This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VMe6oVea4JH4JSY7fPcNrhdKRXg.roa File: VMe6oVea4JH4JSY7fPcNrhdKRXg.roa (raw, json) Hash identifier: 4zNlXcLLXGUVEab2oJM3gKwsrSRnUYbnT5rLCiqqs2c= Subject key identifier: 54:C7:BA:A1:57:9A:E0:91:F8:25:26:3B:7C:F7:0D:AE:17:4A:45:78 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C748E8BE19191A668782B92FA9EFA0 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VMe6oVea4JH4JSY7fPcNrhdKRXg.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51559 IP address blocks: 84.247.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:48:e8:be:19:19:1a:66:87:82:b9:2f:a9:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54c7baa1579ae091f825263b7cf70dae174a4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:34:8c:92:f2:07:23:3f:a3:51:91:59:e2: 6a:e6:18:8b:b7:81:c4:e4:a0:eb:a3:0b:75:5f:01: a3:4d:52:1c:88:3a:83:8d:d0:31:65:b2:ad:b2:d5: 06:41:61:28:02:d1:f2:42:e1:26:d0:97:de:73:02: 0e:71:65:be:4d:6b:e8:11:1d:45:fb:3c:36:33:b0: a3:90:5a:a5:22:30:87:10:b2:f2:b7:c5:4b:0a:62: 33:4e:75:01:9c:0b:17:11:b8:b1:84:c6:97:0d:03: e6:9e:af:1d:ab:98:1c:1d:b7:b5:83:3f:4a:6a:55: 74:1b:d3:e0:fd:2f:6c:1c:73:f2:17:5b:20:10:5e: 0c:53:36:99:a9:60:c3:2b:1c:ec:4c:e6:4c:b4:08: de:7c:6d:d2:f3:c9:6a:8a:c1:1a:c8:dc:70:e5:da: ad:f9:c5:d9:80:84:7b:9f:e2:da:e5:c5:c4:3d:d3: 9a:24:43:9d:6a:6e:64:a5:86:ac:9b:16:5f:39:dd: a0:8d:a2:c9:73:5e:67:b9:21:66:97:ce:1c:8e:5a: 51:e6:be:20:88:59:db:bd:b6:c8:e1:dd:40:62:4c: 9d:b1:cf:0c:83:14:8e:6c:da:8f:22:ef:a4:e7:4b: 80:b7:16:bd:e4:b8:cd:62:db:06:f8:37:0a:84:b3: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:BA:A1:57:9A:E0:91:F8:25:26:3B:7C:F7:0D:AE:17:4A:45:78 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VMe6oVea4JH4JSY7fPcNrhdKRXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:59:1a:8b:89:48:13:7a:30:9b:90:19:c9:15:ba:15:24:1d: 92:d3:c6:9c:eb:7f:bc:97:67:86:00:d9:ac:ea:cd:a5:76:83: a2:60:a1:29:32:0e:22:c9:27:53:84:d6:0c:42:5b:cd:cf:1e: af:a2:f2:26:83:a5:18:eb:5b:da:4c:39:3e:7d:03:ad:0d:77: 6d:a1:2b:e2:b6:74:3b:d9:d6:e4:4f:8e:c0:00:76:4e:a0:5a: c4:8d:2c:56:1d:0c:f8:41:37:00:35:9d:37:a2:2e:9e:0d:e1: 8d:0b:ac:f8:0a:63:fb:74:4d:1f:9f:a8:aa:89:40:db:76:d7: f3:00:ae:54:6c:34:13:52:3c:b8:d2:9a:38:74:ba:46:d5:00: 35:ca:31:fb:4f:a8:67:1e:97:93:d4:f2:6d:9d:55:ab:2d:c0: 5a:1a:af:d6:38:27:1d:62:83:d0:77:de:13:f0:23:67:80:f3: 51:4c:48:40:17:51:2c:fd:de:f9:fb:f0:22:3b:00:7e:1e:13: 6f:da:fd:7b:fe:d9:f1:5e:2c:00:f6:ba:81:15:83:f5:56:74: 67:72:88:ab:a3:11:ab:b4:29:85:56:b7:42:37:cc:fa:ed:d4: 32:ac:d6:6f:df:bf:90:d2:3b:df:e0:5a:11:b6:bf:a3:ec:ae: 58:1b:99:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0jovhkZGmaHgrkvqe+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGM3YmFhMTU3OWFlMDkxZjgyNTI2M2I3Y2Y3MGRhZTE3NGE0NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMw0jJLyByM/o1GRWeJq5hiLt4HE 5KDrowt1XwGjTVIciDqDjdAxZbKtstUGQWEoAtHyQuEm0JfecwIOcWW+TWvoER1F +zw2M7CjkFqlIjCHELLyt8VLCmIzTnUBnAsXEbixhMaXDQPmnq8dq5gcHbe1gz9K alV0G9Pg/S9sHHPyF1sgEF4MUzaZqWDDKxzsTOZMtAjefG3S88lqisEayNxw5dqt +cXZgIR7n+La5cXEPdOaJEOdam5kpYasmxZfOd2gjaLJc15nuSFml84cjlpR5r4g iFnbvbbI4d1AYkydsc8MgxSObNqPIu+k50uAtxa95LjNYtsG+DcKhLOO9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTHuqFXmuCR+CUmO3z3Da4XSkV4MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvVk1lNm9WZWE0Skg0SlNZN2ZQY05yaGRLUlhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPcUMA0G CSqGSIb3DQEBCwUAA4IBAQBOWRqLiUgTejCbkBnJFboVJB2S08ac63+8l2eGANms 6s2ldoOiYKEpMg4iySdThNYMQlvNzx6vovImg6UY61vaTDk+fQOtDXdtoSvitnQ7 2dbkT47AAHZOoFrEjSxWHQz4QTcANZ03oi6eDeGNC6z4CmP7dE0fn6iqiUDbdtfz AK5UbDQTUjy40po4dLpG1QA1yjH7T6hnHpeT1PJtnVWrLcBaGq/WOCcdYoPQd94T 8CNngPNRTEhAF1Es/d75+/AiOwB+HhNv2v17/tnxXiwA9rqBFYP1VnRncoiroxGr tCmFVrdCN8z67dQyrNZv37+Q0jvf4FoRtr+j7K5YG5nz -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:29 2026 by rpki-client