This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/VjDmi08eDkQNqosAIn5lUGAfZIA.roa File: VjDmi08eDkQNqosAIn5lUGAfZIA.roa (raw, json) Hash identifier: jWrWoSFJKct0v+ZoZpemlOK9O+tbs5TMpb0HP64364w= Subject key identifier: 56:30:E6:8B:4F:1E:0E:44:0D:AA:8B:00:22:7E:65:50:60:1F:64:80 Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Certificate serial: 019B7F154935C2CE18E8AC0A87CCB0438766 Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/VjDmi08eDkQNqosAIn5lUGAfZIA.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39053 IP address blocks: 193.176.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:49:35:c2:ce:18:e8:ac:0a:87:cc:b0:43:87:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5630e68b4f1e0e440daa8b00227e6550601f6480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:7b:ce:6a:9f:af:c8:21:f5:63:f6:b7:dc: cc:3d:f5:1b:c8:84:8f:69:32:81:70:f7:84:9f:a0: a1:47:8d:79:2b:e6:a4:f3:4e:9d:dc:76:04:d4:db: 3d:bf:be:fd:07:06:3b:0a:54:90:6f:02:d7:85:58: a4:51:3d:d3:b3:20:52:b8:0c:5b:bd:5c:2f:47:ae: dc:19:4a:30:55:14:18:a1:46:41:61:18:10:f4:f8: 39:49:06:d1:f4:09:a3:42:ab:70:db:6c:0e:58:69: cb:71:5e:32:8e:e5:f7:31:18:b0:43:3f:82:61:8b: 5d:da:ca:12:80:25:2b:b9:63:b3:bf:40:68:06:25: 1b:f9:5c:6f:ac:47:ac:46:c8:3a:26:f3:0a:61:71: b5:10:a1:8d:ad:55:41:24:c2:8d:51:25:58:6c:00: ea:c5:e3:b2:7e:39:e9:9b:4a:31:e2:09:27:7e:90: 51:b4:d1:75:34:6d:e8:d0:99:38:01:7e:c9:a7:7f: 72:cd:57:32:06:ff:bd:ba:f1:a7:87:61:e2:cc:cd: 1a:72:6c:f5:1c:55:05:98:8d:ed:73:a5:65:5b:08: 99:e2:ae:93:ee:37:63:bc:14:1e:cc:75:6b:e6:c0: 8b:bd:6a:57:d7:ca:fd:3b:67:a5:da:18:46:ee:25: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:30:E6:8B:4F:1E:0E:44:0D:AA:8B:00:22:7E:65:50:60:1F:64:80 X509v3 Authority Key Identifier: keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/VjDmi08eDkQNqosAIn5lUGAfZIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.68.0/22 Signature Algorithm: sha256WithRSAEncryption 69:e4:65:b4:9e:d6:ea:d1:4c:5c:8d:73:55:37:a9:a2:0d:1f: d3:68:e6:97:8a:15:3b:cb:79:70:5a:93:7d:2b:a5:cf:72:a9: 88:27:ec:43:62:7b:e9:83:16:a6:dd:38:02:af:3f:35:42:66: 9a:72:9d:48:76:94:92:11:07:49:f9:8c:23:e7:47:30:84:d1: d4:18:e5:93:c3:31:95:da:11:fb:47:52:a3:1e:f1:e0:db:21: 42:4e:24:b0:7a:24:4d:6f:32:78:e7:9f:af:68:e3:d5:ce:b4: f7:a0:f6:52:81:cb:1e:e4:4f:17:10:55:2d:43:54:9a:9b:d5: a1:f0:8a:2c:56:9e:de:48:f9:bd:18:01:ba:ec:38:1c:fe:52: 90:0d:a8:60:d3:30:91:11:2c:2c:9e:f1:8f:f4:57:7a:e8:c3: 99:f5:4b:73:80:7a:0f:16:cc:b1:c5:59:36:2d:90:03:d0:39: a6:55:b9:fc:62:1e:02:35:47:1e:e2:4c:bf:2a:9e:5c:6f:c4: 44:37:1c:8a:fb:e5:2e:a0:73:73:8c:d2:06:75:ce:6b:0d:18: 6c:dd:7e:75:91:2f:37:26:d0:0a:41:df:e9:0a:5b:d7:4f:19: e9:60:c7:cc:ce:8b:70:79:84:bd:b1:62:f7:fe:3c:cf:7d:ad: 70:3b:f6:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUk1ws4Y6KwKh8ywQ4dmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj YzdiNTMwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjMwZTY4YjRmMWUwZTQ0MGRhYThiMDAyMjdlNjU1MDYwMWY2NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeR7zmqfr8gh9WP2t9zMPfUbyISP aTKBcPeEn6ChR415K+ak806d3HYE1Ns9v779BwY7ClSQbwLXhVikUT3TsyBSuAxb vVwvR67cGUowVRQYoUZBYRgQ9Pg5SQbR9AmjQqtw22wOWGnLcV4yjuX3MRiwQz+C YYtd2soSgCUruWOzv0BoBiUb+VxvrEesRsg6JvMKYXG1EKGNrVVBJMKNUSVYbADq xeOyfjnpm0ox4gknfpBRtNF1NG3o0Jk4AX7Jp39yzVcyBv+9uvGnh2HizM0acmz1 HFUFmI3tc6VlWwiZ4q6T7jdjvBQezHVr5sCLvWpX18r9O2el2hhG7iWQIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYw5otPHg5EDaqLACJ+ZVBgH2SAMB8GA1UdIwQY MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct M2Y0MDU0N2U1MmQxLzEvVmpEbWkwOGVEa1FOcW9zQUluNWxVR0FmWklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbBEMA0G CSqGSIb3DQEBCwUAA4IBAQBp5GW0ntbq0UxcjXNVN6miDR/TaOaXihU7y3lwWpN9 K6XPcqmIJ+xDYnvpgxam3TgCrz81Qmaacp1IdpSSEQdJ+Ywj50cwhNHUGOWTwzGV 2hH7R1KjHvHg2yFCTiSweiRNbzJ455+vaOPVzrT3oPZSgcse5E8XEFUtQ1Sam9Wh 8IosVp7eSPm9GAG67Dgc/lKQDahg0zCRESwsnvGP9Fd66MOZ9UtzgHoPFsyxxVk2 LZAD0DmmVbn8Yh4CNUce4ky/Kp5cb8RENxyK++UuoHNzjNIGdc5rDRhs3X51kS83 JtAKQd/pClvXTxnpYMfMzotweYS9sWL3/jzPfa1wO/br -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:01 2026 by rpki-client