This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/VFGEJNzLzqbtn_xoW_8uAp03Cps.roa File: VFGEJNzLzqbtn_xoW_8uAp03Cps.roa (raw, json) Hash identifier: vNmZGriew68XIyyo5twCVk3Ozs6RyZWncGa/e7gLj+Q= Subject key identifier: 54:51:84:24:DC:CB:CE:A6:ED:9F:FC:68:5B:FF:2E:02:9D:37:0A:9B Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d Certificate serial: 019B7C7F6A5B9E5284E0FC0EF1D47656AD73 Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/VFGEJNzLzqbtn_xoW_8uAp03Cps.roa Signing time: Fri 02 Jan 2026 02:18:03 +0000 ROA not before: Fri 02 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12637 IP address blocks: 193.200.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6a:5b:9e:52:84:e0:fc:0e:f1:d4:76:56:ad:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54518424dccbcea6ed9ffc685bff2e029d370a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:6f:c4:a9:31:7e:fa:ef:ca:b2:be:1b:e4: 7a:94:cd:5a:4e:7c:b9:6b:f2:65:fa:43:a7:5e:89: 6d:88:5b:9f:28:20:16:e2:bc:d4:2e:59:da:e4:e6: fa:a7:1c:92:2a:d2:a8:8d:b4:d7:cf:95:05:da:3f: 89:d7:00:7f:04:5a:1a:e6:00:26:f1:c2:9c:9f:82: bc:b5:18:1f:5c:60:89:96:a6:a5:fb:5b:65:7f:a9: ce:db:b0:70:f9:0c:a5:b5:ab:8b:5f:75:2c:be:65: de:4d:30:46:0e:cc:cc:30:b1:60:59:0d:5b:8e:a5: b0:39:da:11:43:cd:08:0c:4a:e7:46:4a:89:a9:6b: 2e:f0:42:f8:77:d5:0a:fa:e3:5b:12:ce:b5:73:a6: 08:b4:c7:ea:99:f6:ed:2b:9a:3a:9e:a7:b2:bf:2a: f2:7a:96:e2:63:5f:30:54:7d:a5:e4:1a:90:5a:3d: 05:72:4a:98:31:5d:13:e8:ef:7b:d1:f5:75:0c:2b: 0b:22:33:26:21:51:66:c8:06:5e:16:89:0d:94:2c: f8:30:15:71:f9:2f:73:6e:42:5a:d8:39:aa:b0:d5: 51:6f:a7:eb:39:ec:08:f3:77:40:03:32:aa:71:0d: 12:9b:88:30:29:7c:d0:8e:d5:8f:dd:77:dd:00:3b: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:84:24:DC:CB:CE:A6:ED:9F:FC:68:5B:FF:2E:02:9D:37:0A:9B X509v3 Authority Key Identifier: keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/VFGEJNzLzqbtn_xoW_8uAp03Cps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.3.0/24 Signature Algorithm: sha256WithRSAEncryption a0:95:17:0d:a9:f8:2b:6e:15:09:43:08:2b:c2:39:92:22:b3: 77:d7:1e:33:00:e2:db:d5:1c:e1:e3:6a:e0:3a:b8:d9:38:5d: cc:68:f7:2b:49:b7:70:50:82:d5:18:7f:aa:7a:a0:05:99:73: 34:73:b7:b0:15:cd:de:a9:85:3f:a0:fc:f1:69:7d:26:73:80: ed:de:42:10:86:ef:e7:7a:7b:83:91:bb:1a:76:35:58:8c:77: 94:fa:02:42:37:d5:34:6c:65:8a:0a:4f:51:91:6a:da:e4:18: 90:82:14:b4:69:35:59:b0:6d:7f:59:09:5e:49:61:56:3b:4f: 62:f2:e0:3d:5f:c5:8b:58:0c:ab:0a:48:80:ba:ee:54:1c:98: 2b:a0:3d:70:1d:30:51:68:b4:b6:2f:23:2f:ff:54:c4:62:d7: 59:17:d6:1d:38:2c:f5:58:0d:67:5d:28:1d:11:f2:58:45:53: ba:69:ac:c7:26:50:12:cb:55:38:27:f7:b5:dd:c6:76:70:f7: fd:6d:e3:bb:83:fe:03:a9:b0:9d:d3:e3:a6:4a:7e:5b:78:9b: 33:6c:0e:1b:ab:e3:46:6c:61:29:71:0b:f9:17:67:07:81:21: 4e:52:a9:88:81:f7:c2:79:db:a2:fe:3d:ae:61:9c:d1:08:1b: 02:b8:ad:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2pbnlKE4PwO8dR2Vq1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWY4ZjE3NzRlMDU5MjVmMjRlNDFkZWU2OWU1YjYyM2Q5 YWM2M2QwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDUxODQyNGRjY2JjZWE2ZWQ5ZmZjNjg1YmZmMmUwMjlkMzcwYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw9vxKkxfvrvyrK+G+R6lM1aTny5 a/Jl+kOnXoltiFufKCAW4rzULlna5Ob6pxySKtKojbTXz5UF2j+J1wB/BFoa5gAm 8cKcn4K8tRgfXGCJlqal+1tlf6nO27Bw+QyltauLX3UsvmXeTTBGDszMMLFgWQ1b jqWwOdoRQ80IDErnRkqJqWsu8EL4d9UK+uNbEs61c6YItMfqmfbtK5o6nqeyvyry epbiY18wVH2l5BqQWj0FckqYMV0T6O970fV1DCsLIjMmIVFmyAZeFokNlCz4MBVx +S9zbkJa2DmqsNVRb6frOewI83dAAzKqcQ0Sm4gwKXzQjtWP3XfdADsXdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFRRhCTcy86m7Z/8aFv/LgKdNwqbMB8GA1UdIwQY MBaAFLKvjxd04Fkl8k5B3uaeW2I9msY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEt ZmE1N2MxMjZiYzJhLzEvVkZHRUpOekx6cWJ0bl94b1dfOHVBcDAzQ3BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEtZmE1N2MxMjZiYzJh LzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcgDMA0G CSqGSIb3DQEBCwUAA4IBAQCglRcNqfgrbhUJQwgrwjmSIrN31x4zAOLb1Rzh42rg OrjZOF3MaPcrSbdwUILVGH+qeqAFmXM0c7ewFc3eqYU/oPzxaX0mc4Dt3kIQhu/n enuDkbsadjVYjHeU+gJCN9U0bGWKCk9RkWra5BiQghS0aTVZsG1/WQleSWFWO09i 8uA9X8WLWAyrCkiAuu5UHJgroD1wHTBRaLS2LyMv/1TEYtdZF9YdOCz1WA1nXSgd EfJYRVO6aazHJlASy1U4J/e13cZ2cPf9beO7g/4DqbCd0+OmSn5beJszbA4bq+NG bGEpcQv5F2cHgSFOUqmIgffCedui/j2uYZzRCBsCuK1w -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:38 2026 by rpki-client