This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VERhqErvTzoJmaWwzd9oPRieqWc.roa File: VERhqErvTzoJmaWwzd9oPRieqWc.roa (raw, json) Hash identifier: yvUoTv+LRM2YNp2zWyRLgfv04BxoZOCk2GZN1DOUqOM= Subject key identifier: 54:44:61:A8:4A:EF:4F:3A:09:99:A5:B0:CD:DF:68:3D:18:9E:A9:67 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12DCA35AEE069BD9FB6108BB1C96E9 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VERhqErvTzoJmaWwzd9oPRieqWc.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 185.255.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dc:a3:5a:ee:06:9b:d9:fb:61:08:bb:1c:96:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=544461a84aef4f3a0999a5b0cddf683d189ea967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:21:75:df:ef:ee:3c:3c:6c:f0:83:a5:90: 89:28:c6:3c:8d:f8:62:ab:eb:e0:61:5f:34:6a:c5: 82:af:ea:4a:2a:8b:df:5c:46:4f:ef:c1:f2:50:20: d1:68:d9:4c:01:46:63:b2:1d:c4:fd:4b:3d:33:c2: 0e:22:4c:02:bf:d4:6d:71:c4:80:5a:71:2b:9d:4e: 28:a6:8b:46:48:32:35:de:d1:9f:4d:09:52:70:6d: 8a:90:87:ff:57:ab:ef:24:0d:3e:dd:00:50:ce:9e: 7a:ff:91:12:8a:54:b5:4e:2c:7f:fb:ce:3a:b8:b3: 9b:d7:5e:8a:b5:66:ea:3d:d0:ba:27:22:be:9f:4a: 76:fc:ad:a6:f9:aa:4a:80:ce:34:72:ba:69:40:f9: 0c:d2:5e:f7:88:e5:b8:d0:c5:37:b9:18:0d:44:8d: 05:ac:83:db:dd:10:ba:d8:23:b1:0f:a3:89:74:ce: 43:43:cf:db:af:fb:06:6a:0d:0a:39:bb:97:fa:d0: bc:47:56:95:a3:8b:eb:6d:0a:81:dc:ee:c6:fc:15: 55:36:56:ad:ca:67:49:84:18:71:b5:7a:9c:51:6e: 54:92:be:a5:7b:05:b5:51:a1:2c:c4:78:06:38:08: e0:ef:d2:60:87:02:b0:54:b0:c5:8c:69:cc:3c:ce: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:44:61:A8:4A:EF:4F:3A:09:99:A5:B0:CD:DF:68:3D:18:9E:A9:67 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VERhqErvTzoJmaWwzd9oPRieqWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.4.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:5b:36:cc:1f:9c:94:1b:08:fd:b8:ea:a4:38:ee:61:98:64: 31:33:2e:9c:cc:8b:93:32:58:06:23:92:b5:b7:f3:e6:4d:16: c2:5b:53:24:ab:9a:09:a2:00:ff:34:23:98:16:6a:bb:9c:f8: c7:3b:3f:76:da:67:b8:a5:0e:ca:12:b7:7b:d9:4b:d8:9a:47: 88:74:59:02:dd:c4:75:21:15:52:68:06:8e:83:9e:e3:42:87: 9a:ad:68:c0:c2:fb:70:c2:e2:10:75:be:3c:16:26:46:09:c5: d0:08:91:6d:bc:f2:39:3a:02:b7:fe:18:1b:42:75:0c:ef:59: 56:b6:bd:3c:3d:cd:bd:d2:ac:d7:c7:c5:89:62:2d:01:bc:11: 2f:7f:b4:2b:11:e2:3b:82:b4:69:48:7f:2a:45:f4:11:73:41: 53:d5:21:ee:71:7c:2b:4d:15:73:77:fe:58:74:6b:a3:51:ac: a2:1e:71:f2:0f:24:8a:48:ac:ba:70:24:52:7f:c8:20:fc:b9: 4b:10:76:08:5d:1d:e5:66:e5:fc:91:e2:c9:05:3b:7e:52:8a: d7:a5:fc:a9:a5:ef:9c:64:d4:8d:d7:9b:47:1a:ea:08:87:c5: b7:07:43:31:e1:38:d2:70:a6:37:b2:15:60:dd:90:fa:97:c5: aa:fd:01:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtyjWu4Gm9n7YQi7HJbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQ0NjFhODRhZWY0ZjNhMDk5OWE1YjBjZGRmNjgzZDE4OWVhOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBghdd/v7jw8bPCDpZCJKMY8jfhi q+vgYV80asWCr+pKKovfXEZP78HyUCDRaNlMAUZjsh3E/Us9M8IOIkwCv9RtccSA WnErnU4opotGSDI13tGfTQlScG2KkIf/V6vvJA0+3QBQzp56/5ESilS1Tix/+846 uLOb116KtWbqPdC6JyK+n0p2/K2m+apKgM40crppQPkM0l73iOW40MU3uRgNRI0F rIPb3RC62COxD6OJdM5DQ8/br/sGag0KObuX+tC8R1aVo4vrbQqB3O7G/BVVNlat ymdJhBhxtXqcUW5Ukr6lewW1UaEsxHgGOAjg79JghwKwVLDFjGnMPM4m/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFREYahK7086CZmlsM3faD0YnqlnMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvVkVSaHFFcnZUem9KbWFXd3pkOW9QUmllcVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8EMA0G CSqGSIb3DQEBCwUAA4IBAQB6WzbMH5yUGwj9uOqkOO5hmGQxMy6czIuTMlgGI5K1 t/PmTRbCW1Mkq5oJogD/NCOYFmq7nPjHOz922me4pQ7KErd72UvYmkeIdFkC3cR1 IRVSaAaOg57jQoearWjAwvtwwuIQdb48FiZGCcXQCJFtvPI5OgK3/hgbQnUM71lW tr08Pc290qzXx8WJYi0BvBEvf7QrEeI7grRpSH8qRfQRc0FT1SHucXwrTRVzd/5Y dGujUayiHnHyDySKSKy6cCRSf8gg/LlLEHYIXR3lZuX8keLJBTt+UorXpfyppe+c ZNSN15tHGuoIh8W3B0Mx4TjScKY3shVg3ZD6l8Wq/QFD -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:59 2026 by rpki-client