This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/VSzXnu3XXlV22gtJFP8Cjpjv15k.roa File: VSzXnu3XXlV22gtJFP8Cjpjv15k.roa (raw, json) Hash identifier: ocAHqKBi+nm7TzB1Z1ENYnLaT/DpeL3ors1ybsmnEk8= Subject key identifier: 55:2C:D7:9E:ED:D7:5E:55:76:DA:0B:49:14:FF:02:8E:98:EF:D7:99 Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Certificate serial: 019B7F15C60E55D8F56349B3312865471FA1 Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/VSzXnu3XXlV22gtJFP8Cjpjv15k.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34191 IP address blocks: 185.213.32.0/22 maxlen: 22 185.213.32.0/24 maxlen: 24 185.213.33.0/24 maxlen: 24 185.213.34.0/24 maxlen: 24 194.145.239.0/24 maxlen: 24 2a0c:ed80::/29 maxlen: 29 2a0c:ed80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c6:0e:55:d8:f5:63:49:b3:31:28:65:47:1f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=552cd79eedd75e5576da0b4914ff028e98efd799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:ae:14:5c:dd:f5:ec:73:86:c9:dc:62:42: 09:eb:19:cb:76:73:23:3b:72:f4:65:bb:5a:6e:42: 03:a0:12:55:86:cb:bc:76:d7:b2:9a:02:06:d2:db: 0e:d1:5d:4d:b9:95:ea:dd:8a:18:3b:aa:1c:b4:0c: 16:9e:4a:fd:61:79:a6:4b:52:a3:29:c5:dd:a2:70: 30:6e:49:22:dd:4a:57:b2:85:be:ac:38:78:ac:67: fe:80:74:c3:c1:15:19:50:cf:02:06:1d:cc:58:9b: 55:b4:25:7d:53:c8:fd:d0:e9:90:0e:2e:37:11:0d: b4:b8:97:ca:1e:45:58:41:64:ce:15:7c:d9:80:3b: 35:24:d6:6e:cd:0e:c4:ec:a7:2b:40:61:81:68:37: 69:e7:f0:96:2b:b1:68:df:60:c8:be:02:48:a5:09: 35:0c:26:1d:54:0e:75:fa:f6:81:34:39:5e:bc:d5: cd:20:20:49:15:fb:d5:df:b5:6b:44:56:42:dc:5a: 77:da:78:b5:f0:a7:a1:2c:79:d8:ff:c9:18:91:84: d2:6d:ec:82:78:1e:53:60:34:bf:95:9f:0c:8f:dd: 91:29:8b:7c:7d:b1:d0:7a:89:4d:83:53:7b:7d:37: b5:9c:0d:7d:3f:47:c1:52:5c:62:4b:7d:81:b7:a4: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:D7:9E:ED:D7:5E:55:76:DA:0B:49:14:FF:02:8E:98:EF:D7:99 X509v3 Authority Key Identifier: keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/VSzXnu3XXlV22gtJFP8Cjpjv15k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.32.0/22 194.145.239.0/24 IPv6: 2a0c:ed80::/29 Signature Algorithm: sha256WithRSAEncryption 13:2b:4d:91:d9:94:2e:06:43:31:b5:c7:04:30:5e:9e:b6:7e: 4d:05:34:ba:78:fb:0f:0e:dc:d8:88:e6:b8:5e:d3:de:ea:a4: 70:d2:29:54:17:6a:3b:a5:14:34:03:e5:23:6e:8b:05:bf:1b: e1:92:5b:88:c0:4e:fa:c0:5b:08:ba:6b:76:89:12:c1:fc:1f: d0:e6:19:b4:e6:71:ab:ac:ee:55:f8:0e:f6:30:be:4f:b9:b8: 6a:a2:20:b9:8e:9f:e7:ff:32:7e:7b:8a:10:ff:04:57:32:28: e5:c0:62:a6:11:24:7a:f9:71:3b:fe:e7:f9:6a:84:8e:e7:c8: 42:60:47:f8:9e:8f:5c:cd:41:84:12:e0:0d:38:85:c6:8d:e1: 92:81:cb:d2:47:c1:57:22:5a:fb:c1:be:c8:a1:af:1b:ad:67: a0:0d:4f:8d:14:61:6b:0c:a4:e7:d7:63:09:90:91:88:84:5f: 10:83:17:73:ca:21:78:95:db:db:df:df:3f:44:2f:9d:02:d8: 3a:d4:00:33:10:bf:47:23:42:95:16:cf:30:a0:31:a6:3e:60: 60:72:3a:c8:08:88:be:a4:a3:d9:03:0e:f1:c1:f2:aa:3c:c5: 5f:0c:1f:8c:cf:f2:89:93:b6:60:42:27:ab:93:0e:8b:1a:12: 38:b0:d8:cd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FcYOVdj1Y0mzMShlRx+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm ZjY2NDMwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTJjZDc5ZWVkZDc1ZTU1NzZkYTBiNDkxNGZmMDI4ZTk4ZWZkNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HKuFFzd9exzhsncYkIJ6xnLdnMj O3L0ZbtabkIDoBJVhsu8dteymgIG0tsO0V1NuZXq3YoYO6octAwWnkr9YXmmS1Kj KcXdonAwbkki3UpXsoW+rDh4rGf+gHTDwRUZUM8CBh3MWJtVtCV9U8j90OmQDi43 EQ20uJfKHkVYQWTOFXzZgDs1JNZuzQ7E7KcrQGGBaDdp5/CWK7Fo32DIvgJIpQk1 DCYdVA51+vaBNDlevNXNICBJFfvV37VrRFZC3Fp32ni18KehLHnY/8kYkYTSbeyC eB5TYDS/lZ8Mj92RKYt8fbHQeolNg1N7fTe1nA19P0fBUlxiS32Bt6RF6wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFUs157t115VdtoLSRT/Ao6Y79eZMB8GA1UdIwQY MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct ZTMzN2JmZTAyNzliLzEvVlN6WG51M1hYbFYyMmd0SkZQOENqcGp2MTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudUgAwQA wpHvMA0EAgACMAcDBQMqDO2AMA0GCSqGSIb3DQEBCwUAA4IBAQATK02R2ZQuBkMx tccEMF6etn5NBTS6ePsPDtzYiOa4XtPe6qRw0ilUF2o7pRQ0A+UjbosFvxvhkluI wE76wFsIumt2iRLB/B/Q5hm05nGrrO5V+A72ML5PubhqoiC5jp/n/zJ+e4oQ/wRX MijlwGKmESR6+XE7/uf5aoSO58hCYEf4no9czUGEEuANOIXGjeGSgcvSR8FXIlr7 wb7Ioa8brWegDU+NFGFrDKTn12MJkJGIhF8QgxdzyiF4ldvb398/RC+dAtg61AAz EL9HI0KVFs8woDGmPmBgcjrICIi+pKPZAw7xwfKqPMVfDB+Mz/KJk7ZgQierkw6L GhI4sNjN -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:39 2026 by rpki-client