This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/VyE6DesxM1H-hav0gDjcdVAVU4s.roa File: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (raw, json) Hash identifier: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc= Subject key identifier: 57:21:3A:0D:EB:31:33:51:FE:85:AB:F4:80:38:DC:75:50:15:53:8B Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Certificate serial: 019B791062491D38B27B06965E54AB787E1E Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/VyE6DesxM1H-hav0gDjcdVAVU4s.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41486 IP address blocks: 194.9.60.0/24 maxlen: 24 194.9.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:62:49:1d:38:b2:7b:06:96:5e:54:ab:78:7e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57213a0deb313351fe85abf48038dc755015538b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:16:f7:09:b3:92:2b:42:a7:7a:df:30:f6: fb:b7:7b:f4:0b:97:dc:1f:cf:7e:9e:80:8a:e3:0d: 33:e8:ac:9f:ce:37:fe:e0:73:17:fb:e3:e5:d2:d3: 50:ab:e9:7f:01:6b:53:cd:23:9a:95:29:a2:e4:b8: ab:66:6f:92:69:a7:98:c3:4d:b3:75:9c:94:56:3c: 23:b2:cb:ee:18:41:19:f7:11:a9:35:60:15:9d:e6: 2c:01:f6:7a:18:81:68:31:32:87:76:d0:f8:bc:70: 18:97:1b:5d:16:96:a5:a2:99:ab:bf:36:66:5e:51: e8:e0:86:66:12:b2:65:d5:ab:14:cf:5b:7c:05:40: 41:43:d0:73:4d:e5:35:71:0c:ea:a7:98:57:25:0f: b1:9f:ff:55:58:5c:68:36:dd:b6:f2:a8:28:b3:8e: 6f:de:5e:31:f7:9f:40:52:e0:74:8f:a5:9c:f0:5c: 8a:8b:53:56:25:62:1b:d1:49:54:5c:19:10:5f:04: c1:3a:a6:6a:5b:2a:cf:a0:84:f9:73:a0:a8:ea:95: f1:ca:67:f9:78:0f:b0:49:c3:06:aa:c3:85:b8:a6: 2f:4b:3a:28:af:85:a8:58:d3:b0:78:a7:85:bd:e1: 70:8b:2a:52:5a:28:78:99:b9:7b:82:2c:6c:c0:93: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:3A:0D:EB:31:33:51:FE:85:AB:F4:80:38:DC:75:50:15:53:8B X509v3 Authority Key Identifier: keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/VyE6DesxM1H-hav0gDjcdVAVU4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.60.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:1b:b2:83:40:2f:0a:38:74:80:9b:5d:ae:fc:80:7b:7b:b3: 22:b8:d7:c7:81:94:09:b3:85:e1:b9:30:e2:92:f4:60:23:26: d0:77:b8:9f:eb:42:c5:5f:c1:bc:4b:74:d8:16:e4:82:12:72: 6b:7d:12:be:1b:e7:b0:a6:02:a9:ad:c5:9c:a9:75:20:f1:f6: 26:c3:08:36:e7:d0:8d:52:65:0b:a8:16:87:f0:ba:d8:ee:db: 69:e9:ff:d1:35:24:2f:14:8d:c1:c1:f0:9d:63:5e:27:fc:92: 9a:7d:2f:0c:4e:9c:b5:90:42:84:49:8f:81:99:6d:f3:bc:72: a3:c3:1b:26:7d:e1:f4:29:75:42:e5:5c:af:c0:27:55:42:ed: e6:86:f0:99:99:ab:c8:46:8d:f8:56:27:b0:59:62:a1:70:62: a1:b2:00:b6:59:2f:0e:01:f4:68:b1:1f:4d:e3:5a:db:88:83: d1:79:da:f0:4e:c4:19:51:30:33:73:5a:f3:67:1f:0d:02:12: 2d:70:e8:34:3d:e0:ef:3e:8c:be:55:23:c6:1b:3a:cc:41:8f: c7:0d:ea:7e:96:17:da:89:c2:3d:23:09:92:90:5f:4c:dc:8f: 6a:20:65:4a:6f:5c:e0:01:39:b1:e5:ad:36:1a:e1:a0:3d:33: 8e:48:e4:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGJJHTiyewaWXlSreH4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTg0YjUxMWQ5NmE0YWU2Yzk2MzAwMTk3Zjg0Zjk2YTNh ZmMyNDYwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzIxM2EwZGViMzEzMzUxZmU4NWFiZjQ4MDM4ZGM3NTUwMTU1MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nwW9wmzkitCp3rfMPb7t3v0C5fc H89+noCK4w0z6Kyfzjf+4HMX++Pl0tNQq+l/AWtTzSOalSmi5LirZm+SaaeYw02z dZyUVjwjssvuGEEZ9xGpNWAVneYsAfZ6GIFoMTKHdtD4vHAYlxtdFpalopmrvzZm XlHo4IZmErJl1asUz1t8BUBBQ9BzTeU1cQzqp5hXJQ+xn/9VWFxoNt228qgos45v 3l4x959AUuB0j6Wc8FyKi1NWJWIb0UlUXBkQXwTBOqZqWyrPoIT5c6Co6pXxymf5 eA+wScMGqsOFuKYvSzoor4WoWNOweKeFveFwiypSWih4mbl7gixswJNAzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFchOg3rMTNR/oWr9IA43HVQFVOLMB8GA1UdIwQY MBaAFO9YS1EdlqSubJYwAZf4T5ajr8JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMt NDdlMzA0OTgzMGIwLzEvVnlFNkRlc3hNMUgtaGF2MGdEamNkVkFWVTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMtNDdlMzA0OTgzMGIw LzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgk8MA0G CSqGSIb3DQEBCwUAA4IBAQBbG7KDQC8KOHSAm12u/IB7e7MiuNfHgZQJs4XhuTDi kvRgIybQd7if60LFX8G8S3TYFuSCEnJrfRK+G+ewpgKprcWcqXUg8fYmwwg259CN UmULqBaH8LrY7ttp6f/RNSQvFI3BwfCdY14n/JKafS8MTpy1kEKESY+BmW3zvHKj wxsmfeH0KXVC5VyvwCdVQu3mhvCZmavIRo34ViewWWKhcGKhsgC2WS8OAfRosR9N 41rbiIPRedrwTsQZUTAzc1rzZx8NAhItcOg0PeDvPoy+VSPGGzrMQY/HDep+lhfa icI9IwmSkF9M3I9qIGVKb1zgATmx5a02GuGgPTOOSOTb -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:21 2026 by rpki-client