This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/VVQuG1o4UHERlvd_jO5vWgtx_f4.roa File: VVQuG1o4UHERlvd_jO5vWgtx_f4.roa (raw, json) Hash identifier: FaG7/CVBmANPmAE+rEgbZykBAaRvciulbJlje0lg6yg= Subject key identifier: 55:54:2E:1B:5A:38:50:71:11:96:F7:7F:8C:EE:6F:5A:0B:71:FD:FE Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b Certificate serial: 019BE0E655F1D0FA75D3808CBD81ED5DAB6E Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/VVQuG1o4UHERlvd_jO5vWgtx_f4.roa Signing time: Wed 21 Jan 2026 14:12:30 +0000 ROA not before: Wed 21 Jan 2026 14:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214443 IP address blocks: 185.136.241.0/24 maxlen: 24 217.61.242.0/23 maxlen: 23 217.61.242.0/24 maxlen: 24 217.61.243.0/24 maxlen: 24 2a01:e600::/29 maxlen: 29 2a01:e600::/32 maxlen: 32 2a01:e601::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:e6:55:f1:d0:fa:75:d3:80:8c:bd:81:ed:5d:ab:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b Validity Not Before: Jan 21 14:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55542e1b5a3850711196f77f8cee6f5a0b71fdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:19:13:cc:fb:03:4c:4d:6c:8a:b8:85:58: 6d:36:af:31:a9:6b:16:f7:53:c9:4d:dc:49:cb:ee: 92:ce:9c:fa:fe:d9:fc:6a:a7:54:d4:9b:f0:df:2a: be:7c:d6:fa:30:5e:1f:9d:2b:12:78:ff:4e:54:28: 69:fc:53:49:97:1c:20:3c:74:0f:69:2f:90:ea:6a: eb:fb:2c:5d:1c:71:a0:04:c2:7a:45:ae:6b:a5:c9: 01:65:89:d6:4e:6f:2d:58:4e:f3:72:e8:58:63:57: e1:9b:b5:6f:84:ad:56:31:42:f0:47:4c:86:11:13: 1b:be:70:1f:5d:07:6b:ff:0a:7a:5a:d9:4d:ec:79: c8:ec:d3:9a:23:56:07:a7:51:aa:cb:5e:f4:7d:db: c4:fb:b2:ee:dd:94:63:ba:8b:8f:7d:17:08:6f:10: df:ea:8d:69:5b:a1:f3:7e:38:a9:7b:97:72:e3:f1: a0:4b:6a:74:fc:e8:ba:82:b6:f7:d7:aa:bb:39:31: e3:cd:68:28:92:09:b1:40:0d:9a:ec:d7:51:8a:26: ca:9a:8c:b9:cd:5e:c5:4d:92:2a:6b:df:75:45:f2: 28:01:42:61:74:bb:71:d5:c7:b6:e7:be:44:43:8b: 07:35:6e:14:18:e1:6a:24:cd:b8:19:b9:32:59:8e: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:54:2E:1B:5A:38:50:71:11:96:F7:7F:8C:EE:6F:5A:0B:71:FD:FE X509v3 Authority Key Identifier: keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/VVQuG1o4UHERlvd_jO5vWgtx_f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.241.0/24 217.61.242.0/23 IPv6: 2a01:e600::/29 Signature Algorithm: sha256WithRSAEncryption 82:ee:19:8d:ae:79:4c:45:9b:58:29:16:dd:3c:b1:76:64:01: 54:d1:d0:98:25:7f:cf:48:a7:31:f9:f3:5a:70:76:86:1f:00: b0:63:22:2e:ab:23:01:97:f3:8c:10:5f:d5:c0:33:9c:75:c1: 37:1d:71:77:d4:0d:78:5e:ec:ba:64:0c:dd:1b:47:34:56:07: 3a:15:f5:5d:ef:ca:c2:46:d8:36:01:03:e9:ba:fb:c0:a8:0a: ae:76:e0:80:b3:58:20:f3:af:1f:3d:eb:b8:02:be:34:13:2c: 00:af:50:48:c5:d4:6f:36:b2:34:88:65:04:22:80:30:a5:6b: 9a:cd:c6:03:7f:d3:2c:63:83:0a:1f:a2:04:8c:8e:6d:59:90: 80:b7:a5:06:86:d2:c6:c3:5c:d6:bf:9c:72:95:49:2e:fe:55: dc:ce:93:75:d4:a9:21:c6:2f:11:31:29:87:d5:80:f7:81:2f: 97:06:ed:5c:89:24:28:50:7b:e1:32:5b:eb:4a:2b:e8:5e:b4: 12:b8:e8:32:f0:9d:f7:9e:fe:07:ce:b1:ca:25:d6:4d:4b:39: bc:b7:02:df:7c:03:88:00:3f:50:52:66:00:8e:9c:c6:53:cc: ab:ca:97:cf:a0:6d:8a:76:9e:01:70:7c:7c:6c:a9:9b:d1:85: d1:7e:a7:64 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvg5lXx0Pp104CMvYHtXatuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyN2U1ODU4ZmE1NDNmZTNmZjQ3NGQ4ZDc2YWI5NzAxZWEw MTBiMGIwHhcNMjYwMTIxMTQxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTU0MmUxYjVhMzg1MDcxMTE5NmY3N2Y4Y2VlNmY1YTBiNzFmZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtwZE8z7A0xNbIq4hVhtNq8xqWsW 91PJTdxJy+6Szpz6/tn8aqdU1Jvw3yq+fNb6MF4fnSsSeP9OVChp/FNJlxwgPHQP aS+Q6mrr+yxdHHGgBMJ6Ra5rpckBZYnWTm8tWE7zcuhYY1fhm7VvhK1WMULwR0yG ERMbvnAfXQdr/wp6WtlN7HnI7NOaI1YHp1Gqy170fdvE+7Lu3ZRjuouPfRcIbxDf 6o1pW6Hzfjipe5dy4/GgS2p0/Oi6grb316q7OTHjzWgokgmxQA2a7NdRiibKmoy5 zV7FTZIqa991RfIoAUJhdLtx1ce2575EQ4sHNW4UGOFqJM24GbkyWY4G7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFVULhtaOFBxEZb3f4zub1oLcf3+MB8GA1UdIwQY MBaAFAJ+WFj6VD/j/0dNjXarlwHqAQsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMt M2IyODk0ZjBlNjljLzEvVlZRdUcxbzRVSEVSbHZkX2pPNXZXZ3R4X2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMtM2IyODk0ZjBlNjlj LzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuYjxAwQB 2T3yMA0EAgACMAcDBQMqAeYAMA0GCSqGSIb3DQEBCwUAA4IBAQCC7hmNrnlMRZtY KRbdPLF2ZAFU0dCYJX/PSKcx+fNacHaGHwCwYyIuqyMBl/OMEF/VwDOcdcE3HXF3 1A14Xuy6ZAzdG0c0Vgc6FfVd78rCRtg2AQPpuvvAqAquduCAs1gg868fPeu4Ar40 EywAr1BIxdRvNrI0iGUEIoAwpWuazcYDf9MsY4MKH6IEjI5tWZCAt6UGhtLGw1zW v5xylUku/lXczpN11Kkhxi8RMSmH1YD3gS+XBu1ciSQoUHvhMlvrSivoXrQSuOgy 8J33nv4HzrHKJdZNSzm8twLffAOIAD9QUmYAjpzGU8yrypfPoG2Kdp4BcHx8bKmb 0YXRfqdk -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:43 2026 by rpki-client