This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VKEv5UTHkUkSGsL6I0jkptCt8tA.roa File: VKEv5UTHkUkSGsL6I0jkptCt8tA.roa (raw, json) Hash identifier: r+BIF5UQn5tu6NH+mMYnMvg0w8injuiwqb0pTjkBhg4= Subject key identifier: 54:A1:2F:E5:44:C7:91:49:12:1A:C2:FA:23:48:E4:A6:D0:AD:F2:D0 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B943E24BB8FA5DEEB8109C09ACAE00E29 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VKEv5UTHkUkSGsL6I0jkptCt8tA.roa Signing time: Tue 06 Jan 2026 16:57:39 +0000 ROA not before: Tue 06 Jan 2026 16:57:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22427 IP address blocks: 79.172.201.0/24 maxlen: 24 79.172.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:3e:24:bb:8f:a5:de:eb:81:09:c0:9a:ca:e0:0e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 6 16:57:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54a12fe544c79149121ac2fa2348e4a6d0adf2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:51:5f:7f:c9:0a:4e:66:fa:de:6d:6e:64:b8: ee:af:39:98:db:b1:30:4a:c5:29:a9:bd:e3:31:15: 83:b9:63:ee:10:bc:86:ac:71:1a:20:ec:39:f3:e5: df:d8:10:7b:a3:6d:c7:81:31:ce:f4:95:ef:ab:09: cf:a5:37:25:26:4f:fd:ef:3c:d2:fe:92:b2:32:e0: 2f:59:ac:79:4b:e7:bb:3f:3d:6a:d5:3a:61:cb:af: 0f:7d:24:8d:26:48:6d:38:85:7f:df:b9:ce:6e:a2: 52:7d:6d:9c:f0:44:7a:c7:d2:e1:15:cd:cf:c3:5e: b3:e8:c8:de:01:02:dc:ae:3c:f1:3e:2b:3d:98:63: 1a:54:d4:52:ef:f9:58:66:64:06:9c:7b:4c:2b:fe: d4:70:8d:8a:82:2d:cf:30:75:e0:84:b1:de:e4:e9: 3b:f2:75:d4:d9:a1:8e:56:14:41:3d:83:71:8f:80: f9:00:80:32:99:7c:54:4e:ab:de:53:ac:d6:d1:c8: ee:21:4d:d8:2f:29:06:76:b2:11:00:79:f4:7c:53: 06:89:4d:9a:9a:8d:7e:2c:1d:af:57:cb:dd:77:21: 66:53:ae:e5:c6:bb:5d:fd:3a:c7:5f:cc:22:12:a7: 85:c9:84:2d:ba:d5:b7:19:bd:5b:24:f4:49:b4:27: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A1:2F:E5:44:C7:91:49:12:1A:C2:FA:23:48:E4:A6:D0:AD:F2:D0 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VKEv5UTHkUkSGsL6I0jkptCt8tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.201.0/24 79.172.228.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c2:e1:4b:fe:34:69:52:19:c1:a5:90:86:96:97:da:b8:d2: c2:a5:28:09:25:6f:72:85:81:9c:0b:d8:6d:6a:d1:f1:7a:46: 56:c7:0c:39:b3:aa:06:10:fb:40:44:e3:22:fb:72:ff:2a:aa: f4:4c:3c:c8:15:89:b8:03:59:7c:42:f3:01:6f:06:dd:5f:bc: 73:b4:55:66:6e:b1:28:1e:f5:77:07:d6:7d:23:39:d2:18:70: 21:c7:26:a0:b4:03:36:f6:c8:05:0f:c8:3c:22:f4:94:2a:e6: e2:94:50:b8:4a:1d:1c:d2:74:19:5f:a7:6c:44:8b:3e:e6:f5: 55:a5:32:d1:4a:d7:c6:77:4b:d1:e3:df:38:58:4c:e9:2f:41: 03:1c:40:5e:65:68:bd:34:d1:00:27:d6:15:92:c4:33:d3:0a: 00:f7:9f:0c:e8:a0:d4:89:8b:bc:ea:49:d8:bd:4b:f7:bd:c5: e9:7a:8c:87:2f:74:7a:ae:27:45:75:c8:83:b2:2e:f8:3c:ff: ad:05:e1:b3:1c:8c:24:d6:c1:bb:79:51:16:85:28:50:fa:7a: 5a:fe:08:4f:96:95:8b:84:f1:79:7a:e2:56:ba:97:4c:b4:d6: 54:61:c3:e3:8d:eb:e7:56:19:7a:2f:c4:3b:39:d5:c8:b3:72: 56:92:c0:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuUPiS7j6Xe64EJwJrK4A4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTA2MTY1NzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGExMmZlNTQ0Yzc5MTQ5MTIxYWMyZmEyMzQ4ZTRhNmQwYWRmMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FFff8kKTmb63m1uZLjurzmY27Ew SsUpqb3jMRWDuWPuELyGrHEaIOw58+Xf2BB7o23HgTHO9JXvqwnPpTclJk/97zzS /pKyMuAvWax5S+e7Pz1q1Tphy68PfSSNJkhtOIV/37nObqJSfW2c8ER6x9LhFc3P w16z6MjeAQLcrjzxPis9mGMaVNRS7/lYZmQGnHtMK/7UcI2Kgi3PMHXghLHe5Ok7 8nXU2aGOVhRBPYNxj4D5AIAymXxUTqveU6zW0cjuIU3YLykGdrIRAHn0fFMGiU2a mo1+LB2vV8vddyFmU67lxrtd/TrHX8wiEqeFyYQtutW3Gb1bJPRJtCdD8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFShL+VEx5FJEhrC+iNI5KbQrfLQMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvVktFdjVVVEhrVWtTR3NMNkkwamtwdEN0OHRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT6zJAwQA T6zkMA0GCSqGSIb3DQEBCwUAA4IBAQCOwuFL/jRpUhnBpZCGlpfauNLCpSgJJW9y hYGcC9htatHxekZWxww5s6oGEPtAROMi+3L/Kqr0TDzIFYm4A1l8QvMBbwbdX7xz tFVmbrEoHvV3B9Z9IznSGHAhxyagtAM29sgFD8g8IvSUKubilFC4Sh0c0nQZX6ds RIs+5vVVpTLRStfGd0vR4984WEzpL0EDHEBeZWi9NNEAJ9YVksQz0woA958M6KDU iYu86knYvUv3vcXpeoyHL3R6ridFdciDsi74PP+tBeGzHIwk1sG7eVEWhShQ+npa /ghPlpWLhPF5euJWupdMtNZUYcPjjevnVhl6L8Q7OdXIs3JWksCo -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:59 2026 by rpki-client