This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/vEA8ukjZ43YZlzw8CBVOqmyggo8.roa File: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (raw, json) Hash identifier: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys= Subject key identifier: BC:40:3C:BA:48:D9:E3:76:19:97:3C:3C:08:15:4E:AA:6C:A0:82:8F Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc Certificate serial: 019B7F15E3260C3E731A854A1555C10D507A Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/vEA8ukjZ43YZlzw8CBVOqmyggo8.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31244 IP address blocks: 45.129.64.0/23 maxlen: 23 45.129.66.0/23 maxlen: 23 193.25.112.0/23 maxlen: 23 194.117.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e3:26:0c:3e:73:1a:85:4a:15:55:c1:0d:50:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc403cba48d9e37619973c3c08154eaa6ca0828f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:33:7a:da:80:34:b6:a1:37:7f:5b:a1:26: 0b:79:ec:72:3d:30:7e:7b:c8:70:5d:44:16:1b:59: ce:00:b5:d2:91:42:af:a3:94:1b:9b:fb:49:10:f4: 89:ed:dd:93:bb:c7:6b:05:c5:a5:e5:55:ac:ac:40: cf:57:ec:a0:42:95:c2:94:46:f4:ef:cf:9d:bb:db: 87:80:2b:f7:36:b8:57:31:56:32:8c:14:f9:53:cd: 72:61:57:c3:37:43:40:31:35:0e:06:c5:e6:87:86: 19:13:9b:df:e4:4f:da:0e:b7:7c:c1:7d:72:60:98: d9:a4:fc:55:2c:6d:b8:58:f5:a1:13:55:ad:6d:02: 80:21:34:29:bd:cd:5a:14:a6:cf:aa:ef:5e:d2:56: ed:21:49:db:04:66:12:73:7a:9f:0d:a8:9d:d3:c5: 1f:57:02:a4:88:e8:8f:98:8b:8c:f2:58:88:86:f6: ec:97:b8:43:97:98:b7:80:a8:10:21:93:07:95:b4: 78:9e:a9:ba:dc:35:6f:45:e1:ae:4d:01:18:87:aa: 91:93:f3:3b:61:ff:bb:c8:8a:e1:31:f0:5b:cd:d7: fb:9c:80:b3:ff:bd:45:d5:a5:64:8e:86:3a:73:58: 56:7f:0a:02:e6:da:e2:cd:52:bf:e4:fb:22:0a:22: 6b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:40:3C:BA:48:D9:E3:76:19:97:3C:3C:08:15:4E:AA:6C:A0:82:8F X509v3 Authority Key Identifier: keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/vEA8ukjZ43YZlzw8CBVOqmyggo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.64.0/22 193.25.112.0/23 194.117.236.0/23 Signature Algorithm: sha256WithRSAEncryption 99:12:86:a5:ae:22:a5:ef:78:00:64:51:c2:0a:50:39:8a:63: 7e:f9:22:65:4f:5d:91:62:d8:32:87:78:2a:73:af:be:2e:9b: a9:60:a4:c2:b5:20:3e:6a:8d:47:8d:eb:23:d5:bb:9d:13:36: be:2a:df:b3:74:22:64:b3:02:61:53:d6:14:54:cc:ae:e4:ff: b1:ca:55:c0:47:63:6a:ef:52:fe:f4:e9:42:d9:37:35:04:d4: fd:9c:82:69:9b:8d:c9:07:e0:56:28:52:59:3f:10:41:f3:8b: fe:eb:04:8d:c1:fe:b2:bb:aa:fc:29:a7:86:24:e3:7d:36:8b: 6a:fc:25:05:53:0a:5c:bc:32:16:31:11:35:5c:83:46:f3:e8: f6:0b:b5:dd:15:ea:5c:45:30:2b:c6:af:11:13:d8:d9:7d:25: 87:0f:99:be:1a:97:ff:2e:c8:55:9c:bb:41:11:5c:00:24:2a: 02:90:a6:9d:64:4c:43:8c:c5:b8:b8:63:2f:65:3d:e5:ea:c1: 93:f2:1c:65:a9:78:71:5c:bb:5a:3e:10:6d:31:dd:34:96:e7: 6f:3f:ab:a3:3a:be:ae:41:66:7a:4b:39:36:81:a3:80:c8:35: 13:41:75:14:e4:1d:11:d4:77:85:bf:fb:52:90:fe:9a:42:a6: df:30:aa:97 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FeMmDD5zGoVKFVXBDVB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzAyYzUzY2I4MDNiMTQ2NDRlNjc1ODdlNWQ2ZmQ2MTJi NjRiY2MwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzQwM2NiYTQ4ZDllMzc2MTk5NzNjM2MwODE1NGVhYTZjYTA4MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRUzetqANLahN39boSYLeexyPTB+ e8hwXUQWG1nOALXSkUKvo5Qbm/tJEPSJ7d2Tu8drBcWl5VWsrEDPV+ygQpXClEb0 78+du9uHgCv3NrhXMVYyjBT5U81yYVfDN0NAMTUOBsXmh4YZE5vf5E/aDrd8wX1y YJjZpPxVLG24WPWhE1WtbQKAITQpvc1aFKbPqu9e0lbtIUnbBGYSc3qfDaid08Uf VwKkiOiPmIuM8liIhvbsl7hDl5i3gKgQIZMHlbR4nqm63DVvReGuTQEYh6qRk/M7 Yf+7yIrhMfBbzdf7nICz/71F1aVkjoY6c1hWfwoC5trizVK/5PsiCiJrtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLxAPLpI2eN2GZc8PAgVTqpsoIKPMB8GA1UdIwQY MBaAFA1wLFPLgDsUZE5nWH5db9YStkvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEt M2YyNTM5MmRlN2Y5LzEvdkVBOHVralo0M1labHp3OENCVk9xbXlnZ284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEtM2YyNTM5MmRlN2Y5 LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYFAAwQB wRlwAwQBwnXsMA0GCSqGSIb3DQEBCwUAA4IBAQCZEoalriKl73gAZFHCClA5imN+ +SJlT12RYtgyh3gqc6++LpupYKTCtSA+ao1Hjesj1budEza+Kt+zdCJkswJhU9YU VMyu5P+xylXAR2Nq71L+9OlC2Tc1BNT9nIJpm43JB+BWKFJZPxBB84v+6wSNwf6y u6r8KaeGJON9Notq/CUFUwpcvDIWMRE1XING8+j2C7XdFepcRTArxq8RE9jZfSWH D5m+Gpf/LshVnLtBEVwAJCoCkKadZExDjMW4uGMvZT3l6sGT8hxlqXhxXLtaPhBt Md00ludvP6ujOr6uQWZ6Szk2gaOAyDUTQXUU5B0R1HeFv/tSkP6aQqbfMKqX -----END CERTIFICATE-----Generated at Sun Jan 25 16:16:32 2026 by rpki-client