This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wVGjVR1mtOVQ-ZoH4VwkhSMBRpQ.roa File: wVGjVR1mtOVQ-ZoH4VwkhSMBRpQ.roa (raw, json) Hash identifier: 5Oexv4gFTkRdtfJI1vIUMB8WXKs8l5SvN2DQWjel6p8= Subject key identifier: C1:51:A3:55:1D:66:B4:E5:50:F9:9A:07:E1:5C:24:85:23:01:46:94 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5F99DB27C50823E08DE4E6B24DFD Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wVGjVR1mtOVQ-ZoH4VwkhSMBRpQ.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199415 IP address blocks: 37.202.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5f:99:db:27:c5:08:23:e0:8d:e4:e6:b2:4d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c151a3551d66b4e550f99a07e15c248523014694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ee:73:19:39:5f:ca:23:bb:bf:e1:e6:27:dd: 3b:70:13:08:74:4f:e2:57:a5:78:cb:77:b8:1c:db: f1:62:a8:8b:30:c4:2a:05:c9:89:85:ba:f8:cb:3e: 25:8b:be:ce:f7:8d:55:55:78:53:f4:84:4a:9a:bf: 7c:fa:b7:33:b1:c1:3c:06:3b:72:97:ca:fb:3d:60: 97:c8:88:21:b5:60:a0:7a:4c:22:a1:f8:c4:72:dc: 95:1a:2f:d8:56:ec:97:41:6d:6e:62:26:3e:58:46: 14:54:c3:58:d6:28:8b:a1:df:2b:b1:a3:1f:17:e4: a9:b6:8a:d7:f9:1b:23:ce:b1:0b:53:92:d5:dd:51: 0d:14:5a:4e:41:4a:ae:54:67:29:4a:8d:d1:66:2c: 34:80:f3:e6:ab:f6:6d:d1:fe:60:fc:7a:f5:d7:eb: 0b:25:f4:c7:f3:ad:fe:63:71:9a:6f:59:48:75:9d: 95:df:66:91:40:6e:2b:44:84:4a:9b:09:fe:c9:77: f6:46:20:22:84:51:ed:c7:c3:42:2d:80:47:67:60: ef:f4:76:2e:55:87:c5:6f:4d:82:04:66:de:53:fa: 12:43:24:76:76:0f:d1:53:ee:08:6b:9b:49:5b:8d: ca:0b:a3:80:6f:83:41:b9:e3:1b:0e:fb:55:33:1a: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:A3:55:1D:66:B4:E5:50:F9:9A:07:E1:5C:24:85:23:01:46:94 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wVGjVR1mtOVQ-ZoH4VwkhSMBRpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.217.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ef:7a:d1:dc:3d:d0:14:e1:4a:48:bc:37:44:38:80:93:70: 07:9e:13:a3:ed:73:bd:07:48:c2:f6:31:a8:2a:36:9c:1b:b0: 1b:cb:c0:bc:d9:5d:fc:7a:f7:9c:78:45:22:0e:2f:50:83:2e: 04:b4:b6:6d:54:6c:28:e9:a8:7a:c4:58:a6:ac:6b:65:fd:31: c1:57:08:ba:72:f1:b5:da:82:5a:49:e7:cc:53:fc:18:f2:bd: c5:6f:e9:c1:05:e1:a4:ee:95:c4:af:59:63:37:aa:41:cf:ac: 8f:51:75:d1:ac:35:70:3b:29:db:f2:a2:d9:59:23:51:75:61: b7:04:c3:4a:49:35:e6:42:7e:7a:22:06:36:64:fa:6e:e7:5c: fb:08:e8:b9:5b:9c:20:1c:a7:1f:32:65:90:5e:22:dc:a7:fb: 52:23:59:1c:a9:45:4d:e3:03:f9:d7:5e:fd:dd:94:b1:40:9b: 9b:b5:12:fa:71:ae:0b:06:8f:1c:d9:98:7d:eb:1b:21:de:a5: 76:61:0e:16:ab:a0:c3:e3:7e:b5:79:6b:fb:e7:8e:57:3b:88: d7:9a:1f:40:f6:ea:56:3d:1f:61:a5:c0:df:21:76:68:82:cd: 9b:22:d6:8b:40:56:dd:f6:7b:35:a0:85:9c:40:44:ec:75:70: 54:41:68:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1+Z2yfFCCPgjeTmsk39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTUxYTM1NTFkNjZiNGU1NTBmOTlhMDdlMTVjMjQ4NTIzMDE0Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u5zGTlfyiO7v+HmJ907cBMIdE/i V6V4y3e4HNvxYqiLMMQqBcmJhbr4yz4li77O941VVXhT9IRKmr98+rczscE8Bjty l8r7PWCXyIghtWCgekwiofjEctyVGi/YVuyXQW1uYiY+WEYUVMNY1iiLod8rsaMf F+SptorX+RsjzrELU5LV3VENFFpOQUquVGcpSo3RZiw0gPPmq/Zt0f5g/Hr11+sL JfTH863+Y3Gab1lIdZ2V32aRQG4rRIRKmwn+yXf2RiAihFHtx8NCLYBHZ2Dv9HYu VYfFb02CBGbeU/oSQyR2dg/RU+4Ia5tJW43KC6OAb4NBueMbDvtVMxp5RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFRo1UdZrTlUPmaB+FcJIUjAUaUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd1ZHalZSMW10T1ZRLVpvSDRWd2toU01CUnBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrZMA0G CSqGSIb3DQEBCwUAA4IBAQBZ73rR3D3QFOFKSLw3RDiAk3AHnhOj7XO9B0jC9jGo KjacG7Aby8C82V38eveceEUiDi9Qgy4EtLZtVGwo6ah6xFimrGtl/THBVwi6cvG1 2oJaSefMU/wY8r3Fb+nBBeGk7pXEr1ljN6pBz6yPUXXRrDVwOynb8qLZWSNRdWG3 BMNKSTXmQn56IgY2ZPpu51z7COi5W5wgHKcfMmWQXiLcp/tSI1kcqUVN4wP51179 3ZSxQJubtRL6ca4LBo8c2Zh96xsh3qV2YQ4Wq6DD4361eWv7545XO4jXmh9A9upW PR9hpcDfIXZogs2bItaLQFbd9ns1oIWcQETsdXBUQWij -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:11 2026 by rpki-client