This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/vivzNK4w1TVYnua5SgoJCXmDNng.roa File: vivzNK4w1TVYnua5SgoJCXmDNng.roa (raw, json) Hash identifier: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE= Subject key identifier: BE:2B:F3:34:AE:30:D5:35:58:9E:E6:B9:4A:0A:09:09:79:83:36:78 Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060 Certificate serial: 019B7DCA9AF84116681965B7888964CCD164 Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/vivzNK4w1TVYnua5SgoJCXmDNng.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208130 IP address blocks: 45.155.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9a:f8:41:16:68:19:65:b7:88:89:64:cc:d1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e92c341e769443fde1d27566044b4b65159060 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be2bf334ae30d535589ee6b94a0a090979833678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:e4:2b:ce:dd:c5:d9:18:e0:27:33:e4:dc: 68:d6:dd:e4:73:26:ac:d3:3b:1b:81:f7:8c:13:02: 59:1f:f3:c3:4c:ad:e6:fa:fc:ca:b6:08:ac:22:3e: bc:6d:0c:a2:d3:8f:28:86:9a:77:6c:a0:0a:9d:49: 60:b0:82:01:f4:23:83:4c:4f:df:e8:e5:41:32:ce: d0:86:89:1e:b5:b4:3f:9f:2c:1f:55:15:a4:bf:75: 99:fb:5d:b9:5a:d3:5e:2b:ac:b5:d7:6b:2a:ae:b7: 05:f0:19:3f:11:5e:4c:a3:45:f3:62:51:ae:2e:43: 23:6c:77:8f:71:b9:08:ac:e7:79:1d:67:dd:be:66: 54:ab:b9:6f:3d:bf:0b:73:ae:c6:a7:ac:50:20:ab: f9:a6:31:59:b8:ea:29:00:39:f6:37:ea:a0:dd:b8: 21:ad:4f:38:59:48:9f:ea:08:ea:0a:33:e4:b4:58: a6:96:76:67:a1:e8:ab:86:ee:51:b4:04:61:99:0a: 7b:9d:b5:a4:9f:9c:75:a3:93:33:a2:db:05:fb:dc: ed:3a:94:cd:3c:2f:2d:9c:d8:cc:4b:db:d8:5d:09: f8:1a:05:b0:7c:a9:8a:9a:33:27:1b:63:91:a6:9f: 54:20:3d:74:f8:96:7b:49:fc:8f:2e:ae:d0:25:b5: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2B:F3:34:AE:30:D5:35:58:9E:E6:B9:4A:0A:09:09:79:83:36:78 X509v3 Authority Key Identifier: keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/vivzNK4w1TVYnua5SgoJCXmDNng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:e7:a5:61:21:3d:88:06:54:49:44:3e:56:45:e7:e5:e3:f4: 25:3b:15:3f:44:88:7d:2d:1b:80:f6:9a:ac:c8:11:ea:74:44: 36:59:ea:13:50:fb:d3:e8:28:a3:14:1b:7b:b6:30:a8:b1:6e: c0:d3:a1:e3:aa:d8:40:e6:d5:62:df:a6:c9:6a:89:d0:77:95: a3:f9:28:5d:bf:6f:00:f6:2b:2e:18:2b:c0:35:58:07:23:2f: c5:d3:61:ed:f6:30:bf:41:c9:9b:d0:d0:8e:6f:60:19:be:05: eb:f5:2c:ba:bf:f0:fa:13:aa:7b:23:a2:6e:27:a5:fb:db:84: be:e9:76:47:6f:fe:c1:44:15:3b:d3:98:18:1b:b1:cc:b3:1b: 4a:84:09:d5:91:91:24:3e:39:6b:55:96:f7:52:0a:9a:2b:67: a0:34:21:fb:ad:7b:e2:8c:6c:d4:41:70:20:3e:2f:d8:01:6e: 26:6e:fc:e7:b2:0d:cc:e1:a0:d1:fd:fb:de:81:e7:98:3d:73: fb:8f:f6:c8:73:ad:9b:1f:f1:6e:d9:f3:5e:f6:66:ef:d8:35: 06:9a:ad:98:dd:0c:7b:b8:36:33:75:99:88:52:d9:a0:e7:f1: 35:69:b0:7d:5b:94:c9:8f:72:ec:fd:f8:04:87:6b:8f:7f:81: 25:85:79:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ypr4QRZoGWW3iIlkzNFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx NTkwNjAwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTJiZjMzNGFlMzBkNTM1NTg5ZWU2Yjk0YTBhMDkwOTc5ODMzNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcjkK87dxdkY4Ccz5Nxo1t3kcyas 0zsbgfeMEwJZH/PDTK3m+vzKtgisIj68bQyi048ohpp3bKAKnUlgsIIB9CODTE/f 6OVBMs7QhoketbQ/nywfVRWkv3WZ+125WtNeK6y112sqrrcF8Bk/EV5Mo0XzYlGu LkMjbHePcbkIrOd5HWfdvmZUq7lvPb8Lc67Gp6xQIKv5pjFZuOopADn2N+qg3bgh rU84WUif6gjqCjPktFimlnZnoeirhu5RtARhmQp7nbWkn5x1o5MzotsF+9ztOpTN PC8tnNjMS9vYXQn4GgWwfKmKmjMnG2ORpp9UID10+JZ7SfyPLq7QJbVNhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL4r8zSuMNU1WJ7muUoKCQl5gzZ4MB8GA1UdIwQY MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt YzFkMjk2ZjhmZDA3LzEvdml2ek5LNHcxVFZZbnVhNVNnb0pDWG1ETm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3 LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZsUMA0G CSqGSIb3DQEBCwUAA4IBAQBM56VhIT2IBlRJRD5WRefl4/QlOxU/RIh9LRuA9pqs yBHqdEQ2WeoTUPvT6CijFBt7tjCosW7A06HjqthA5tVi36bJaonQd5Wj+Shdv28A 9isuGCvANVgHIy/F02Ht9jC/Qcmb0NCOb2AZvgXr9Sy6v/D6E6p7I6JuJ6X724S+ 6XZHb/7BRBU705gYG7HMsxtKhAnVkZEkPjlrVZb3UgqaK2egNCH7rXvijGzUQXAg Pi/YAW4mbvznsg3M4aDR/fvegeeYPXP7j/bIc62bH/Fu2fNe9mbv2DUGmq2Y3Qx7 uDYzdZmIUtmg5/E1abB9W5TJj3Ls/fgEh2uPf4ElhXkV -----END CERTIFICATE-----Generated at Sun Jan 25 12:23:06 2026 by rpki-client