This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa File: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (raw, json) Hash identifier: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk= Subject key identifier: 55:BE:4B:50:C3:7F:7F:EA:E5:AB:33:17:E0:69:0D:CA:67:E3:64:07 Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019B7EA4EB21E57F04FEFF682ACBF978BD35 Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa Signing time: Fri 02 Jan 2026 12:18:15 +0000 ROA not before: Fri 02 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12884 IP address blocks: 45.95.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:eb:21:e5:7f:04:fe:ff:68:2a:cb:f9:78:bd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Jan 2 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55be4b50c37f7feae5ab3317e0690dca67e36407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:3b:7c:8b:35:9c:4f:fd:96:b2:98:1f:d9: bb:66:4c:ee:84:97:1d:a5:ef:55:2a:bf:a1:ee:63: e6:f1:45:48:99:9a:ef:12:9e:57:e9:1c:dd:79:b3: 0c:1a:81:86:b8:30:96:ad:0f:18:4e:54:69:49:b8: 36:2c:bb:0b:e7:d6:98:ee:ed:cb:44:cc:8e:89:05: 92:9b:82:72:3d:78:b9:07:d1:77:71:3f:29:24:e5: 2f:13:c7:cd:54:76:de:5e:1e:d0:30:3e:4b:43:f2: ca:cf:8e:3e:ff:eb:b1:26:d0:3c:6d:65:27:ba:62: 1c:46:b3:4f:0f:55:69:29:72:9a:f4:d1:67:3d:db: db:29:12:6e:0a:1a:17:9d:68:dc:73:fe:28:a8:8f: af:a1:87:eb:16:fa:f3:20:23:39:4c:b4:84:67:b1: 2e:b8:2c:a0:4e:99:d7:fe:e4:47:44:7e:e5:a8:11: a5:f1:64:c7:be:de:d6:15:5c:14:fa:0c:10:16:16: 25:89:ca:9e:fa:c8:33:1f:bc:57:c1:2d:cb:fc:4c: bb:19:c5:cf:73:b4:e8:5d:0c:5b:97:a5:f4:c9:a8: e7:30:a5:a1:5b:08:3b:5f:cd:87:bd:0a:33:cb:78: 6d:32:21:d5:7a:dd:3c:b2:c1:65:8f:89:bb:86:f2: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BE:4B:50:C3:7F:7F:EA:E5:AB:33:17:E0:69:0D:CA:67:E3:64:07 X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.94.0/24 Signature Algorithm: sha256WithRSAEncryption 41:4e:8a:a6:7f:5a:6d:60:b2:89:62:ee:9f:46:58:0f:d6:63: cb:54:98:fb:08:84:9d:f9:46:60:3d:9b:0a:f0:f4:b3:38:c4: a1:3b:7e:fb:58:b7:38:0a:c5:6b:79:80:e2:9f:df:79:29:e5: d2:02:49:ed:49:d4:74:bf:90:d8:a6:47:59:ed:7b:2a:b2:2b: a3:e2:3c:11:2f:8b:5e:b0:76:33:11:de:ca:6b:00:40:e5:97: df:97:73:1c:fb:e6:0d:f4:12:1e:29:ec:17:60:c6:5a:82:9a: 29:55:bf:86:b0:eb:6e:9a:f1:9c:bb:20:68:ec:3d:ce:ac:77: e7:55:3c:e7:3b:ba:d2:55:a3:3e:e5:4f:c6:1d:fc:60:a6:dd: fc:12:68:f1:da:f4:e1:ee:95:3c:da:22:03:a4:5a:f6:0a:85: 2a:25:7e:34:1f:87:b9:18:32:c5:42:16:02:a8:43:66:d7:a4: 77:ef:13:d0:ed:0f:18:99:1e:ae:48:e7:77:b6:85:ae:a3:bd: 30:0e:3d:57:86:69:5f:e1:24:30:b7:77:44:ff:4f:c3:2a:c7: 74:bb:95:8c:81:10:61:1d:cc:c3:e8:9a:a9:8c:a9:93:d9:91: 38:cf:40:4b:87:ee:20:d3:16:6f:46:59:a5:16:27:b3:0f:b6: 21:38:51:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pOsh5X8E/v9oKsv5eL01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjYwMTAyMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWJlNGI1MGMzN2Y3ZmVhZTVhYjMzMTdlMDY5MGRjYTY3ZTM2NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx07fIs1nE/9lrKYH9m7ZkzuhJcd pe9VKr+h7mPm8UVImZrvEp5X6RzdebMMGoGGuDCWrQ8YTlRpSbg2LLsL59aY7u3L RMyOiQWSm4JyPXi5B9F3cT8pJOUvE8fNVHbeXh7QMD5LQ/LKz44+/+uxJtA8bWUn umIcRrNPD1VpKXKa9NFnPdvbKRJuChoXnWjcc/4oqI+voYfrFvrzICM5TLSEZ7Eu uCygTpnX/uRHRH7lqBGl8WTHvt7WFVwU+gwQFhYlicqe+sgzH7xXwS3L/Ey7GcXP c7ToXQxbl6X0yajnMKWhWwg7X82HvQozy3htMiHVet08ssFlj4m7hvLzEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFW+S1DDf3/q5aszF+BpDcpn42QHMB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvVmI1TFVNTl9mLXJscXpNWDRHa055bWZqWkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9eMA0G CSqGSIb3DQEBCwUAA4IBAQBBToqmf1ptYLKJYu6fRlgP1mPLVJj7CISd+UZgPZsK 8PSzOMShO377WLc4CsVreYDin995KeXSAkntSdR0v5DYpkdZ7Xsqsiuj4jwRL4te sHYzEd7KawBA5Zffl3Mc++YN9BIeKewXYMZagpopVb+GsOtumvGcuyBo7D3OrHfn VTznO7rSVaM+5U/GHfxgpt38Emjx2vTh7pU82iIDpFr2CoUqJX40H4e5GDLFQhYC qENm16R37xPQ7Q8YmR6uSOd3toWuo70wDj1Xhmlf4SQwt3dE/0/DKsd0u5WMgRBh HczD6JqpjKmT2ZE4z0BLh+4g0xZvRlmlFiezD7YhOFE2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:45 2026 by rpki-client