This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/VgN5SCIxaqT2YrW4NVQD1Q6pVzk.roa File: VgN5SCIxaqT2YrW4NVQD1Q6pVzk.roa (raw, json) Hash identifier: SJQuTw8O9qkUCxSEiNfs6LBZOFotSEeUcuV9MrfWwyM= Subject key identifier: 56:03:79:48:22:31:6A:A4:F6:62:B5:B8:35:54:03:D5:0E:A9:57:39 Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 019C26162105187D276A2673FF675E3FCBBB Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/VgN5SCIxaqT2YrW4NVQD1Q6pVzk.roa Signing time: Wed 04 Feb 2026 00:38:30 +0000 ROA not before: Wed 04 Feb 2026 00:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 185.227.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:16:21:05:18:7d:27:6a:26:73:ff:67:5e:3f:cb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Feb 4 00:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5603794822316aa4f662b5b8355403d50ea95739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:7d:23:0c:88:7a:54:6d:8a:10:c2:55:5d: d7:5b:fb:b2:ad:a4:7e:a1:b7:67:e8:7c:eb:90:e6: 9b:8c:dc:a8:b6:fc:8b:16:7d:20:46:2d:c6:d5:2d: a8:9e:f0:9a:de:e2:b9:38:38:b9:65:d1:34:6f:ea: de:3d:b1:90:7c:f3:93:4b:9b:64:93:f1:68:cd:c7: 44:92:aa:6f:2c:d1:5f:79:4e:42:1c:a5:98:67:17: 73:bc:8a:52:e5:50:d7:09:88:d5:f8:0b:50:33:55: 38:15:1a:d2:3f:0d:49:81:94:84:cb:37:54:dc:de: b9:d2:aa:51:9b:72:f1:a9:27:89:5d:a2:c8:00:cf: ff:40:53:ac:c8:58:ce:19:30:12:a8:84:4f:57:d8: e7:a2:6b:b4:18:7c:49:f4:89:f1:cb:56:f7:dc:27: 7c:61:b4:5f:f0:5f:fe:a2:3c:94:c5:b6:9e:c9:75: 22:6f:84:b0:fc:20:2b:b7:c2:ed:91:21:1b:a8:66: 19:e0:a4:1b:0f:6e:f3:3b:a4:38:f2:37:68:fd:ac: 8c:aa:11:7c:fb:3b:1f:4d:98:8b:0f:f3:84:ca:f1: e8:b3:bd:e0:45:5b:4b:af:45:e1:63:18:70:76:02: 6a:cc:18:0f:e5:d0:8c:91:2c:4e:c4:f9:a6:9f:f1: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:03:79:48:22:31:6A:A4:F6:62:B5:B8:35:54:03:D5:0E:A9:57:39 X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/VgN5SCIxaqT2YrW4NVQD1Q6pVzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.152.0/22 Signature Algorithm: sha256WithRSAEncryption bc:d7:3b:a6:1d:26:85:f9:e2:42:03:87:6c:c5:5b:9e:fb:4e: fb:29:5e:aa:78:fa:56:01:5e:48:f3:1b:35:01:e0:0f:c6:4d: 71:12:a8:16:df:ba:c3:c7:5d:e4:01:40:2d:71:98:18:c9:f2: 9a:66:4b:31:c7:13:ad:f0:8c:76:38:fc:c8:1b:c7:08:c7:52: 7c:df:25:59:85:f8:45:05:8c:99:4f:98:9e:c6:79:d8:f9:c7: 85:17:a9:4b:2e:18:16:21:e6:41:65:28:37:82:89:42:bf:19: a0:52:dd:2d:cd:14:f8:f9:12:bb:a4:00:d2:20:ef:60:87:91: 78:ae:aa:30:98:47:cf:0a:eb:4e:74:47:6e:61:34:a3:e4:5d: 86:7c:56:15:3c:37:5a:8a:44:ad:c5:82:28:c4:03:70:c9:3b: 46:ae:22:07:a9:a6:8b:f4:23:25:df:ec:ef:9f:4d:2f:81:fc: a9:b1:2c:78:3e:79:99:5c:28:4f:3e:6d:02:98:1b:65:d0:ed: 47:7c:a3:06:f2:db:9f:c5:96:ab:2b:77:00:68:3a:56:e6:36: dc:97:fc:61:db:c2:96:b2:10:74:bb:77:2b:a0:7e:6a:5f:40: b3:fb:04:82:50:f3:5b:8d:4a:a6:5e:1f:8a:49:3d:8a:22:51: a0:fa:c8:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwmFiEFGH0naiZz/2deP8u7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjYwMjA0MDAzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjAzNzk0ODIyMzE2YWE0ZjY2MmI1YjgzNTU0MDNkNTBlYTk1NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFB9IwyIelRtihDCVV3XW/uyraR+ obdn6HzrkOabjNyotvyLFn0gRi3G1S2onvCa3uK5ODi5ZdE0b+rePbGQfPOTS5tk k/FozcdEkqpvLNFfeU5CHKWYZxdzvIpS5VDXCYjV+AtQM1U4FRrSPw1JgZSEyzdU 3N650qpRm3LxqSeJXaLIAM//QFOsyFjOGTASqIRPV9jnomu0GHxJ9Inxy1b33Cd8 YbRf8F/+ojyUxbaeyXUib4Sw/CArt8LtkSEbqGYZ4KQbD27zO6Q48jdo/ayMqhF8 +zsfTZiLD/OEyvHos73gRVtLr0XhYxhwdgJqzBgP5dCMkSxOxPmmn/H9PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYDeUgiMWqk9mK1uDVUA9UOqVc5MB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvVmdONVNDSXhhcVQyWXJXNE5WUUQxUTZwVnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueOYMA0G CSqGSIb3DQEBCwUAA4IBAQC81zumHSaF+eJCA4dsxVue+077KV6qePpWAV5I8xs1 AeAPxk1xEqgW37rDx13kAUAtcZgYyfKaZksxxxOt8Ix2OPzIG8cIx1J83yVZhfhF BYyZT5iexnnY+ceFF6lLLhgWIeZBZSg3golCvxmgUt0tzRT4+RK7pADSIO9gh5F4 rqowmEfPCutOdEduYTSj5F2GfFYVPDdaikStxYIoxANwyTtGriIHqaaL9CMl3+zv n00vgfypsSx4PnmZXChPPm0CmBtl0O1HfKMG8tufxZarK3cAaDpW5jbcl/xh28KW shB0u3croH5qX0Cz+wSCUPNbjUqmXh+KST2KIlGg+sgo -----END CERTIFICATE-----Generated at Wed Feb 4 10:08:29 2026 by rpki-client