This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/vXSPj4U0XPgUCORzKqKn2pQ-_54.roa File: vXSPj4U0XPgUCORzKqKn2pQ-_54.roa (raw, json) Hash identifier: a+QqfJndzh+WZAcq/hkoF/C3W7oEsp7bn060vJhpI74= Subject key identifier: BD:74:8F:8F:85:34:5C:F8:14:08:E4:73:2A:A2:A7:DA:94:3E:FF:9E Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Certificate serial: 019B76EB89E2654CE09532F6958DB326951E Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/vXSPj4U0XPgUCORzKqKn2pQ-_54.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42750 IP address blocks: 185.195.72.0/22 maxlen: 22 185.195.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:e2:65:4c:e0:95:32:f6:95:8d:b3:26:95:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd748f8f85345cf81408e4732aa2a7da943eff9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:42:0c:f7:b2:51:ac:18:cc:d7:d0:be:44: 44:d7:c0:4a:a6:35:be:4a:1c:75:94:9f:7c:6a:d8: fc:92:be:57:91:c2:26:a0:37:d3:c2:39:ce:e0:0b: 95:2f:83:c5:68:c1:40:0f:58:0e:ff:bc:c8:dd:dd: 0e:5e:8f:f4:96:3b:c3:48:dd:b7:5c:1d:8b:03:74: 04:3d:ac:66:c3:ef:b2:12:be:58:1f:5b:36:2d:24: 9c:3f:68:ac:73:1c:ce:de:fd:40:2e:82:9f:68:04: 8d:0b:3a:d5:50:a9:39:5e:5b:8b:ab:6b:76:56:ef: 0e:ca:93:7f:b6:fd:7c:55:c7:d0:16:54:c4:0d:6a: 17:f0:d8:62:8c:a3:9b:0e:b2:c7:48:29:b8:00:b2: 6e:1d:92:d3:16:cd:a3:e5:d6:b0:f3:46:07:5e:53: e7:3a:74:40:36:f5:8f:09:f7:0a:76:54:b2:ac:20: 1b:41:e4:ce:fd:d3:79:62:5c:99:08:01:21:99:5d: 36:df:39:3b:ed:7d:5f:d7:a3:c3:97:d5:dd:75:fa: 1b:88:e0:d2:6a:ff:b6:cf:fe:e2:a2:a3:8d:b9:02: c0:1e:33:46:8e:36:57:a4:fd:a8:6b:f1:be:f3:23: aa:b6:7c:7f:1f:e7:d8:99:39:e8:ea:33:85:db:29: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:74:8F:8F:85:34:5C:F8:14:08:E4:73:2A:A2:A7:DA:94:3E:FF:9E X509v3 Authority Key Identifier: keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/vXSPj4U0XPgUCORzKqKn2pQ-_54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:77:b2:ac:06:e7:f0:63:88:0e:96:5a:07:2b:72:66:33:75: 30:f0:11:d1:9d:df:82:7a:42:51:ef:0b:1c:67:ee:4d:15:b6: 03:b3:44:be:6d:ff:52:bf:96:30:1f:d7:71:40:e7:d7:7c:53: ba:66:8b:81:ed:a6:45:0f:d9:03:a6:f1:3c:ad:bc:aa:a2:d4: 93:29:32:23:3a:38:ea:27:b7:0f:f3:8f:df:c2:7b:82:a8:bc: 6b:2f:f4:b1:e1:8e:9d:d0:e8:31:d3:50:bb:47:d0:03:b5:72: ff:d6:a5:05:4c:90:79:99:07:f9:96:32:29:a2:bd:fc:a5:7d: 1d:f5:8c:aa:39:63:70:6a:48:dd:1b:43:3a:4e:71:b0:86:48: 15:cb:34:8b:96:56:c4:f5:41:8d:1e:f0:8a:28:92:de:2b:d2: 0f:98:fc:09:e2:ef:1c:2e:7e:13:c6:7f:b9:40:b9:26:d2:76: 27:fd:60:e7:16:83:9b:fd:8b:73:5f:b8:f2:13:c9:e4:aa:d1: da:e6:75:56:ec:b3:e1:70:05:12:d9:e7:28:39:12:24:e9:1a: e7:a2:5c:c4:52:19:51:56:8e:d2:54:99:f7:fe:ca:75:19:c4: 39:cd:ef:5f:53:30:31:5e:b8:37:80:91:d4:c8:4f:fe:0e:e1: f7:1b:9c:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264niZUzglTL2lY2zJpUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGNkOTI2YmYzNzBkM2ZhMDE4M2ExMzhiNTdiMDk4M2Nk YWNhMGEwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDc0OGY4Zjg1MzQ1Y2Y4MTQwOGU0NzMyYWEyYTdkYTk0M2VmZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxRCDPeyUawYzNfQvkRE18BKpjW+ Shx1lJ98atj8kr5XkcImoDfTwjnO4AuVL4PFaMFAD1gO/7zI3d0OXo/0ljvDSN23 XB2LA3QEPaxmw++yEr5YH1s2LSScP2iscxzO3v1ALoKfaASNCzrVUKk5XluLq2t2 Vu8OypN/tv18VcfQFlTEDWoX8NhijKObDrLHSCm4ALJuHZLTFs2j5daw80YHXlPn OnRANvWPCfcKdlSyrCAbQeTO/dN5YlyZCAEhmV023zk77X1f16PDl9XddfobiODS av+2z/7ioqONuQLAHjNGjjZXpP2oa/G+8yOqtnx/H+fYmTno6jOF2ylxtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL10j4+FNFz4FAjkcyqip9qUPv+eMB8GA1UdIwQY MBaAFGfc2Sa/Nw0/oBg6E4tXsJg82soKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjIt OWY1YjJlYjQ5MmEwLzEvdlhTUGo0VTBYUGdVQ09SektxS24ycFEtXzU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjItOWY1YjJlYjQ5MmEw LzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucNIMA0G CSqGSIb3DQEBCwUAA4IBAQAud7KsBufwY4gOlloHK3JmM3Uw8BHRnd+CekJR7wsc Z+5NFbYDs0S+bf9Sv5YwH9dxQOfXfFO6ZouB7aZFD9kDpvE8rbyqotSTKTIjOjjq J7cP84/fwnuCqLxrL/Sx4Y6d0Ogx01C7R9ADtXL/1qUFTJB5mQf5ljIpor38pX0d 9YyqOWNwakjdG0M6TnGwhkgVyzSLllbE9UGNHvCKKJLeK9IPmPwJ4u8cLn4Txn+5 QLkm0nYn/WDnFoOb/YtzX7jyE8nkqtHa5nVW7LPhcAUS2ecoORIk6RrnolzEUhlR Vo7SVJn3/sp1GcQ5ze9fUzAxXrg3gJHUyE/+DuH3G5z1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:51 2026 by rpki-client