This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/Vxijl7ZHOsV704q8evglEcbFwBs.roa File: Vxijl7ZHOsV704q8evglEcbFwBs.roa (raw, json) Hash identifier: KARNA+c405NIrwYFEYCF2kgsRfVWL6vXKf3QD7GyrdE= Subject key identifier: 57:18:A3:97:B6:47:3A:C5:7B:D3:8A:BC:7A:F8:25:11:C6:C5:C0:1B Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Certificate serial: 019B7D5CE91AF0B94BB3C9404C8089581E35 Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/Vxijl7ZHOsV704q8evglEcbFwBs.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50281 IP address blocks: 193.46.89.0/24 maxlen: 24 193.106.60.0/22 maxlen: 24 193.106.60.0/24 maxlen: 24 193.106.61.0/24 maxlen: 24 193.106.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e9:1a:f0:b9:4b:b3:c9:40:4c:80:89:58:1e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5718a397b6473ac57bd38abc7af82511c6c5c01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:ee:aa:55:d1:06:2f:d4:e5:38:ff:18:f3: 7c:d1:0f:66:c1:19:08:70:fc:0f:52:b6:13:ac:71: ea:c2:ad:6b:2b:ab:4a:44:e1:b5:7d:f0:54:98:94: 98:a2:9d:ba:c6:5d:d3:ef:16:9e:a6:bf:74:91:15: ce:2a:92:d6:72:ff:5d:7c:a9:a6:a0:35:a3:b3:fb: 64:29:1c:d3:62:02:27:db:5a:68:e0:cf:84:29:4a: 92:43:59:a6:fa:0a:49:19:f3:3f:a7:38:d2:7e:fa: a8:1a:e3:4f:50:46:9d:c3:6a:03:84:f3:28:e8:0a: 1b:43:d8:be:3f:e0:c0:cd:b9:a2:a9:ac:b8:ab:e9: 84:89:11:7b:5b:db:8b:ac:d2:14:0a:f1:38:57:17: 3b:51:9b:a9:d5:a4:c1:d6:dd:36:98:50:ef:56:30: 16:44:e4:7c:56:5c:1c:5f:b0:cb:92:21:02:37:99: 29:60:64:c9:6b:11:5e:c4:40:56:73:a3:e8:90:eb: 16:da:95:71:86:2d:d7:60:50:0c:65:6d:2d:7e:03: 98:d1:dc:e3:12:f5:47:b5:d4:35:f0:e6:9f:43:aa: a8:14:4e:91:9c:aa:ea:b8:75:fa:8a:e4:88:f5:3f: 3c:b2:fa:14:67:b5:c7:1e:5b:71:1c:3b:7d:3c:d5: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:18:A3:97:B6:47:3A:C5:7B:D3:8A:BC:7A:F8:25:11:C6:C5:C0:1B X509v3 Authority Key Identifier: keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/Vxijl7ZHOsV704q8evglEcbFwBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.89.0/24 193.106.60.0/22 Signature Algorithm: sha256WithRSAEncryption 16:71:de:e4:3e:86:f3:fa:5c:5c:88:0e:22:14:3a:f9:e7:f7: a6:ef:fb:77:cd:2a:ba:02:b8:a2:43:3c:81:bd:37:27:21:29: c4:28:6c:aa:d1:cf:45:fd:5c:df:64:11:c3:77:66:2d:e6:7b: 1c:5d:73:b1:a4:2e:fa:7f:3b:19:a4:8d:48:d5:34:05:35:2a: fb:1c:7f:7d:1a:02:2a:ff:8d:38:f1:fc:6d:55:af:ab:66:67: b5:52:62:c7:dc:1d:dc:30:22:01:db:1f:f6:ca:45:43:51:3e: 4f:d3:2e:22:0b:6e:06:d8:a7:2a:03:3d:83:80:9c:52:b0:77: d4:d6:b3:dc:99:62:6e:dc:88:12:54:a0:28:b7:6d:86:07:35: e6:c8:dd:5d:26:ae:67:e4:11:6c:6c:b5:b5:1b:0d:ac:07:b6: 95:6a:24:9a:2f:44:9f:5a:4a:e6:23:5d:80:82:bf:85:b1:92: d1:02:ff:0f:b7:ab:b7:a6:44:c0:78:6c:c0:66:5f:d7:21:c1: 07:48:ad:f8:a9:5c:6d:c5:e4:f1:f1:af:22:b8:65:49:be:e8: b0:77:22:0b:e3:b3:65:82:0f:1a:83:03:30:c7:ca:33:ff:d5: 0d:fa:27:71:b3:33:07:b4:bd:97:05:5a:c8:e6:95:7c:ce:37: 9d:63:ec:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XOka8LlLs8lATICJWB41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmJjYzEwZDE2YjBmZWQyODU1ZTkyOTVmYzQwOWQ2NTA3 YjQzZDYwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzE4YTM5N2I2NDczYWM1N2JkMzhhYmM3YWY4MjUxMWM2YzVjMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXXuqlXRBi/U5Tj/GPN80Q9mwRkI cPwPUrYTrHHqwq1rK6tKROG1ffBUmJSYop26xl3T7xaepr90kRXOKpLWcv9dfKmm oDWjs/tkKRzTYgIn21po4M+EKUqSQ1mm+gpJGfM/pzjSfvqoGuNPUEadw2oDhPMo 6AobQ9i+P+DAzbmiqay4q+mEiRF7W9uLrNIUCvE4Vxc7UZup1aTB1t02mFDvVjAW ROR8VlwcX7DLkiECN5kpYGTJaxFexEBWc6PokOsW2pVxhi3XYFAMZW0tfgOY0dzj EvVHtdQ18OafQ6qoFE6RnKrquHX6iuSI9T88svoUZ7XHHltxHDt9PNXXfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFcYo5e2RzrFe9OKvHr4JRHGxcAbMB8GA1UdIwQY MBaAFM4rzBDRaw/tKFXpKV/ECdZQe0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMt NjExNjFhNjVkM2Q2LzEvVnhpamw3WkhPc1Y3MDRxOGV2Z2xFY2JGd0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMtNjExNjFhNjVkM2Q2 LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS5ZAwQC wWo8MA0GCSqGSIb3DQEBCwUAA4IBAQAWcd7kPobz+lxciA4iFDr55/em7/t3zSq6 AriiQzyBvTcnISnEKGyq0c9F/VzfZBHDd2Yt5nscXXOxpC76fzsZpI1I1TQFNSr7 HH99GgIq/4048fxtVa+rZme1UmLH3B3cMCIB2x/2ykVDUT5P0y4iC24G2KcqAz2D gJxSsHfU1rPcmWJu3IgSVKAot22GBzXmyN1dJq5n5BFsbLW1Gw2sB7aVaiSaL0Sf WkrmI12Agr+FsZLRAv8Pt6u3pkTAeGzAZl/XIcEHSK34qVxtxeTx8a8iuGVJvuiw dyIL47Nlgg8agwMwx8oz/9UN+idxszMHtL2XBVrI5pV8zjedY+wm -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:21 2026 by rpki-client