This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa File: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (raw, json) Hash identifier: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg= Subject key identifier: 55:B2:F6:41:66:7D:2A:0F:0B:D6:91:37:E9:2B:DF:65:8C:AB:F1:3B Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b Certificate serial: 019B7E3855555DBB23DB40588A58DAE32F5B Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29278 IP address blocks: 193.17.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:55:55:5d:bb:23:db:40:58:8a:58:da:e3:2f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55b2f641667d2a0f0bd69137e92bdf658cabf13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:58:e1:63:4c:54:93:2f:73:c0:9a:03:9b: 81:d3:e8:aa:3a:45:e3:90:79:55:7c:7a:07:6c:c0: a2:37:bc:61:5d:8a:10:37:75:89:2d:fd:08:5b:26: fa:2a:e9:3b:cf:28:b1:98:37:9b:83:d6:d2:16:94: b7:9d:de:0d:41:9f:40:d3:43:87:87:de:56:18:20: 32:af:6e:65:eb:76:94:b3:54:89:bc:8f:37:6f:02: 4b:61:47:8f:cb:31:ab:7e:70:70:28:41:e3:46:12: 34:04:65:6b:0e:bb:62:c2:51:ad:52:4b:13:62:ad: 34:ea:8c:46:a8:e0:6e:31:d6:d1:94:69:ad:0e:91: 75:f2:f5:92:dd:ce:35:8a:2b:1f:f5:9b:88:09:6f: cc:13:b3:f1:c3:a0:70:12:00:f4:f6:6c:27:04:6e: 47:39:52:b0:a7:85:67:90:9b:84:db:dd:07:53:c3: f0:49:20:08:9d:a6:88:83:ad:7d:14:52:6e:05:9f: 4b:d1:23:8b:35:ca:22:ca:91:0d:16:88:94:40:5d: d1:04:99:98:e7:ac:f8:8d:58:95:24:e5:4f:4f:ec: 23:18:81:2a:08:6a:15:df:0f:1f:28:6c:b3:0e:70: 9d:25:60:12:2f:40:db:6b:62:74:cb:c1:d2:44:5f: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B2:F6:41:66:7D:2A:0F:0B:D6:91:37:E9:2B:DF:65:8C:AB:F1:3B X509v3 Authority Key Identifier: keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.175.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:69:30:3b:9f:30:f4:41:95:e6:eb:13:53:6b:98:5c:39:f1: af:a4:6d:ce:90:96:1f:92:c9:59:20:bd:db:8d:91:1c:b1:9a: d7:ab:e0:a3:4a:15:d3:16:01:0b:6e:16:09:44:e2:80:15:97: 64:82:1c:97:3c:5f:f3:fe:18:ce:98:5e:07:36:e6:6e:9f:8d: ff:f2:0b:fa:eb:7f:1d:56:b1:90:e1:e8:3f:29:69:40:ef:0a: eb:ed:6a:e1:9f:79:10:17:49:88:ee:66:53:ad:f3:8e:fc:41: 46:c1:4c:e9:2d:05:5b:f6:1f:bb:62:3b:72:07:f2:d1:c3:fc: 8f:98:33:63:47:5a:76:17:d4:3a:67:00:ee:23:4e:35:36:9c: db:f1:a7:11:f1:d5:aa:97:62:fb:64:87:6a:e1:02:28:96:88: 16:5a:74:c2:81:ee:89:2d:d6:08:cb:37:30:1a:14:29:f3:9c: 42:ef:3f:56:5b:91:51:05:83:3a:c2:7d:01:a9:f3:c8:b8:79: 18:f7:52:e4:a6:60:d6:b1:66:fe:4e:96:4f:4a:34:38:47:72: ec:07:04:ff:64:3a:44:91:bd:02:ca:43:5b:3c:48:ff:91:6d: 33:1f:b0:86:e3:d2:60:cc:40:c9:e0:69:23:a1:cf:d8:1c:eb: 0c:9e:d0:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFVVXbsj20BYilja4y9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2UzZDQ3NGE3NzVjZTQ3NzYzNzE2MzJiYzE5NmNhMWY0 ZWMyM2IwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWIyZjY0MTY2N2QyYTBmMGJkNjkxMzdlOTJiZGY2NThjYWJmMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqhY4WNMVJMvc8CaA5uB0+iqOkXj kHlVfHoHbMCiN7xhXYoQN3WJLf0IWyb6Kuk7zyixmDebg9bSFpS3nd4NQZ9A00OH h95WGCAyr25l63aUs1SJvI83bwJLYUePyzGrfnBwKEHjRhI0BGVrDrtiwlGtUksT Yq006oxGqOBuMdbRlGmtDpF18vWS3c41iisf9ZuICW/ME7Pxw6BwEgD09mwnBG5H OVKwp4VnkJuE290HU8PwSSAInaaIg619FFJuBZ9L0SOLNcoiypENFoiUQF3RBJmY 56z4jViVJOVPT+wjGIEqCGoV3w8fKGyzDnCdJWASL0Dba2J0y8HSRF8p9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWy9kFmfSoPC9aRN+kr32WMq/E7MB8GA1UdIwQY MBaAFDvOPUdKd1zkd2NxYyvBlsofTsI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEt NjNjYzZjNjdjOTk1LzEvVmJMMlFXWjlLZzhMMXBFMzZTdmZaWXlyOFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEtNjNjYzZjNjdjOTk1 LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRGvMA0G CSqGSIb3DQEBCwUAA4IBAQBKaTA7nzD0QZXm6xNTa5hcOfGvpG3OkJYfkslZIL3b jZEcsZrXq+CjShXTFgELbhYJROKAFZdkghyXPF/z/hjOmF4HNuZun43/8gv6638d VrGQ4eg/KWlA7wrr7Wrhn3kQF0mI7mZTrfOO/EFGwUzpLQVb9h+7YjtyB/LRw/yP mDNjR1p2F9Q6ZwDuI041Npzb8acR8dWql2L7ZIdq4QIologWWnTCge6JLdYIyzcw GhQp85xC7z9WW5FRBYM6wn0BqfPIuHkY91LkpmDWsWb+TpZPSjQ4R3LsBwT/ZDpE kb0CykNbPEj/kW0zH7CG49JgzEDJ4Gkjoc/YHOsMntBm -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:31 2026 by rpki-client