This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/Vx08NQyiV20g8Ga81BIS8rvDmyo.roa File: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (raw, json) Hash identifier: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE= Subject key identifier: 57:1D:3C:35:0C:A2:57:6D:20:F0:66:BC:D4:12:12:F2:BB:C3:9B:2A Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F30F3EE665058DC27F70342C0CBF4 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/Vx08NQyiV20g8Ga81BIS8rvDmyo.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48014 IP address blocks: 185.187.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:f3:ee:66:50:58:dc:27:f7:03:42:c0:cb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571d3c350ca2576d20f066bcd41212f2bbc39b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:ed:ae:93:31:bf:89:16:87:c6:b2:3b:a8: 4c:25:31:72:cf:a1:7b:c6:c2:fd:35:af:a4:6b:e4: 86:0d:ed:a3:4e:e2:62:3e:5b:2d:ce:cb:5c:b5:40: 98:bf:a2:c2:00:c3:aa:b2:e6:8d:d0:26:78:6e:56: 47:3c:6c:8d:c3:b0:f6:7c:a1:ef:3c:06:1b:f8:39: 4f:98:ea:3a:f3:15:c8:81:d6:7d:f8:36:4d:21:5f: 4f:66:37:c0:e7:8e:7c:12:dd:43:d1:94:9a:bd:1a: 1f:a7:86:45:b9:df:7c:a4:2f:08:fd:a7:e3:97:33: 31:9d:5b:5f:05:54:d6:a7:d3:6e:2e:0c:52:96:e1: 05:ec:fb:6b:e1:0f:9f:89:74:cf:f2:03:87:01:a1: 9f:9c:30:4b:1d:48:1a:b3:09:bb:c5:ec:3e:13:26: de:63:16:05:39:78:ef:eb:e4:32:f9:5c:d3:0e:bc: ea:3f:ec:3d:fc:2f:33:f8:e3:45:03:1a:29:79:62: 2f:f3:1a:5d:1e:c9:05:cc:b5:35:b7:51:72:a5:22: dd:b3:bf:26:24:5a:57:4c:15:21:51:0b:52:44:1b: 02:70:90:95:38:ce:08:c8:d2:11:62:9f:b2:b4:80: be:a8:b2:a3:f2:d2:bd:d9:6d:04:94:98:8d:a9:1b: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1D:3C:35:0C:A2:57:6D:20:F0:66:BC:D4:12:12:F2:BB:C3:9B:2A X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/Vx08NQyiV20g8Ga81BIS8rvDmyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.154.0/24 Signature Algorithm: sha256WithRSAEncryption a7:3d:2c:97:b5:9a:3a:7d:9c:d9:b3:83:af:60:84:2c:d9:5a: a9:e6:9f:8a:86:a9:91:71:38:cd:d8:08:44:8b:5a:1e:c2:d5: 4d:1c:d4:b7:c6:65:6f:8d:e1:da:da:ef:7e:41:02:50:26:fb: 73:56:39:99:94:12:f2:70:16:e9:b2:fa:64:27:55:6a:2c:35: 27:41:3f:0a:a2:56:d8:3f:5d:82:23:28:26:dc:e4:fb:6f:73: 06:81:59:30:0a:48:de:ee:39:46:29:0d:4f:ce:7b:50:78:97: 68:ab:ac:d9:35:08:6d:06:a7:1b:40:db:e4:5b:03:6f:13:06: 15:6e:5d:3f:e1:fb:44:4a:c2:a4:86:c6:aa:16:a4:23:a0:6c: 4f:a1:eb:76:d1:42:84:ab:d3:9f:18:38:64:fa:c2:ec:47:5d: 57:8a:08:3c:ae:2d:77:e4:8b:6d:bf:b9:9b:2a:27:fe:1d:91: d3:1e:94:93:e3:7d:f4:8d:2a:85:f0:3a:59:9b:39:fe:bd:ec: 0f:d6:b4:ac:94:39:4e:bf:b1:d5:85:18:23:de:11:74:3f:cd: 08:4b:db:60:67:b8:e5:d0:ac:48:e5:10:e5:d2:1a:ad:7b:a9: 27:8e:39:99:98:18:de:5c:29:f2:4e:c8:73:b8:02:5f:cc:fa: f9:ea:06:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzDz7mZQWNwn9wNCwMv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFkM2MzNTBjYTI1NzZkMjBmMDY2YmNkNDEyMTJmMmJiYzM5YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5DtrpMxv4kWh8ayO6hMJTFyz6F7 xsL9Na+ka+SGDe2jTuJiPlstzstctUCYv6LCAMOqsuaN0CZ4blZHPGyNw7D2fKHv PAYb+DlPmOo68xXIgdZ9+DZNIV9PZjfA5458Et1D0ZSavRofp4ZFud98pC8I/afj lzMxnVtfBVTWp9NuLgxSluEF7Ptr4Q+fiXTP8gOHAaGfnDBLHUgaswm7xew+Eybe YxYFOXjv6+Qy+VzTDrzqP+w9/C8z+ONFAxopeWIv8xpdHskFzLU1t1FypSLds78m JFpXTBUhUQtSRBsCcJCVOM4IyNIRYp+ytIC+qLKj8tK92W0ElJiNqRtr4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcdPDUMoldtIPBmvNQSEvK7w5sqMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvVngwOE5ReWlWMjBnOEdhODFCSVM4cnZEbXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubuaMA0G CSqGSIb3DQEBCwUAA4IBAQCnPSyXtZo6fZzZs4OvYIQs2Vqp5p+KhqmRcTjN2AhE i1oewtVNHNS3xmVvjeHa2u9+QQJQJvtzVjmZlBLycBbpsvpkJ1VqLDUnQT8KolbY P12CIygm3OT7b3MGgVkwCkje7jlGKQ1PzntQeJdoq6zZNQhtBqcbQNvkWwNvEwYV bl0/4ftESsKkhsaqFqQjoGxPoet20UKEq9OfGDhk+sLsR11Xigg8ri135Ittv7mb Kif+HZHTHpST4330jSqF8DpZmzn+vewP1rSslDlOv7HVhRgj3hF0P80IS9tgZ7jl 0KxI5RDl0hqte6knjjmZmBjeXCnyTshzuAJfzPr56gYv -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:17 2026 by rpki-client