This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa File: VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa (raw, json) Hash identifier: fnlgaHZDH37hg0Ckb563HOlkmEqGNqOIf1PdxlJVeTo= Subject key identifier: 56:83:21:43:9C:BF:BB:12:EC:BB:99:DF:46:D1:BC:6C:EB:E2:2E:5C Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Certificate serial: 019B7C80D592AB00EC6467ECC0BE8DFC877E Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.56.108.0/24 maxlen: 24 194.56.109.0/24 maxlen: 24 194.56.110.0/24 maxlen: 24 194.56.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d5:92:ab:00:ec:64:67:ec:c0:be:8d:fc:87:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=568321439cbfbb12ecbb99df46d1bc6cebe22e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:67:fc:28:0b:6c:78:ef:20:f2:a2:d0:5a: 3e:03:eb:d7:93:64:66:17:6c:76:d7:dc:c2:99:7b: 1e:9f:38:aa:9d:51:a0:a9:80:fb:12:f5:ef:4d:0d: 7f:81:f1:49:d1:60:35:5a:45:e7:2a:9c:59:3f:06: 9a:0b:81:73:1a:6b:c0:42:0a:df:c3:6d:53:70:34: 0d:09:e3:98:16:c7:fc:4d:c5:36:7d:6e:64:c6:5a: 2c:96:f2:5b:65:ad:06:bb:d3:34:57:03:22:db:06: a4:c0:cd:30:2e:2c:24:4c:5a:6c:b1:b3:5a:13:5a: 40:53:ec:75:e8:7f:50:e8:fa:e2:6a:b4:b2:93:88: d7:11:e2:a1:0d:e5:d7:d2:a2:ad:34:7d:8d:9a:c0: 0b:55:a0:16:3e:bb:00:4a:d5:92:79:fe:a6:62:67: 53:ed:49:55:cb:78:c7:07:e6:05:52:4e:2b:66:cd: 7c:75:e7:32:3a:74:9c:53:12:6d:26:33:12:32:80: 01:6a:65:84:8e:7d:3f:3b:aa:42:06:06:aa:82:4e: 6e:fd:e7:a6:a9:50:27:81:00:fb:c7:8c:4d:2d:f0: d5:9f:73:b7:dd:63:7e:2a:74:00:eb:b5:2d:cd:ae: b0:32:b1:7f:68:59:e6:fc:6a:89:c3:ce:d6:ef:6a: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:21:43:9C:BF:BB:12:EC:BB:99:DF:46:D1:BC:6C:EB:E2:2E:5C X509v3 Authority Key Identifier: keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.108.0/22 Signature Algorithm: sha256WithRSAEncryption 03:c7:63:31:b8:84:2e:88:76:05:25:9c:0e:b0:69:1b:56:bd: 7b:c4:07:84:c5:d2:0b:fb:69:bc:53:5d:e4:df:c4:b2:f9:85: c2:68:ed:b1:9e:9f:cf:ea:fe:24:20:1f:a4:39:c8:76:4a:95: b6:14:02:1a:a2:25:4a:97:ba:36:2a:01:6d:82:69:3a:e8:fd: fa:1a:cc:26:2a:d8:7e:eb:26:fa:2c:a5:27:b3:48:55:b0:4a: 3f:10:b7:e7:89:c9:79:00:ec:4f:1f:13:c6:a3:3f:f9:c3:a0: 65:f1:46:6c:fe:31:d7:bc:48:26:51:ed:57:55:08:51:4e:a6: 3b:07:ae:76:6c:4d:80:61:c8:76:08:51:ad:a1:a7:7d:b0:95: 04:01:d7:b3:6a:6d:5f:93:ff:60:5e:16:ec:9d:d9:97:57:9c: 0e:21:79:74:e4:3c:4e:2b:24:75:d4:e1:c2:fa:cf:55:d0:f7: 0d:9a:ba:6f:e7:78:4e:75:e1:e9:7a:06:2a:ca:5e:af:92:34: 20:0f:c2:bb:3c:18:f1:63:bc:15:59:57:f0:29:79:47:46:59: e7:b9:d8:8a:fc:8a:fe:de:a4:32:ec:c7:4e:63:94:32:20:ae: 10:12:49:71:a2:59:53:bd:9d:ca:e8:01:8a:78:8f:3f:ba:89: 0c:ec:ed:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNWSqwDsZGfswL6N/Id+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx NTkzZWYwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjgzMjE0MzljYmZiYjEyZWNiYjk5ZGY0NmQxYmM2Y2ViZTIyZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN5n/CgLbHjvIPKi0Fo+A+vXk2Rm F2x219zCmXsenziqnVGgqYD7EvXvTQ1/gfFJ0WA1WkXnKpxZPwaaC4FzGmvAQgrf w21TcDQNCeOYFsf8TcU2fW5kxloslvJbZa0Gu9M0VwMi2wakwM0wLiwkTFpssbNa E1pAU+x16H9Q6PriarSyk4jXEeKhDeXX0qKtNH2NmsALVaAWPrsAStWSef6mYmdT 7UlVy3jHB+YFUk4rZs18decyOnScUxJtJjMSMoABamWEjn0/O6pCBgaqgk5u/eem qVAngQD7x4xNLfDVn3O33WN+KnQA67Utza6wMrF/aFnm/GqJw87W72pqCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFaDIUOcv7sS7LuZ30bRvGzr4i5cMB8GA1UdIwQY MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt YjEwYTgzMmJjYTQzLzEvVm9NaFE1eV91eExzdTVuZlJ0RzhiT3ZpTGx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjhsMA0G CSqGSIb3DQEBCwUAA4IBAQADx2MxuIQuiHYFJZwOsGkbVr17xAeExdIL+2m8U13k 38Sy+YXCaO2xnp/P6v4kIB+kOch2SpW2FAIaoiVKl7o2KgFtgmk66P36GswmKth+ 6yb6LKUns0hVsEo/ELfnicl5AOxPHxPGoz/5w6Bl8UZs/jHXvEgmUe1XVQhRTqY7 B652bE2AYch2CFGtoad9sJUEAdezam1fk/9gXhbsndmXV5wOIXl05DxOKyR11OHC +s9V0PcNmrpv53hOdeHpegYqyl6vkjQgD8K7PBjxY7wVWVfwKXlHRlnnudiK/Ir+ 3qQy7MdOY5QyIK4QEklxollTvZ3K6AGKeI8/uokM7O2l -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:03 2026 by rpki-client