This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/VtiYaN97FHtpr9nyOV9FFG85g5o.roa File: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (raw, json) Hash identifier: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk= Subject key identifier: 56:D8:98:68:DF:7B:14:7B:69:AF:D9:F2:39:5F:45:14:6F:39:83:9A Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc Certificate serial: 019B7EA4D447787716DBECF48865C4161320 Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/VtiYaN97FHtpr9nyOV9FFG85g5o.roa Signing time: Fri 02 Jan 2026 12:18:10 +0000 ROA not before: Fri 02 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42151 IP address blocks: 45.147.148.0/24 maxlen: 24 45.147.149.0/24 maxlen: 24 45.147.150.0/24 maxlen: 24 45.147.151.0/24 maxlen: 24 195.242.142.0/24 maxlen: 24 195.242.143.0/24 maxlen: 24 2a11:1680:1::/48 maxlen: 48 2a11:1680:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d4:47:78:77:16:db:ec:f4:88:65:c4:16:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc Validity Not Before: Jan 2 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56d89868df7b147b69afd9f2395f45146f39839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:d0:82:41:15:27:14:14:ed:29:3a:a1:9e: c3:ae:37:a6:56:41:4a:1c:fa:1b:37:c6:36:62:3e: a2:fe:ce:84:28:b1:9f:69:31:5d:70:03:95:3b:91: af:80:e4:84:57:07:71:30:12:ae:df:18:87:b1:9e: 34:fc:e5:70:a3:e3:43:8d:9e:92:d8:bc:8b:4d:2b: 59:53:2c:63:ee:4e:ee:f0:3c:8b:c1:8d:5f:7a:ed: 92:f2:90:3d:00:d0:05:0a:f2:ef:30:0c:7d:83:ed: 0e:f3:d3:e6:f2:0a:19:e8:91:c8:24:69:7d:81:0d: 5d:1c:9b:95:46:8e:d6:05:f6:10:ca:68:65:a6:8d: 8e:e0:a9:b1:cf:ff:d1:f4:cb:1a:39:97:c2:a6:d7: be:9e:06:47:15:11:f5:0b:f8:e6:17:2e:c7:75:a6: fd:01:ec:04:dd:e1:22:c5:27:0f:d6:0f:9f:b4:e3: 15:f4:a7:f9:08:e4:66:4b:6d:c1:c0:bc:21:c6:be: 6a:02:d1:e3:42:32:8c:24:d8:8c:58:20:64:d4:91: 16:4a:85:34:2c:36:b3:d1:95:59:33:88:21:d3:4b: b8:92:36:96:e1:95:36:fe:be:a6:87:72:8c:18:88: 7f:4b:22:68:ce:a4:67:d3:a3:d4:33:fe:e9:61:d5: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:98:68:DF:7B:14:7B:69:AF:D9:F2:39:5F:45:14:6F:39:83:9A X509v3 Authority Key Identifier: keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/VtiYaN97FHtpr9nyOV9FFG85g5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.148.0/22 195.242.142.0/23 IPv6: 2a11:1680:1::-2a11:1680:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:f7:9c:ea:e4:b8:4b:6f:81:0d:f4:50:f6:c2:b6:6c:ff:fc: a1:00:8e:cb:e2:a7:e1:21:9a:3a:66:1f:6a:ed:b5:4d:31:1f: 51:12:37:52:84:8f:9e:9c:a7:99:d6:2f:33:dc:60:74:69:1a: 6a:d0:2b:1d:17:88:11:ae:d0:e5:64:f5:f3:3d:24:3e:4d:ed: ad:6e:e4:9d:43:29:8c:f9:53:17:29:b4:c3:6c:17:91:af:30: 65:52:bc:8f:2c:c5:1e:82:ad:ff:7c:34:61:22:72:8a:91:f4: 0f:29:37:1d:c8:f4:4c:38:39:2e:db:ae:61:f4:3e:bc:50:a4: 07:3a:36:d0:d9:16:17:f7:43:fe:44:e2:9f:04:b5:b8:0a:71: 16:02:45:58:af:21:9a:df:2e:ee:25:07:73:fd:7d:af:3a:c7: 0a:2d:81:55:bc:0b:76:0a:1a:7f:dc:ca:17:ff:8a:eb:2f:19: 79:95:e2:9e:53:de:e9:73:6a:cf:fd:27:25:17:4f:fc:8d:ac: 4c:69:24:92:8f:ad:ae:68:58:37:0f:93:c8:72:98:72:e4:5c: 4d:d9:4c:a1:42:9c:b6:a9:89:f4:cf:ba:c0:d9:2d:31:1c:15: e0:50:48:f7:45:75:5b:5c:c3:f1:6c:c1:23:85:ba:41:c6:3c: e2:ae:64:88 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+pNRHeHcW2+z0iGXEFhMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjUwMWQyZDA1MjE4NWQ0ZjY1NjkyMThjMjhiZjM1ODU5 MDAwZmMwHhcNMjYwMTAyMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ4OTg2OGRmN2IxNDdiNjlhZmQ5ZjIzOTVmNDUxNDZmMzk4MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KzQgkEVJxQU7Sk6oZ7DrjemVkFK HPobN8Y2Yj6i/s6EKLGfaTFdcAOVO5GvgOSEVwdxMBKu3xiHsZ40/OVwo+NDjZ6S 2LyLTStZUyxj7k7u8DyLwY1feu2S8pA9ANAFCvLvMAx9g+0O89Pm8goZ6JHIJGl9 gQ1dHJuVRo7WBfYQymhlpo2O4Kmxz//R9MsaOZfCpte+ngZHFRH1C/jmFy7Hdab9 AewE3eEixScP1g+ftOMV9Kf5CORmS23BwLwhxr5qAtHjQjKMJNiMWCBk1JEWSoU0 LDaz0ZVZM4gh00u4kjaW4ZU2/r6mh3KMGIh/SyJozqRn06PUM/7pYdXafwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFFbYmGjfexR7aa/Z8jlfRRRvOYOaMB8GA1UdIwQY MBaAFM71AdLQUhhdT2VpIYwovzWFkAD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgt Zjk1MDMyN2Y4OGQzLzEvVnRpWWFOOTdGSHRwcjlueU9WOUZGRzg1ZzVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgtZjk1MDMyN2Y4OGQz LzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQCLZOUAwQB w/KOMBoEAgACMBQwEgMHACoRFoAAAQMHACoRFoAAAjANBgkqhkiG9w0BAQsFAAOC AQEAlPec6uS4S2+BDfRQ9sK2bP/8oQCOy+Kn4SGaOmYfau21TTEfURI3UoSPnpyn mdYvM9xgdGkaatArHReIEa7Q5WT18z0kPk3trW7knUMpjPlTFym0w2wXka8wZVK8 jyzFHoKt/3w0YSJyipH0Dyk3Hcj0TDg5LtuuYfQ+vFCkBzo20NkWF/dD/kTinwS1 uApxFgJFWK8hmt8u7iUHc/19rzrHCi2BVbwLdgoaf9zKF/+K6y8ZeZXinlPe6XNq z/0nJRdP/I2sTGkkko+trmhYNw+TyHKYcuRcTdlMoUKctqmJ9M+6wNktMRwV4FBI 90V1W1zD8WzBI4W6QcY84q5kiA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:05:17 2026 by rpki-client