This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa File: VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa (raw, json) Hash identifier: lWi4+CdVg9U/MmtchWvR41UmLMSzY3HTa3grdEf3jrk= Subject key identifier: 55:16:4B:E2:5A:A7:95:07:4D:5E:5D:5E:C3:E0:4E:E4:9B:73:7F:BF Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Certificate serial: 019B7AC80D48E38C582634968B5CBEF23324 Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24953 IP address blocks: 194.153.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0d:48:e3:8c:58:26:34:96:8b:5c:be:f2:33:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55164be25aa795074d5e5d5ec3e04ee49b737fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:d3:a7:e7:21:b7:b0:29:f1:ae:7b:5e:a1: 1d:e5:d1:ea:ce:23:1d:74:07:6c:5a:e5:93:54:3c: ad:22:b0:e5:83:1c:c5:49:6c:bb:d3:15:c7:fe:3e: 19:11:53:bc:e8:d6:2b:88:a5:71:1e:fe:9e:20:c1: 39:ce:a8:3d:f6:95:24:f1:c4:63:72:42:c9:22:c7: 27:38:18:8b:b8:3f:c6:64:59:b0:18:18:59:b9:58: ba:82:3c:4f:0f:61:9d:70:07:3a:44:ad:1c:3b:bf: ba:3b:b3:71:f8:cd:0e:79:8a:55:8e:50:ec:23:ff: 42:d0:38:67:41:af:56:81:86:d5:d5:da:07:d2:d6: 55:77:df:d2:eb:ad:c2:d5:f8:f3:23:ca:41:aa:48: de:ad:01:12:8b:48:66:5b:a0:ed:84:14:fc:23:e1: 3d:f5:b6:20:7e:20:25:f1:e9:2d:d8:1d:c5:1c:9b: a3:4d:42:b5:d2:df:b8:f7:35:86:c1:1b:c5:ae:41: 56:8c:26:83:02:28:5a:df:88:65:8e:fe:0b:f3:68: 26:e9:42:dc:79:cc:82:4d:50:67:14:34:51:00:3d: ca:2b:f2:c2:58:f6:ba:33:f2:3d:31:a7:5c:6e:38: 3a:d1:6a:d0:f1:1f:da:7e:e8:75:8e:63:13:15:d8: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:16:4B:E2:5A:A7:95:07:4D:5E:5D:5E:C3:E0:4E:E4:9B:73:7F:BF X509v3 Authority Key Identifier: keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/VRZL4lqnlQdNXl1ew-BO5Jtzf78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.93.0/24 Signature Algorithm: sha256WithRSAEncryption 23:01:1e:5c:26:7c:32:df:64:fe:15:47:eb:70:10:db:73:7d: 9b:50:59:af:17:a7:59:5b:43:80:10:af:7d:ab:9c:b8:4d:5e: 66:b5:2b:49:c7:32:42:25:d8:c9:42:56:0f:0f:d3:bb:43:3f: f3:52:0a:5f:5c:be:c9:9f:69:41:33:86:a7:78:b2:70:91:54: 5f:bf:b7:d5:c1:25:a7:78:87:26:1e:1b:9a:52:f5:ea:b6:d4: 8f:b0:11:94:16:3f:cd:b4:9a:ae:83:1d:d4:b4:b8:95:25:7c: f5:a1:ac:de:d2:34:4a:e5:18:f1:49:65:a3:4f:49:51:70:cd: f1:60:b3:cc:e6:e8:76:57:cd:cd:6c:be:28:c9:38:8c:d6:8a: e4:2a:5c:65:0b:9d:80:ed:47:01:44:e6:5b:f4:91:70:47:4d: 2c:ea:ea:09:8b:da:2e:b1:aa:16:9c:2c:40:36:56:04:4b:8c: 9f:2b:43:2f:63:26:d8:9c:fb:5a:ff:9d:0a:35:af:01:ae:ab: a8:54:5d:f1:61:3c:8c:09:45:ec:d7:e5:7f:2c:79:67:71:88: 82:80:6c:80:c1:2f:5c:38:2f:05:81:72:b4:6b:24:fc:2d:fb: b1:da:b6:da:ce:93:f5:44:e6:26:9d:1f:86:dd:b7:47:5a:e2: 53:d5:2c:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yA1I44xYJjSWi1y+8jMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy MzdmMDgwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTE2NGJlMjVhYTc5NTA3NGQ1ZTVkNWVjM2UwNGVlNDliNzM3ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6/Tp+cht7Ap8a57XqEd5dHqziMd dAdsWuWTVDytIrDlgxzFSWy70xXH/j4ZEVO86NYriKVxHv6eIME5zqg99pUk8cRj ckLJIscnOBiLuD/GZFmwGBhZuVi6gjxPD2GdcAc6RK0cO7+6O7Nx+M0OeYpVjlDs I/9C0DhnQa9WgYbV1doH0tZVd9/S663C1fjzI8pBqkjerQESi0hmW6DthBT8I+E9 9bYgfiAl8ekt2B3FHJujTUK10t+49zWGwRvFrkFWjCaDAiha34hljv4L82gm6ULc ecyCTVBnFDRRAD3KK/LCWPa6M/I9Madcbjg60WrQ8R/afuh1jmMTFdjP9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFUWS+Jap5UHTV5dXsPgTuSbc3+/MB8GA1UdIwQY MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt MTkxYjJhZTNmYTVhLzEvVlJaTDRscW5sUWROWGwxZXctQk81SnR6Zjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpldMA0G CSqGSIb3DQEBCwUAA4IBAQAjAR5cJnwy32T+FUfrcBDbc32bUFmvF6dZW0OAEK99 q5y4TV5mtStJxzJCJdjJQlYPD9O7Qz/zUgpfXL7Jn2lBM4aneLJwkVRfv7fVwSWn eIcmHhuaUvXqttSPsBGUFj/NtJqugx3UtLiVJXz1oaze0jRK5RjxSWWjT0lRcM3x YLPM5uh2V83NbL4oyTiM1orkKlxlC52A7UcBROZb9JFwR00s6uoJi9ousaoWnCxA NlYES4yfK0MvYybYnPta/50KNa8BrquoVF3xYTyMCUXs1+V/LHlncYiCgGyAwS9c OC8FgXK0ayT8Lfux2rbazpP1ROYmnR+G3bdHWuJT1Sx6 -----END CERTIFICATE-----Generated at Mon Jan 26 18:42:37 2026 by rpki-client