This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/VE2f_ZBZ61KG3J0iaSjuhuMZLWU.roa File: VE2f_ZBZ61KG3J0iaSjuhuMZLWU.roa (raw, json) Hash identifier: kF0sDxqAvqXZdsVcKCnabu4P7eVCRyAy5S89plfHPFw= Subject key identifier: 54:4D:9F:FD:90:59:EB:52:86:DC:9D:22:69:28:EE:86:E3:19:2D:65 Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70 Certificate serial: 019B797E9921F1F154E01DA7DECD90ACB370 Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/VE2f_ZBZ61KG3J0iaSjuhuMZLWU.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205179 IP address blocks: 185.50.176.0/24 maxlen: 24 185.50.177.0/24 maxlen: 24 185.50.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:99:21:f1:f1:54:e0:1d:a7:de:cd:90:ac:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70 Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=544d9ffd9059eb5286dc9d226928ee86e3192d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:8b:ff:6a:ef:c8:31:30:82:f1:79:cb:f1: 7c:d9:8a:1d:49:08:cb:42:3a:e2:d6:ef:5c:79:21: 53:98:3f:30:ad:1b:df:af:a6:f9:50:35:1a:73:44: 53:cf:fb:99:32:f5:0a:b0:5b:ac:26:ff:4d:95:35: f0:15:ec:7e:40:bd:ef:cd:79:75:3f:47:b8:0c:40: 73:44:46:96:ad:aa:5e:2b:a6:db:b1:5b:d6:9d:87: 42:1b:d7:34:af:6e:fb:3a:58:5f:eb:64:a3:dd:c2: f2:22:cd:49:15:3e:ef:88:d4:9b:cb:f5:58:e3:04: c5:a4:9c:bf:23:59:51:65:9e:be:05:a3:af:a7:de: ca:c7:09:80:32:65:1d:41:a3:5c:82:c8:63:05:c1: e0:2e:3d:e7:99:9a:79:10:80:32:5b:ac:fc:c9:a8: 88:7d:1d:78:7b:d7:51:4e:0c:38:42:ff:38:fe:fe: 4d:05:5d:eb:d4:f5:d2:01:58:1c:b4:e7:c9:1e:51: 92:6e:80:fb:4d:29:8c:32:61:5b:91:54:b1:10:9f: 5c:d1:fd:22:d1:0d:33:f2:ab:a4:8d:94:ad:a4:c9: 2d:79:17:56:28:ef:f7:8b:ec:5f:41:ad:e4:5e:c5: c5:fb:03:a6:b9:5f:ed:2e:90:41:b2:58:4f:63:2f: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4D:9F:FD:90:59:EB:52:86:DC:9D:22:69:28:EE:86:E3:19:2D:65 X509v3 Authority Key Identifier: keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/VE2f_ZBZ61KG3J0iaSjuhuMZLWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.176.0/23 185.50.179.0/24 Signature Algorithm: sha256WithRSAEncryption 23:64:e9:17:99:32:0e:a4:07:a6:98:13:1c:4c:76:fc:f2:d7: cd:77:6f:60:c9:b2:a8:11:82:0a:57:10:a3:8a:8b:eb:6b:27: f5:56:00:e7:3e:56:a3:86:bc:cc:bb:9b:51:b9:11:70:02:cc: 30:d7:fe:4a:01:3b:25:6c:94:4f:71:92:15:ca:9c:5a:73:df: 9a:fd:b6:5f:f9:4e:e9:ec:22:bb:48:44:52:fc:89:ed:94:0e: ec:44:37:a1:2b:ac:4b:cb:f5:d9:fd:23:21:fa:bf:96:94:33: 1c:d1:70:cc:da:ee:f4:cd:ea:92:43:f7:e8:4b:01:b2:58:ca: b7:46:5f:af:21:67:97:18:b9:2e:f0:e3:27:b6:6b:2d:5d:be: 19:b1:d5:f0:0e:8e:97:3c:ee:95:48:03:2b:49:3f:18:9b:0e: f6:2c:5c:7b:14:d2:de:72:4a:cc:1d:9a:4a:e4:35:e0:23:0b: 30:49:40:f4:e5:51:fd:50:9b:ce:13:56:b5:a0:de:63:73:77: cc:37:50:fa:bb:bb:d8:60:a1:ed:41:e3:ad:e0:4a:e6:ef:7b: 0c:08:23:c3:c3:6f:df:31:ed:b0:ca:e6:23:75:be:cb:02:e0: 08:02:6a:cd:cd:b8:a3:85:f3:b1:32:cf:3a:f7:64:0e:e0:32: cb:d7:8b:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fpkh8fFU4B2n3s2QrLNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJkNDBhNTNiYjYwYjg2NzU5ZTZlYzBhNTIwNzMwMGI0 MWFmNzAwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDRkOWZmZDkwNTllYjUyODZkYzlkMjI2OTI4ZWU4NmUzMTkyZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+L/2rvyDEwgvF5y/F82YodSQjL Qjri1u9ceSFTmD8wrRvfr6b5UDUac0RTz/uZMvUKsFusJv9NlTXwFex+QL3vzXl1 P0e4DEBzREaWrapeK6bbsVvWnYdCG9c0r277Olhf62Sj3cLyIs1JFT7viNSby/VY 4wTFpJy/I1lRZZ6+BaOvp97KxwmAMmUdQaNcgshjBcHgLj3nmZp5EIAyW6z8yaiI fR14e9dRTgw4Qv84/v5NBV3r1PXSAVgctOfJHlGSboD7TSmMMmFbkVSxEJ9c0f0i 0Q0z8qukjZStpMkteRdWKO/3i+xfQa3kXsXF+wOmuV/tLpBBslhPYy8N7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFRNn/2QWetShtydImko7objGS1lMB8GA1UdIwQY MBaAFE8y1ApTu2C4Z1nm7ApSBzALQa9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYt YzZiZjJmZmI3MjUzLzEvVkUyZl9aQlo2MUtHM0owaWFTanVodU1aTFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYtYzZiZjJmZmI3MjUz LzEvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuTKwAwQA uTKzMA0GCSqGSIb3DQEBCwUAA4IBAQAjZOkXmTIOpAemmBMcTHb88tfNd29gybKo EYIKVxCjiovrayf1VgDnPlajhrzMu5tRuRFwAsww1/5KATslbJRPcZIVypxac9+a /bZf+U7p7CK7SERS/IntlA7sRDehK6xLy/XZ/SMh+r+WlDMc0XDM2u70zeqSQ/fo SwGyWMq3Rl+vIWeXGLku8OMntmstXb4ZsdXwDo6XPO6VSAMrST8Ymw72LFx7FNLe ckrMHZpK5DXgIwswSUD05VH9UJvOE1a1oN5jc3fMN1D6u7vYYKHtQeOt4Erm73sM CCPDw2/fMe2wyuYjdb7LAuAIAmrNzbijhfOxMs8692QO4DLL14ve -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:36 2026 by rpki-client