This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/vog51KGgHd0dKzK6jl8SFvGeQr0.roa File: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (raw, json) Hash identifier: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4= Subject key identifier: BE:88:39:D4:A1:A0:1D:DD:1D:2B:32:BA:8E:5F:12:16:F1:9E:42:BD Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Certificate serial: 019B7E379D8E83A27849A6637EF8323E70D9 Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/vog51KGgHd0dKzK6jl8SFvGeQr0.roa Signing time: Fri 02 Jan 2026 10:18:52 +0000 ROA not before: Fri 02 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15967 IP address blocks: 185.248.212.0/22 maxlen: 22 185.248.212.0/24 maxlen: 24 185.248.213.0/24 maxlen: 24 185.248.214.0/24 maxlen: 24 185.248.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9d:8e:83:a2:78:49:a6:63:7e:f8:32:3e:70:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be8839d4a1a01ddd1d2b32ba8e5f1216f19e42bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:0f:f2:82:b1:4c:a4:41:69:7d:1c:55:19: fc:ff:32:0f:28:c3:ac:75:29:e2:6f:e8:3b:a5:86: be:23:fb:67:53:b6:40:22:98:6a:f5:5f:2d:49:43: 4b:21:ec:c1:31:f7:b8:16:d5:2c:76:4f:65:c3:bc: 8c:11:62:23:77:57:da:a8:e6:f9:9b:db:be:7d:28: 8c:a8:fb:f1:72:e5:82:28:e5:fd:de:a2:cf:d4:86: 1c:e8:a8:c1:6a:7b:4b:8f:0c:88:ff:b6:b9:86:93: a2:aa:bb:bc:9d:dc:71:00:7c:2e:e5:5c:70:fd:44: 03:32:0b:c4:5a:3f:6c:87:23:01:23:85:01:03:79: 73:5b:72:e6:8e:3f:78:e1:33:16:1f:fa:26:13:6e: 39:cb:84:b9:f2:c3:7b:ee:1f:cb:b5:0d:dc:a4:5e: b7:7c:40:4b:71:74:96:b4:24:e8:df:0c:b7:af:4e: 0e:2c:2b:77:a1:99:65:51:d6:64:d5:aa:fa:d0:4c: 8d:f1:a3:e6:79:99:90:1e:d3:63:90:d0:ad:9c:81: fb:71:23:ed:b9:1b:92:f4:01:4f:cb:80:26:89:dc: d9:06:3d:88:2b:a1:0d:10:1f:4b:5d:54:0b:b0:1f: 42:56:34:c2:42:e7:68:18:a3:80:7e:73:d1:a7:7c: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:39:D4:A1:A0:1D:DD:1D:2B:32:BA:8E:5F:12:16:F1:9E:42:BD X509v3 Authority Key Identifier: keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/vog51KGgHd0dKzK6jl8SFvGeQr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.212.0/22 Signature Algorithm: sha256WithRSAEncryption 99:61:91:74:ed:ca:52:1a:53:36:1a:53:1e:61:dc:af:1b:7a: cd:3d:0d:80:25:e1:2e:21:f8:aa:4d:0c:bc:6b:73:58:e1:1c: 5c:c8:92:b0:5f:5c:96:1d:c9:78:c2:45:87:3a:78:ac:ef:92: a9:80:8b:a8:ae:0d:50:90:d1:5f:62:f0:41:12:40:0e:69:e7: 40:ea:e8:c2:07:c5:03:7f:18:84:02:05:28:93:fc:c9:7a:96: 6f:d8:96:af:06:81:7f:3a:ec:db:77:53:56:dc:be:6d:2e:5c: a1:55:0e:0c:92:56:f1:fd:85:b0:e9:ce:59:c3:fc:cc:53:d6: 29:55:fe:2e:03:d1:2d:f7:8e:55:96:98:ee:1d:55:7b:16:4c: fb:9e:08:85:13:58:22:64:bf:c2:0c:df:32:7a:86:32:cc:99: c3:26:cb:41:57:a4:62:43:7a:c6:e8:c2:19:82:64:ff:58:14: ff:bc:0c:00:e4:be:6c:bb:c9:6f:22:c4:ce:b6:a5:c8:0a:06: 46:c6:2e:da:a1:f3:92:bc:81:a6:7c:41:bd:74:94:5b:22:1b: 25:23:79:8d:a6:f9:b2:cb:2b:59:ac:51:18:65:2d:95:92:12: ba:e4:66:91:b7:ab:48:a8:4e:a4:b4:a5:03:22:29:9a:57:ef: 2f:47:c7:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N52Og6J4SaZjfvgyPnDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk NTE3NDYwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTg4MzlkNGExYTAxZGRkMWQyYjMyYmE4ZTVmMTIxNmYxOWU0MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW0P8oKxTKRBaX0cVRn8/zIPKMOs dSnib+g7pYa+I/tnU7ZAIphq9V8tSUNLIezBMfe4FtUsdk9lw7yMEWIjd1faqOb5 m9u+fSiMqPvxcuWCKOX93qLP1IYc6KjBantLjwyI/7a5hpOiqru8ndxxAHwu5Vxw /UQDMgvEWj9shyMBI4UBA3lzW3Lmjj944TMWH/omE245y4S58sN77h/LtQ3cpF63 fEBLcXSWtCTo3wy3r04OLCt3oZllUdZk1ar60EyN8aPmeZmQHtNjkNCtnIH7cSPt uRuS9AFPy4AmidzZBj2IK6ENEB9LXVQLsB9CVjTCQudoGKOAfnPRp3y41wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6IOdShoB3dHSsyuo5fEhbxnkK9MB8GA1UdIwQY MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt YWMxZWRiYjQ3N2MwLzEvdm9nNTFLR2dIZDBkS3pLNmpsOFNGdkdlUXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufjUMA0G CSqGSIb3DQEBCwUAA4IBAQCZYZF07cpSGlM2GlMeYdyvG3rNPQ2AJeEuIfiqTQy8 a3NY4RxcyJKwX1yWHcl4wkWHOnis75KpgIuorg1QkNFfYvBBEkAOaedA6ujCB8UD fxiEAgUok/zJepZv2JavBoF/Ouzbd1NW3L5tLlyhVQ4Mklbx/YWw6c5Zw/zMU9Yp Vf4uA9Et945VlpjuHVV7Fkz7ngiFE1giZL/CDN8yeoYyzJnDJstBV6RiQ3rG6MIZ gmT/WBT/vAwA5L5su8lvIsTOtqXICgZGxi7aofOSvIGmfEG9dJRbIhslI3mNpvmy yytZrFEYZS2VkhK65GaRt6tIqE6ktKUDIimaV+8vR8eR -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:20 2026 by rpki-client