This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa File: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (raw, json) Hash identifier: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A= Subject key identifier: 56:A4:3C:2D:7B:48:3D:ED:5F:41:97:AA:F7:00:8A:08:A9:2D:DA:F9 Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Certificate serial: 019B76EAD0284D10325C7B8AD79437084214 Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50319 IP address blocks: 5.180.140.0/22 maxlen: 22 62.133.192.0/18 maxlen: 18 91.206.246.0/23 maxlen: 23 185.84.196.0/22 maxlen: 22 185.144.196.0/22 maxlen: 22 185.156.208.0/22 maxlen: 24 193.105.215.0/24 maxlen: 24 194.88.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d0:28:4d:10:32:5c:7b:8a:d7:94:37:08:42:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56a43c2d7b483ded5f4197aaf7008a08a92ddaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:b0:68:6f:83:2b:2f:45:fd:37:8d:cb:f9: 0c:f4:9d:a0:da:c4:73:20:42:38:63:52:2e:cf:dc: e7:66:05:1f:80:e5:bb:91:1d:0e:c0:a0:ee:06:2e: 8f:d8:8b:78:a6:28:2e:6a:14:7a:f0:75:81:06:88: ce:93:77:ad:77:68:bc:57:a2:b5:c6:9a:af:36:a4: aa:00:5a:e2:a4:05:83:26:81:80:66:2a:10:d2:ba: 0c:9b:8e:17:cb:12:59:f6:3e:ed:7e:ec:b2:dc:d9: c0:6a:0e:8d:b0:0c:89:dd:69:ba:41:55:97:aa:ce: a7:63:37:2c:d4:b4:ad:bd:8d:d3:0e:51:c9:20:72: 42:83:24:ef:5b:79:66:46:b7:92:94:be:70:19:ff: 98:7c:7b:36:a7:97:e9:c1:3b:76:53:03:8f:96:56: 4a:d4:c4:46:e8:b0:16:f3:6e:b2:9b:33:cf:5b:98: 89:92:7a:d1:e8:b9:fd:5e:9f:63:9a:ad:ba:ba:e1: ab:a0:8f:be:94:c4:46:19:af:69:13:38:78:61:32: ab:2f:ef:b5:98:62:21:9e:3f:a6:be:d7:16:cd:cc: d7:af:a2:eb:46:03:08:21:34:53:76:33:ad:cd:9c: a4:d0:5e:a5:1f:50:a7:16:cd:82:16:44:3d:9a:79: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A4:3C:2D:7B:48:3D:ED:5F:41:97:AA:F7:00:8A:08:A9:2D:DA:F9 X509v3 Authority Key Identifier: keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.140.0/22 62.133.192.0/18 91.206.246.0/23 185.84.196.0/22 185.144.196.0/22 185.156.208.0/22 193.105.215.0/24 194.88.236.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:ee:ee:7c:c2:4a:fb:80:c7:dc:f4:8c:77:06:84:01:27:36: 91:7b:ee:9a:0b:e0:de:16:dc:13:37:ab:b3:a7:b6:aa:c4:e1: a4:5a:ad:d9:09:bf:57:ea:f6:a6:1b:82:9e:56:27:2c:57:92: e3:c4:48:03:1a:29:ad:6b:76:9e:67:8b:33:b8:ec:32:59:b4: 4e:ee:2a:52:47:e0:11:fd:e2:32:70:ae:39:28:2c:74:ad:17: ac:cc:29:31:28:d3:dc:ad:50:b2:5a:55:1c:86:c9:1e:3f:29: 5e:3d:61:23:77:85:55:83:39:73:84:25:22:b1:ae:e1:40:fd: 8e:ff:c0:a0:fe:79:20:4a:07:27:02:b1:d3:49:61:b5:39:9d: ab:3b:ea:91:fe:f7:7d:b7:fb:72:3f:58:c5:a2:40:59:03:fa: 57:12:d1:87:99:22:47:68:b3:58:df:de:1b:61:7f:01:01:ac: 64:ba:15:27:92:79:17:4a:31:c4:23:3b:ab:2d:ae:19:b4:19: 06:c2:03:4b:9a:73:d8:ef:c1:70:b6:5a:e1:9a:45:41:56:5b: d0:cf:53:41:64:8e:cd:26:c9:57:02:45:4d:3c:d9:87:0e:22: 51:ac:f8:6b:20:a6:7e:43:78:45:6c:c4:52:d6:c9:a8:46:2d: 0e:93:d4:24 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt26tAoTRAyXHuK15Q3CEIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm ODdjMDAwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmE0M2MyZDdiNDgzZGVkNWY0MTk3YWFmNzAwOGEwOGE5MmRkYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41iwaG+DKy9F/TeNy/kM9J2g2sRz IEI4Y1Iuz9znZgUfgOW7kR0OwKDuBi6P2It4piguahR68HWBBojOk3etd2i8V6K1 xpqvNqSqAFripAWDJoGAZioQ0roMm44XyxJZ9j7tfuyy3NnAag6NsAyJ3Wm6QVWX qs6nYzcs1LStvY3TDlHJIHJCgyTvW3lmRreSlL5wGf+YfHs2p5fpwTt2UwOPllZK 1MRG6LAW826ymzPPW5iJknrR6Ln9Xp9jmq26uuGroI++lMRGGa9pEzh4YTKrL++1 mGIhnj+mvtcWzczXr6LrRgMIITRTdjOtzZyk0F6lH1CnFs2CFkQ9mnnR3QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFakPC17SD3tX0GXqvcAigipLdr5MB8GA1UdIwQY MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt OTNiM2EzNjk2ZDk2LzEvVnFROExYdElQZTFmUVplcTl3Q0tDS2t0MnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2 LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCBbSMAwQG PoXAAwQBW872AwQCuVTEAwQCuZDEAwQCuZzQAwQAwWnXAwQBwljsMA0GCSqGSIb3 DQEBCwUAA4IBAQB97u58wkr7gMfc9Ix3BoQBJzaRe+6aC+DeFtwTN6uzp7aqxOGk Wq3ZCb9X6vamG4KeVicsV5LjxEgDGimta3aeZ4szuOwyWbRO7ipSR+AR/eIycK45 KCx0rReszCkxKNPcrVCyWlUchskePylePWEjd4VVgzlzhCUisa7hQP2O/8Cg/nkg SgcnArHTSWG1OZ2rO+qR/vd9t/tyP1jFokBZA/pXEtGHmSJHaLNY394bYX8BAaxk uhUnknkXSjHEIzurLa4ZtBkGwgNLmnPY78FwtlrhmkVBVlvQz1NBZI7NJslXAkVN PNmHDiJRrPhrIKZ+Q3hFbMRS1smoRi0Ok9Qk -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:23 2026 by rpki-client