This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/VXazB19Is6W_OKKCp0AvNqbD-rM.roa File: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (raw, json) Hash identifier: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0= Subject key identifier: 55:76:B3:07:5F:48:B3:A5:BF:38:A2:82:A7:40:2F:36:A6:C3:FA:B3 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019B7BA52113AB47F99E277C03B4FF5493E8 Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/VXazB19Is6W_OKKCp0AvNqbD-rM.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 185.228.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:21:13:ab:47:f9:9e:27:7c:03:b4:ff:54:93:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5576b3075f48b3a5bf38a282a7402f36a6c3fab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:09:e4:cd:c9:f5:2b:8d:a0:55:82:c1:e9: 44:b7:b3:3f:0c:07:91:96:53:60:8a:5f:a0:3b:43: 7c:94:6d:76:0f:51:6d:98:02:31:fc:64:f6:08:d5: 3f:15:30:49:b8:69:3b:11:d4:55:c4:2f:c3:fd:d7: 02:f8:a6:bb:cc:86:95:b5:71:e1:06:70:a6:67:69: cd:52:bf:cf:ee:ce:0e:94:c5:ff:56:34:d8:aa:c9: 46:f0:aa:17:df:c0:33:e9:d2:bf:00:53:3a:54:18: 47:27:cc:1e:1f:c8:6c:c4:12:e6:05:fd:3c:9b:f4: e7:b3:0f:f1:9d:de:b4:ac:17:5d:24:b3:55:ff:a4: ce:12:6d:b5:5c:74:87:2b:e2:f4:72:df:ba:09:f0: fc:6b:c5:3f:89:8c:66:d2:82:72:70:64:fd:af:48: 4d:e6:92:88:90:c3:27:67:73:61:23:3d:8c:f2:9b: b1:54:b8:62:81:2c:12:19:4d:c3:97:a6:aa:4d:ad: 0c:37:fb:cc:16:05:5a:f0:7f:47:52:0c:7e:b6:be: f1:49:d6:01:9a:1b:f7:f2:62:4c:f6:44:41:43:73: 76:7f:11:3a:ae:a8:a7:eb:26:2f:bb:fd:91:ca:34: fc:c2:4a:0f:b0:df:4f:bc:ed:fa:b9:86:4b:04:3f: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:B3:07:5F:48:B3:A5:BF:38:A2:82:A7:40:2F:36:A6:C3:FA:B3 X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/VXazB19Is6W_OKKCp0AvNqbD-rM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.1.0/24 Signature Algorithm: sha256WithRSAEncryption 75:52:2a:54:94:1e:33:08:e4:26:94:95:b4:6c:c6:ec:91:ab: 17:8d:bf:4e:9e:60:c2:a2:94:b2:06:b8:69:03:db:42:e4:8a: 94:da:d7:73:c3:60:69:cd:f8:be:84:57:49:24:aa:8e:a4:ae: 92:dd:0c:f6:b6:ca:7d:eb:18:1b:53:81:90:95:bb:4b:41:98: e9:d6:67:e0:79:fa:39:8e:f4:3f:29:03:3d:30:88:bc:06:a2: eb:21:fd:be:11:cb:a2:eb:32:cc:23:b2:0c:52:8f:29:09:28: 54:f0:df:f5:9d:9c:d2:7c:92:f3:21:8c:75:ac:78:74:45:b5: aa:0f:b8:f3:32:fd:23:83:16:f9:77:8d:10:e0:22:d1:99:82: cc:e0:6f:d8:1d:a6:20:b7:ed:dd:5a:e0:51:e9:82:08:34:f3: 05:a1:ee:75:6e:86:d5:8b:9c:2c:c5:ba:17:38:8f:e0:56:c7: 9b:02:73:44:78:23:6f:3d:19:9a:2e:ef:6a:06:fa:4c:04:1e: e6:c9:5c:f7:39:6e:0d:6c:3a:ea:ea:12:16:c1:4d:d0:24:ec: 0e:83:9d:b6:c0:ef:68:aa:aa:25:e9:88:28:e2:bd:8f:7a:cf: 5c:36:2b:16:76:d2:51:45:88:ca:24:99:f6:00:15:92:6e:67: 0a:80:17:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSETq0f5nid8A7T/VJPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTc2YjMwNzVmNDhiM2E1YmYzOGEyODJhNzQwMmYzNmE2YzNmYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4YJ5M3J9SuNoFWCwelEt7M/DAeR llNgil+gO0N8lG12D1FtmAIx/GT2CNU/FTBJuGk7EdRVxC/D/dcC+Ka7zIaVtXHh BnCmZ2nNUr/P7s4OlMX/VjTYqslG8KoX38Az6dK/AFM6VBhHJ8weH8hsxBLmBf08 m/Tnsw/xnd60rBddJLNV/6TOEm21XHSHK+L0ct+6CfD8a8U/iYxm0oJycGT9r0hN 5pKIkMMnZ3NhIz2M8puxVLhigSwSGU3Dl6aqTa0MN/vMFgVa8H9HUgx+tr7xSdYB mhv38mJM9kRBQ3N2fxE6rqin6yYvu/2RyjT8wkoPsN9PvO36uYZLBD8t+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFV2swdfSLOlvziigqdALzamw/qzMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvVlhhekIxOUlzNldfT0tLQ3AwQXZOcWJELXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQBMA0G CSqGSIb3DQEBCwUAA4IBAQB1UipUlB4zCOQmlJW0bMbskasXjb9OnmDCopSyBrhp A9tC5IqU2tdzw2Bpzfi+hFdJJKqOpK6S3Qz2tsp96xgbU4GQlbtLQZjp1mfgefo5 jvQ/KQM9MIi8BqLrIf2+Ecui6zLMI7IMUo8pCShU8N/1nZzSfJLzIYx1rHh0RbWq D7jzMv0jgxb5d40Q4CLRmYLM4G/YHaYgt+3dWuBR6YIINPMFoe51bobVi5wsxboX OI/gVsebAnNEeCNvPRmaLu9qBvpMBB7myVz3OW4NbDrq6hIWwU3QJOwOg522wO9o qqol6Ygo4r2Pes9cNisWdtJRRYjKJJn2ABWSbmcKgBc2 -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:59 2026 by rpki-client