This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/VeD0j8DDk8aNazB8XjlyUYtBGB4.roa File: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (raw, json) Hash identifier: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc= Subject key identifier: 55:E0:F4:8F:C0:C3:93:C6:8D:6B:30:7C:5E:39:72:51:8B:41:18:1E Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5 Certificate serial: 019B78A373D2A1352F81EFAFAF4389C9071F Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/VeD0j8DDk8aNazB8XjlyUYtBGB4.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42353 IP address blocks: 178.22.136.0/21 maxlen: 21 178.22.136.0/23 maxlen: 23 178.22.136.0/24 maxlen: 24 178.22.137.0/24 maxlen: 24 178.22.139.0/24 maxlen: 24 178.22.140.0/23 maxlen: 23 178.22.140.0/24 maxlen: 24 178.22.141.0/24 maxlen: 24 178.22.142.0/23 maxlen: 24 178.22.143.0/24 maxlen: 24 185.63.140.0/24 maxlen: 24 185.63.141.0/24 maxlen: 24 185.63.142.0/24 maxlen: 24 185.63.143.0/24 maxlen: 24 194.0.210.0/24 maxlen: 24 2a02:28c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:73:d2:a1:35:2f:81:ef:af:af:43:89:c9:07:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55e0f48fc0c393c68d6b307c5e3972518b41181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:82:bc:77:b4:61:79:2e:55:80:a4:49:3e: 8d:fa:13:2a:59:62:fc:7b:d7:7d:73:70:8a:8b:11: a0:2d:94:c0:3a:1a:98:ae:3b:88:fd:77:f7:cd:79: bc:7a:65:74:5b:a3:04:8b:37:19:ce:fc:27:50:cf: 10:1c:f1:2b:58:76:6a:06:15:43:61:70:25:ad:e7: 55:fb:cd:53:12:7b:99:a0:c7:56:29:9e:93:84:98: ca:26:56:9d:b3:53:02:b0:40:64:51:a6:21:49:2e: d7:9e:cd:2b:62:e4:94:4a:0d:8d:43:5e:c1:3d:b0: 06:31:b7:ca:1c:01:4d:53:98:b8:eb:94:48:1b:81: f9:a1:1e:dd:17:47:dc:c0:e6:cf:de:11:78:ed:09: c8:ad:e7:fc:40:25:68:18:ac:7d:f7:b9:7d:36:71: 98:a2:90:91:62:23:34:47:b0:b8:62:99:a2:9d:74: d5:ec:88:b3:c5:20:08:cf:81:29:9b:f8:7a:2e:9d: bf:c5:e6:3b:f3:84:65:19:47:74:9c:f6:63:6b:da: 41:a6:0f:e4:df:0e:c4:6a:18:ce:b1:14:dd:ff:9a: 64:34:a8:9e:2c:28:b2:8e:94:fb:64:bb:e7:9b:86: ea:c6:67:65:93:16:11:5d:39:55:ce:96:48:06:e3: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E0:F4:8F:C0:C3:93:C6:8D:6B:30:7C:5E:39:72:51:8B:41:18:1E X509v3 Authority Key Identifier: keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/VeD0j8DDk8aNazB8XjlyUYtBGB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.136.0/21 185.63.140.0/22 194.0.210.0/24 IPv6: 2a02:28c8::/32 Signature Algorithm: sha256WithRSAEncryption c0:f1:8f:f3:43:73:2e:51:aa:f5:77:de:66:e3:44:3b:bf:10: 42:5c:02:77:2f:72:23:7f:0b:72:ea:7d:3f:75:1c:ae:0f:d4: 8e:5b:65:61:c1:be:93:50:95:14:35:ae:a3:04:c3:bd:c4:90: e9:99:87:f3:4a:71:04:59:2d:01:bd:0f:2a:22:a2:a3:f9:60: 1d:79:36:65:2f:98:d7:61:31:a7:5d:e9:1b:9b:33:9e:7b:7e: f3:40:42:f9:47:df:47:84:c8:33:53:d2:fa:6a:da:4d:60:48: 70:79:34:2d:91:de:72:84:c5:a0:12:f4:c5:fb:55:07:50:bf: f6:1b:00:b5:a0:a3:5c:93:44:77:90:ee:e4:31:e5:af:dc:cc: cd:da:90:f9:c7:5c:cf:0f:d5:55:c4:ce:56:f9:75:c3:fa:09: 41:9c:9d:74:d9:45:57:54:58:bf:ff:11:53:e3:13:e4:c8:da: a6:fa:55:d5:82:86:be:79:51:b8:41:f8:de:00:8e:3b:4e:e1: ed:8b:ae:13:05:07:8a:cb:76:ac:61:71:7f:25:77:52:2f:01: 4c:a5:01:a6:97:4b:7a:65:3f:88:7b:a2:07:7b:4b:82:27:9b: fc:a0:82:c0:00:0a:a9:3e:3c:62:03:c0:f9:88:c2:fd:0e:48: de:60:3d:97 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4o3PSoTUvge+vr0OJyQcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz NWFkZTUwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWUwZjQ4ZmMwYzM5M2M2OGQ2YjMwN2M1ZTM5NzI1MThiNDExODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhueCvHe0YXkuVYCkST6N+hMqWWL8 e9d9c3CKixGgLZTAOhqYrjuI/Xf3zXm8emV0W6MEizcZzvwnUM8QHPErWHZqBhVD YXAlredV+81TEnuZoMdWKZ6ThJjKJlads1MCsEBkUaYhSS7Xns0rYuSUSg2NQ17B PbAGMbfKHAFNU5i465RIG4H5oR7dF0fcwObP3hF47QnIref8QCVoGKx997l9NnGY opCRYiM0R7C4YpminXTV7IizxSAIz4Epm/h6Lp2/xeY784RlGUd0nPZja9pBpg/k 3w7EahjOsRTd/5pkNKieLCiyjpT7ZLvnm4bqxmdlkxYRXTlVzpZIBuO0PQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFXg9I/Aw5PGjWswfF45clGLQRgeMB8GA1UdIwQY MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt YmYyZjk3ZjFlMzRmLzEvVmVEMGo4RERrOGFOYXpCOFhqbHlVWXRCR0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDshaIAwQC uT+MAwQAwgDSMA0EAgACMAcDBQAqAijIMA0GCSqGSIb3DQEBCwUAA4IBAQDA8Y/z Q3MuUar1d95m40Q7vxBCXAJ3L3Ijfwty6n0/dRyuD9SOW2Vhwb6TUJUUNa6jBMO9 xJDpmYfzSnEEWS0BvQ8qIqKj+WAdeTZlL5jXYTGnXekbmzOee37zQEL5R99HhMgz U9L6atpNYEhweTQtkd5yhMWgEvTF+1UHUL/2GwC1oKNck0R3kO7kMeWv3MzN2pD5 x1zPD9VVxM5W+XXD+glBnJ102UVXVFi//xFT4xPkyNqm+lXVgoa+eVG4QfjeAI47 TuHti64TBQeKy3asYXF/JXdSLwFMpQGml0t6ZT+Ie6IHe0uCJ5v8oILAAAqpPjxi A8D5iML9DkjeYD2X -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:59 2026 by rpki-client