This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa File: Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa (raw, json) Hash identifier: blwSnQqhNIoWvduAY/JgSuj6c5kvRYhLpvdaBWUqc10= Subject key identifier: 56:ED:52:32:A4:9B:36:FC:68:F3:EB:95:B5:7B:34:12:57:76:A3:F4 Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775 Certificate serial: 019B7CECD077A4E7618F29D888513EE59F98 Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa Signing time: Fri 02 Jan 2026 04:17:33 +0000 ROA not before: Fri 02 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198360 IP address blocks: 176.103.216.0/23 maxlen: 23 176.103.216.0/24 maxlen: 24 176.103.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d0:77:a4:e7:61:8f:29:d8:88:51:3e:e5:9f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56ed5232a49b36fc68f3eb95b57b34125776a3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:71:00:5d:37:24:79:39:ec:4f:f2:0a:1b: 20:ce:75:fc:d6:16:9c:79:57:64:c0:36:88:29:30: dc:dd:24:59:19:a7:19:a1:65:45:36:2f:fa:90:7a: e7:2b:23:d4:46:03:9b:45:6f:69:2a:f3:a2:f6:f2: bb:d4:eb:82:9f:5b:93:03:d7:16:4f:57:a4:0f:6e: 85:40:3f:eb:ea:c0:7e:5b:32:69:f8:e4:fa:d6:ed: 2e:d6:77:ea:eb:17:39:f0:52:d5:30:67:6a:f1:80: d2:42:89:80:2e:68:fc:10:70:a7:9c:cb:cd:7d:47: 0f:25:90:5b:60:7c:cd:88:bf:83:d6:de:c4:e6:8b: c7:2b:e4:30:91:fa:16:a7:12:52:81:53:a8:19:bb: a8:58:b3:76:25:98:30:d7:ad:b5:84:63:f1:2b:fa: 28:4f:62:97:33:f1:85:4f:10:b3:6d:7d:e4:14:a9: 43:02:cd:9e:18:6c:3d:53:b8:75:d0:73:3b:35:40: f8:98:76:30:14:9c:c8:5f:2e:84:1a:1b:b0:d3:b7: c8:ea:0e:de:4e:44:ec:e3:b9:ff:22:72:86:2f:14: 98:10:3b:10:cb:7d:aa:c7:4b:87:cd:c2:00:33:df: e8:8d:92:0c:e7:d5:f4:d5:6f:4d:0f:22:47:13:a3: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:52:32:A4:9B:36:FC:68:F3:EB:95:B5:7B:34:12:57:76:A3:F4 X509v3 Authority Key Identifier: keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.216.0/23 Signature Algorithm: sha256WithRSAEncryption 41:19:ab:f4:5f:d6:3a:f3:83:62:4c:62:ef:a4:31:29:d0:0b: f5:9f:65:31:4e:2a:91:ac:a5:52:97:4a:f9:82:90:32:69:58: 6d:ea:03:59:e1:66:f2:18:c9:da:6e:2b:da:d1:a2:77:9a:2b: 33:c5:89:54:ca:6a:69:4a:90:70:9c:13:40:e5:2e:3f:49:bd: bd:c1:95:83:cf:3c:93:4e:ff:20:0d:5e:24:29:f0:c3:72:4f: a1:15:ea:b7:01:a4:50:29:0d:d6:7b:e9:e3:d6:f5:84:2d:67: 8d:fb:b9:73:6c:b2:91:0a:2d:b7:29:b3:56:4b:dc:d9:09:99: 81:90:53:e1:47:c3:3c:9b:9b:de:4d:d3:69:f2:a2:87:3f:60: 85:e7:f0:38:fe:b2:dc:fe:96:15:2c:43:24:23:f1:68:2a:1a: df:b2:7f:c8:71:71:01:2e:67:32:41:97:10:5c:2f:cd:10:fc: e9:79:aa:11:1a:ab:90:a1:b3:cf:ae:26:d4:99:1a:c2:4f:af: 5a:0f:df:04:e5:cc:4a:2e:dd:f5:d8:15:03:01:58:a6:d7:d3: 00:8e:5c:30:51:e0:de:16:a7:87:73:93:99:60:01:ee:fd:54: 9c:bc:21:46:9a:48:e5:3f:2e:0a:01:0a:c0:bf:52:cb:c4:f6: 73:d5:8e:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87NB3pOdhjynYiFE+5Z+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTAyNGZhMjIyZDA5ZjZlZDk5ZDBjOGU2YjdjZWQxNjhl M2E3NzUwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmVkNTIzMmE0OWIzNmZjNjhmM2ViOTViNTdiMzQxMjU3NzZhM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIpxAF03JHk57E/yChsgznX81hac eVdkwDaIKTDc3SRZGacZoWVFNi/6kHrnKyPURgObRW9pKvOi9vK71OuCn1uTA9cW T1ekD26FQD/r6sB+WzJp+OT61u0u1nfq6xc58FLVMGdq8YDSQomALmj8EHCnnMvN fUcPJZBbYHzNiL+D1t7E5ovHK+QwkfoWpxJSgVOoGbuoWLN2JZgw1621hGPxK/oo T2KXM/GFTxCzbX3kFKlDAs2eGGw9U7h10HM7NUD4mHYwFJzIXy6EGhuw07fI6g7e TkTs47n/InKGLxSYEDsQy32qx0uHzcIAM9/ojZIM59X01W9NDyJHE6MjtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbtUjKkmzb8aPPrlbV7NBJXdqP0MB8GA1UdIwQY MBaAFFdQJPoiLQn27ZnQyOa3ztFo46d1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAt ZTY2MTg2YzdhNjg5LzEvVnUxU01xU2JOdnhvOC11VnRYczBFbGQyb19RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAtZTY2MTg2YzdhNjg5 LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsGfYMA0G CSqGSIb3DQEBCwUAA4IBAQBBGav0X9Y684NiTGLvpDEp0Av1n2UxTiqRrKVSl0r5 gpAyaVht6gNZ4WbyGMnabiva0aJ3miszxYlUymppSpBwnBNA5S4/Sb29wZWDzzyT Tv8gDV4kKfDDck+hFeq3AaRQKQ3We+nj1vWELWeN+7lzbLKRCi23KbNWS9zZCZmB kFPhR8M8m5veTdNp8qKHP2CF5/A4/rLc/pYVLEMkI/FoKhrfsn/IcXEBLmcyQZcQ XC/NEPzpeaoRGquQobPPribUmRrCT69aD98E5cxKLt312BUDAVim19MAjlwwUeDe FqeHc5OZYAHu/VScvCFGmkjlPy4KAQrAv1LLxPZz1Y4O -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:35 2026 by rpki-client