This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/VM0pLapdGx8fvQVDV102YwMpG_8.roa File: VM0pLapdGx8fvQVDV102YwMpG_8.roa (raw, json) Hash identifier: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs= Subject key identifier: 54:CD:29:2D:AA:5D:1B:1F:1F:BD:05:43:57:5D:36:63:03:29:1B:FF Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Certificate serial: 019B7FF1AAD1732F91FBAA35E92625E6F408 Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/VM0pLapdGx8fvQVDV102YwMpG_8.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 212.15.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:aa:d1:73:2f:91:fb:aa:35:e9:26:25:e6:f4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54cd292daa5d1b1f1fbd0543575d366303291bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:75:32:d8:2f:cc:9f:e9:69:2b:6b:1e:1f: d2:63:bb:a0:02:4e:d0:c0:bd:22:dc:e3:08:e7:e6: 8b:8c:49:6e:5b:b5:51:95:ac:ca:ae:2f:0b:bd:2d: fa:4b:a3:29:b8:57:36:96:58:27:60:0e:52:a5:9b: 08:b4:61:df:db:ba:7e:dd:c2:e8:1d:c1:10:11:b6: 10:f9:e8:8f:99:01:e5:80:e9:9b:d0:09:86:c3:5e: d1:1a:5f:5b:da:c0:23:b4:4b:98:20:b9:ae:e0:52: e3:4f:63:31:e4:a2:1b:37:b3:a7:ff:10:af:eb:a2: 90:04:c5:0e:83:43:10:41:54:31:d8:7b:ad:fb:80: 6c:8f:1d:9e:c4:50:f6:46:36:a7:10:d1:92:48:de: d2:e8:6c:7f:9f:00:51:4a:3a:9b:a3:41:7a:1e:10: 9b:74:99:77:62:81:3f:1c:3f:8a:9a:04:3f:df:9c: 82:77:4a:a9:e6:03:d0:c1:1a:19:3a:09:20:18:a6: 06:cf:b8:57:20:ce:d0:bf:1b:12:1c:96:29:d9:2d: 5c:1a:19:c1:e4:c6:79:48:cc:63:ad:d4:fe:74:20: 93:8f:4f:ee:bd:c5:11:bb:47:f7:0c:f4:c7:cd:00: 58:8e:28:6e:2c:c3:b2:ee:5e:45:bf:86:84:0c:b2: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:29:2D:AA:5D:1B:1F:1F:BD:05:43:57:5D:36:63:03:29:1B:FF X509v3 Authority Key Identifier: keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/VM0pLapdGx8fvQVDV102YwMpG_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.49.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:f6:7b:27:5b:ed:db:d8:88:c1:3a:ff:f8:13:eb:3e:90:bb: 7b:cf:3b:b7:22:7f:63:b3:5f:0f:11:ca:c1:c7:a3:fe:87:e5: 54:33:4e:09:63:7a:bc:da:ba:39:0c:e8:68:34:c7:1a:6e:33: d3:5f:65:65:04:02:a8:15:90:66:af:d2:47:4c:e2:be:19:02: 2b:30:df:b6:8e:ca:fa:93:49:83:77:5e:36:a1:52:69:2d:eb: 9b:fa:ee:6a:78:c6:dd:f2:75:db:61:e2:6a:75:b8:23:a1:46: f9:48:cd:72:26:1e:8c:ac:37:36:b7:c8:f8:03:50:fc:9c:08: 5a:af:54:13:68:bc:bf:4c:54:69:64:06:f7:b5:88:04:eb:2c: e2:49:2e:01:73:2f:69:2e:d8:9a:cd:3b:ff:d5:19:39:33:ba: d7:e3:1b:1f:91:7c:55:25:b6:73:d5:01:13:ec:01:6d:0d:3b: 78:99:5d:87:b1:28:dc:2e:38:a2:47:da:d9:63:70:53:5f:ff: 7e:45:9d:c6:e8:e2:5b:50:d3:4b:d2:83:f9:e4:ff:7f:84:68: 19:17:40:7b:49:42:d4:3a:11:59:2b:fc:91:25:0b:96:35:fa: a0:92:a7:23:bc:fb:c1:b2:d1:97:fb:4b:b8:22:3d:00:eb:b0: df:78:6a:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8arRcy+R+6o16SYl5vQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1 NjY1OTgwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGNkMjkyZGFhNWQxYjFmMWZiZDA1NDM1NzVkMzY2MzAzMjkxYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RJ1MtgvzJ/paStrHh/SY7ugAk7Q wL0i3OMI5+aLjEluW7VRlazKri8LvS36S6MpuFc2llgnYA5SpZsItGHf27p+3cLo HcEQEbYQ+eiPmQHlgOmb0AmGw17RGl9b2sAjtEuYILmu4FLjT2Mx5KIbN7On/xCv 66KQBMUOg0MQQVQx2Hut+4Bsjx2exFD2RjanENGSSN7S6Gx/nwBRSjqbo0F6HhCb dJl3YoE/HD+KmgQ/35yCd0qp5gPQwRoZOgkgGKYGz7hXIM7QvxsSHJYp2S1cGhnB 5MZ5SMxjrdT+dCCTj0/uvcURu0f3DPTHzQBYjihuLMOy7l5Fv4aEDLKI9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTNKS2qXRsfH70FQ1ddNmMDKRv/MB8GA1UdIwQY MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt NWVjYWZkYTQ3MWY3LzEvVk0wcExhcGRHeDhmdlFWRFYxMDJZd01wR184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3 LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1A8xMA0G CSqGSIb3DQEBCwUAA4IBAQAt9nsnW+3b2IjBOv/4E+s+kLt7zzu3In9js18PEcrB x6P+h+VUM04JY3q82ro5DOhoNMcabjPTX2VlBAKoFZBmr9JHTOK+GQIrMN+2jsr6 k0mDd142oVJpLeub+u5qeMbd8nXbYeJqdbgjoUb5SM1yJh6MrDc2t8j4A1D8nAha r1QTaLy/TFRpZAb3tYgE6yziSS4Bcy9pLtiazTv/1Rk5M7rX4xsfkXxVJbZz1QET 7AFtDTt4mV2HsSjcLjiiR9rZY3BTX/9+RZ3G6OJbUNNL0oP55P9/hGgZF0B7SULU OhFZK/yRJQuWNfqgkqcjvPvBstGX+0u4Ij0A67DfeGrR -----END CERTIFICATE-----Generated at Sat Jan 3 00:54:56 2026 by rpki-client