This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/vGlS7Hrq45htrsjaU3BNpgHWGr0.roa File: vGlS7Hrq45htrsjaU3BNpgHWGr0.roa (raw, json) Hash identifier: GuGCEHXwOiNQxstrG0ow4RosJtkvtdQUEYTwrV+gw5Y= Subject key identifier: BC:69:52:EC:7A:EA:E3:98:6D:AE:C8:DA:53:70:4D:A6:01:D6:1A:BD Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Certificate serial: 019B7C1256E0F0C2A311BCBDF2E6FBF76551 Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/vGlS7Hrq45htrsjaU3BNpgHWGr0.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206496 IP address blocks: 185.198.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:56:e0:f0:c2:a3:11:bc:bd:f2:e6:fb:f7:65:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6952ec7aeae3986daec8da53704da601d61abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:66:ba:59:0c:3d:79:57:1b:51:bb:8e:c5: 34:0b:b9:99:60:2b:6c:5a:e7:28:13:99:b3:fa:c6: 0f:35:b6:42:4b:7c:de:ca:4b:24:3b:d0:63:8e:79: 90:90:75:cf:71:f1:34:56:e0:76:67:f2:e6:7f:e0: 2f:14:de:61:e3:ba:19:17:a2:a5:3b:3b:91:b0:2a: e2:52:84:7f:01:c0:c5:8b:42:2b:9a:db:9e:9c:c4: 14:9e:27:22:86:53:0f:04:e9:45:b7:01:07:88:35: de:7e:2b:46:53:83:02:5c:20:ae:fd:9e:9d:61:3c: 3e:9b:6b:2d:c7:a6:ce:47:d4:3c:7c:7d:25:c8:ca: 1d:61:0f:ed:db:17:1c:64:a6:b8:c3:d7:26:cb:57: bf:1d:1b:b4:ef:11:b5:3c:e8:68:3d:9d:a5:34:7b: 79:10:98:39:91:e8:c5:6c:d1:12:f8:c9:23:a9:1d: 55:8c:73:40:00:f8:43:b9:4c:f7:e8:fd:2f:d1:6c: d3:3e:05:e3:be:35:9f:b7:4e:c6:53:07:1b:12:54: b4:8d:37:7e:d6:b8:b8:97:05:60:fb:a8:e5:1a:7a: 69:09:07:be:4f:10:3b:4e:dc:6d:82:f2:68:78:4f: 19:68:27:97:a6:9c:d6:4e:31:dd:40:44:d9:2c:bb: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:69:52:EC:7A:EA:E3:98:6D:AE:C8:DA:53:70:4D:A6:01:D6:1A:BD X509v3 Authority Key Identifier: keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/vGlS7Hrq45htrsjaU3BNpgHWGr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.14.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:1d:ba:95:d3:cb:b6:e2:4a:1d:f1:fa:60:58:97:e9:8f:37: fa:d0:01:31:37:5b:22:da:3e:89:7c:37:16:90:12:80:3e:69: d9:92:ff:5a:98:40:2f:18:5d:49:b3:38:ba:b8:80:2d:a9:41: d6:56:b1:0a:0d:5b:03:9b:bf:29:13:89:d2:a0:c2:21:62:a2: a8:c9:17:3c:58:c7:24:d1:5e:fd:81:66:60:67:6a:b5:6a:01: 95:86:67:64:19:eb:a1:9f:22:f0:78:0b:4c:a1:0c:c6:bf:90: 58:90:b2:f2:d9:5d:7a:68:1b:54:c3:33:7d:bc:b6:33:d2:99: 91:88:d0:38:00:b9:76:2f:a7:7d:23:bb:cd:3f:a9:23:6c:e6: 54:d6:26:f7:de:33:09:a6:4d:c1:7f:e7:cc:40:4d:40:03:6e: ae:f1:e4:5b:15:8c:2f:76:c4:97:6d:18:f0:68:8b:0d:b6:04: a5:0d:39:df:19:27:cc:45:f6:c1:ff:ae:ac:33:38:b9:d3:b3: 50:af:2f:59:f3:07:40:dc:37:17:8f:37:7f:6b:f0:a6:12:39: 93:64:88:5c:5a:56:63:d3:aa:26:07:38:40:b3:be:1c:7e:c6: 8d:a5:4c:6b:3d:77:5a:f8:f5:07:19:1a:e6:9f:27:6d:38:41: 89:85:45:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Elbg8MKjEby98ub792VRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmNmNTcyNzFjMmI4ZjA0YmFhN2U2M2E5YjgxMDNkNTIw M2Q3ZjgwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzY5NTJlYzdhZWFlMzk4NmRhZWM4ZGE1MzcwNGRhNjAxZDYxYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYFmulkMPXlXG1G7jsU0C7mZYCts WucoE5mz+sYPNbZCS3zeykskO9BjjnmQkHXPcfE0VuB2Z/Lmf+AvFN5h47oZF6Kl OzuRsCriUoR/AcDFi0IrmtuenMQUnicihlMPBOlFtwEHiDXefitGU4MCXCCu/Z6d YTw+m2stx6bOR9Q8fH0lyModYQ/t2xccZKa4w9cmy1e/HRu07xG1POhoPZ2lNHt5 EJg5kejFbNES+MkjqR1VjHNAAPhDuUz36P0v0WzTPgXjvjWft07GUwcbElS0jTd+ 1ri4lwVg+6jlGnppCQe+TxA7TtxtgvJoeE8ZaCeXppzWTjHdQETZLLs5NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxpUux66uOYba7I2lNwTaYB1hq9MB8GA1UdIwQY MBaAFBws9XJxwrjwS6p+Y6m4ED1SA9f4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAt NWI0NTM2YTc5ZTgyLzEvdkdsUzdIcnE0NWh0cnNqYVUzQk5wZ0hXR3IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAtNWI0NTM2YTc5ZTgy LzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucYOMA0G CSqGSIb3DQEBCwUAA4IBAQBrHbqV08u24kod8fpgWJfpjzf60AExN1si2j6JfDcW kBKAPmnZkv9amEAvGF1Jszi6uIAtqUHWVrEKDVsDm78pE4nSoMIhYqKoyRc8WMck 0V79gWZgZ2q1agGVhmdkGeuhnyLweAtMoQzGv5BYkLLy2V16aBtUwzN9vLYz0pmR iNA4ALl2L6d9I7vNP6kjbOZU1ib33jMJpk3Bf+fMQE1AA26u8eRbFYwvdsSXbRjw aIsNtgSlDTnfGSfMRfbB/66sMzi507NQry9Z8wdA3DcXjzd/a/CmEjmTZIhcWlZj 06omBzhAs74cfsaNpUxrPXda+PUHGRrmnydtOEGJhUVZ -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:26 2026 by rpki-client