This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/vKzWTkyCndfo_e-WFuM4lo46Om4.roa File: vKzWTkyCndfo_e-WFuM4lo46Om4.roa (raw, json) Hash identifier: uUt2P6Q/UvwwbueYtQZfYvgTlSK47768NeVIXmFmyeI= Subject key identifier: BC:AC:D6:4E:4C:82:9D:D7:E8:FD:EF:96:16:E3:38:96:8E:3A:3A:6E Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019B76EABCA1D0EC3D832706ACC4DCC2A814 Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/vKzWTkyCndfo_e-WFuM4lo46Om4.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41032 IP address blocks: 185.181.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bc:a1:d0:ec:3d:83:27:06:ac:c4:dc:c2:a8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcacd64e4c829dd7e8fdef9616e338968e3a3a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:c6:d4:cc:48:e4:af:9d:34:9b:bc:f7:87: ac:4b:88:9f:de:d7:7f:de:eb:97:a0:e1:7b:0f:3f: 7f:4f:43:1d:dd:59:8f:19:62:3c:5b:90:67:ab:98: 8b:46:70:b9:26:20:bd:2f:3b:52:18:b3:cf:c0:55: f0:6e:29:e4:cd:b9:90:80:8f:e9:6e:5e:b9:07:ab: 4a:2d:50:9b:e5:cb:2f:80:35:c0:c2:b0:c5:2a:e8: e0:4c:2e:20:3b:09:f5:52:dc:d2:63:28:9a:2e:5f: 49:22:61:33:6e:04:70:c1:37:ea:1e:cf:3f:cb:11: 3f:3f:e2:83:5c:17:aa:9e:dc:95:d8:7a:05:7c:ef: 4a:75:ee:d8:f1:79:33:b0:f2:54:57:5e:36:dc:91: 5b:7a:7a:77:91:36:2d:73:54:b4:c1:94:12:39:c1: 0d:d6:6c:d3:a0:cd:6f:63:f3:0f:ad:01:9a:b7:8b: 63:0d:8a:f3:69:ef:5b:a8:fb:47:f2:33:80:74:cd: 07:b2:2f:ef:da:57:6f:6f:b3:a5:49:f3:75:55:e2: 6b:5f:bd:64:1f:29:4e:cd:18:0e:04:17:48:1d:75: be:14:7f:ce:72:f3:bc:a4:35:9c:4e:06:f2:5a:87: 04:ff:86:34:5a:f7:0c:ea:0e:32:eb:e5:04:a5:00: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AC:D6:4E:4C:82:9D:D7:E8:FD:EF:96:16:E3:38:96:8E:3A:3A:6E X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/vKzWTkyCndfo_e-WFuM4lo46Om4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.109.0/24 Signature Algorithm: sha256WithRSAEncryption 04:bc:da:5f:d9:b7:ea:25:c9:87:7e:78:9c:1e:c3:35:9f:7b: 85:4f:1a:14:e9:6c:0d:21:22:37:31:3e:a0:60:ba:92:d1:08: 1e:16:ad:de:b6:38:01:9e:f7:63:5d:a7:70:d3:c5:3b:36:d4: 30:c1:39:c8:ed:c0:19:1d:fb:28:f9:71:fe:a4:27:74:ae:0b: ee:01:97:7c:b2:c2:3c:27:61:04:82:60:ba:dc:6b:f2:f5:6e: d9:f4:50:a1:9c:70:ba:10:11:88:45:05:5b:c0:3d:11:00:2d: 3b:50:3e:1f:67:fa:2e:86:6d:77:69:21:2c:d6:29:07:79:ea: 15:2f:67:df:9f:af:7a:05:41:b1:2f:b9:82:46:03:bc:9e:c0: 40:dd:e8:f6:8f:1c:71:96:5e:89:f9:22:ca:e1:fe:57:fb:64: ea:c5:85:8d:54:71:04:03:6f:2a:b9:80:d6:23:ea:ee:59:73: 88:d3:d9:dd:64:68:1c:53:3c:2c:59:36:9d:78:51:23:83:13: 6d:9b:86:9b:09:7e:40:3b:c2:24:e7:af:95:c6:c6:95:10:ef: 0c:e4:4d:6e:1c:70:45:57:c8:48:f9:c8:6f:b8:2c:40:bb:d0: c8:db:f4:b5:68:28:3c:27:56:b2:95:bf:5d:73:01:f5:e2:fd: f0:e2:94:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26ryh0Ow9gycGrMTcwqgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2FjZDY0ZTRjODI5ZGQ3ZThmZGVmOTYxNmUzMzg5NjhlM2EzYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGTG1MxI5K+dNJu894esS4if3td/ 3uuXoOF7Dz9/T0Md3VmPGWI8W5Bnq5iLRnC5JiC9LztSGLPPwFXwbinkzbmQgI/p bl65B6tKLVCb5csvgDXAwrDFKujgTC4gOwn1UtzSYyiaLl9JImEzbgRwwTfqHs8/ yxE/P+KDXBeqntyV2HoFfO9Kde7Y8XkzsPJUV1423JFbenp3kTYtc1S0wZQSOcEN 1mzToM1vY/MPrQGat4tjDYrzae9bqPtH8jOAdM0Hsi/v2ldvb7OlSfN1VeJrX71k HylOzRgOBBdIHXW+FH/OcvO8pDWcTgbyWocE/4Y0WvcM6g4y6+UEpQCDOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLys1k5Mgp3X6P3vlhbjOJaOOjpuMB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEvdkt6V1RreUNuZGZvX2UtV0Z1TTRsbzQ2T200LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubVtMA0G CSqGSIb3DQEBCwUAA4IBAQAEvNpf2bfqJcmHfnicHsM1n3uFTxoU6WwNISI3MT6g YLqS0QgeFq3etjgBnvdjXadw08U7NtQwwTnI7cAZHfso+XH+pCd0rgvuAZd8ssI8 J2EEgmC63Gvy9W7Z9FChnHC6EBGIRQVbwD0RAC07UD4fZ/ouhm13aSEs1ikHeeoV L2ffn696BUGxL7mCRgO8nsBA3ej2jxxxll6J+SLK4f5X+2TqxYWNVHEEA28quYDW I+ruWXOI09ndZGgcUzwsWTadeFEjgxNtm4abCX5AO8Ik56+VxsaVEO8M5E1uHHBF V8hI+chvuCxAu9DI2/S1aCg8J1aylb9dcwH14v3w4pSI -----END CERTIFICATE-----Generated at Tue Jan 20 07:37:30 2026 by rpki-client