This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/VwmZbt4zSCgNVHSmaGQnXbGMWmg.roa File: VwmZbt4zSCgNVHSmaGQnXbGMWmg.roa (raw, json) Hash identifier: H9wXI0OI4b6amDU3O07AMeAyiH6iertm/boHVyUL0rw= Subject key identifier: 57:09:99:6E:DE:33:48:28:0D:54:74:A6:68:64:27:5D:B1:8C:5A:68 Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada Certificate serial: 019B78A35F19A317551ABCCD8BA7647B1873 Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/VwmZbt4zSCgNVHSmaGQnXbGMWmg.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 149.249.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5f:19:a3:17:55:1a:bc:cd:8b:a7:64:7b:18:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5709996ede3348280d5474a66864275db18c5a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:16:94:31:f1:a9:31:64:da:f8:b5:fd:84:d9: ab:c3:e8:5f:25:f5:3b:3a:e9:09:14:d3:44:71:83: 27:86:b8:13:b6:c8:00:f8:48:44:8b:39:16:5b:d8: b9:d4:e0:9b:fa:fc:76:2a:e5:a6:88:44:97:a5:c5: a8:9c:a5:7f:34:e4:81:ec:83:64:c4:00:68:e8:11: 42:a5:3a:e2:17:e1:d5:a6:cc:13:27:ce:6a:71:68: e3:37:74:f6:82:b1:50:ed:94:98:94:ab:1e:69:2f: a1:53:be:7f:0f:19:76:6b:c4:68:44:4f:d4:75:71: e0:85:c6:ce:72:c5:e3:14:30:e9:ba:2d:cf:34:ed: c0:38:6d:75:10:ac:a4:59:e2:97:a6:d7:8c:5c:7f: 2a:e7:bc:c8:10:d7:87:27:08:7c:f5:71:78:1b:a4: 9b:1f:ca:ae:c9:55:67:97:6b:43:1e:e0:a1:d0:2d: 93:d8:06:6a:50:3e:87:a2:54:1d:0b:d5:62:08:fd: 1c:21:16:0a:b6:ed:7e:38:b9:6c:5d:95:f9:ff:ef: 7e:12:d8:7d:9f:aa:81:e4:9a:b2:95:3d:47:a3:7a: 7e:22:1b:05:4c:b4:48:77:e4:06:61:6d:0e:7e:b6: ec:c0:63:0a:d8:6c:ba:7b:a0:86:07:f6:cf:8a:1c: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:99:6E:DE:33:48:28:0D:54:74:A6:68:64:27:5D:B1:8C:5A:68 X509v3 Authority Key Identifier: keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/VwmZbt4zSCgNVHSmaGQnXbGMWmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.0.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:25:72:c6:db:71:ed:03:9c:5f:20:03:87:fe:0a:96:f8:1a: 14:49:e0:45:0f:47:6b:d3:38:b7:64:2d:00:ed:c3:9d:10:fa: 71:fe:1e:03:3d:69:bc:f0:7e:6e:50:a2:14:1d:72:c7:7e:1c: c7:e1:6d:e9:5d:13:fc:46:7f:b6:6d:03:15:ab:28:60:c5:e9: 1c:40:d7:78:c3:9f:3c:76:07:73:a5:b8:c2:df:d4:43:81:f1: d9:55:61:af:f8:a6:c8:e8:18:6b:3e:52:fb:a4:c8:2d:c4:38: 09:6d:5c:59:02:6a:87:81:cb:60:7f:b4:e9:5a:0f:3d:f3:28: c9:2f:42:0d:48:30:8a:e1:65:8c:c7:5d:06:79:10:f6:a3:0f: ad:ba:6d:df:cf:20:5b:1e:e2:c3:bf:2b:a4:d7:93:1e:91:af: 74:2f:95:0a:47:c0:a7:a3:83:2d:cd:74:37:89:ca:9d:6e:d6: 83:ec:f8:40:82:dc:45:d6:f8:ad:a1:a8:9a:27:b9:b1:78:0c: 48:93:8f:84:67:75:d4:5f:ec:e1:77:31:a1:12:b3:f2:05:62: 7b:ba:66:dc:4d:c0:6f:1e:b2:00:18:6e:61:97:2f:09:f5:02: 9a:ba:a0:86:63:51:b0:f0:01:e6:19:8b:87:35:6a:c3:6f:d9: 06:86:56:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o18ZoxdVGrzNi6dkexhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGEwNjU2NGQzYzcxN2QyZDZkYWExZTgzM2M0OTU5NzZi MGJhZGEwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzA5OTk2ZWRlMzM0ODI4MGQ1NDc0YTY2ODY0Mjc1ZGIxOGM1YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BaUMfGpMWTa+LX9hNmrw+hfJfU7 OukJFNNEcYMnhrgTtsgA+EhEizkWW9i51OCb+vx2KuWmiESXpcWonKV/NOSB7INk xABo6BFCpTriF+HVpswTJ85qcWjjN3T2grFQ7ZSYlKseaS+hU75/Dxl2a8RoRE/U dXHghcbOcsXjFDDpui3PNO3AOG11EKykWeKXpteMXH8q57zIENeHJwh89XF4G6Sb H8quyVVnl2tDHuCh0C2T2AZqUD6HolQdC9ViCP0cIRYKtu1+OLlsXZX5/+9+Eth9 n6qB5JqylT1Ho3p+IhsFTLRId+QGYW0OfrbswGMK2Gy6e6CGB/bPihw6twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcJmW7eM0goDVR0pmhkJ12xjFpoMB8GA1UdIwQY MBaAFHoKBlZNPHF9LW2qHoM8SVl2sLraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAt NTQ4MjYzZWI2ZmI0LzEvVndtWmJ0NHpTQ2dOVkhTbWFHUW5YYkdNV21nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAtNTQ4MjYzZWI2ZmI0 LzEvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfkAMA0G CSqGSIb3DQEBCwUAA4IBAQA+JXLG23HtA5xfIAOH/gqW+BoUSeBFD0dr0zi3ZC0A 7cOdEPpx/h4DPWm88H5uUKIUHXLHfhzH4W3pXRP8Rn+2bQMVqyhgxekcQNd4w588 dgdzpbjC39RDgfHZVWGv+KbI6BhrPlL7pMgtxDgJbVxZAmqHgctgf7TpWg898yjJ L0INSDCK4WWMx10GeRD2ow+tum3fzyBbHuLDvyuk15Meka90L5UKR8Cno4MtzXQ3 icqdbtaD7PhAgtxF1vitoaiaJ7mxeAxIk4+EZ3XUX+zhdzGhErPyBWJ7umbcTcBv HrIAGG5hly8J9QKauqCGY1Gw8AHmGYuHNWrDb9kGhlY9 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:56 2026 by rpki-client