This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/Vs4q05s-W8NHWMm5YOcJc_SL2QY.roa File: Vs4q05s-W8NHWMm5YOcJc_SL2QY.roa (raw, json) Hash identifier: JRDT0B7hKKnVofZeEKM2euy2nBMFe7V+h7bbjCvTBHk= Subject key identifier: 56:CE:2A:D3:9B:3E:5B:C3:47:58:C9:B9:60:E7:09:73:F4:8B:D9:06 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019BDAC80B13D35FB7C4C68CC2888B3C0697 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/Vs4q05s-W8NHWMm5YOcJc_SL2QY.roa Signing time: Tue 20 Jan 2026 09:41:41 +0000 ROA not before: Tue 20 Jan 2026 09:41:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 45.132.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:c8:0b:13:d3:5f:b7:c4:c6:8c:c2:88:8b:3c:06:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 20 09:41:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56ce2ad39b3e5bc34758c9b960e70973f48bd906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:db:4c:a2:14:40:d3:d3:0e:21:29:6e:ee: eb:f7:46:5b:e4:a5:d9:61:50:b9:f4:91:d3:3b:79: 8e:6a:de:46:d9:27:56:e0:2f:27:05:40:c1:49:ba: ed:02:8b:79:2e:95:db:bc:12:58:09:95:ca:d3:5b: 7f:61:e0:fc:d8:ec:d6:70:c0:b8:30:20:68:08:7c: 6e:ea:94:ac:30:8b:70:0c:96:a6:19:b7:1e:ee:b6: cf:98:b3:d5:f4:1f:07:e9:33:25:68:0b:41:07:af: bb:78:8a:14:35:dd:38:7e:68:ac:21:c6:d8:2d:7d: 08:bb:19:aa:a4:e8:f8:89:98:08:41:2c:8a:b5:1f: 65:0d:90:91:37:a3:47:8e:8c:d7:94:3c:69:99:74: a6:73:73:10:6d:5b:a6:46:ff:79:75:c2:f3:e8:1c: d0:5e:56:dc:f9:30:e0:de:85:29:2f:84:1e:fd:17: 7e:44:45:6a:f1:81:21:00:c6:2e:22:7b:89:b7:e1: 03:1c:94:73:41:bc:57:04:aa:78:fe:a5:d4:1c:26: 7c:f1:a4:7a:55:72:a5:01:dc:55:a3:79:ed:d2:69: 36:a2:06:44:f9:42:fa:10:2a:32:c0:bc:8a:59:de: c2:e1:6f:f1:49:1b:c6:dd:1a:fd:87:a3:5a:25:e1: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CE:2A:D3:9B:3E:5B:C3:47:58:C9:B9:60:E7:09:73:F4:8B:D9:06 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/Vs4q05s-W8NHWMm5YOcJc_SL2QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.113.0/24 Signature Algorithm: sha256WithRSAEncryption 58:20:f2:b9:11:99:85:bb:8b:21:a9:47:25:3b:87:3e:5b:82: ad:7a:02:62:4d:66:2d:af:c3:c8:ad:a2:58:7d:36:28:f9:c3: 16:71:12:cc:95:2f:3e:cd:2d:b7:e1:13:9f:6f:9b:41:0a:6f: 3c:b6:ee:8d:3f:be:56:85:dc:fa:a3:19:8e:77:01:ef:24:77: c0:87:bd:1c:da:ba:e6:8b:bd:66:51:f0:e3:9e:5e:80:a2:02: 2e:0a:41:b2:9d:cd:3c:c1:3e:63:5e:87:c3:3c:c9:80:13:86: 42:b0:56:4c:98:59:62:9e:69:d1:78:02:02:48:bf:bf:3e:27: 84:fe:12:af:62:3e:d0:65:02:30:d3:99:77:a6:ae:6a:1a:20: e4:4c:9d:c3:0a:d9:ed:d9:ae:eb:f2:bc:61:6c:3a:e4:fa:d3: 93:08:b8:36:e7:59:3b:b0:99:ff:3f:ff:3e:e6:7b:7d:1e:72: 76:6e:20:14:72:37:a4:0b:36:2d:5c:18:56:f4:9a:24:64:4c: 44:5c:49:4a:82:81:9a:e3:5a:8c:2c:73:5d:dd:44:50:f2:15: 16:23:3f:f8:10:f3:5b:b1:c7:85:0d:6e:a3:cf:73:52:e0:ae: 0c:35:6e:d7:45:9d:34:90:da:e9:f7:8d:16:94:e0:17:31:09: 3f:e7:e8:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvayAsT01+3xMaMwoiLPAaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTIwMDk0MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmNlMmFkMzliM2U1YmMzNDc1OGM5Yjk2MGU3MDk3M2Y0OGJkOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0rbTKIUQNPTDiEpbu7r90Zb5KXZ YVC59JHTO3mOat5G2SdW4C8nBUDBSbrtAot5LpXbvBJYCZXK01t/YeD82OzWcMC4 MCBoCHxu6pSsMItwDJamGbce7rbPmLPV9B8H6TMlaAtBB6+7eIoUNd04fmisIcbY LX0IuxmqpOj4iZgIQSyKtR9lDZCRN6NHjozXlDxpmXSmc3MQbVumRv95dcLz6BzQ Xlbc+TDg3oUpL4Qe/Rd+REVq8YEhAMYuInuJt+EDHJRzQbxXBKp4/qXUHCZ88aR6 VXKlAdxVo3nt0mk2ogZE+UL6ECoywLyKWd7C4W/xSRvG3Rr9h6NaJeEOFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbOKtObPlvDR1jJuWDnCXP0i9kGMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvVnM0cTA1cy1XOE5IV01tNVlPY0pjX1NMMlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRxMA0G CSqGSIb3DQEBCwUAA4IBAQBYIPK5EZmFu4shqUclO4c+W4KtegJiTWYtr8PIraJY fTYo+cMWcRLMlS8+zS234ROfb5tBCm88tu6NP75Whdz6oxmOdwHvJHfAh70c2rrm i71mUfDjnl6AogIuCkGync08wT5jXofDPMmAE4ZCsFZMmFlinmnReAICSL+/PieE /hKvYj7QZQIw05l3pq5qGiDkTJ3DCtnt2a7r8rxhbDrk+tOTCLg251k7sJn/P/8+ 5nt9HnJ2biAUcjekCzYtXBhW9JokZExEXElKgoGa41qMLHNd3URQ8hUWIz/4EPNb sceFDW6jz3NS4K4MNW7XRZ00kNrp940WlOAXMQk/5+gC -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:46 2026 by rpki-client