This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VaGW38gNvP6-s17D1LKordZ5hQM.roa File: VaGW38gNvP6-s17D1LKordZ5hQM.roa (raw, json) Hash identifier: EjZJxXh594hscm459rrTNWvgDAf7P47+rPbCtY7QVCY= Subject key identifier: 55:A1:96:DF:C8:0D:BC:FE:BE:B3:5E:C3:D4:B2:A8:AD:D6:79:85:03 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB08D61F4F3B6C3C72B32AABB93B7E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VaGW38gNvP6-s17D1LKordZ5hQM.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4637 IP address blocks: 151.243.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:08:d6:1f:4f:3b:6c:3c:72:b3:2a:ab:b9:3b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55a196dfc80dbcfebeb35ec3d4b2a8add6798503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:bf:de:03:27:1f:f9:e7:8f:6b:8c:e0:ca: f5:76:d0:07:cc:dd:93:c2:4d:ba:17:76:d8:b4:a5: 1f:b6:0b:bf:5b:a7:fa:41:c6:15:f9:2e:e8:b3:1c: 3f:84:30:bc:1a:77:2d:cc:e1:c8:78:f8:57:ec:b2: 69:f4:1c:c9:ae:7d:09:af:97:8c:3d:aa:15:9b:83: 37:43:d1:e3:c3:48:81:33:42:a8:90:4f:a8:cb:47: 9c:35:04:02:87:6d:64:42:46:91:ba:4b:b1:bd:a3: 59:7e:74:42:6e:ab:63:95:30:65:60:a0:79:1f:3e: 1b:27:fd:93:d5:b0:2c:a5:f3:cc:ad:93:d3:9e:4a: 4b:0e:02:e5:ac:12:6f:6f:4b:65:d6:82:74:3f:6c: b3:f1:21:a1:70:6b:00:8d:4f:21:5b:de:be:94:2d: 01:d8:24:e0:8d:ac:80:f8:83:3c:6f:0a:00:cb:90: 48:0a:24:8d:2a:bb:c7:ba:af:66:53:5e:78:6c:8a: 3d:64:65:93:f8:26:6c:9e:23:99:dd:20:10:e0:22: da:84:1c:af:e0:09:b1:c4:e8:68:d3:a7:59:a6:e2: 40:51:4a:d6:54:7d:4d:f5:c8:86:e2:32:af:77:93: 5a:f0:be:05:7a:56:8f:af:b2:b4:40:c4:35:bf:ae: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A1:96:DF:C8:0D:BC:FE:BE:B3:5E:C3:D4:B2:A8:AD:D6:79:85:03 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VaGW38gNvP6-s17D1LKordZ5hQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.202.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:b6:be:56:14:e5:51:96:14:e1:90:32:f7:95:c6:27:f5:56: 16:b8:d5:92:f2:d9:b4:ea:26:cb:5f:3b:b9:d9:73:28:81:02: 0a:03:af:2a:2b:7e:40:ed:2d:ec:ab:19:da:9f:5c:89:9d:05: 31:d9:4f:5b:4e:fd:35:75:82:81:a6:db:9f:e3:a2:e3:62:2f: fe:e9:44:70:62:1f:fc:14:5e:01:85:55:3a:4b:58:c0:04:54: ef:1a:c9:b8:77:fa:89:fa:65:78:d4:21:9c:bf:66:5e:01:ca: 47:4e:d7:6a:6f:85:4c:f6:75:f2:26:8f:00:1a:e4:03:77:49: 46:f8:48:f0:14:5a:16:dc:aa:b7:86:a1:35:47:cd:4e:2a:80: a2:80:0b:f1:df:fd:81:87:06:a4:f7:3e:59:e9:a5:56:96:f2: 12:44:dc:88:60:e0:22:a4:86:f6:64:8c:f2:87:39:3e:03:6c: 69:22:de:71:f4:25:8b:6d:82:9a:52:8a:1a:ae:55:b0:ff:d0: 47:9b:a2:47:12:88:04:5c:2e:a7:eb:41:e2:bd:e3:4a:be:fa: 14:87:92:ec:ee:5e:ae:b4:b7:ad:5a:71:ad:97:08:76:e1:78: 1f:29:ba:9e:cf:15:41:a0:a1:ef:56:6f:f2:74:77:bc:12:86: 1c:dc:1f:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywjWH087bDxysyqruTt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWExOTZkZmM4MGRiY2ZlYmViMzVlYzNkNGIyYThhZGQ2Nzk4NTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuse/3gMnH/nnj2uM4Mr1dtAHzN2T wk26F3bYtKUftgu/W6f6QcYV+S7osxw/hDC8GnctzOHIePhX7LJp9BzJrn0Jr5eM PaoVm4M3Q9Hjw0iBM0KokE+oy0ecNQQCh21kQkaRukuxvaNZfnRCbqtjlTBlYKB5 Hz4bJ/2T1bAspfPMrZPTnkpLDgLlrBJvb0tl1oJ0P2yz8SGhcGsAjU8hW96+lC0B 2CTgjayA+IM8bwoAy5BICiSNKrvHuq9mU154bIo9ZGWT+CZsniOZ3SAQ4CLahByv 4AmxxOho06dZpuJAUUrWVH1N9ciG4jKvd5Na8L4FelaPr7K0QMQ1v65oewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWhlt/IDbz+vrNew9SyqK3WeYUDMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVmFHVzM4Z052UDYtczE3RDFMS29yZFo1aFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/PKMA0G CSqGSIb3DQEBCwUAA4IBAQBetr5WFOVRlhThkDL3lcYn9VYWuNWS8tm06ibLXzu5 2XMogQIKA68qK35A7S3sqxnan1yJnQUx2U9bTv01dYKBptuf46LjYi/+6URwYh/8 FF4BhVU6S1jABFTvGsm4d/qJ+mV41CGcv2ZeAcpHTtdqb4VM9nXyJo8AGuQDd0lG +EjwFFoW3Kq3hqE1R81OKoCigAvx3/2Bhwak9z5Z6aVWlvISRNyIYOAipIb2ZIzy hzk+A2xpIt5x9CWLbYKaUooarlWw/9BHm6JHEogEXC6n60HiveNKvvoUh5Ls7l6u tLetWnGtlwh24XgfKbqezxVBoKHvVm/ydHe8EoYc3B9K -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:09 2026 by rpki-client