This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/VWgMGoCtSQiDf6Oxqso0znZVdkg.roa File: VWgMGoCtSQiDf6Oxqso0znZVdkg.roa (raw, json) Hash identifier: cES9lyT0GA0HJi+kOwho+MFDqONbyPHoFudSfF39z3o= Subject key identifier: 55:68:0C:1A:80:AD:49:08:83:7F:A3:B1:AA:CA:34:CE:76:55:76:48 Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Certificate serial: 019B77C71C79B7DCF491016CFC67D21B3FFF Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/VWgMGoCtSQiDf6Oxqso0znZVdkg.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 185.48.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1c:79:b7:dc:f4:91:01:6c:fc:67:d2:1b:3f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55680c1a80ad4908837fa3b1aaca34ce76557648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:75:13:44:36:a6:10:df:f0:05:6e:eb:6d: 1c:5e:46:f6:3e:a8:52:61:08:78:ec:53:4d:d7:22: b6:01:c0:50:7f:18:6d:f9:30:7f:27:9b:2e:55:a3: 94:ae:4e:e7:f3:09:4f:c6:4d:e6:5d:f4:02:bb:d8: f6:6a:22:4c:2d:bb:4b:ec:35:de:79:98:17:ff:5f: 95:84:e6:15:ac:74:b2:6d:8f:52:16:9b:5a:5e:39: 0d:06:28:cf:f5:26:d7:53:22:9c:d5:3f:53:40:46: db:d1:12:33:bc:28:8e:21:f7:c8:a8:34:a0:c6:5e: fd:08:94:3f:f5:5d:65:87:ab:81:05:8d:e7:43:89: 0e:49:55:89:dc:5f:8e:b2:54:05:f6:73:22:0e:f0: 21:7a:f8:60:28:4f:40:93:8e:f8:e7:b9:a6:b1:7f: 96:39:d5:4d:aa:eb:ee:c6:f7:b4:1c:e7:18:28:66: aa:bf:0e:94:23:ea:3b:a0:e0:59:c3:a2:f5:8b:23: 36:0a:87:0e:f5:a1:69:e3:e1:e0:cd:31:3b:83:b3: 6c:53:99:3f:87:fd:9f:03:04:87:05:79:e6:7a:0e: ac:7b:5f:10:75:9c:ce:af:9c:8f:90:30:23:8b:cf: 97:94:0f:a6:0e:a9:b8:51:a8:bd:57:55:ba:ad:bc: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:68:0C:1A:80:AD:49:08:83:7F:A3:B1:AA:CA:34:CE:76:55:76:48 X509v3 Authority Key Identifier: keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/VWgMGoCtSQiDf6Oxqso0znZVdkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.27.0/24 Signature Algorithm: sha256WithRSAEncryption 12:de:bb:9c:f2:68:67:82:97:48:5e:0b:5d:40:cd:db:fc:a2: 8f:54:fe:0f:59:ef:fa:10:ca:ca:18:f4:b6:ca:30:ad:c1:82: 99:e0:7b:06:62:9a:0f:dd:a4:e9:1d:22:bb:9e:e3:2d:07:63: 87:9f:5b:3f:42:ef:40:ad:dd:7b:66:1d:c8:e9:b7:eb:8c:82: 20:58:46:da:9d:8b:fc:44:53:7b:9e:25:11:64:c9:f6:63:6b: a4:34:4c:cb:1b:85:cf:cc:f2:41:41:7a:0b:99:d1:72:e3:28: ab:1d:2f:5c:3b:e1:8f:29:0c:16:77:b1:55:b9:08:7e:14:2b: 30:a7:fe:cc:00:20:d4:ac:11:49:cd:7b:de:79:79:10:0c:b8: da:69:b5:24:f4:cf:90:99:bb:ae:52:23:5f:63:03:30:1a:24: c0:9b:ea:78:ee:2f:5b:ec:b8:df:2f:b2:a2:fa:05:d2:68:d5: b5:51:dd:45:72:16:e0:a2:c3:8c:4d:c5:03:f9:94:0d:61:7b: aa:1c:a7:b9:32:72:3f:20:58:b7:97:fb:f1:1d:21:e8:fa:88: db:09:a8:e5:38:f2:82:77:ee:35:a7:53:a4:ec:4e:98:dd:4c: ad:26:3d:35:65:52:b9:5e:c7:84:00:fa:15:af:68:f3:f4:44: 67:d2:75:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxx5t9z0kQFs/GfSGz//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk OGM4OGQwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTY4MGMxYTgwYWQ0OTA4ODM3ZmEzYjFhYWNhMzRjZTc2NTU3NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqd1E0Q2phDf8AVu620cXkb2PqhS YQh47FNN1yK2AcBQfxht+TB/J5suVaOUrk7n8wlPxk3mXfQCu9j2aiJMLbtL7DXe eZgX/1+VhOYVrHSybY9SFptaXjkNBijP9SbXUyKc1T9TQEbb0RIzvCiOIffIqDSg xl79CJQ/9V1lh6uBBY3nQ4kOSVWJ3F+OslQF9nMiDvAhevhgKE9Ak47457mmsX+W OdVNquvuxve0HOcYKGaqvw6UI+o7oOBZw6L1iyM2CocO9aFp4+HgzTE7g7NsU5k/ h/2fAwSHBXnmeg6se18QdZzOr5yPkDAji8+XlA+mDqm4Uai9V1W6rbzpPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFVoDBqArUkIg3+jsarKNM52VXZIMB8GA1UdIwQY MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt ODM4NmU3MGJkYzU4LzEvVldnTUdvQ3RTUWlEZjZPeHFzbzB6blpWZGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4 LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAbMA0G CSqGSIb3DQEBCwUAA4IBAQAS3ruc8mhngpdIXgtdQM3b/KKPVP4PWe/6EMrKGPS2 yjCtwYKZ4HsGYpoP3aTpHSK7nuMtB2OHn1s/Qu9Ard17Zh3I6bfrjIIgWEbanYv8 RFN7niURZMn2Y2ukNEzLG4XPzPJBQXoLmdFy4yirHS9cO+GPKQwWd7FVuQh+FCsw p/7MACDUrBFJzXveeXkQDLjaabUk9M+QmbuuUiNfYwMwGiTAm+p47i9b7LjfL7Ki +gXSaNW1Ud1FchbgosOMTcUD+ZQNYXuqHKe5MnI/IFi3l/vxHSHo+ojbCajlOPKC d+41p1Ok7E6Y3UytJj01ZVK5XseEAPoVr2jz9ERn0nXC -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:22 2026 by rpki-client