This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vyYHlJmCLwG3Q9u_emcOolaTWQA.roa File: vyYHlJmCLwG3Q9u_emcOolaTWQA.roa (raw, json) Hash identifier: OArIxtYQYKHexWSCBZvE5aCXJ4aFeZJGgPO2ofq1dsM= Subject key identifier: BF:26:07:94:99:82:2F:01:B7:43:DB:BF:7A:67:0E:A2:56:93:59:00 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A8B3153B2E69E6BE239C51C34E36 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vyYHlJmCLwG3Q9u_emcOolaTWQA.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62122 IP address blocks: 141.101.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a8:b3:15:3b:2e:69:e6:be:23:9c:51:c3:4e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf26079499822f01b743dbbf7a670ea256935900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:6e:e9:eb:63:bb:84:f6:77:f3:55:2f:54: ec:3a:fe:73:d8:68:0a:91:1f:75:b4:79:84:1a:ba: a9:84:00:ca:d0:65:f7:8b:07:2c:13:57:a9:0f:8c: d9:27:b7:29:f7:17:32:5b:15:c1:a0:8c:18:2c:d6: 5b:ce:3a:8e:61:7b:3e:96:a7:9e:eb:5c:78:94:d2: 79:72:4e:06:86:e9:e2:ac:f4:95:20:24:d9:29:0d: ed:6a:87:6b:af:2b:ff:4c:05:77:4d:aa:50:8e:e9: f8:5d:87:8f:ab:04:50:12:97:ab:b8:6d:12:f5:b5: 31:73:7f:53:df:51:c9:45:7b:c0:cd:38:30:c3:9b: b1:6d:66:eb:36:b0:6d:5b:09:4a:02:fb:28:74:cb: 18:8a:55:34:ec:af:c2:4e:a4:52:5d:ab:ea:0d:71: 94:fc:98:79:89:8d:03:76:73:3d:2a:54:06:f6:a5: 46:b0:28:72:5c:71:00:b5:48:4d:49:4d:6a:0a:c9: 16:57:fc:24:5c:2d:1e:5d:28:bf:04:78:f4:96:29: 68:7d:0d:51:8a:22:9b:32:36:2e:ed:4c:ea:c1:4f: 56:58:25:d5:cf:78:b9:a7:5e:0b:a1:9b:53:dc:6d: 0d:b0:55:cb:b9:80:3f:8b:81:2b:d3:6d:4b:ed:ec: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:26:07:94:99:82:2F:01:B7:43:DB:BF:7A:67:0E:A2:56:93:59:00 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/vyYHlJmCLwG3Q9u_emcOolaTWQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.240.0/24 Signature Algorithm: sha256WithRSAEncryption b8:5a:ea:4b:22:33:eb:02:a2:c3:f8:c3:d1:eb:ad:cf:0f:b8: 4b:ab:61:56:ae:50:a0:88:b6:7a:f5:ab:f4:c7:26:80:17:28: f7:f5:db:83:15:25:60:e8:00:61:cf:ef:4e:5e:be:ce:e6:08: a7:44:77:89:51:bd:cd:26:4a:5d:5a:e1:40:1f:8b:12:98:12: 46:2d:fc:94:ea:33:55:68:f3:3e:2b:15:9d:03:69:20:8c:be: 5e:90:a0:99:48:c7:3a:a8:32:58:80:1a:0d:da:64:9a:89:b8: 71:20:30:bf:a5:20:17:79:3f:e1:a0:8d:74:4f:2c:1e:55:70: 63:e8:49:80:53:82:c9:f5:c9:b7:da:85:50:fc:ec:21:47:fe: 96:68:0d:25:6b:48:0c:7f:5e:e9:51:b1:5f:ab:08:2b:49:de: c6:16:af:3b:e1:97:6e:5d:d2:0c:1f:98:12:01:a6:a8:24:fa: c1:72:81:8b:1d:c2:12:eb:fd:87:0f:22:aa:03:3f:f0:4c:ff: 6b:4d:0e:31:3c:dc:ed:9e:f3:16:28:0f:3d:b6:e3:73:f5:8f: 75:cd:04:e5:2a:9a:dd:46:31:09:e2:df:26:02:3f:66:0a:04: a0:89:8b:d3:60:5e:d0:e2:e6:92:8f:6e:42:b2:a3:8a:90:19: 5c:4e:d3:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6izFTsuaea+I5xRw042MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjI2MDc5NDk5ODIyZjAxYjc0M2RiYmY3YTY3MGVhMjU2OTM1OTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpBu6etju4T2d/NVL1TsOv5z2GgK kR91tHmEGrqphADK0GX3iwcsE1epD4zZJ7cp9xcyWxXBoIwYLNZbzjqOYXs+lqee 61x4lNJ5ck4GhunirPSVICTZKQ3taodrryv/TAV3TapQjun4XYePqwRQEperuG0S 9bUxc39T31HJRXvAzTgww5uxbWbrNrBtWwlKAvsodMsYilU07K/CTqRSXavqDXGU /Jh5iY0DdnM9KlQG9qVGsChyXHEAtUhNSU1qCskWV/wkXC0eXSi/BHj0lilofQ1R iiKbMjYu7UzqwU9WWCXVz3i5p14LoZtT3G0NsFXLuYA/i4Er021L7ezB6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL8mB5SZgi8Bt0Pbv3pnDqJWk1kAMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvdnlZSGxKbUNMd0czUTl1X2VtY09vbGFUV1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXwMA0G CSqGSIb3DQEBCwUAA4IBAQC4WupLIjPrAqLD+MPR663PD7hLq2FWrlCgiLZ69av0 xyaAFyj39duDFSVg6ABhz+9OXr7O5ginRHeJUb3NJkpdWuFAH4sSmBJGLfyU6jNV aPM+KxWdA2kgjL5ekKCZSMc6qDJYgBoN2mSaibhxIDC/pSAXeT/hoI10TyweVXBj 6EmAU4LJ9cm32oVQ/OwhR/6WaA0la0gMf17pUbFfqwgrSd7GFq874ZduXdIMH5gS AaaoJPrBcoGLHcIS6/2HDyKqAz/wTP9rTQ4xPNztnvMWKA89tuNz9Y91zQTlKprd RjEJ4t8mAj9mCgSgiYvTYF7Q4uaSj25CsqOKkBlcTtOJ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:36 2026 by rpki-client