This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa File: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (raw, json) Hash identifier: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4= Subject key identifier: BE:1D:83:41:0E:AE:78:9F:F8:1A:94:39:F2:06:E7:F4:6E:D2:C3:A2 Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019 Certificate serial: 019B7CEDFCE30C9E72F8668B4DB9942C9F9B Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 45.131.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fc:e3:0c:9e:72:f8:66:8b:4d:b9:94:2c:9f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be1d83410eae789ff81a9439f206e7f46ed2c3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:30:0f:4d:60:cf:3f:7e:2d:20:ca:97:4d: 1b:11:35:17:8c:6d:8c:62:90:e5:30:47:d5:99:1b: e6:b5:d0:78:77:57:c3:7e:bf:4d:be:54:85:f7:5d: f1:3b:d0:a7:e0:b0:a6:4a:02:0a:03:9f:ab:64:c0: 6c:0f:75:c9:19:1f:69:43:e9:af:ba:29:12:77:0e: a3:7c:a5:56:59:e7:a3:7d:66:a7:4c:1d:5f:e3:23: a7:87:ea:2e:30:d6:4f:2b:a9:ee:47:3e:cb:b1:8c: e4:62:41:85:de:0d:6f:ce:aa:23:8c:35:96:b2:dc: b4:b8:54:00:91:ac:c6:ae:a8:98:6e:a0:58:28:ad: af:c7:d9:64:2b:7a:4e:dd:0e:3e:43:8f:d9:e9:02: 2f:bb:fd:18:a1:04:f1:d9:31:ac:c8:bc:16:99:7d: d0:1f:8f:c9:b9:9d:09:4f:f7:c9:5c:9c:5c:b2:0b: 66:85:ed:7d:12:f0:e4:43:5d:a7:42:a3:3b:27:9d: d3:2e:8b:c7:ea:d5:4b:aa:c9:63:f6:39:9a:a4:4c: a8:39:00:bd:e9:9c:95:75:9e:47:1c:99:bd:1a:25: e8:bb:73:8e:c4:c8:52:5b:94:b6:fc:8c:40:f5:86: 9d:e3:19:d4:c4:10:2c:4e:32:ae:1d:1a:94:c5:40: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:83:41:0E:AE:78:9F:F8:1A:94:39:F2:06:E7:F4:6E:D2:C3:A2 X509v3 Authority Key Identifier: keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.252.0/24 Signature Algorithm: sha256WithRSAEncryption b6:95:91:53:bb:66:06:28:80:8e:ae:af:9c:2f:2d:93:ae:45: e7:07:49:35:eb:cb:b4:3b:a0:7a:ac:4f:77:1f:a1:f9:80:af: ca:fe:8f:f9:c0:16:95:8a:e4:fb:38:99:a7:a8:d8:6c:e6:d5: b9:0b:41:85:9e:77:36:44:b7:0f:4b:75:22:4d:0a:3a:7d:e8: b6:85:ff:c2:cb:63:16:0b:b1:3a:37:af:c5:c8:7c:3d:c5:93: a7:31:7f:8f:ef:92:0f:12:74:70:74:27:6d:56:d5:86:c3:b9: 58:88:c8:40:99:ec:ee:ec:7b:d6:2f:d3:27:13:1b:73:6c:ee: 58:7e:7c:66:0d:32:c0:34:e9:d4:14:1e:35:44:26:c4:b1:ae: 55:77:a2:a5:26:6b:00:b5:32:46:2d:d1:33:40:77:f3:48:f1: e6:0d:fb:23:01:a4:e2:25:75:24:cf:3b:e7:e6:1c:35:b3:36: ca:86:2d:74:4d:4f:8b:f4:5f:29:b3:d1:87:2c:17:c9:17:53: b1:e3:fe:53:72:c1:18:69:56:fc:42:c1:6f:47:40:a3:38:80: 4f:59:3a:f4:f6:4e:27:7f:11:1f:0d:af:b8:76:5e:7d:a8:ac: 5c:40:b1:5c:b1:b3:3a:92:1f:9d:cc:d7:5f:ce:f3:ac:8d:21: 4b:5e:f6:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fzjDJ5y+GaLTbmULJ+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0 NWQwMTkwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTFkODM0MTBlYWU3ODlmZjgxYTk0MzlmMjA2ZTdmNDZlZDJjM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu94wD01gzz9+LSDKl00bETUXjG2M YpDlMEfVmRvmtdB4d1fDfr9NvlSF913xO9Cn4LCmSgIKA5+rZMBsD3XJGR9pQ+mv uikSdw6jfKVWWeejfWanTB1f4yOnh+ouMNZPK6nuRz7LsYzkYkGF3g1vzqojjDWW sty0uFQAkazGrqiYbqBYKK2vx9lkK3pO3Q4+Q4/Z6QIvu/0YoQTx2TGsyLwWmX3Q H4/JuZ0JT/fJXJxcsgtmhe19EvDkQ12nQqM7J53TLovH6tVLqslj9jmapEyoOQC9 6ZyVdZ5HHJm9GiXou3OOxMhSW5S2/IxA9Yad4xnUxBAsTjKuHRqUxUAcdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL4dg0EOrnif+BqUOfIG5/Ru0sOiMB8GA1UdIwQY MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt ZTFjOGE0ZmViZGVlLzEvdmgyRFFRNnVlSl80R3BRNThnYm45RzdTdzZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYP8MA0G CSqGSIb3DQEBCwUAA4IBAQC2lZFTu2YGKICOrq+cLy2TrkXnB0k168u0O6B6rE93 H6H5gK/K/o/5wBaViuT7OJmnqNhs5tW5C0GFnnc2RLcPS3UiTQo6fei2hf/Cy2MW C7E6N6/FyHw9xZOnMX+P75IPEnRwdCdtVtWGw7lYiMhAmezu7HvWL9MnExtzbO5Y fnxmDTLANOnUFB41RCbEsa5Vd6KlJmsAtTJGLdEzQHfzSPHmDfsjAaTiJXUkzzvn 5hw1szbKhi10TU+L9F8ps9GHLBfJF1Ox4/5TcsEYaVb8QsFvR0CjOIBPWTr09k4n fxEfDa+4dl59qKxcQLFcsbM6kh+dzNdfzvOsjSFLXvZ3 -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:19 2026 by rpki-client