This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/vzX0LpiRwEQlpNTtMNXqGCdmemM.roa File: vzX0LpiRwEQlpNTtMNXqGCdmemM.roa (raw, json) Hash identifier: KNuGavq6SzPf6J1CyBPc8g7thzHVaBolgWDilffZwwY= Subject key identifier: BF:35:F4:2E:98:91:C0:44:25:A4:D4:ED:30:D5:EA:18:27:66:7A:63 Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33 Certificate serial: 019B7A5AE61029F8380E38719312D8CBC242 Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/vzX0LpiRwEQlpNTtMNXqGCdmemM.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48933 IP address blocks: 193.36.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e6:10:29:f8:38:0e:38:71:93:12:d8:cb:c2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf35f42e9891c04425a4d4ed30d5ea1827667a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:14:c2:b3:21:2e:0f:44:f4:d7:07:f8:32: 43:77:66:3b:94:27:f9:65:1f:89:b8:41:c6:74:1d: ee:b7:1b:f6:88:c4:12:96:e7:27:3a:a2:b5:b5:0f: 7b:67:8c:4b:30:89:ec:9b:57:61:8a:c3:5a:7e:21: 70:b0:71:ee:72:7e:44:61:31:85:7a:cc:4a:3f:df: aa:6a:29:c8:eb:cd:6c:94:57:fb:c5:de:4c:ff:c4: 57:0c:8e:80:26:28:42:1c:44:86:2b:13:c2:f5:18: 84:39:8f:7b:9a:28:9c:eb:a7:0e:57:9b:76:b3:35: ea:90:9a:83:c2:59:5e:80:35:22:dc:0f:72:64:f0: 1f:74:00:e9:c2:a4:a4:b8:4c:8e:eb:50:75:10:a7: 45:96:94:8a:43:ad:ef:12:ba:47:5e:71:ad:5a:ec: ab:c1:4c:4d:03:c1:bb:11:da:38:89:97:f5:45:20: 45:56:db:3d:61:03:38:19:d0:66:da:e1:36:50:46: c9:60:30:62:f3:fa:3a:66:6d:7a:21:4d:3c:5b:2f: 8c:73:bf:e9:5d:e8:23:ec:64:ee:87:42:31:15:64: bd:c1:3e:6a:41:ba:4d:1c:cf:a7:ea:20:9f:4f:ab: c1:88:2e:1c:d7:a4:b2:84:a4:44:25:e1:63:2f:f8: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:35:F4:2E:98:91:C0:44:25:A4:D4:ED:30:D5:EA:18:27:66:7A:63 X509v3 Authority Key Identifier: keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/vzX0LpiRwEQlpNTtMNXqGCdmemM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.35.0/24 Signature Algorithm: sha256WithRSAEncryption 41:50:11:9e:66:3c:4d:74:04:0f:16:d5:17:45:de:71:76:17: 95:d6:fd:07:ae:6f:19:2d:ef:c2:1c:35:cf:c1:75:35:31:29: c2:3e:63:ed:9b:14:81:73:d1:8b:86:07:da:5d:53:02:04:aa: b6:c0:f7:37:a5:3a:26:a7:20:fe:9b:84:38:31:5c:76:4c:94: d4:ff:56:1b:35:81:ea:46:f3:df:33:ea:aa:81:78:57:56:bf: ae:b0:ba:4f:39:cd:cf:d3:52:c1:0f:d7:66:c0:f2:6c:62:e8: 10:7d:ab:3b:37:b9:5f:23:df:86:6f:1b:ef:68:ca:5d:de:ef: e0:2f:b3:69:96:22:81:1a:89:ff:ef:a4:ce:86:ee:20:e7:f9: 38:3c:41:13:aa:78:09:e2:0e:ef:2a:a2:05:4b:59:9d:9b:11: e7:0a:9b:15:97:19:e9:de:b7:c2:0e:5d:62:ea:0b:e1:83:25: 51:13:31:c8:b4:60:17:cf:77:64:b8:eb:b0:ff:4d:e5:9d:7a: 1f:0a:6c:b5:a7:dd:da:45:b8:86:bb:af:35:bb:17:41:53:65: f9:ba:01:06:88:b5:29:16:de:91:c3:fe:e5:98:70:4c:75:5c: 3e:b8:b3:8a:dd:aa:be:5b:f0:b2:c9:14:ed:9e:2d:af:70:71: b1:c1:08:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuYQKfg4DjhxkxLYy8JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWRiYzQxYjExZTc3YmM0NGJkMmM3MzU1NTRiNWI0MjU4 ZDBjMzMwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjM1ZjQyZTk4OTFjMDQ0MjVhNGQ0ZWQzMGQ1ZWExODI3NjY3YTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvIUwrMhLg9E9NcH+DJDd2Y7lCf5 ZR+JuEHGdB3utxv2iMQSlucnOqK1tQ97Z4xLMInsm1dhisNafiFwsHHucn5EYTGF esxKP9+qainI681slFf7xd5M/8RXDI6AJihCHESGKxPC9RiEOY97miic66cOV5t2 szXqkJqDwllegDUi3A9yZPAfdADpwqSkuEyO61B1EKdFlpSKQ63vErpHXnGtWuyr wUxNA8G7Edo4iZf1RSBFVts9YQM4GdBm2uE2UEbJYDBi8/o6Zm16IU08Wy+Mc7/p Xegj7GTuh0IxFWS9wT5qQbpNHM+n6iCfT6vBiC4c16SyhKREJeFjL/gbEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL819C6YkcBEJaTU7TDV6hgnZnpjMB8GA1UdIwQY MBaAFP5dvEGxHne8RL0sc1VUtbQljQwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2wyOFFiRWVkN3hFdlN4elZWUzF0Q1dORERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wODRkMzMtOWZlZC00NjIwLWI0NmMt ODhhNjMxNDgwMjZmLzEvdnpYMExwaVJ3RVFscE5UdE1OWHFHQ2RtZW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8wODRkMzMtOWZlZC00NjIwLWI0NmMtODhhNjMxNDgwMjZm LzEvX2wyOFFiRWVkN3hFdlN4elZWUzF0Q1dORERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQjMA0G CSqGSIb3DQEBCwUAA4IBAQBBUBGeZjxNdAQPFtUXRd5xdheV1v0Hrm8ZLe/CHDXP wXU1MSnCPmPtmxSBc9GLhgfaXVMCBKq2wPc3pTompyD+m4Q4MVx2TJTU/1YbNYHq RvPfM+qqgXhXVr+usLpPOc3P01LBD9dmwPJsYugQfas7N7lfI9+GbxvvaMpd3u/g L7NpliKBGon/76TOhu4g5/k4PEETqngJ4g7vKqIFS1mdmxHnCpsVlxnp3rfCDl1i 6gvhgyVREzHItGAXz3dkuOuw/03lnXofCmy1p93aRbiGu681uxdBU2X5ugEGiLUp Ft6Rw/7lmHBMdVw+uLOK3aq+W/CyyRTtni2vcHGxwQge -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:25 2026 by rpki-client