This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/VxEWsPAkHIxtvkrHED-wCH1kUI0.roa File: VxEWsPAkHIxtvkrHED-wCH1kUI0.roa (raw, json) Hash identifier: 8vUxWPnKT69GjCXQn0MXD3bHdB31nVJ/4lTKFyOpw+g= Subject key identifier: 57:11:16:B0:F0:24:1C:8C:6D:BE:4A:C7:10:3F:B0:08:7D:64:50:8D Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35 Certificate serial: 019B7EA546CE213674CC63747723A4762135 Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/VxEWsPAkHIxtvkrHED-wCH1kUI0.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213815 IP address blocks: 193.18.248.0/24 maxlen: 24 193.18.249.0/24 maxlen: 24 193.18.250.0/24 maxlen: 24 193.18.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:46:ce:21:36:74:cc:63:74:77:23:a4:76:21:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571116b0f0241c8c6dbe4ac7103fb0087d64508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:f2:99:97:3b:0a:05:79:0a:e0:2d:a8:d6: ac:53:c4:09:68:7c:f8:e9:68:41:e1:61:d1:91:d0: 62:d9:34:1a:fd:96:9f:9b:70:a5:aa:26:fd:92:d8: d6:25:33:67:18:77:c3:18:d6:c8:b4:d5:0e:1a:17: 5a:9b:38:13:d3:dd:3a:2e:be:6e:ce:ad:78:ea:4d: 56:3f:54:c6:9c:ae:9c:28:76:8e:79:78:55:65:fd: a3:37:e6:89:f2:cd:b8:04:25:a0:e3:7d:21:3e:2a: 78:51:16:47:22:c5:af:89:ee:df:a5:34:54:78:db: d9:cb:fb:a8:1a:11:b6:79:a0:40:6b:59:fa:07:45: 80:b8:29:b0:e4:da:27:3f:a8:91:92:99:85:6b:5c: b6:15:f9:dc:bf:b4:ba:d9:ce:8a:c1:54:22:31:d7: c3:42:0c:13:60:0e:95:ef:9e:7b:0b:e0:8e:d1:6e: 0c:a8:e8:e1:92:64:00:c4:18:3a:f6:20:f9:f4:95: 06:c9:f7:4a:38:eb:91:ce:4a:0b:d3:60:2b:d9:77: 8e:77:f7:f9:77:75:df:67:e6:ec:90:f4:2d:20:54: 29:2e:5c:c5:4f:0e:a7:b7:b8:c9:d7:43:91:a7:50: 75:df:70:bb:27:6e:66:17:71:b0:63:38:a5:77:43: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:11:16:B0:F0:24:1C:8C:6D:BE:4A:C7:10:3F:B0:08:7D:64:50:8D X509v3 Authority Key Identifier: keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/VxEWsPAkHIxtvkrHED-wCH1kUI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.18.248.0/22 Signature Algorithm: sha256WithRSAEncryption 50:59:7a:0b:a3:6f:54:e9:a6:bb:17:e0:dc:2c:c1:24:28:97: 50:bc:60:16:1f:39:9b:a4:b2:8e:ae:da:06:d8:5c:33:67:c7: f8:2e:9f:c4:88:76:5e:3c:de:9f:75:a4:d9:23:49:0a:53:a0: ba:5c:9f:2a:fd:19:6d:39:a0:28:92:0a:7c:92:5a:cf:ff:89: 2d:36:20:4f:bb:b7:d3:b8:6d:06:a3:c0:13:cc:66:33:6c:83: bf:60:4b:02:21:fb:88:19:c5:9e:0b:8d:9b:f4:31:0d:36:ac: 49:40:96:da:26:71:45:d2:bd:e9:37:19:7c:bf:c7:23:69:8d: af:da:00:24:06:ce:66:98:8d:75:66:4f:22:03:5d:69:fd:93: 59:64:d7:6b:55:e5:86:bc:30:e2:eb:f2:33:a3:e7:96:36:74: 15:95:a6:c9:72:92:cc:31:7f:a5:ca:dc:e2:f6:32:dd:77:07: 1c:9e:95:7a:7f:3d:2b:3e:b9:d2:34:c8:a3:0d:6f:26:7a:ef: 32:16:4e:a7:b2:22:d4:7a:97:b5:bc:c6:b5:8a:5a:41:95:d8: ed:c4:01:fa:fa:0a:45:41:d9:9e:96:b3:ed:e6:f2:bc:b1:68: f3:ab:85:0b:3e:7c:1b:44:a4:97:95:f2:72:58:fb:b2:74:0d: 57:7c:0d:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUbOITZ0zGN0dyOkdiE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTg4MzU5Yjk1YTM5NjRhZTZmOWEwY2RhYWUwN2Y1Nzlm OThjMzUwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzExMTZiMGYwMjQxYzhjNmRiZTRhYzcxMDNmYjAwODdkNjQ1MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QbymZc7CgV5CuAtqNasU8QJaHz4 6WhB4WHRkdBi2TQa/Zafm3Clqib9ktjWJTNnGHfDGNbItNUOGhdamzgT0906Lr5u zq146k1WP1TGnK6cKHaOeXhVZf2jN+aJ8s24BCWg430hPip4URZHIsWvie7fpTRU eNvZy/uoGhG2eaBAa1n6B0WAuCmw5NonP6iRkpmFa1y2Ffncv7S62c6KwVQiMdfD QgwTYA6V7557C+CO0W4MqOjhkmQAxBg69iD59JUGyfdKOOuRzkoL02Ar2XeOd/f5 d3XfZ+bskPQtIFQpLlzFTw6nt7jJ10ORp1B133C7J25mF3GwYzild0MJZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcRFrDwJByMbb5KxxA/sAh9ZFCNMB8GA1UdIwQY MBaAFJXog1m5Wjlkrm+aDNquB/V5+Yw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTkt NzEyZDVlMTdhNmY2LzEvVnhFV3NQQWtISXh0dmtySEVELXdDSDFrVUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTktNzEyZDVlMTdhNmY2 LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRL4MA0G CSqGSIb3DQEBCwUAA4IBAQBQWXoLo29U6aa7F+DcLMEkKJdQvGAWHzmbpLKOrtoG 2FwzZ8f4Lp/EiHZePN6fdaTZI0kKU6C6XJ8q/RltOaAokgp8klrP/4ktNiBPu7fT uG0Go8ATzGYzbIO/YEsCIfuIGcWeC42b9DENNqxJQJbaJnFF0r3pNxl8v8cjaY2v 2gAkBs5mmI11Zk8iA11p/ZNZZNdrVeWGvDDi6/Izo+eWNnQVlabJcpLMMX+lytzi 9jLddwccnpV6fz0rPrnSNMijDW8meu8yFk6nsiLUepe1vMa1ilpBldjtxAH6+gpF QdmelrPt5vK8sWjzq4ULPnwbRKSXlfJyWPuydA1XfA3y -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:16 2026 by rpki-client