This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VmEyP2L6PCeASlSrYVGx0z1YYQI.roa File: VmEyP2L6PCeASlSrYVGx0z1YYQI.roa (raw, json) Hash identifier: nNrkIvvpWKcWk0oyyt7wcluFka9+7xNNX1v+5Ohsn+k= Subject key identifier: 56:61:32:3F:62:FA:3C:27:80:4A:54:AB:61:51:B1:D3:3D:58:61:02 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBB697F150F431F881B775F2C6FEA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VmEyP2L6PCeASlSrYVGx0z1YYQI.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 85.202.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bb:69:7f:15:0f:43:1f:88:1b:77:5f:2c:6f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5661323f62fa3c27804a54ab6151b1d33d586102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:73:26:3d:13:b1:2b:9c:7a:5d:b4:bd:ff: c0:a2:70:71:a1:c4:78:d0:bf:3c:84:a3:ce:d3:7d: 01:71:72:24:ab:f1:64:2f:24:92:06:69:e3:de:f6: a0:f1:7e:cf:e1:49:2d:34:6b:3e:d4:45:f7:66:6d: dd:da:87:e9:00:dc:4a:94:65:da:1b:d9:d5:de:fb: 11:6e:c2:a0:f8:08:2f:3e:6c:64:b7:8b:66:08:cb: d4:d2:be:46:02:dc:a7:c4:d6:bb:6c:87:5d:6e:b6: 43:21:fd:bc:34:b0:d4:1f:93:86:0c:c6:f6:3c:80: 2d:f8:92:d3:39:d3:d2:75:58:38:ae:40:57:a0:bf: 6f:ef:ce:e1:30:28:f7:a9:ac:2b:21:1d:ae:c2:4c: cf:25:e6:cd:0b:0b:63:f0:6a:9c:d0:cc:72:ec:3d: 73:4e:e6:f3:fa:c4:17:ef:ab:5e:48:6c:77:c9:5a: 3d:75:7a:ce:f3:11:97:12:d1:43:01:a2:57:51:05: 0a:1e:af:19:3c:d1:15:77:cc:af:dc:6f:77:b1:c4: d6:71:2c:13:37:7d:28:e1:3a:d7:ca:5a:39:58:37: 4d:07:01:9c:49:b4:54:86:25:37:25:1d:2f:87:f5: 65:4b:6d:92:8b:b2:63:83:22:35:e6:a5:a6:ef:a6: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:32:3F:62:FA:3C:27:80:4A:54:AB:61:51:B1:D3:3D:58:61:02 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VmEyP2L6PCeASlSrYVGx0z1YYQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.203.0/24 Signature Algorithm: sha256WithRSAEncryption a2:48:7f:79:79:b1:80:ae:ce:78:cf:b8:16:41:b1:96:ff:48: 37:d6:dd:c0:ab:e0:e3:c6:ad:de:d0:b1:c2:db:5a:be:6a:73: fc:01:6d:1d:a2:48:90:ee:29:9a:10:6b:00:7a:5f:88:b4:ae: fe:6c:96:d6:3b:e3:a6:d0:75:c6:03:8e:7e:c7:b2:30:ab:8c: 46:64:98:44:c9:9e:37:40:19:c8:41:73:db:d6:17:dd:30:83: 04:a7:ff:2e:92:14:9d:c1:ad:d5:ce:f7:db:d0:70:95:c4:a7: 00:e3:05:40:7b:94:42:c2:f6:0d:d0:6a:f3:d4:2b:88:3d:c9: ce:de:76:af:1a:bb:5c:a2:a6:ef:b5:af:2e:65:57:59:a1:5b: e7:52:bc:f0:7d:28:7d:41:2a:aa:a2:ae:3c:c8:30:56:5d:f6: d4:f7:6d:59:d4:4f:4c:9e:52:26:fe:32:ca:89:03:99:20:0c: 94:0f:0f:c6:6a:9d:31:ef:03:6d:f9:02:48:a8:b3:25:1e:59: 9b:0d:73:9d:64:9a:41:36:86:18:1a:e0:47:e0:ea:c4:7a:85: 3a:81:95:4c:67:39:23:8c:72:68:ce:a9:c6:91:96:f8:1d:0c: 31:1f:d7:4d:08:20:05:03:f7:3c:08:28:26:c1:cf:30:31:1f: 1b:11:a2:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLtpfxUPQx+IG3dfLG/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjYxMzIzZjYyZmEzYzI3ODA0YTU0YWI2MTUxYjFkMzNkNTg2MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt1zJj0TsSucel20vf/AonBxocR4 0L88hKPO030BcXIkq/FkLySSBmnj3vag8X7P4UktNGs+1EX3Zm3d2ofpANxKlGXa G9nV3vsRbsKg+AgvPmxkt4tmCMvU0r5GAtynxNa7bIddbrZDIf28NLDUH5OGDMb2 PIAt+JLTOdPSdVg4rkBXoL9v787hMCj3qawrIR2uwkzPJebNCwtj8Gqc0Mxy7D1z Tubz+sQX76teSGx3yVo9dXrO8xGXEtFDAaJXUQUKHq8ZPNEVd8yv3G93scTWcSwT N30o4TrXylo5WDdNBwGcSbRUhiU3JR0vh/VlS22Si7JjgyI15qWm76bF8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZhMj9i+jwngEpUq2FRsdM9WGECMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVm1FeVAyTDZQQ2VBU2xTcllWR3gwejFZWVFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcrLMA0G CSqGSIb3DQEBCwUAA4IBAQCiSH95ebGArs54z7gWQbGW/0g31t3Aq+Djxq3e0LHC 21q+anP8AW0dokiQ7imaEGsAel+ItK7+bJbWO+Om0HXGA45+x7Iwq4xGZJhEyZ43 QBnIQXPb1hfdMIMEp/8ukhSdwa3Vzvfb0HCVxKcA4wVAe5RCwvYN0Grz1CuIPcnO 3navGrtcoqbvta8uZVdZoVvnUrzwfSh9QSqqoq48yDBWXfbU921Z1E9MnlIm/jLK iQOZIAyUDw/Gap0x7wNt+QJIqLMlHlmbDXOdZJpBNoYYGuBH4OrEeoU6gZVMZzkj jHJozqnGkZb4HQwxH9dNCCAFA/c8CCgmwc8wMR8bEaJT -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:52 2026 by rpki-client