This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa File: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (raw, json) Hash identifier: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w= Subject key identifier: 54:5C:CF:D0:51:A1:D1:24:33:4B:20:02:F4:C1:0E:F5:B9:DA:A9:95 Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502 Certificate serial: 019B7758D6597487B374011E8A333BBDD3B8 Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44283 IP address blocks: 194.156.4.0/23 maxlen: 23 194.156.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d6:59:74:87:b3:74:01:1e:8a:33:3b:bd:d3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=545ccfd051a1d124334b2002f4c10ef5b9daa995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:63:a3:6a:4e:5a:93:fe:44:37:b5:f1:8d: 34:da:11:ee:cc:c1:94:b5:fc:c0:2e:5a:3e:98:24: e6:e4:e9:b0:37:7b:30:d8:3b:de:ea:f6:56:42:01: 6f:ce:76:26:e4:09:f4:dc:2a:88:fb:dc:8d:b4:aa: b0:90:1c:c2:20:57:5f:a8:9a:7f:fa:9b:09:3d:c8: c1:54:06:07:42:6a:4b:db:6f:e3:aa:b7:0d:8d:ef: 62:48:c0:d3:f7:6e:92:0d:2d:09:37:f4:d9:42:f5: eb:33:ea:23:f8:56:a6:da:c8:9b:f6:06:4c:d4:92: a4:a2:80:dc:82:c7:54:bf:ea:35:31:9f:df:b6:86: d5:9f:e2:9a:25:54:f1:78:30:18:96:34:24:2a:6d: 5d:aa:c8:7d:86:04:70:29:df:04:3b:77:97:48:f0: 7f:8f:3c:aa:2b:75:dc:2c:9b:38:de:f9:63:be:11: 8f:99:93:4c:1c:18:ac:c4:ab:96:5b:d8:0d:52:2e: 78:39:b9:94:78:ce:39:dc:e1:e1:5e:99:fd:72:fd: e7:ca:8b:81:de:be:28:f7:ff:36:a0:de:83:f8:2e: f6:1b:90:ee:8c:76:fa:9c:6a:d3:76:a3:0c:37:b2: 33:96:07:e6:65:c8:56:58:a5:12:f8:e1:54:fd:24: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:CF:D0:51:A1:D1:24:33:4B:20:02:F4:C1:0E:F5:B9:DA:A9:95 X509v3 Authority Key Identifier: keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.4.0-194.156.6.255 Signature Algorithm: sha256WithRSAEncryption 90:b2:ca:40:0a:5c:66:15:6b:c5:39:92:40:f1:80:49:dd:d1: 2d:c2:3d:98:a6:8e:dc:ed:a1:72:32:ae:2d:6e:d9:aa:07:a9: 3e:5a:4b:96:27:41:09:26:d3:bf:94:be:e9:57:49:3a:04:91: bc:86:97:13:1b:74:69:bd:8f:e3:bc:d1:ce:11:e7:94:0f:8b: 1a:08:8d:d2:cd:c7:44:12:ef:ba:9e:73:f7:18:d9:a1:dd:67: f7:08:b0:b5:97:2f:19:d5:3a:fd:3b:e9:c0:46:96:b1:63:84: 6b:01:a4:2b:18:6f:6a:a0:31:c8:a2:37:ce:98:ef:3d:6f:7b: 5f:2e:70:fb:4b:6f:f0:d4:74:f3:0b:a3:65:81:0d:51:a2:e6: 41:37:70:90:18:ff:b1:39:bf:4b:e2:b6:93:ff:16:5d:aa:f8: 43:8d:c2:de:b7:29:95:e8:1d:e4:78:06:be:e9:64:de:3a:16: e7:8b:9f:45:0f:67:e8:6b:04:23:cb:06:36:92:3e:87:93:19: ce:66:57:5b:e0:99:7f:68:82:d5:a2:2d:1b:67:6d:dc:51:31: b3:e1:5e:fb:1e:7e:cd:3b:4d:97:98:3f:c3:5f:ba:2b:a1:40: 21:72:75:87:3f:a2:50:6b:e8:35:a1:cb:fc:1e:1b:80:a5:f0: 13:e2:fb:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WNZZdIezdAEeijM7vdO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTkzZTQwZGE1YTUyZjMyMmRiNWEwNGMyMGZiNDg2ZDRl MTU1MDIwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDVjY2ZkMDUxYTFkMTI0MzM0YjIwMDJmNGMxMGVmNWI5ZGFhOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jljo2pOWpP+RDe18Y002hHuzMGU tfzALlo+mCTm5OmwN3sw2Dve6vZWQgFvznYm5An03CqI+9yNtKqwkBzCIFdfqJp/ +psJPcjBVAYHQmpL22/jqrcNje9iSMDT926SDS0JN/TZQvXrM+oj+Fam2sib9gZM 1JKkooDcgsdUv+o1MZ/ftobVn+KaJVTxeDAYljQkKm1dqsh9hgRwKd8EO3eXSPB/ jzyqK3XcLJs43vljvhGPmZNMHBisxKuWW9gNUi54ObmUeM453OHhXpn9cv3nyouB 3r4o9/82oN6D+C72G5DujHb6nGrTdqMMN7IzlgfmZchWWKUS+OFU/SQ9FwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFRcz9BRodEkM0sgAvTBDvW52qmVMB8GA1UdIwQY MBaAFEhZPkDaWlLzIttaBMIPtIbU4VUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEt ZTY4YTA4ZDllNTRmLzEvVkZ6UDBGR2gwU1F6U3lBQzlNRU85Ym5hcVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEtZTY4YTA4ZDllNTRm LzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCnAQD BADCnAYwDQYJKoZIhvcNAQELBQADggEBAJCyykAKXGYVa8U5kkDxgEnd0S3CPZim jtztoXIyri1u2aoHqT5aS5YnQQkm07+UvulXSToEkbyGlxMbdGm9j+O80c4R55QP ixoIjdLNx0QS77qec/cY2aHdZ/cIsLWXLxnVOv076cBGlrFjhGsBpCsYb2qgMcii N86Y7z1ve18ucPtLb/DUdPMLo2WBDVGi5kE3cJAY/7E5v0vitpP/Fl2q+EONwt63 KZXoHeR4Br7pZN46FueLn0UPZ+hrBCPLBjaSPoeTGc5mV1vgmX9ogtWiLRtnbdxR MbPhXvsefs07TZeYP8NfuiuhQCFydYc/olBr6DWhy/weG4Cl8BPi+5E= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:28 2026 by rpki-client