This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGju1sUyiu3dQsRVtX2WwXzEsCY.roa File: VGju1sUyiu3dQsRVtX2WwXzEsCY.roa (raw, json) Hash identifier: NaLDiowoDxS6+WsKQqfecYMEDjy+g/vfYcaCfzBUaUM= Subject key identifier: 54:68:EE:D6:C5:32:8A:ED:DD:42:C4:55:B5:7D:96:C1:7C:C4:B0:26 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C77B4A57F08884E92FAF2663D0ED61 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGju1sUyiu3dQsRVtX2WwXzEsCY.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56449 IP address blocks: 81.15.138.0/23 maxlen: 23 81.15.138.0/24 maxlen: 24 81.15.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7b:4a:57:f0:88:84:e9:2f:af:26:63:d0:ed:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5468eed6c5328aeddd42c455b57d96c17cc4b026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:2f:a0:c6:ff:28:c9:8a:fe:90:04:2f:b9: 4f:47:5b:82:a6:22:ad:45:2b:64:86:76:51:5c:95: d5:b7:1b:ac:5f:8f:1b:be:26:8d:54:3b:80:32:fb: 0c:f1:4f:ea:a2:be:a6:62:b1:ca:7e:85:c4:e5:8a: d9:41:05:8b:1b:ca:81:bc:d3:71:48:84:66:a4:b1: d3:9a:31:59:f1:31:e8:62:ff:ff:21:e4:1f:41:c7: 19:f7:9a:ae:12:06:16:26:ca:f6:13:d9:40:ea:e4: 9b:71:bf:79:e6:0c:72:5c:04:2d:94:74:3e:4a:d6: a8:02:7c:79:ab:16:11:d0:38:66:0a:aa:52:c7:f2: 21:51:79:cb:3b:ad:0b:30:3e:07:0e:f7:eb:6f:af: ba:b7:b8:95:62:0c:d7:aa:17:21:8b:a9:c8:9d:2f: 3c:b7:7b:6d:ce:66:24:e2:46:ee:2c:d2:9c:f9:62: 5c:2f:65:95:a9:a8:98:42:6c:e4:d0:df:0b:a2:9b: d6:f2:9d:37:77:11:51:e7:cb:c3:e3:73:69:ff:ca: dc:36:56:1a:8c:5c:8d:45:cc:37:8f:5b:09:85:ac: 23:e9:11:66:51:68:97:96:d3:24:b7:5a:69:5f:ba: 8b:c7:8f:91:05:39:46:ab:04:f7:c1:76:c1:cd:c0: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:EE:D6:C5:32:8A:ED:DD:42:C4:55:B5:7D:96:C1:7C:C4:B0:26 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGju1sUyiu3dQsRVtX2WwXzEsCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.138.0/23 Signature Algorithm: sha256WithRSAEncryption ba:ec:e3:bd:0b:a9:84:c2:90:b3:02:b2:a1:22:92:17:a6:52: d8:37:b8:41:89:57:0d:c8:6c:8e:01:02:98:49:01:86:9b:07: 5a:5a:7f:75:1c:26:41:ea:5e:f5:cb:51:c1:76:7f:7c:db:8b: 2b:81:f0:15:92:d2:35:da:ed:52:9a:55:b2:91:c3:6b:43:d3: 8d:58:55:26:9d:46:e8:01:4b:65:56:a6:37:d0:f1:68:8d:bd: 83:fe:0b:d5:0b:45:fd:69:b6:16:45:f8:f7:d2:c5:98:9d:69: 23:41:b5:02:96:64:db:de:ff:0b:f8:9d:ae:ab:cc:71:85:7f: 72:12:4f:fa:f3:1b:1e:fb:38:d3:24:25:3f:38:79:c3:e2:de: e5:85:24:48:c6:4a:1d:1b:f4:60:e9:4e:74:79:e1:90:e1:11: d0:9c:cc:49:83:38:3c:be:94:55:d0:13:13:14:a1:84:97:a2: af:64:24:73:bc:21:0a:83:da:6d:61:1b:5a:d2:cd:b2:be:52: b7:70:4f:ca:20:de:e4:ab:f6:48:2f:b5:59:bd:5b:eb:71:ca: 71:a0:5f:a9:8f:53:11:33:a0:41:92:7d:03:82:d6:3c:fa:25: be:f8:ec:e5:13:4f:36:0f:72:18:f3:08:06:a6:b1:02:2b:e3: 61:c7:34:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3tKV/CIhOkvryZj0O1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDY4ZWVkNmM1MzI4YWVkZGQ0MmM0NTViNTdkOTZjMTdjYzRiMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PcvoMb/KMmK/pAEL7lPR1uCpiKt RStkhnZRXJXVtxusX48bviaNVDuAMvsM8U/qor6mYrHKfoXE5YrZQQWLG8qBvNNx SIRmpLHTmjFZ8THoYv//IeQfQccZ95quEgYWJsr2E9lA6uSbcb955gxyXAQtlHQ+ StaoAnx5qxYR0DhmCqpSx/IhUXnLO60LMD4HDvfrb6+6t7iVYgzXqhchi6nInS88 t3ttzmYk4kbuLNKc+WJcL2WVqaiYQmzk0N8LopvW8p03dxFR58vD43Np/8rcNlYa jFyNRcw3j1sJhawj6RFmUWiXltMkt1ppX7qLx4+RBTlGqwT3wXbBzcCRtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFRo7tbFMort3ULEVbV9lsF8xLAmMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvVkdqdTFzVXlpdTNkUXNSVnRYMld3WHpFc0NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQ+KMA0G CSqGSIb3DQEBCwUAA4IBAQC67OO9C6mEwpCzArKhIpIXplLYN7hBiVcNyGyOAQKY SQGGmwdaWn91HCZB6l71y1HBdn9824srgfAVktI12u1SmlWykcNrQ9ONWFUmnUbo AUtlVqY30PFojb2D/gvVC0X9abYWRfj30sWYnWkjQbUClmTb3v8L+J2uq8xxhX9y Ek/68xse+zjTJCU/OHnD4t7lhSRIxkodG/Rg6U50eeGQ4RHQnMxJgzg8vpRV0BMT FKGEl6KvZCRzvCEKg9ptYRta0s2yvlK3cE/KIN7kq/ZIL7VZvVvrccpxoF+pj1MR M6BBkn0DgtY8+iW++OzlE082D3IY8wgGprECK+NhxzRB -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:27 2026 by rpki-client