c:25:30:62:12:eb:1a:c5:21:d7:88:9b:43:fe:73:c2:e7:09: ab:f5:f0:3a:52:9e:03:ce:cf:ad:99:f6:fd:18:e4:61:ff:9c: ae:b8:40:ae:7c:44:2d:e3:8a:fa:78:c7:fa:4e:44:72:9e:28: eb:e7:da:79:36:62:22:e2:59:1a:74:fb:f4:a9:81:ff:dc:d0: 8f:74:33:ac:ca:b8:11:cf:f3:67:84:61:ac:24:2d:d4:d7:0c: a1:86:18:2a:4a:90:ca:9c:3d:9b:c0:72:e9:f0:3d:b0:c6:74: 12:72:42:56:47:b0:08:c7:ed:55:84:76:dd:01:f6:e0:21:3b: 15:31:d9:c2:af:0b:80:34:18:85:d8:e0:c9:cb:d8:cb:3c:38: 50:8e:8b:d6:ab:4d:d8:0e:dc:9b:40:b7:63:ed:7f:c1:8d:eb: 91:96:6d:3c:61:0d:d4:08:9b:cf:53:a6:75:42:fc:af:12:4d: 9c:18:92:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gTOYl6tCyKNlAnUn2KK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTY0MDFlNmI2ZmM1M2M2NTIyOTYxMGU4ZGJjYzVhZTcwNWNmMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNKNYW1gWkvAF6mm+klzS92BIPiM 3XmQ74pAld6Ms3qEcVMsudChLpRBz8fSc5c9hYCt3zxRhdZsFFVl2IraZJyc7iXy fkQaL9D11j/cPM4P35Vt2YGmfWxY70gVmzOMBzTOwHoamYkp8NgMZetDHa0+PEjj CG+RL7zU+r05VVXUkh9Y+7e2To/nEUV83oaEMxQrwc7XltwOQxfmkLnYnmB0bVEb BpyMccOkakvqOlpMmTTfkmJzw2ZK6kKU5EMGWsYhs+wD8jOHKPkTo/j6mdQZz/Fj BMf0NwDy+3LJwU6otFIjNenNer6DeDKXe7Zixp1xO9RVaE4pbGhSv903wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5kAea2/FPGUilhDo28xa5wXPDEMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvdm1RQjVyYjhVOFpTS1dFT2piekZybkJjOE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZjxMA0G CSqGSIb3DQEBCwUAA4IBAQBAdbBUF4RyWFqeYEqi1GVIz4JHL+uAHGA36jo+6TDn KJFLc2afOp8l5XOHZexf8jTJz5bLvIK6OArKxYmHBL6v7xBQwEXSOd+cJTBiEusa xSHXiJtD/nPC5wmr9fA6Up4Dzs+tmfb9GORh/5yuuECufEQt44r6eMf6TkRynijr 59p5NmIi4lkadPv0qYH/3NCPdDOsyrgRz/NnhGGsJC3U1wyhhhgqSpDKnD2bwHLp 8D2wxnQSckJWR7AIx+1VhHbdAfbgITsVMdnCrwuANBiF2ODJy9jLPDhQjovWq03Y DtybQLdj7X/BjeuRlm08YQ3UCJvPU6Z1QvyvEk2cGJKs -----END CERTIFICATE-----Generated at Wed Jan 21 03:48:30 2026 by rpki-client