This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/VBelpQwcAQaQvThvEwysdwbgrak.roa File: VBelpQwcAQaQvThvEwysdwbgrak.roa (raw, json) Hash identifier: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM= Subject key identifier: 54:17:A5:A5:0C:1C:01:06:90:BD:38:6F:13:0C:AC:77:06:E0:AD:A9 Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Certificate serial: 019B7DC98F3D0040F15FC58FC4D96890AB69 Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/VBelpQwcAQaQvThvEwysdwbgrak.roa Signing time: Fri 02 Jan 2026 08:18:39 +0000 ROA not before: Fri 02 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209197 IP address blocks: 185.207.30.0/23 maxlen: 23 185.207.31.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:8f:3d:00:40:f1:5f:c5:8f:c4:d9:68:90:ab:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Validity Not Before: Jan 2 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5417a5a50c1c010690bd386f130cac7706e0ada9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:5c:59:ee:bc:83:c1:39:3e:cf:c2:7f:49: 83:d5:67:30:eb:ad:0e:f3:43:2a:5a:56:d2:6d:47: 55:ee:f8:72:4f:93:a8:93:bc:b3:73:6d:c4:f2:95: e5:66:47:ea:72:da:56:09:a3:2b:e6:e8:62:2a:81: fb:d9:67:d3:a9:55:17:e9:b5:c0:23:13:0a:0a:b7: d7:2b:af:8a:df:95:b3:85:f8:fb:ed:62:ea:29:97: c3:37:25:59:c3:88:b2:d2:86:e2:bd:19:c4:66:b4: ca:43:9c:8d:59:5d:c6:f9:b7:56:f9:11:15:b7:bf: 80:f3:cb:fc:8f:0f:d3:93:0b:95:6c:66:1e:9b:53: 84:be:6c:23:98:dd:b5:44:fc:3d:58:15:2f:df:a4: 2f:df:f6:12:ae:54:35:61:76:43:06:54:4e:d1:6e: 7f:f6:33:a7:11:c9:7e:4e:1f:52:53:5f:77:0f:33: 00:2e:b5:6a:11:28:f9:a6:3f:74:80:06:d7:85:19: d3:bd:0b:f8:27:e5:fe:64:1f:e1:5d:b1:76:dd:d8: ec:d0:07:15:82:69:34:b3:82:f2:b1:7e:b9:34:5b: a1:4b:63:9d:7b:f1:d1:bd:9f:85:c5:ef:97:80:8e: 24:28:d8:98:86:f9:bd:6e:10:49:dc:c1:70:e1:aa: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:A5:A5:0C:1C:01:06:90:BD:38:6F:13:0C:AC:77:06:E0:AD:A9 X509v3 Authority Key Identifier: keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/VBelpQwcAQaQvThvEwysdwbgrak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.30.0/23 Signature Algorithm: sha256WithRSAEncryption b6:fe:3f:df:c1:42:ca:14:5b:9c:e1:59:70:f9:da:af:6c:9a: 94:bf:e7:6c:e8:6a:7f:a1:41:a6:8f:6a:dc:10:09:1f:15:37: 27:4a:bf:a4:9f:d8:e4:b5:17:58:8e:88:48:59:9e:cf:a5:04: d9:b1:a7:5f:29:ba:23:2b:79:24:7f:16:8d:e1:1b:2a:d6:54: ec:ee:9e:94:ab:24:e9:a5:d7:fc:8a:52:ce:9b:6a:8c:3b:71: b3:1a:23:f7:06:c9:c2:b5:49:0c:06:4e:7e:e4:1b:a2:c2:4e: 6e:9b:be:42:fa:72:d0:89:7e:89:4b:e7:80:a3:7e:b4:06:c4: 2a:50:a3:fa:18:d9:d5:f2:b7:a9:34:23:be:66:26:32:15:38: a0:16:ab:c8:39:90:f4:79:18:dd:f0:78:80:33:eb:04:2b:f5: 57:d7:5a:b0:a2:4c:44:ea:a4:ac:f8:c2:36:f5:a8:2a:03:dc: 94:f3:93:66:3c:7b:d0:72:7c:db:ed:0f:27:fa:33:fb:fc:0e: 23:34:d0:7a:54:80:e4:a5:26:14:58:81:eb:b8:51:c9:e6:a8: 7f:3d:b8:d6:95:87:4d:b5:b5:2f:00:64:3b:6c:78:bb:8c:fb: a2:c4:fa:25:1c:6e:1b:97:6f:89:75:05:6c:19:10:12:6d:bd: 5e:67:c2:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yY89AEDxX8WPxNlokKtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTc1ZWY5MDM2ZjVjMTQzZTU3ZGZhZmJjOTJjMDI1NWMz MTU5YmEwHhcNMjYwMTAyMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDE3YTVhNTBjMWMwMTA2OTBiZDM4NmYxMzBjYWM3NzA2ZTBhZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV5cWe68g8E5Ps/Cf0mD1Wcw660O 80MqWlbSbUdV7vhyT5Ook7yzc23E8pXlZkfqctpWCaMr5uhiKoH72WfTqVUX6bXA IxMKCrfXK6+K35Wzhfj77WLqKZfDNyVZw4iy0obivRnEZrTKQ5yNWV3G+bdW+REV t7+A88v8jw/TkwuVbGYem1OEvmwjmN21RPw9WBUv36Qv3/YSrlQ1YXZDBlRO0W5/ 9jOnEcl+Th9SU193DzMALrVqESj5pj90gAbXhRnTvQv4J+X+ZB/hXbF23djs0AcV gmk0s4LysX65NFuhS2Ode/HRvZ+Fxe+XgI4kKNiYhvm9bhBJ3MFw4aqXnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQXpaUMHAEGkL04bxMMrHcG4K2pMB8GA1UdIwQY MBaAFOKnXvkDb1wUPlffr7ySwCVcMVm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTkt ZjkwODUwZTc0Mjk2LzEvVkJlbHBRd2NBUWFRdlRodkV3eXNkd2JncmFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTktZjkwODUwZTc0Mjk2 LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc8eMA0G CSqGSIb3DQEBCwUAA4IBAQC2/j/fwULKFFuc4Vlw+dqvbJqUv+ds6Gp/oUGmj2rc EAkfFTcnSr+kn9jktRdYjohIWZ7PpQTZsadfKbojK3kkfxaN4Rsq1lTs7p6UqyTp pdf8ilLOm2qMO3GzGiP3BsnCtUkMBk5+5Buiwk5um75C+nLQiX6JS+eAo360BsQq UKP6GNnV8repNCO+ZiYyFTigFqvIOZD0eRjd8HiAM+sEK/VX11qwokxE6qSs+MI2 9agqA9yU85NmPHvQcnzb7Q8n+jP7/A4jNNB6VIDkpSYUWIHruFHJ5qh/PbjWlYdN tbUvAGQ7bHi7jPuixPolHG4bl2+JdQVsGRASbb1eZ8Ke -----END CERTIFICATE-----Generated at Wed Jan 7 07:08:46 2026 by rpki-client