This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/VN50qPmCSRJQKSBjaEb5QHgh3cs.roa File: VN50qPmCSRJQKSBjaEb5QHgh3cs.roa (raw, json) Hash identifier: cNaZJTeqwF8/FkLWXoN90z2GLPg/OBZXGTQ11wMXSy0= Subject key identifier: 54:DE:74:A8:F9:82:49:12:50:29:20:63:68:46:F9:40:78:21:DD:CB Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15C962E0DB5669B780188A05CD0654 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/VN50qPmCSRJQKSBjaEb5QHgh3cs.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23033 IP address blocks: 185.255.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c9:62:e0:db:56:69:b7:80:18:8a:05:cd:06:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54de74a8f9824912502920636846f9407821ddcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:b8:f8:51:43:26:f9:2e:09:51:47:1c:4f: b7:1a:70:16:44:d0:6a:af:cd:8a:8d:87:41:db:82: d5:f2:a1:37:6f:a9:a4:ba:69:33:47:11:e2:f7:16: 53:bc:17:7c:1d:22:e4:0c:b6:27:0a:30:df:0e:97: e3:bb:f7:1b:06:20:ff:14:d5:93:84:89:ce:fc:73: 3c:84:47:38:4d:50:0c:fa:d7:7c:dd:9e:68:db:86: a4:c8:b6:fc:3f:43:7f:c5:cf:58:e9:3d:5d:b4:77: 26:ff:6a:d3:cb:28:49:fb:ad:2b:ed:2c:bb:67:11: 10:18:fa:53:e7:94:c8:fa:8e:cb:79:fc:b7:89:a6: cc:2c:5d:c1:23:8b:54:c8:6c:71:e3:f8:bc:6c:44: 42:7e:b4:9f:46:8b:5e:17:6b:7e:d3:ab:49:e2:16: e2:a8:c8:bc:f1:ab:1c:5e:94:df:73:fa:09:fe:24: 57:ab:50:77:ad:6d:17:be:b9:b7:7a:3a:7f:56:89: c0:59:7a:62:61:11:4f:c0:8b:7a:58:aa:91:82:75: 81:2f:ca:2a:41:3b:ed:f9:88:e0:fa:f2:7d:c2:30: d9:79:fa:57:25:04:09:ea:a3:9b:6c:ea:52:ce:1e: 8a:af:0e:4a:d2:b0:d2:d9:99:96:37:86:72:ed:4e: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DE:74:A8:F9:82:49:12:50:29:20:63:68:46:F9:40:78:21:DD:CB X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/VN50qPmCSRJQKSBjaEb5QHgh3cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.115.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:cd:3b:8c:b6:ed:bd:83:25:40:84:a4:41:37:9d:54:dd:44: 1d:45:8d:3c:f9:fd:0f:bd:ac:8f:38:31:40:e5:ec:85:69:d3: f1:00:6e:fa:dd:d0:85:d1:5b:ff:f6:8a:cd:91:c1:5f:c8:a8: 58:56:07:e6:23:73:a6:f3:19:a4:4f:37:af:e0:93:ac:00:88: bd:8f:5b:26:f9:a4:d4:bd:02:dc:d0:80:ab:6c:cd:05:77:68: 9a:b7:ba:b6:8a:6f:76:97:2c:08:6b:e7:3f:cc:90:cd:dd:c4: 90:6b:56:19:22:29:7f:95:54:c8:39:12:5b:e3:79:30:ae:10: bf:52:9b:4c:9f:0f:f3:45:19:35:bb:e1:73:f2:80:63:2e:7e: 76:14:55:d1:25:42:23:df:5e:f9:dd:18:7f:71:2f:1f:96:7d: b7:67:58:24:26:04:1a:7f:b6:5f:0a:b1:90:5d:80:d3:34:95: 25:35:48:78:3e:db:63:0f:62:10:cc:12:75:aa:71:fd:7b:7e: 51:54:3f:21:13:e3:2b:50:34:5d:83:89:36:01:92:5c:bc:c6: ed:28:92:ab:fe:ee:db:eb:c4:2e:76:d7:fa:3e:b8:19:ff:4a: 6d:2b:8e:25:83:a3:ed:87:6f:92:e5:36:98:f4:14:36:c3:c8: 8e:9f:c1:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fcli4NtWabeAGIoFzQZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGRlNzRhOGY5ODI0OTEyNTAyOTIwNjM2ODQ2Zjk0MDc4MjFkZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2a4+FFDJvkuCVFHHE+3GnAWRNBq r82KjYdB24LV8qE3b6mkumkzRxHi9xZTvBd8HSLkDLYnCjDfDpfju/cbBiD/FNWT hInO/HM8hEc4TVAM+td83Z5o24akyLb8P0N/xc9Y6T1dtHcm/2rTyyhJ+60r7Sy7 ZxEQGPpT55TI+o7Lefy3iabMLF3BI4tUyGxx4/i8bERCfrSfRoteF2t+06tJ4hbi qMi88ascXpTfc/oJ/iRXq1B3rW0Xvrm3ejp/VonAWXpiYRFPwIt6WKqRgnWBL8oq QTvt+Yjg+vJ9wjDZefpXJQQJ6qObbOpSzh6Krw5K0rDS2ZmWN4Zy7U5SMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTedKj5gkkSUCkgY2hG+UB4Id3LMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvVk41MHFQbUNTUkpRS1NCamFFYjVRSGdoM2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf9zMA0G CSqGSIb3DQEBCwUAA4IBAQAfzTuMtu29gyVAhKRBN51U3UQdRY08+f0PvayPODFA 5eyFadPxAG763dCF0Vv/9orNkcFfyKhYVgfmI3Om8xmkTzev4JOsAIi9j1sm+aTU vQLc0ICrbM0Fd2iat7q2im92lywIa+c/zJDN3cSQa1YZIil/lVTIORJb43kwrhC/ UptMnw/zRRk1u+Fz8oBjLn52FFXRJUIj31753Rh/cS8fln23Z1gkJgQaf7ZfCrGQ XYDTNJUlNUh4PttjD2IQzBJ1qnH9e35RVD8hE+MrUDRdg4k2AZJcvMbtKJKr/u7b 68Qudtf6PrgZ/0ptK44lg6Pth2+S5TaY9BQ2w8iOn8H3 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:35 2026 by rpki-client