This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/VhYCfJXFVqKeXy_XDtqdBwy-e3w.roa File: VhYCfJXFVqKeXy_XDtqdBwy-e3w.roa (raw, json) Hash identifier: B3p1ubs5Q8atQgn/ho2aLGMfMcGe/NkbjuYP6TTyKyQ= Subject key identifier: 56:16:02:7C:95:C5:56:A2:9E:5F:2F:D7:0E:DA:9D:07:0C:BE:7B:7C Certificate issuer: /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880 Certificate serial: 019B7A5ADC63BF79CA130379D7134F625708 Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/VhYCfJXFVqKeXy_XDtqdBwy-e3w.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16263 IP address blocks: 193.111.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:dc:63:bf:79:ca:13:03:79:d7:13:4f:62:57:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5616027c95c556a29e5f2fd70eda9d070cbe7b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:67:39:3d:9b:bb:61:fa:64:9f:9f:df:d7: 7e:45:2a:4b:4c:59:09:88:7d:9c:6b:bd:05:0a:bc: 82:45:23:aa:36:4a:c3:3d:23:fc:0e:a9:ea:e1:31: ae:56:a0:60:ac:9b:2f:fc:4b:a0:aa:1e:c2:f3:fe: fc:5c:11:73:76:7a:bc:80:c3:30:30:f2:80:71:e2: 68:8b:d9:19:c9:9e:e7:57:87:0b:58:a7:81:10:88: ff:77:1e:61:68:99:3b:44:4c:da:04:97:20:d0:7c: cb:8b:b0:6f:e5:fa:5a:96:94:2c:e8:e1:e7:b8:0f: a1:3e:c4:ce:86:95:0b:9b:b4:9e:d5:19:79:32:78: 6b:12:60:69:8b:3c:83:c3:d6:23:ab:69:4e:0e:87: 2d:51:a6:10:79:d0:d0:30:48:12:55:2c:90:0a:2a: d4:fc:ca:a1:cb:99:86:3c:c4:fd:7a:6a:f7:a6:35: 6e:1b:69:4e:38:bd:79:56:b3:4b:38:85:e9:00:ee: ec:74:1d:0b:bd:a5:78:4d:e0:4b:bd:b7:8f:4f:cd: ed:1f:03:0a:77:88:98:ef:56:15:13:fc:23:e4:1b: ff:60:fe:aa:ff:ce:79:3c:c0:42:fb:67:74:62:e7: 08:3a:2b:0c:f9:92:34:4f:c4:9d:e6:bd:4d:ab:ae: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:16:02:7C:95:C5:56:A2:9E:5F:2F:D7:0E:DA:9D:07:0C:BE:7B:7C X509v3 Authority Key Identifier: keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/VhYCfJXFVqKeXy_XDtqdBwy-e3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.144.0/22 Signature Algorithm: sha256WithRSAEncryption 04:d4:58:7c:14:ff:90:de:84:b3:12:78:12:a4:a7:aa:93:50: 5a:e6:47:dd:35:40:43:dd:64:09:af:58:45:ee:05:55:d1:e5: 13:64:40:8b:cb:58:05:6d:a2:d1:36:4a:57:60:53:32:99:2f: 68:c4:ef:d8:47:2e:c8:e0:ce:cb:3d:a5:b4:24:32:3a:f5:3c: c6:ee:89:32:18:1a:45:b3:d0:29:b5:a2:4e:52:08:7b:cf:43: f4:61:36:36:66:49:f9:f4:dd:8b:d0:91:fb:c1:50:a7:b2:1f: 39:5d:4f:55:5e:a8:d1:62:32:36:7d:ae:97:cc:78:be:ba:13: 63:1c:c7:00:05:11:b9:09:a1:76:76:3d:29:74:21:cd:fa:86: a1:c5:94:b1:54:2f:70:7b:81:9b:1b:8b:3e:37:59:f2:f0:31: 47:1c:ab:12:23:d9:16:8a:a8:50:fb:60:88:94:93:91:ff:e7: 9a:f9:aa:b4:14:51:ba:9e:05:93:bf:f7:77:db:16:1f:2e:45: 49:9e:1b:28:2c:89:90:da:c3:06:5d:d8:13:ce:d0:7f:82:40: 45:35:b6:f4:cb:3a:cf:a4:d3:13:eb:06:fc:54:23:46:b9:1f: e2:02:5e:14:a8:a8:b4:3f:f5:c8:09:19:21:fa:78:fb:72:27: 5b:8c:65:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wtxjv3nKEwN51xNPYlcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViY2FhYjdhYTFhYzcxNDNmOGJjODIzYzczNGIxNjczYTA5 YmI4ODAwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjE2MDI3Yzk1YzU1NmEyOWU1ZjJmZDcwZWRhOWQwNzBjYmU3YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryNnOT2bu2H6ZJ+f39d+RSpLTFkJ iH2ca70FCryCRSOqNkrDPSP8Dqnq4TGuVqBgrJsv/Eugqh7C8/78XBFzdnq8gMMw MPKAceJoi9kZyZ7nV4cLWKeBEIj/dx5haJk7REzaBJcg0HzLi7Bv5fpalpQs6OHn uA+hPsTOhpULm7Se1Rl5MnhrEmBpizyDw9Yjq2lODoctUaYQedDQMEgSVSyQCirU /Mqhy5mGPMT9emr3pjVuG2lOOL15VrNLOIXpAO7sdB0LvaV4TeBLvbePT83tHwMK d4iY71YVE/wj5Bv/YP6q/855PMBC+2d0YucIOisM+ZI0T8Sd5r1Nq65maQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYWAnyVxVainl8v1w7anQcMvnt8MB8GA1UdIwQY MBaAFFvKq3qhrHFD+LyCPHNLFnOgm7iAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWIt M2QxZTBlZTRiNjUxLzEvVmhZQ2ZKWEZWcUtlWHlfWER0cWRCd3ktZTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWItM2QxZTBlZTRiNjUx LzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW+QMA0G CSqGSIb3DQEBCwUAA4IBAQAE1Fh8FP+Q3oSzEngSpKeqk1Ba5kfdNUBD3WQJr1hF 7gVV0eUTZECLy1gFbaLRNkpXYFMymS9oxO/YRy7I4M7LPaW0JDI69TzG7okyGBpF s9AptaJOUgh7z0P0YTY2Zkn59N2L0JH7wVCnsh85XU9VXqjRYjI2fa6XzHi+uhNj HMcABRG5CaF2dj0pdCHN+oahxZSxVC9we4GbG4s+N1ny8DFHHKsSI9kWiqhQ+2CI lJOR/+ea+aq0FFG6ngWTv/d32xYfLkVJnhsoLImQ2sMGXdgTztB/gkBFNbb0yzrP pNMT6wb8VCNGuR/iAl4UqKi0P/XICRkh+nj7cidbjGX7 -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:06 2026 by rpki-client