This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa File: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (raw, json) Hash identifier: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE= Subject key identifier: 55:31:8D:7B:4C:0B:31:95:74:64:2B:CA:F1:69:70:B8:96:F7:A0:85 Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Certificate serial: 019B7F833F47189A996221FA736F4896F08B Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa Signing time: Fri 02 Jan 2026 16:21:06 +0000 ROA not before: Fri 02 Jan 2026 16:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59692 IP address blocks: 45.183.4.0/22 maxlen: 32 186.2.160.0/20 maxlen: 32 190.115.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3f:47:18:9a:99:62:21:fa:73:6f:48:96:f0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Validity Not Before: Jan 2 16:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55318d7b4c0b319574642bcaf16970b896f7a085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:11:25:75:f5:51:cd:c6:00:5c:f1:cd:87:f6: cc:b1:6c:88:86:8d:91:8d:c9:4e:87:e5:26:42:3e: a0:ed:c9:b2:3c:a7:75:68:17:b8:25:71:09:67:05: 77:54:51:ef:75:e2:df:12:94:c4:3d:32:ab:5e:0c: c7:14:79:4c:e7:73:54:29:f8:6a:3b:c8:6b:1f:45: 68:93:4d:e4:fe:31:e3:db:46:66:bd:13:c1:9a:b6: c0:4f:b0:53:2b:97:37:1f:32:59:8a:6d:d0:ca:40: 18:52:ec:c1:68:fe:bd:17:bb:6a:02:01:2c:36:68: e8:0a:42:dd:68:9e:2f:66:b4:b2:2f:29:5c:f8:c8: 96:a1:c0:ac:7d:e7:0a:fe:e9:8e:6a:60:cc:3d:da: 16:76:eb:b1:e5:dc:51:7d:54:24:66:a9:56:94:07: 6d:be:ca:7d:c1:f1:39:89:56:05:3e:ce:58:ee:5a: 41:84:e6:2e:d3:1c:c2:3f:75:a9:c8:9a:df:66:49: f8:74:5d:41:9c:3a:0f:1b:ca:ba:24:9f:db:1d:3f: 14:5d:2e:a1:ae:99:f8:bb:59:ca:c7:5f:7c:27:98: 80:a1:e0:15:f4:26:dc:ff:e2:6a:07:63:52:3a:c4: 6f:e0:d5:dc:68:c2:53:d5:6f:aa:d8:e1:02:54:1f: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:31:8D:7B:4C:0B:31:95:74:64:2B:CA:F1:69:70:B8:96:F7:A0:85 X509v3 Authority Key Identifier: keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.4.0/22 186.2.160.0/20 190.115.16.0/20 Signature Algorithm: sha256WithRSAEncryption be:02:f8:9c:f6:3a:13:42:b7:88:35:85:46:f1:8d:9e:7b:2c: 6d:09:7e:55:67:31:97:a7:b5:ba:97:25:f9:ff:94:11:ac:eb: b5:b7:5a:6d:63:b6:55:1e:c7:b2:0a:c1:5b:84:30:07:6e:cd: 1a:51:f2:60:b2:90:ae:a6:34:85:e0:fb:d6:f8:08:3a:10:85: ba:2e:9a:f0:a4:65:19:48:36:94:57:f1:ff:45:ad:ac:76:fa: e1:84:a3:8b:86:cf:a2:4c:ba:36:b1:9f:6d:75:2c:ec:6f:30: 7d:5c:84:40:d9:57:63:8d:53:d0:52:18:0d:fe:30:77:c2:47: 65:89:84:30:6c:04:11:bc:c3:d3:d7:ae:10:b7:49:ba:e6:12: f6:02:7d:12:b0:5b:f3:52:f4:e8:1e:fd:56:08:7b:dd:ed:9b: 25:82:c4:88:5e:35:2b:af:ee:70:59:b4:ca:61:af:4e:bf:60: 20:58:b8:f1:25:a4:1d:b1:fa:7a:16:aa:65:6b:2a:16:1e:ca: 9f:9c:2b:ed:3b:55:e5:4f:f4:23:5b:9f:94:88:b4:d7:9d:4d: 00:e4:ec:8b:3f:3f:a1:51:77:56:ef:e4:53:b9:da:a3:1c:9e: 53:02:35:8b:e2:5e:61:ef:96:37:d1:8f:93:4d:d5:9d:c3:79: 47:16:4f:0b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gz9HGJqZYiH6c29IlvCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl ZTMzMmUwHhcNMjYwMTAyMTYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTMxOGQ3YjRjMGIzMTk1NzQ2NDJiY2FmMTY5NzBiODk2ZjdhMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xEldfVRzcYAXPHNh/bMsWyIho2R jclOh+UmQj6g7cmyPKd1aBe4JXEJZwV3VFHvdeLfEpTEPTKrXgzHFHlM53NUKfhq O8hrH0Vok03k/jHj20ZmvRPBmrbAT7BTK5c3HzJZim3QykAYUuzBaP69F7tqAgEs NmjoCkLdaJ4vZrSyLylc+MiWocCsfecK/umOamDMPdoWduux5dxRfVQkZqlWlAdt vsp9wfE5iVYFPs5Y7lpBhOYu0xzCP3WpyJrfZkn4dF1BnDoPG8q6JJ/bHT8UXS6h rpn4u1nKx198J5iAoeAV9Cbc/+JqB2NSOsRv4NXcaMJT1W+q2OECVB83+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFUxjXtMCzGVdGQryvFpcLiW96CFMB8GA1UdIwQY MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt NGVkMWQwNzViNjM3LzEvVlRHTmUwd0xNWlYwWkN2SzhXbHd1SmIzb0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3 LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLbcEAwQE ugKgAwQEvnMQMA0GCSqGSIb3DQEBCwUAA4IBAQC+Avic9joTQreINYVG8Y2eeyxt CX5VZzGXp7W6lyX5/5QRrOu1t1ptY7ZVHseyCsFbhDAHbs0aUfJgspCupjSF4PvW +Ag6EIW6LprwpGUZSDaUV/H/Ra2sdvrhhKOLhs+iTLo2sZ9tdSzsbzB9XIRA2Vdj jVPQUhgN/jB3wkdliYQwbAQRvMPT164Qt0m65hL2An0SsFvzUvToHv1WCHvd7Zsl gsSIXjUrr+5wWbTKYa9Ov2AgWLjxJaQdsfp6FqplayoWHsqfnCvtO1XlT/QjW5+U iLTXnU0A5OyLPz+hUXdW7+RTudqjHJ5TAjWL4l5h75Y30Y+TTdWdw3lHFk8L -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:17 2026 by rpki-client