This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/VjVnMCIpJllowS-mUdPKmibH_s4.roa File: VjVnMCIpJllowS-mUdPKmibH_s4.roa (raw, json) Hash identifier: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg= Subject key identifier: 56:35:67:30:22:29:26:59:68:C1:2F:A6:51:D3:CA:9A:26:C7:FE:CE Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973 Certificate serial: 019B79ECF047C0EFD49C008740EDA45BD33B Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/VjVnMCIpJllowS-mUdPKmibH_s4.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13287 IP address blocks: 153.92.42.0/24 maxlen: 24 155.133.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f0:47:c0:ef:d4:9c:00:87:40:ed:a4:5b:d3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973 Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=563567302229265968c12fa651d3ca9a26c7fece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6e:69:b1:26:e5:c4:ca:f7:d3:70:00:39:4c: fb:86:01:38:ad:76:d7:36:bc:05:66:66:3d:5b:ab: ac:4c:31:78:44:12:b3:69:0e:26:06:29:86:a2:d4: 6c:42:42:e6:b1:d4:f3:3a:7d:3d:92:8c:ec:5f:e2: 61:58:2a:b4:2d:b7:cc:f6:cb:a3:03:63:d0:37:da: 8a:7d:6b:4e:6e:1f:c4:22:c6:54:a4:c1:10:bb:78: ed:b4:80:b6:8f:63:6a:7e:2f:7a:1b:07:a1:2a:d5: c3:92:ff:e8:f4:db:2a:9e:1d:9c:a0:02:71:9a:f4: 3e:f8:ea:94:e1:43:1b:2b:74:2e:e6:97:80:a1:b2: da:ca:f8:56:86:01:36:b8:ab:45:65:ce:14:84:49: b9:2a:cb:63:1d:78:e6:97:6e:ac:3f:47:52:3d:ac: 13:bc:e3:e0:00:96:62:51:88:a9:08:0f:f3:9b:85: 7b:32:0d:e7:e6:b2:51:24:a5:b8:bc:ee:3f:bf:d6: 38:4a:fa:52:8e:87:08:21:24:5b:49:9e:81:0c:15: fa:fe:9d:58:9c:54:fe:a7:31:72:46:0a:67:f1:10: 28:d9:fb:69:10:24:d5:9b:1c:85:95:b9:3b:c2:9e: 8c:43:36:f4:e3:82:91:8d:e1:e1:4c:7f:b1:e0:b2: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:35:67:30:22:29:26:59:68:C1:2F:A6:51:D3:CA:9A:26:C7:FE:CE X509v3 Authority Key Identifier: keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/VjVnMCIpJllowS-mUdPKmibH_s4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.92.42.0/24 155.133.195.0/24 Signature Algorithm: sha256WithRSAEncryption 75:09:b6:df:f8:cc:60:6e:5b:3d:b1:de:15:c5:69:5b:65:64: 1f:d6:5d:9f:34:0f:4e:ef:21:9f:ef:b4:88:d6:8a:12:93:bc: 1e:d3:e6:75:f2:4c:87:86:c6:80:62:cc:cc:22:f4:4f:0a:6a: ca:ea:68:e6:d9:51:79:db:45:82:49:d2:42:e7:9b:23:d3:ca: 6b:e7:66:a3:6f:05:4d:97:f7:b0:2e:a1:10:ad:27:9e:6f:e5: 1b:60:33:13:8f:e5:26:4f:0a:1d:ec:ff:46:9e:5f:da:49:dc: f2:6a:d8:fb:94:58:ba:db:3e:14:99:94:8d:dd:0b:63:22:d9: e8:ff:93:ce:3d:50:f7:fd:b3:09:9d:90:dd:a0:2f:a5:62:1d: bc:a4:36:46:b2:dc:b0:84:96:75:a6:24:ee:60:37:a8:74:c1: 61:03:49:82:b4:4d:c3:26:fd:62:bf:07:40:94:ea:94:bd:e5: 4a:0f:73:98:de:ec:57:28:c8:3b:7e:58:81:4c:f8:6d:db:34: 0e:01:10:c1:21:a4:23:b1:9f:84:97:8e:af:12:11:62:2a:b7: c4:ba:5c:b5:0e:b5:ef:10:8b:2c:fa:2a:bb:26:80:a6:3d:62: e4:f3:a5:14:d5:d5:47:51:a0:82:49:9a:4f:86:28:6f:90:64: 59:12:77:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57PBHwO/UnACHQO2kW9M7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2 MmQ5NzMwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjM1NjczMDIyMjkyNjU5NjhjMTJmYTY1MWQzY2E5YTI2YzdmZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G5psSblxMr303AAOUz7hgE4rXbX NrwFZmY9W6usTDF4RBKzaQ4mBimGotRsQkLmsdTzOn09kozsX+JhWCq0LbfM9suj A2PQN9qKfWtObh/EIsZUpMEQu3jttIC2j2Nqfi96GwehKtXDkv/o9Nsqnh2coAJx mvQ++OqU4UMbK3Qu5peAobLayvhWhgE2uKtFZc4UhEm5KstjHXjml26sP0dSPawT vOPgAJZiUYipCA/zm4V7Mg3n5rJRJKW4vO4/v9Y4SvpSjocIISRbSZ6BDBX6/p1Y nFT+pzFyRgpn8RAo2ftpECTVmxyFlbk7wp6MQzb044KRjeHhTH+x4LJq8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFY1ZzAiKSZZaMEvplHTypomx/7OMB8GA1UdIwQY MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct MWQ1NTEzYmZmNGQ2LzEvVmpWbk1DSXBKbGxvd1MtbVVkUEttaWJIX3M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2 LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmVwqAwQA m4XDMA0GCSqGSIb3DQEBCwUAA4IBAQB1Cbbf+Mxgbls9sd4VxWlbZWQf1l2fNA9O 7yGf77SI1ooSk7we0+Z18kyHhsaAYszMIvRPCmrK6mjm2VF520WCSdJC55sj08pr 52ajbwVNl/ewLqEQrSeeb+UbYDMTj+UmTwod7P9Gnl/aSdzyatj7lFi62z4UmZSN 3QtjItno/5POPVD3/bMJnZDdoC+lYh28pDZGstywhJZ1piTuYDeodMFhA0mCtE3D Jv1ivwdAlOqUveVKD3OY3uxXKMg7fliBTPht2zQOARDBIaQjsZ+El46vEhFiKrfE uly1DrXvEIss+iq7JoCmPWLk86UU1dVHUaCCSZpPhihvkGRZEncM -----END CERTIFICATE-----Generated at Tue Jan 27 18:00:41 2026 by rpki-client