This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa File: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (raw, json) Hash identifier: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc= Subject key identifier: 54:46:19:DB:F7:3B:1C:86:90:3A:83:D1:5D:D1:23:BA:85:CD:AB:83 Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Certificate serial: 019B7D5C08166E73D9CDBE237813E124E7AF Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35197 IP address blocks: 45.142.137.0/24 maxlen: 24 185.128.125.0/24 maxlen: 24 185.187.129.0/24 maxlen: 24 185.187.130.0/24 maxlen: 24 185.187.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:08:16:6e:73:d9:cd:be:23:78:13:e1:24:e7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=544619dbf73b1c86903a83d15dd123ba85cdab83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:cf:6e:cb:4f:9f:56:28:7f:8b:f6:f8:72: 72:1f:f3:b6:c6:ab:7a:70:8d:3d:0e:0f:5b:4e:72: 8c:9f:51:4b:a4:45:c4:9c:54:01:54:26:15:cd:b9: 3d:b5:10:7a:48:d4:4b:83:b7:fd:f3:a9:49:32:e1: e0:08:68:6f:09:2f:12:0b:29:65:2a:76:6d:b8:5e: 3c:eb:32:31:ac:ff:3c:bb:e0:c2:f7:ac:de:69:0f: f3:91:f2:a3:9e:2d:2b:3d:f9:f8:2d:75:cd:fe:3e: 97:74:98:cc:63:66:6d:88:33:ff:25:fa:27:f5:3d: 80:d3:aa:1b:01:54:08:d3:6b:5c:19:f8:dc:b7:73: d3:f9:73:11:aa:0f:ca:b8:2e:53:63:bf:d7:9f:4c: 98:ec:38:25:ca:2c:a2:d0:27:1e:0f:10:71:4f:7c: d2:ee:54:c2:31:43:1b:e0:f1:57:f8:15:ad:83:98: b6:ba:df:78:36:f5:54:94:a6:35:b8:05:90:d3:db: e7:a7:76:29:08:55:39:7c:ac:01:97:26:55:6b:1c: 19:a8:21:c9:60:73:c3:1b:ce:70:02:d1:21:c0:ac: ba:80:4e:65:26:e9:0a:07:e4:97:ff:51:43:b1:7b: 94:15:52:ed:af:d2:62:5e:50:da:f9:7b:a0:df:5f: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:46:19:DB:F7:3B:1C:86:90:3A:83:D1:5D:D1:23:BA:85:CD:AB:83 X509v3 Authority Key Identifier: keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.137.0/24 185.128.125.0/24 185.187.129.0-185.187.131.255 Signature Algorithm: sha256WithRSAEncryption 74:78:e6:7a:92:e2:a9:6c:a9:d1:92:70:0f:27:45:c0:8d:e2: 38:0c:cd:4d:fd:d8:71:5a:97:0b:2e:58:54:06:4f:f5:a1:1e: 80:9e:a6:86:1a:fd:9f:24:7b:a7:ee:26:42:3a:1d:a2:26:be: 9b:e7:2b:66:9f:d1:b3:b6:2f:c2:b8:ab:db:88:dc:e6:50:29: 71:cd:99:86:f7:b0:55:aa:f6:0d:c9:ce:a2:99:69:7f:9c:8d: 8b:53:51:89:c7:4b:d3:7f:42:16:27:3f:c9:39:2a:31:16:91: a7:ba:de:9d:f2:51:19:00:7d:a4:a4:67:47:1e:7d:22:1f:c5: 31:2e:9d:3e:a1:bd:ed:03:da:fb:6a:2f:98:81:e7:c4:8b:6f: 4a:08:a2:28:93:54:cd:45:b4:c9:69:52:56:b8:3f:e5:9d:0d: cd:4c:be:12:bb:b1:b7:04:fd:92:7f:9d:e9:8c:40:e9:2e:7a: dd:a3:39:60:ef:dc:5d:b7:66:8c:f3:d3:c9:bd:e2:b8:ec:51: 0c:47:f4:a6:03:0d:c2:6e:6e:ee:d8:2b:bb:b9:7b:ea:93:b5: b1:5b:52:ba:9b:a5:f1:17:f7:c2:2d:72:33:74:8b:c6:3f:03: d0:4a:dd:45:8d:89:60:15:4f:0b:c3:9a:c2:6d:f2:3a:7c:df: b8:51:0c:65 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XAgWbnPZzb4jeBPhJOevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3 NWVjOGEwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQ2MTlkYmY3M2IxYzg2OTAzYTgzZDE1ZGQxMjNiYTg1Y2RhYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67PbstPn1Yof4v2+HJyH/O2xqt6 cI09Dg9bTnKMn1FLpEXEnFQBVCYVzbk9tRB6SNRLg7f986lJMuHgCGhvCS8SCyll KnZtuF486zIxrP88u+DC96zeaQ/zkfKjni0rPfn4LXXN/j6XdJjMY2ZtiDP/Jfon 9T2A06obAVQI02tcGfjct3PT+XMRqg/KuC5TY7/Xn0yY7Dglyiyi0CceDxBxT3zS 7lTCMUMb4PFX+BWtg5i2ut94NvVUlKY1uAWQ09vnp3YpCFU5fKwBlyZVaxwZqCHJ YHPDG85wAtEhwKy6gE5lJukKB+SX/1FDsXuUFVLtr9JiXlDa+Xug31/XNwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFRGGdv3OxyGkDqD0V3RI7qFzauDMB8GA1UdIwQY MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt ZTgxMWUyM2MxODA0LzEvVkVZWjJfYzdISWFRT29QUlhkRWp1b1hOcTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0 LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALY6JAwQA uYB9MAwDBAC5u4EDBAK5u4AwDQYJKoZIhvcNAQELBQADggEBAHR45nqS4qlsqdGS cA8nRcCN4jgMzU392HFalwsuWFQGT/WhHoCepoYa/Z8ke6fuJkI6HaImvpvnK2af 0bO2L8K4q9uI3OZQKXHNmYb3sFWq9g3JzqKZaX+cjYtTUYnHS9N/QhYnP8k5KjEW kae63p3yURkAfaSkZ0cefSIfxTEunT6hve0D2vtqL5iB58SLb0oIoiiTVM1FtMlp Ula4P+WdDc1MvhK7sbcE/ZJ/nemMQOkuet2jOWDv3F23Zozz08m94rjsUQxH9KYD DcJubu7YK7u5e+qTtbFbUrqbpfEX98ItcjN0i8Y/A9BK3UWNiWAVTwvDmsJt8jp8 37hRDGU= -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:25 2026 by rpki-client