This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/VGuckUmXD3FffNojHBh4mr4L2f8.roa File: VGuckUmXD3FffNojHBh4mr4L2f8.roa (raw, json) Hash identifier: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU= Subject key identifier: 54:6B:9C:91:49:97:0F:71:5F:7C:DA:23:1C:18:78:9A:BE:0B:D9:FF Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc Certificate serial: 019BF9DD0039B1F19A52CBE8256C2CD1DD3C Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/VGuckUmXD3FffNojHBh4mr4L2f8.roa Signing time: Mon 26 Jan 2026 10:32:48 +0000 ROA not before: Mon 26 Jan 2026 10:32:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5400 IP address blocks: 193.202.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:dd:00:39:b1:f1:9a:52:cb:e8:25:6c:2c:d1:dd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc Validity Not Before: Jan 26 10:32:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=546b9c9149970f715f7cda231c18789abe0bd9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:04:38:1b:ad:c7:3c:0c:2e:7f:b4:cf:fc: 0c:3f:ab:45:31:52:2c:d4:2a:61:31:21:3b:59:35: b0:d9:3b:81:57:df:c5:a3:72:8f:3e:f8:7b:b9:f9: 8c:96:be:1e:7a:78:9c:86:31:3a:90:29:1e:fa:22: 1d:7e:c1:55:c6:4a:51:10:d9:5f:1b:14:f3:94:4b: b3:24:0b:12:09:47:e1:79:18:70:f5:68:05:2f:d0: 17:5d:d0:d1:09:a3:90:e4:70:37:af:cb:fe:59:bc: 9f:41:49:ce:2a:23:46:27:a5:29:3d:f2:1a:8e:6f: 0b:87:a4:3f:17:1d:5b:b0:e5:a6:a0:93:55:07:96: 8d:7f:da:42:37:0e:05:d3:4b:68:52:9a:d8:92:6a: dc:2e:a4:04:5a:40:69:6e:d9:6e:f5:97:da:d0:a2: 4b:0b:71:a3:1e:ce:b6:a1:31:7d:5e:11:0d:9c:8a: a4:8f:58:44:2c:b5:65:d8:d0:94:bf:f1:84:d2:f9: 24:4b:0d:ce:e7:e2:66:63:cf:fb:7b:56:bf:5c:1c: fe:a4:90:74:8d:8f:18:18:9f:ca:ee:c9:86:35:08: 4b:1b:8c:ae:07:0c:83:31:e3:7d:43:3d:de:40:05: f4:79:b3:78:cf:70:6a:ae:cf:f7:a6:e3:97:fc:7e: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:9C:91:49:97:0F:71:5F:7C:DA:23:1C:18:78:9A:BE:0B:D9:FF X509v3 Authority Key Identifier: keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/VGuckUmXD3FffNojHBh4mr4L2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.26.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:5e:6b:e0:a7:48:b1:bb:14:7b:6f:78:f0:55:e3:18:9d:3b: 68:cf:78:aa:ed:b1:b6:8d:6b:fa:e5:9d:d9:f4:87:5f:17:88: b3:77:90:09:9a:46:d6:ef:77:c2:91:ee:96:03:aa:7b:3d:a2: 83:30:49:cf:74:39:57:0d:c8:19:2f:3b:d5:f9:15:11:4a:47: c4:99:e0:a4:bc:5b:d5:b6:11:52:6b:82:d0:30:ea:d0:5e:f9: 13:ce:63:ad:57:68:d4:a2:07:3a:64:df:c4:c4:92:d4:01:bc: ba:c5:95:e3:c1:f5:f2:5f:03:39:9b:94:ca:d5:4d:df:54:0a: 8d:47:bb:c6:7c:6c:66:b1:b7:31:9c:52:7a:e2:96:55:e5:f4: 40:2f:b8:82:cc:a2:4c:30:30:f7:13:02:03:f3:22:cd:d0:1b: b3:c7:c0:f9:a5:ec:28:4a:2a:77:aa:d6:56:e2:c9:b3:0e:8a: ec:ff:f0:35:d8:84:35:48:8c:0d:35:5c:8e:d8:b4:d5:a2:39: 4d:34:ef:bf:bb:d4:6f:55:64:7b:07:37:51:00:65:c6:b5:93: 8b:9e:94:f0:32:1b:d2:cb:2b:bf:70:4f:be:9a:6e:d9:5b:ed: df:78:15:be:58:b4:f2:95:a3:e0:e6:e2:e0:4f:05:73:53:af: 3d:8e:01:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv53QA5sfGaUsvoJWws0d08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkY2JlZmU2YzY0ZDI5YTM0NmIyYjQwMTA5ZjhkODZiZjE4 MzgxY2MwHhcNMjYwMTI2MTAzMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDZiOWM5MTQ5OTcwZjcxNWY3Y2RhMjMxYzE4Nzg5YWJlMGJkOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PwEOButxzwMLn+0z/wMP6tFMVIs 1CphMSE7WTWw2TuBV9/Fo3KPPvh7ufmMlr4eenichjE6kCke+iIdfsFVxkpRENlf GxTzlEuzJAsSCUfheRhw9WgFL9AXXdDRCaOQ5HA3r8v+WbyfQUnOKiNGJ6UpPfIa jm8Lh6Q/Fx1bsOWmoJNVB5aNf9pCNw4F00toUprYkmrcLqQEWkBpbtlu9Zfa0KJL C3GjHs62oTF9XhENnIqkj1hELLVl2NCUv/GE0vkkSw3O5+JmY8/7e1a/XBz+pJB0 jY8YGJ/K7smGNQhLG4yuBwyDMeN9Qz3eQAX0ebN4z3Bqrs/3puOX/H4x9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFRrnJFJlw9xX3zaIxwYeJq+C9n/MB8GA1UdIwQY MBaAFN3L7+bGTSmjRrK0AQn42Gvxg4HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2N2djVzWk5LYU5Hc3JRQkNmallhX0dEZ2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYjk5NjQtNjg3Yi00NzRlLWI5M2Yt NDU1MDZjN2JlMDVkLzEvVkd1Y2tVbVhEM0ZmZk5vakhCaDRtcjRMMmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYjk5NjQtNjg3Yi00NzRlLWI5M2YtNDU1MDZjN2JlMDVk LzEvM2N2djVzWk5LYU5Hc3JRQkNmallhX0dEZ2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcoaMA0G CSqGSIb3DQEBCwUAA4IBAQAfXmvgp0ixuxR7b3jwVeMYnTtoz3iq7bG2jWv65Z3Z 9IdfF4izd5AJmkbW73fCke6WA6p7PaKDMEnPdDlXDcgZLzvV+RURSkfEmeCkvFvV thFSa4LQMOrQXvkTzmOtV2jUogc6ZN/ExJLUAby6xZXjwfXyXwM5m5TK1U3fVAqN R7vGfGxmsbcxnFJ64pZV5fRAL7iCzKJMMDD3EwID8yLN0Buzx8D5pewoSip3qtZW 4smzDors//A12IQ1SIwNNVyO2LTVojlNNO+/u9RvVWR7BzdRAGXGtZOLnpTwMhvS yyu/cE++mm7ZW+3feBW+WLTylaPg5uLgTwVzU689jgF5 -----END CERTIFICATE-----Generated at Tue Jan 27 01:40:47 2026 by rpki-client