This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/VJGlReXG5W-ZR47PVyvqWZdf0xI.roa File: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (raw, json) Hash identifier: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo= Subject key identifier: 54:91:A5:45:E5:C6:E5:6F:99:47:8E:CF:57:2B:EA:59:97:5F:D3:12 Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9 Certificate serial: 019B7834E291D2B291BD43A5997410241325 Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/VJGlReXG5W-ZR47PVyvqWZdf0xI.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 194.180.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e2:91:d2:b2:91:bd:43:a5:99:74:10:24:13:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5491a545e5c6e56f99478ecf572bea59975fd312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:7f:28:e5:ca:09:bc:d2:09:ea:4f:86:32: 91:62:58:f6:9f:47:95:b5:e8:a2:dc:20:29:80:08: d5:f1:c7:00:fd:c6:e4:d2:c8:f4:6e:c3:86:1f:54: 36:8d:49:be:54:3a:db:26:11:ae:d3:31:4d:9e:a3: 1f:ff:6d:55:9e:7c:96:86:6f:14:06:6a:d0:34:a7: 42:70:ba:68:aa:3a:f9:5e:7c:5a:82:a0:c8:0f:f9: a4:ad:34:11:5a:0a:e9:96:25:76:f2:4a:29:fb:71: 91:42:7a:0a:c7:90:8d:58:a4:d9:96:75:e1:c4:53: d6:e8:0d:df:3b:33:33:9c:e7:b3:00:b6:dd:19:56: 5e:e0:9e:7e:9d:e4:dc:bd:b9:f6:e7:1f:cd:3f:f4: 7e:97:1c:92:2d:ab:ac:b2:83:7b:22:e2:2e:60:b2: 44:2e:2a:9d:bf:46:af:0d:1c:0e:ab:72:74:8a:ea: d0:ac:52:2f:a4:9f:84:26:6f:2b:14:2e:4b:e2:e4: a0:64:36:7a:ed:2b:5d:8a:9a:d8:ae:72:cf:e3:0a: a8:44:21:f0:a5:48:6c:15:ac:30:f3:15:d4:d1:f4: bc:57:92:21:de:6e:d4:91:62:03:3c:7d:c7:ee:a9: b0:43:a1:de:03:ac:ca:a3:40:85:b5:9b:27:34:90: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:91:A5:45:E5:C6:E5:6F:99:47:8E:CF:57:2B:EA:59:97:5F:D3:12 X509v3 Authority Key Identifier: keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/VJGlReXG5W-ZR47PVyvqWZdf0xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.204.0/24 Signature Algorithm: sha256WithRSAEncryption f0:f8:6d:92:80:42:d0:d2:e9:ca:ed:cc:45:14:f6:8e:fd:41: 07:5c:a5:75:12:7f:ed:54:b5:93:66:6c:98:1c:49:9b:fd:bd: f3:c5:9c:2d:d0:69:c7:c4:36:5b:72:ea:44:61:ea:b1:bb:85: d0:f7:3f:6e:09:68:e8:9d:3e:9a:dc:34:5e:50:23:8d:f3:25: ea:f6:fe:bc:b7:85:08:c4:76:bf:11:45:9e:54:f6:9d:57:79: d2:ff:aa:d3:51:71:0d:69:3b:9d:48:c9:a3:d3:5d:13:d2:aa: f1:99:26:3e:4a:d0:91:32:03:8c:19:cf:50:d6:28:2f:f1:0d: 4a:d8:eb:d6:e9:0f:b7:0d:57:69:82:08:c7:81:ab:34:4c:f1: 0f:65:1e:72:73:40:ed:13:1d:41:19:09:cf:6f:21:b2:82:34: 9a:12:51:71:06:fa:3c:24:4d:a7:73:d7:07:f2:7a:23:c3:0c: d4:6e:c0:a9:2f:02:5b:e6:9d:69:6f:d5:7d:31:9e:ce:ca:4a: 2f:53:51:13:17:38:03:71:ea:bf:7e:31:81:e5:8c:94:8a:a8: f6:18:55:f8:41:10:9a:be:f2:84:fc:0d:c4:35:95:cd:eb:a9: fb:d7:96:90:7b:80:a2:78:c6:95:6a:3e:5f:25:67:28:d5:70: 9a:7b:95:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOKR0rKRvUOlmXQQJBMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWQ1OTc0YjRlNTk5Y2E3MmRjYzRkYWMwNjZkNzcxNDIw MmVmYzkwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDkxYTU0NWU1YzZlNTZmOTk0NzhlY2Y1NzJiZWE1OTk3NWZkMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3t/KOXKCbzSCepPhjKRYlj2n0eV teii3CApgAjV8ccA/cbk0sj0bsOGH1Q2jUm+VDrbJhGu0zFNnqMf/21VnnyWhm8U BmrQNKdCcLpoqjr5XnxagqDID/mkrTQRWgrpliV28kop+3GRQnoKx5CNWKTZlnXh xFPW6A3fOzMznOezALbdGVZe4J5+neTcvbn25x/NP/R+lxySLaussoN7IuIuYLJE Liqdv0avDRwOq3J0iurQrFIvpJ+EJm8rFC5L4uSgZDZ67StdiprYrnLP4wqoRCHw pUhsFaww8xXU0fS8V5Ih3m7UkWIDPH3H7qmwQ6HeA6zKo0CFtZsnNJCFBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFSRpUXlxuVvmUeOz1cr6lmXX9MSMB8GA1UdIwQY MBaAFL8dWXS05ZnKctzE2sBm13FCAu/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGIt YzMyYTlhMDg1YWUwLzEvVkpHbFJlWEc1Vy1aUjQ3UFZ5dnFXWmRmMHhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGItYzMyYTlhMDg1YWUw LzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrTMMA0G CSqGSIb3DQEBCwUAA4IBAQDw+G2SgELQ0unK7cxFFPaO/UEHXKV1En/tVLWTZmyY HEmb/b3zxZwt0GnHxDZbcupEYeqxu4XQ9z9uCWjonT6a3DReUCON8yXq9v68t4UI xHa/EUWeVPadV3nS/6rTUXENaTudSMmj010T0qrxmSY+StCRMgOMGc9Q1igv8Q1K 2OvW6Q+3DVdpggjHgas0TPEPZR5yc0DtEx1BGQnPbyGygjSaElFxBvo8JE2nc9cH 8nojwwzUbsCpLwJb5p1pb9V9MZ7OykovU1ETFzgDceq/fjGB5YyUiqj2GFX4QRCa vvKE/A3ENZXN66n715aQe4CieMaVaj5fJWco1XCae5UE -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:10 2026 by rpki-client