This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/vTbZcHH_wcLQWpBSiiNEOr8soog.roa File: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (raw, json) Hash identifier: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI= Subject key identifier: BD:36:D9:70:71:FF:C1:C2:D0:5A:90:52:8A:23:44:3A:BF:2C:A2:88 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019B7CEDE77A3F28A24B7B2C529CB70FB095 Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/vTbZcHH_wcLQWpBSiiNEOr8soog.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 194.113.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e7:7a:3f:28:a2:4b:7b:2c:52:9c:b7:0f:b0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd36d97071ffc1c2d05a90528a23443abf2ca288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:58:a5:e3:e0:ac:2d:8b:9e:46:df:42:eb: cb:81:c2:05:2d:8b:87:7f:8a:51:0e:3f:f5:a5:e6: 32:49:14:50:36:ec:77:70:8b:33:41:7d:8f:d1:82: 7b:d3:2e:ff:f3:d7:b1:7c:22:3b:1e:15:78:74:2d: 33:29:79:6d:ad:e9:af:74:88:90:61:e6:6d:fa:68: 15:b2:3d:d4:15:f0:6a:60:b0:9a:cf:dd:17:1d:69: 62:b4:6d:17:26:45:a5:f3:cc:bc:9f:31:0f:15:4f: ce:96:85:6a:f6:42:51:6b:2a:b7:87:95:36:e4:c0: 75:80:70:e3:04:df:6f:5f:97:32:78:09:32:25:57: 82:8e:25:b6:cc:96:65:80:74:92:0d:21:4e:99:7b: 3b:32:b6:61:38:da:a2:4a:77:94:24:4d:1a:39:90: 5a:4b:4f:0f:62:39:a4:8a:92:16:e2:7e:a0:77:6a: 0b:21:d7:44:e1:06:09:bb:9e:5c:d3:12:83:89:cf: 40:06:8b:45:cf:72:6b:25:8e:c5:d8:dd:36:ad:63: 53:b3:dd:3d:2e:22:1d:1a:9b:5e:6a:fb:3f:88:7a: 1b:82:fc:2f:20:bd:88:71:33:8d:6c:24:14:2e:72: 02:5b:b1:cb:37:ff:cc:b0:fd:17:91:7a:5c:11:41: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:D9:70:71:FF:C1:C2:D0:5A:90:52:8A:23:44:3A:BF:2C:A2:88 X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/vTbZcHH_wcLQWpBSiiNEOr8soog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.246.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:7a:8b:b9:40:0f:29:71:5b:e7:f9:7a:4b:21:12:4c:12:7b: 54:ba:9e:2b:a9:2a:c5:15:22:9e:bd:b3:4b:86:9d:b1:b2:14: 37:da:a2:f9:e1:f8:48:44:be:4e:00:78:f5:f8:8a:9a:cf:dc: b3:78:85:29:53:e9:d1:4a:b3:21:a2:cf:38:f0:06:57:4f:5f: ea:c4:63:62:d4:06:48:b6:f6:c2:8e:cc:57:14:b5:ae:f3:be: a2:01:30:4d:b4:e1:e7:d7:c0:79:55:1c:d2:36:19:48:3e:3b: b5:70:8d:b4:b7:38:82:4c:ab:e0:5d:9b:a5:87:7a:7e:b2:62: 65:85:7d:af:30:9e:b1:82:ce:ec:47:8b:61:7d:4a:88:cc:50: ca:83:3e:16:c6:cc:48:82:7f:e3:12:6c:33:28:ea:28:b6:e8: 83:df:55:4b:69:cf:f9:2c:f0:a1:75:6b:ba:10:41:6f:ce:0e: bd:06:7f:02:ed:5f:35:5a:a9:7b:45:62:dc:98:d2:b2:ca:8b: 8e:75:58:43:17:e8:84:1a:fb:83:94:e5:94:8a:be:be:07:bf: a0:e1:f1:4a:bf:dc:7a:be:34:2a:fe:7b:51:0e:68:8a:d8:16: f4:01:ca:c4:2e:c9:52:76:2a:f6:c2:a9:a1:05:29:f9:d8:cc: c7:79:d6:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ed6PyiiS3ssUpy3D7CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM2ZDk3MDcxZmZjMWMyZDA1YTkwNTI4YTIzNDQzYWJmMmNhMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30tYpePgrC2LnkbfQuvLgcIFLYuH f4pRDj/1peYySRRQNux3cIszQX2P0YJ70y7/89exfCI7HhV4dC0zKXltremvdIiQ YeZt+mgVsj3UFfBqYLCaz90XHWlitG0XJkWl88y8nzEPFU/OloVq9kJRayq3h5U2 5MB1gHDjBN9vX5cyeAkyJVeCjiW2zJZlgHSSDSFOmXs7MrZhONqiSneUJE0aOZBa S08PYjmkipIW4n6gd2oLIddE4QYJu55c0xKDic9ABotFz3JrJY7F2N02rWNTs909 LiIdGpteavs/iHobgvwvIL2IcTONbCQULnICW7HLN//MsP0XkXpcEUEshQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL022XBx/8HC0FqQUoojRDq/LKKIMB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvdlRiWmNISF93Y0xRV3BCU2lpTkVPcjhzb29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnH2MA0G CSqGSIb3DQEBCwUAA4IBAQCNeou5QA8pcVvn+XpLIRJMEntUup4rqSrFFSKevbNL hp2xshQ32qL54fhIRL5OAHj1+Iqaz9yzeIUpU+nRSrMhos848AZXT1/qxGNi1AZI tvbCjsxXFLWu876iATBNtOHn18B5VRzSNhlIPju1cI20tziCTKvgXZulh3p+smJl hX2vMJ6xgs7sR4thfUqIzFDKgz4WxsxIgn/jEmwzKOootuiD31VLac/5LPChdWu6 EEFvzg69Bn8C7V81Wql7RWLcmNKyyouOdVhDF+iEGvuDlOWUir6+B7+g4fFKv9x6 vjQq/ntRDmiK2Bb0AcrELslSdir2wqmhBSn52MzHedaz -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:53 2026 by rpki-client