This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/VwzSagLMRrSaFchjxg93CUcui_Q.roa File: VwzSagLMRrSaFchjxg93CUcui_Q.roa (raw, json) Hash identifier: MqEAW7c1jYEir/Z5MPRgPBizS4wC0n5TOsrHPegsEX0= Subject key identifier: 57:0C:D2:6A:02:CC:46:B4:9A:15:C8:63:C6:0F:77:09:47:2E:8B:F4 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019B7B35ECF8263401C92A9EA9359B1A1B67 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/VwzSagLMRrSaFchjxg93CUcui_Q.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208185 IP address blocks: 45.143.96.0/24 maxlen: 24 185.148.241.0/24 maxlen: 24 185.148.242.0/24 maxlen: 24 185.148.243.0/24 maxlen: 24 185.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ec:f8:26:34:01:c9:2a:9e:a9:35:9b:1a:1b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=570cd26a02cc46b49a15c863c60f7709472e8bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:9c:e1:2e:b9:bd:de:95:01:bd:32:51:32: cf:12:0c:f3:80:75:1d:95:ad:e0:40:fc:0b:44:8f: f1:a4:91:fe:87:1d:f0:05:1b:be:71:6e:b8:c7:98: 41:ac:f2:a0:35:99:1b:d1:a9:bb:e2:71:cd:7c:fe: 1c:dc:26:bc:d4:ca:e1:76:da:45:01:f4:54:bd:6e: 34:b4:64:36:b8:7b:6d:a2:c2:58:b0:ac:75:7b:dd: c0:6b:db:a2:78:d9:9e:a9:39:a7:39:45:d5:3d:2b: f7:52:7d:9d:51:a9:a7:52:87:d6:92:c1:82:b4:a3: 50:64:cf:0b:6d:a3:52:5f:ce:f9:54:15:01:e2:70: 02:7a:1a:da:f9:68:72:d3:80:07:08:2e:02:89:e2: 0e:5c:7e:86:4c:f2:dc:1a:c6:02:7d:5b:80:e5:3a: 17:2f:50:06:51:2f:b0:0b:1f:3a:01:22:fb:07:69: 04:7d:12:11:c0:c5:69:e0:66:77:e4:ea:29:b1:d1: 4c:ea:2a:4f:f4:6a:5f:87:41:35:3c:15:29:28:a1: 33:af:37:f4:ed:dd:40:93:97:cb:ac:b8:4f:2e:8d: 47:f9:f2:a7:22:0f:75:32:7c:33:b4:18:89:78:2c: 07:66:ba:9f:dc:73:b8:56:2a:bf:1d:bd:e4:de:44: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:D2:6A:02:CC:46:B4:9A:15:C8:63:C6:0F:77:09:47:2E:8B:F4 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/VwzSagLMRrSaFchjxg93CUcui_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.96.0/24 185.148.241.0-185.148.243.255 185.174.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:b8:a9:54:96:fa:9a:e3:d5:e0:5b:6f:d9:11:79:4e:26:0d: 40:6f:d0:29:4e:70:9d:88:ed:22:8f:9f:ee:a3:2e:5e:b6:b3: 60:28:f5:26:53:67:bb:ca:b7:10:80:c3:9c:15:67:f8:db:2c: 22:1a:4c:9a:a4:83:3b:aa:89:b7:3a:dc:eb:c0:5d:41:27:dc: 84:53:c9:ec:ec:10:67:d0:7d:48:df:bc:57:1e:32:ef:e0:d0: b0:c3:4f:07:a2:ad:5e:c2:d6:bb:50:ce:d2:ee:0b:35:ae:05: c4:12:5b:96:89:c8:30:cc:49:22:b7:92:1f:ec:fe:90:7a:41: 94:90:1b:69:f9:81:44:c0:81:fe:13:a6:5d:28:0d:ec:88:3a: 52:9d:cd:a0:ef:9e:39:7c:d1:24:55:f2:3a:6b:d3:c5:db:52: 08:24:18:61:db:aa:c5:5e:e3:4f:ff:9c:03:d2:db:f2:20:4e: b3:2b:b1:3b:af:41:8d:95:d5:63:ee:1e:d2:fd:9b:6b:d3:dd: fa:1e:ee:9e:44:b4:2c:41:21:bf:48:f3:5f:fe:06:86:cb:f5: ee:5b:bb:0c:56:df:7f:1f:13:f2:38:af:e3:b3:bd:a4:a5:06: 95:81:f5:ba:62:b0:ab:45:31:9d:9c:79:05:ec:e8:cf:4f:c0: 85:04:f4:99 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7Nez4JjQBySqeqTWbGhtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzBjZDI2YTAyY2M0NmI0OWExNWM4NjNjNjBmNzcwOTQ3MmU4YmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZWc4S65vd6VAb0yUTLPEgzzgHUd la3gQPwLRI/xpJH+hx3wBRu+cW64x5hBrPKgNZkb0am74nHNfP4c3Ca81MrhdtpF AfRUvW40tGQ2uHttosJYsKx1e93Aa9uieNmeqTmnOUXVPSv3Un2dUamnUofWksGC tKNQZM8LbaNSX875VBUB4nACehra+Why04AHCC4CieIOXH6GTPLcGsYCfVuA5ToX L1AGUS+wCx86ASL7B2kEfRIRwMVp4GZ35OopsdFM6ipP9Gpfh0E1PBUpKKEzrzf0 7d1Ak5fLrLhPLo1H+fKnIg91MnwztBiJeCwHZrqf3HO4Viq/Hb3k3kSn7QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFcM0moCzEa0mhXIY8YPdwlHLov0MB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvVnd6U2FnTE1SclNhRmNoanhnOTNDVWN1aV9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALY9gMAwD BAC5lPEDBAK5lPADBAC5rhcwDQYJKoZIhvcNAQELBQADggEBAD64qVSW+prj1eBb b9kReU4mDUBv0ClOcJ2I7SKPn+6jLl62s2Ao9SZTZ7vKtxCAw5wVZ/jbLCIaTJqk gzuqibc63OvAXUEn3IRTyezsEGfQfUjfvFceMu/g0LDDTweirV7C1rtQztLuCzWu BcQSW5aJyDDMSSK3kh/s/pB6QZSQG2n5gUTAgf4Tpl0oDeyIOlKdzaDvnjl80SRV 8jpr08XbUggkGGHbqsVe40//nAPS2/IgTrMrsTuvQY2V1WPuHtL9m2vT3foe7p5E tCxBIb9I81/+BobL9e5buwxW338fE/I4r+OzvaSlBpWB9bpisKtFMZ2ceQXs6M9P wIUE9Jk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:44 2026 by rpki-client