This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/_VCHrD7CFJ7LeZhYlq49E-RZeaI.roa File: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (raw, json) Hash identifier: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog= Subject key identifier: FD:50:87:AC:3E:C2:14:9E:CB:79:98:58:96:AE:3D:13:E4:59:79:A2 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019B7C128C0BE1ED4BDA997F0805E0247446 Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/_VCHrD7CFJ7LeZhYlq49E-RZeaI.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212892 IP address blocks: 185.117.210.0/24 maxlen: 24 185.117.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8c:0b:e1:ed:4b:da:99:7f:08:05:e0:24:74:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd5087ac3ec2149ecb79985896ae3d13e45979a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:30:ac:8e:b7:bc:8c:86:0d:94:25:ab:ca: 4b:d8:2a:b7:cb:92:af:50:76:f6:66:42:4d:ab:5a: 6a:6a:62:2d:f1:1c:94:49:cb:f6:ec:df:f6:43:94: c5:89:a5:ae:1b:45:4b:7d:03:99:89:04:1f:67:a7: 68:63:3f:5f:a4:76:2b:e9:ee:dc:e7:bf:e5:a5:ad: 9a:d9:80:aa:e5:62:f5:6c:fb:62:21:cd:dc:20:1c: d4:14:90:dd:1d:7e:c0:eb:4c:1d:92:af:e6:5a:84: 8a:7f:bd:ea:02:c0:50:18:aa:ef:e0:e1:e6:7b:21: 9f:67:a5:68:03:21:4b:f5:04:02:3f:f8:25:5a:b0: bb:b3:95:a6:eb:dc:d0:04:c7:b5:ef:24:3d:bc:b0: 20:cc:11:90:20:0d:06:25:1f:b3:e6:59:94:67:0a: bb:05:22:13:9b:73:9d:9d:a5:0a:cb:4a:67:1f:89: a4:1d:32:91:5e:16:16:ed:7f:49:f4:28:d1:92:95: 05:55:a4:6e:2a:8d:a5:8a:bd:5a:99:bc:39:3a:db: 51:8b:7c:20:be:07:a7:3c:8c:ac:fc:ea:19:d8:d9: 9a:ef:d0:e1:a3:60:db:e6:89:2a:8b:20:61:64:b0: e0:93:ce:c9:3a:ac:f0:67:a4:4c:fc:03:6b:3f:5c: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:87:AC:3E:C2:14:9E:CB:79:98:58:96:AE:3D:13:E4:59:79:A2 X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/_VCHrD7CFJ7LeZhYlq49E-RZeaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.210.0/23 Signature Algorithm: sha256WithRSAEncryption b5:8f:fe:63:5a:74:c8:b4:60:9c:2f:9e:fa:8f:18:54:2b:48: b2:89:df:12:0b:d4:65:e8:da:e3:7a:fe:61:81:b3:46:38:c0: 08:cb:d2:ed:9d:a4:45:99:9a:a5:22:2a:5e:a2:75:d7:ad:a2: 3d:1c:4b:33:8a:11:04:7b:c9:2f:f6:13:89:3c:c1:9f:c9:6c: 4a:e5:35:a8:23:5a:6e:e7:e3:9f:87:4f:17:67:aa:cd:12:64: 22:61:d1:7f:e8:92:6c:4b:fa:10:0d:26:4f:9e:de:57:31:44: f0:ed:84:8d:e8:6e:f6:f2:79:cd:c0:31:60:98:a1:00:87:b4: 7b:4e:1f:f9:68:3a:59:56:0e:d9:b4:a1:fd:73:5f:33:b7:0f: 78:5d:03:65:14:b6:89:d2:0d:71:9f:19:77:5e:60:57:62:8b: 52:9e:66:72:9a:ab:a6:9d:dc:cb:a9:1d:1a:8d:8f:15:e6:44: 8a:e3:1a:ca:a4:5e:a8:73:46:a6:2c:c0:33:4e:1b:33:f2:96: 7f:09:42:10:25:d5:59:08:e4:2b:76:34:5a:14:1f:a6:9b:00: 25:25:91:ea:22:62:a4:6b:e6:25:90:59:24:95:b2:44:87:87: d1:ab:1c:9a:9d:ad:ba:2d:86:b6:bf:62:0f:1e:66:88:aa:ac: 92:89:08:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EowL4e1L2pl/CAXgJHRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDUwODdhYzNlYzIxNDllY2I3OTk4NTg5NmFlM2QxM2U0NTk3OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLswrI63vIyGDZQlq8pL2Cq3y5Kv UHb2ZkJNq1pqamIt8RyUScv27N/2Q5TFiaWuG0VLfQOZiQQfZ6doYz9fpHYr6e7c 57/lpa2a2YCq5WL1bPtiIc3cIBzUFJDdHX7A60wdkq/mWoSKf73qAsBQGKrv4OHm eyGfZ6VoAyFL9QQCP/glWrC7s5Wm69zQBMe17yQ9vLAgzBGQIA0GJR+z5lmUZwq7 BSITm3OdnaUKy0pnH4mkHTKRXhYW7X9J9CjRkpUFVaRuKo2lir1ambw5OttRi3wg vgenPIys/OoZ2Nma79Dho2Db5okqiyBhZLDgk87JOqzwZ6RM/ANrP1zwZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1Qh6w+whSey3mYWJauPRPkWXmiMB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvX1ZDSHJEN0NGSjdMZVpoWWxxNDlFLVJaZWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXXSMA0G CSqGSIb3DQEBCwUAA4IBAQC1j/5jWnTItGCcL576jxhUK0iyid8SC9Rl6Nrjev5h gbNGOMAIy9LtnaRFmZqlIipeonXXraI9HEszihEEe8kv9hOJPMGfyWxK5TWoI1pu 5+Ofh08XZ6rNEmQiYdF/6JJsS/oQDSZPnt5XMUTw7YSN6G728nnNwDFgmKEAh7R7 Th/5aDpZVg7ZtKH9c18ztw94XQNlFLaJ0g1xnxl3XmBXYotSnmZymqumndzLqR0a jY8V5kSK4xrKpF6oc0amLMAzThsz8pZ/CUIQJdVZCOQrdjRaFB+mmwAlJZHqImKk a+YlkFkklbJEh4fRqxyana26LYa2v2IPHmaIqqySiQhc -----END CERTIFICATE-----Generated at Tue Jan 27 03:52:42 2026 by rpki-client