This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa File: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (raw, json) Hash identifier: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0= Subject key identifier: 55:07:37:B1:FA:DF:43:F6:5C:16:C9:AC:A2:61:7B:9D:72:DC:4E:82 Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Certificate serial: 019B7758F66E5C73F972FCA6AC53E1069B02 Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.67.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f6:6e:5c:73:f9:72:fc:a6:ac:53:e1:06:9b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=550737b1fadf43f65c16c9aca2617b9d72dc4e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:25:82:24:8f:49:b8:6a:62:af:d9:75:8a: b6:3b:da:d5:dc:df:16:49:b5:5e:24:ea:92:c8:c3: 63:9f:2a:d4:f8:ae:d1:40:65:1e:d3:36:01:b2:96: d2:16:01:ec:3d:8f:ec:65:5f:52:60:17:e5:30:ac: bb:e7:89:26:06:31:19:40:84:81:dc:b2:e3:39:1c: 04:79:dc:19:0c:8e:93:9d:14:76:c0:ea:81:25:d7: 58:ae:d5:e9:fc:2e:24:f5:1f:c4:71:78:44:16:74: 30:c5:20:ab:59:64:c9:7d:b8:55:92:6e:ed:2a:70: 6f:30:4d:0d:83:9f:9f:d9:02:79:d7:29:6b:ec:87: fe:2c:a1:15:d1:b0:33:14:26:6e:62:de:73:af:c7: d6:a6:b3:86:2b:98:1b:3b:0e:c1:73:f2:8e:ed:78: f0:00:be:8e:90:f8:d9:f0:f1:c5:f1:f8:ae:4a:9b: da:b0:6d:78:10:4b:8e:2d:8a:c2:89:67:aa:bd:47: e7:6f:0d:7d:18:d4:99:36:04:2f:8b:9e:0d:45:71: 43:1e:97:ea:bd:60:01:b8:83:59:78:69:60:12:26: d1:30:c0:6f:4c:d3:ab:a7:1c:e5:af:57:95:32:1d: 4e:08:5f:63:82:73:ee:14:e9:d7:37:91:3b:27:14: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:07:37:B1:FA:DF:43:F6:5C:16:C9:AC:A2:61:7B:9D:72:DC:4E:82 X509v3 Authority Key Identifier: keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.67.76.0/24 Signature Algorithm: sha256WithRSAEncryption cc:b3:d8:9a:34:84:90:e4:58:04:ab:e0:0d:90:c1:fd:6a:c5: 7e:51:c6:6b:5c:b3:4b:36:a4:f6:8c:42:c1:4a:65:f1:49:b4: 39:59:fc:0d:25:de:58:f9:fe:1e:19:33:78:9a:49:4e:5f:ee: 60:1c:8d:73:13:d5:a4:55:22:9d:5b:53:61:fc:0b:a6:82:d2: b5:98:9f:68:a3:a9:06:28:94:d1:54:20:de:9d:4b:14:85:76: ad:e5:e2:21:25:87:8d:87:13:0f:e0:fb:31:26:49:68:de:77: a4:d0:5f:76:10:bc:09:c5:9d:1d:02:1c:fe:a1:1c:4f:7b:fe: 5e:3b:f1:a4:80:86:43:96:85:c3:3c:eb:a7:f4:5a:d9:8f:f6: 43:da:6b:6a:dd:1f:e7:a2:1f:38:d5:38:51:ba:90:e1:82:e5: 43:87:9f:95:fb:e3:8a:6c:e3:04:a6:30:79:f0:8a:40:5b:9b: b9:42:8d:5f:f0:5a:0b:67:b4:e5:15:7b:dd:bd:df:c2:f0:75: 94:34:c5:ca:91:2b:21:ec:b2:c6:45:43:a3:d0:75:9b:3f:01: b4:86:3f:42:75:30:f5:72:2d:0c:fa:ce:16:22:5e:06:e2:ba: 1d:16:e8:a0:de:fc:d8:9d:27:89:f5:25:d1:d9:01:a0:47:53: 3b:3a:3d:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPZuXHP5cvymrFPhBpsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5 ZjRmNGMwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTA3MzdiMWZhZGY0M2Y2NWMxNmM5YWNhMjYxN2I5ZDcyZGM0ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVIlgiSPSbhqYq/ZdYq2O9rV3N8W SbVeJOqSyMNjnyrU+K7RQGUe0zYBspbSFgHsPY/sZV9SYBflMKy754kmBjEZQISB 3LLjORwEedwZDI6TnRR2wOqBJddYrtXp/C4k9R/EcXhEFnQwxSCrWWTJfbhVkm7t KnBvME0Ng5+f2QJ51ylr7If+LKEV0bAzFCZuYt5zr8fWprOGK5gbOw7Bc/KO7Xjw AL6OkPjZ8PHF8fiuSpvasG14EEuOLYrCiWeqvUfnbw19GNSZNgQvi54NRXFDHpfq vWABuINZeGlgEibRMMBvTNOrpxzlr1eVMh1OCF9jgnPuFOnXN5E7JxQpWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFUHN7H630P2XBbJrKJhe51y3E6CMB8GA1UdIwQY MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt MzY1ZTEzZGE2MmVhLzEvVlFjM3NmcmZRX1pjRnNtc29tRjduWExjVG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwENMMA0G CSqGSIb3DQEBCwUAA4IBAQDMs9iaNISQ5FgEq+ANkMH9asV+UcZrXLNLNqT2jELB SmXxSbQ5WfwNJd5Y+f4eGTN4mklOX+5gHI1zE9WkVSKdW1Nh/AumgtK1mJ9oo6kG KJTRVCDenUsUhXat5eIhJYeNhxMP4PsxJklo3nek0F92ELwJxZ0dAhz+oRxPe/5e O/GkgIZDloXDPOun9FrZj/ZD2mtq3R/noh841ThRupDhguVDh5+V++OKbOMEpjB5 8IpAW5u5Qo1f8FoLZ7TlFXvdvd/C8HWUNMXKkSsh7LLGRUOj0HWbPwG0hj9CdTD1 ci0M+s4WIl4G4rodFuig3vzYnSeJ9SXR2QGgR1M7Oj1b -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:59 2026 by rpki-client