This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/VlW6EtyMaH795hvnaMozw2BfYQQ.roa File: VlW6EtyMaH795hvnaMozw2BfYQQ.roa (raw, json) Hash identifier: my2rC1+ycBVaR38Z3DLdakYhoWnomEP/kZgHcgk7zUE= Subject key identifier: 56:55:BA:12:DC:8C:68:7E:FD:E6:1B:E7:68:CA:33:C3:60:5F:61:04 Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Certificate serial: 019B7C10FCF207EB543C4FA12281CC2B8F42 Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/VlW6EtyMaH795hvnaMozw2BfYQQ.roa Signing time: Fri 02 Jan 2026 00:17:26 +0000 ROA not before: Fri 02 Jan 2026 00:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210790 IP address blocks: 193.3.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:10:fc:f2:07:eb:54:3c:4f:a1:22:81:cc:2b:8f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Validity Not Before: Jan 2 00:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5655ba12dc8c687efde61be768ca33c3605f6104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:5d:f1:78:32:28:2c:85:af:18:ac:15:17: b7:1c:af:fb:66:af:75:45:f2:57:ab:88:38:f2:3e: f5:55:57:4c:f1:a4:02:e9:74:a8:cd:e7:29:83:03: 06:d4:45:38:34:70:65:c7:87:3f:e0:cf:b4:b4:a5: 95:a1:33:4a:cf:60:3d:f5:79:67:e7:a1:61:18:41: 8b:33:6e:ec:35:98:18:5e:72:ba:a9:2c:0e:59:a1: 79:cd:f0:01:78:ad:f2:e9:af:ca:0e:4c:bc:02:2a: 3b:c0:3d:4f:a2:71:cb:6a:96:33:a9:e1:72:db:66: b4:61:81:b1:9c:1a:55:fe:22:96:a3:2d:4b:ad:16: 91:37:6f:3a:22:2e:1b:46:16:7c:8a:ef:62:3a:25: 17:46:c5:aa:61:28:ee:5d:8c:d5:fa:e9:77:3a:42: 04:b4:8b:ec:62:28:17:22:0d:79:b7:67:ca:08:f1: 12:88:5d:e8:73:55:02:4b:b3:d9:7b:57:c9:31:05: 8f:ee:57:52:69:0f:5c:f2:68:53:11:d4:2b:f3:19: 67:e4:71:90:07:ea:90:27:82:09:19:32:85:c3:ce: 4a:b7:ef:77:4a:0e:cf:ef:50:d6:08:a9:a0:21:28: 48:ff:2e:01:03:3c:14:b4:4b:ac:21:e4:44:6e:c3: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:55:BA:12:DC:8C:68:7E:FD:E6:1B:E7:68:CA:33:C3:60:5F:61:04 X509v3 Authority Key Identifier: keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/VlW6EtyMaH795hvnaMozw2BfYQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.0.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a6:2b:f2:1c:84:d3:ae:b5:c2:6e:91:ca:69:fc:91:36:29: f5:0f:aa:d3:b4:cf:fc:45:c0:31:e9:ef:23:9b:4f:7b:99:eb: 22:92:e3:05:83:9e:c3:6f:83:43:a6:4f:13:a5:77:85:72:d6: 24:65:61:99:20:c5:65:0f:54:d0:e5:0d:a6:d3:72:eb:55:16: 1b:ee:35:c0:ff:1a:8f:90:60:be:4b:65:8d:7b:9f:11:07:ea: f0:00:f7:d5:fb:99:05:27:6c:4b:59:c2:4f:b7:b3:93:ec:97: 71:a3:2a:47:5b:73:29:51:6b:4b:4c:61:9f:95:a9:d4:58:75: 61:2e:20:32:e0:18:20:04:8e:d3:cd:05:e9:9e:f2:15:a5:c1: a5:e2:63:6b:91:a9:1a:93:c4:36:49:1c:11:e8:37:85:f1:64: 04:24:80:56:fc:f0:7e:d2:ec:65:8f:c0:fc:70:ad:c5:8b:71: cc:18:69:e5:f9:9e:39:eb:82:32:0a:9d:70:99:d1:7e:31:4b: aa:17:7c:ff:1a:58:30:cc:ee:04:e7:4c:2a:9d:ae:9a:8e:08: e7:d6:23:9d:02:01:87:30:4e:a0:c4:9d:60:4c:4e:04:10:0f: a6:e4:f8:cc:b5:07:bc:e8:96:7e:5d:de:d8:dc:d7:97:1a:24: 3d:5e:70:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EPzyB+tUPE+hIoHMK49CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzZjYTE1MWVkNGMzMjNkNDk4ZjA2ZGQ3YzVhZTM5NGNl YWM1OWYwHhcNMjYwMTAyMDAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjU1YmExMmRjOGM2ODdlZmRlNjFiZTc2OGNhMzNjMzYwNWY2MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKJd8XgyKCyFrxisFRe3HK/7Zq91 RfJXq4g48j71VVdM8aQC6XSozecpgwMG1EU4NHBlx4c/4M+0tKWVoTNKz2A99Xln 56FhGEGLM27sNZgYXnK6qSwOWaF5zfABeK3y6a/KDky8Aio7wD1PonHLapYzqeFy 22a0YYGxnBpV/iKWoy1LrRaRN286Ii4bRhZ8iu9iOiUXRsWqYSjuXYzV+ul3OkIE tIvsYigXIg15t2fKCPESiF3oc1UCS7PZe1fJMQWP7ldSaQ9c8mhTEdQr8xln5HGQ B+qQJ4IJGTKFw85Kt+93Sg7P71DWCKmgIShI/y4BAzwUtEusIeREbsOuRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZVuhLcjGh+/eYb52jKM8NgX2EEMB8GA1UdIwQY MBaAFIM2yhUe1MMj1JjwbdfFrjlM6sWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTIt OTE3OTUzMTk4NDVjLzEvVmxXNkV0eU1hSDc5NWh2bmFNb3p3MkJmWVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTItOTE3OTUzMTk4NDVj LzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMAMA0G CSqGSIb3DQEBCwUAA4IBAQBQpivyHITTrrXCbpHKafyRNin1D6rTtM/8RcAx6e8j m097mesikuMFg57Db4NDpk8TpXeFctYkZWGZIMVlD1TQ5Q2m03LrVRYb7jXA/xqP kGC+S2WNe58RB+rwAPfV+5kFJ2xLWcJPt7OT7JdxoypHW3MpUWtLTGGflanUWHVh LiAy4BggBI7TzQXpnvIVpcGl4mNrkakak8Q2SRwR6DeF8WQEJIBW/PB+0uxlj8D8 cK3Fi3HMGGnl+Z4564IyCp1wmdF+MUuqF3z/GlgwzO4E50wqna6ajgjn1iOdAgGH ME6gxJ1gTE4EEA+m5PjMtQe86JZ+Xd7Y3NeXGiQ9XnCt -----END CERTIFICATE-----Generated at Fri Jan 9 23:46:36 2026 by rpki-client