This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/vmidCd491rgHxm_kqaantMVtBCY.roa File: vmidCd491rgHxm_kqaantMVtBCY.roa (raw, json) Hash identifier: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4= Subject key identifier: BE:68:9D:09:DE:3D:D6:B8:07:C6:6F:E4:A9:A6:A7:B4:C5:6D:04:26 Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Certificate serial: 019B76EAB6F0D7DA9CDFB73CF61F4D5AC104 Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/vmidCd491rgHxm_kqaantMVtBCY.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60267 IP address blocks: 185.87.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b6:f0:d7:da:9c:df:b7:3c:f6:1f:4d:5a:c1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be689d09de3dd6b807c66fe4a9a6a7b4c56d0426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:0f:bc:b8:95:f2:f6:15:1c:55:27:a4:7c: 83:c5:63:d4:be:5c:b9:2d:bf:dc:1e:e1:8e:66:82: ec:65:de:c4:ef:c3:23:2b:f8:23:4c:ad:6d:06:b0: 93:d2:4a:f6:dc:6c:9e:ae:5f:a7:fb:ee:42:5c:65: 85:9f:a9:fb:b6:57:00:88:1c:0a:0c:25:4d:4b:d5: bf:7d:e1:6e:95:37:bf:ca:50:41:66:e7:7d:3c:b9: cc:e9:e1:a3:86:36:5e:b7:3b:df:1f:1a:5f:56:80: 74:70:01:ca:71:c5:4e:05:c8:cc:85:fa:54:33:7e: dc:b5:13:a5:c6:90:3d:3c:31:5d:a0:83:70:bb:d3: aa:94:6d:0f:05:f9:d6:0e:86:ef:09:6b:11:8f:69: 1f:5c:7a:da:59:1a:9c:5c:bd:54:c8:bc:4e:8d:5a: 38:d4:d4:18:cb:17:91:be:b3:b8:68:fa:ee:58:87: a0:4e:bf:84:42:10:74:b8:9a:55:ea:ec:72:4b:c0: 26:f1:b6:79:b2:8a:c4:05:c5:cc:a4:e7:b2:d8:c9: fd:27:b3:4b:21:f0:d4:00:bc:47:db:50:1c:7d:24: c5:d3:b2:0c:ea:b6:e8:89:c5:44:da:17:81:95:c4: 25:82:65:c9:90:6e:04:51:19:ae:53:f8:77:ad:70: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:68:9D:09:DE:3D:D6:B8:07:C6:6F:E4:A9:A6:A7:B4:C5:6D:04:26 X509v3 Authority Key Identifier: keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/vmidCd491rgHxm_kqaantMVtBCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.96.0/22 Signature Algorithm: sha256WithRSAEncryption 48:e5:62:29:53:bf:04:1c:92:bc:82:1a:f3:e9:bb:c5:60:00: 95:af:37:f6:0f:d1:72:99:7a:47:04:02:d5:8f:b7:f7:f0:5b: 1b:75:99:ae:60:d6:c6:ec:f8:99:c7:38:46:1f:85:c2:a6:d3: 1d:fa:b1:04:16:38:5d:a3:70:66:58:f8:db:9b:0c:aa:ba:57: 22:d0:a9:18:75:70:10:86:31:0d:60:3e:8e:10:5a:ce:b7:60: 5c:8c:ff:8f:9b:1e:a3:d2:bf:71:cc:4b:c9:c7:d9:dc:9f:5f: 02:26:b4:06:09:6b:0a:89:9c:c0:bb:7b:b7:77:7f:3f:a8:b8: ae:97:e2:0c:87:07:17:d0:12:73:85:96:b6:84:d8:c9:d3:c0: a9:9b:89:ee:9d:9b:7a:8a:86:3f:c7:d2:a1:79:cc:2b:05:eb: 3f:db:d2:66:ba:e9:e4:83:1b:e5:62:4c:28:18:b7:d0:e3:1d: 1c:15:a3:9b:28:da:3e:77:4c:41:85:94:3b:db:a3:a4:92:14: 14:d4:57:c6:f0:6b:4d:2f:27:cb:92:99:78:4d:b0:c0:9b:cf: 62:ca:b9:e1:eb:37:7e:9d:92:c0:4a:a5:f3:ee:48:a3:fe:66: cf:cb:6a:fb:c5:58:88:41:7c:a5:0e:79:c3:d6:1a:58:92:7b: f3:c7:4f:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rbw19qc37c89h9NWsEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi NjlhMmMwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTY4OWQwOWRlM2RkNmI4MDdjNjZmZTRhOWE2YTdiNGM1NmQwNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A0PvLiV8vYVHFUnpHyDxWPUvly5 Lb/cHuGOZoLsZd7E78MjK/gjTK1tBrCT0kr23Gyerl+n++5CXGWFn6n7tlcAiBwK DCVNS9W/feFulTe/ylBBZud9PLnM6eGjhjZetzvfHxpfVoB0cAHKccVOBcjMhfpU M37ctROlxpA9PDFdoINwu9OqlG0PBfnWDobvCWsRj2kfXHraWRqcXL1UyLxOjVo4 1NQYyxeRvrO4aPruWIegTr+EQhB0uJpV6uxyS8Am8bZ5sorEBcXMpOey2Mn9J7NL IfDUALxH21AcfSTF07IM6rboicVE2heBlcQlgmXJkG4EURmuU/h3rXC2VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5onQnePda4B8Zv5Kmmp7TFbQQmMB8GA1UdIwQY MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt NjQyNzhjMGQ4ZWJmLzEvdm1pZENkNDkxcmdIeG1fa3FhYW50TVZ0QkNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVdgMA0G CSqGSIb3DQEBCwUAA4IBAQBI5WIpU78EHJK8ghrz6bvFYACVrzf2D9FymXpHBALV j7f38FsbdZmuYNbG7PiZxzhGH4XCptMd+rEEFjhdo3BmWPjbmwyqulci0KkYdXAQ hjENYD6OEFrOt2BcjP+Pmx6j0r9xzEvJx9ncn18CJrQGCWsKiZzAu3u3d38/qLiu l+IMhwcX0BJzhZa2hNjJ08Cpm4nunZt6ioY/x9KhecwrBes/29JmuunkgxvlYkwo GLfQ4x0cFaObKNo+d0xBhZQ726OkkhQU1FfG8GtNLyfLkpl4TbDAm89iyrnh6zd+ nZLASqXz7kij/mbPy2r7xViIQXylDnnD1hpYknvzx0/1 -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:15 2026 by rpki-client