This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/vd-PSvK2I4pGXKBuVtu4Qd_H4v4.roa File: vd-PSvK2I4pGXKBuVtu4Qd_H4v4.roa (raw, json) Hash identifier: Bi5b9l/7rwXewS7llWhzVi0eYYMadFBlA63KWV2kSlA= Subject key identifier: BD:DF:8F:4A:F2:B6:23:8A:46:5C:A0:6E:56:DB:B8:41:DF:C7:E2:FE Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F81101061777C6ABF54E1351FABCEAD Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/vd-PSvK2I4pGXKBuVtu4Qd_H4v4.roa Signing time: Fri 02 Jan 2026 16:18:43 +0000 ROA not before: Fri 02 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52202 IP address blocks: 45.86.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:10:10:61:77:7c:6a:bf:54:e1:35:1f:ab:ce:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bddf8f4af2b6238a465ca06e56dbb841dfc7e2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:21:ea:6a:06:9b:33:87:d5:09:2b:6e:74: 09:7c:46:fe:3d:e0:11:54:de:1c:8f:70:e8:46:c9: 47:89:2f:8d:39:fb:23:fe:62:9d:0e:8b:06:19:ac: 39:ee:7b:35:44:0e:15:23:5f:5a:ca:8a:7f:a0:df: 51:c2:e3:dd:6f:65:05:c9:57:27:27:16:b8:2f:e1: 9f:c0:00:f2:f4:0a:bc:e5:20:0e:b6:25:e8:a1:db: 6f:6f:6d:2f:bb:ad:70:e7:74:53:51:19:98:1d:91: c9:cf:34:81:ea:4d:83:e0:aa:8b:f6:ec:b5:29:c8: 73:95:cc:4c:1b:7c:4c:24:e2:b0:43:89:f4:00:cb: 93:c0:b1:5b:80:a7:5f:7a:2e:74:15:95:5e:eb:89: 00:95:cd:00:a2:84:a7:83:e3:92:a2:c9:93:bb:e9: 46:e6:14:cb:64:f6:fd:19:dc:27:b4:62:a6:d0:88: 96:29:45:7a:b5:8b:e4:3e:c6:ed:2f:7c:9e:3e:cf: f9:fc:02:7e:49:7b:43:af:f9:b3:72:48:90:54:dd: 1c:e1:b5:3b:f6:3f:60:94:80:b5:0a:1b:50:8b:62: d7:90:f7:68:9e:cf:9e:45:09:0e:ba:31:ec:5e:62: bd:f5:a7:97:ff:27:fb:d9:a8:14:6f:c9:6c:6a:35: 34:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DF:8F:4A:F2:B6:23:8A:46:5C:A0:6E:56:DB:B8:41:DF:C7:E2:FE X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/vd-PSvK2I4pGXKBuVtu4Qd_H4v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.241.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:f6:30:f0:1e:03:87:83:6c:d1:49:14:06:ed:09:45:5a:ba: 15:8c:52:cb:2f:b7:93:f6:7a:2c:97:77:6a:7c:c8:bd:9d:d2: 03:bf:3a:fb:0f:0c:35:b6:fa:8f:a9:cc:ae:9b:c5:1e:8a:1b: 32:9e:7a:96:a5:b5:bb:42:88:0a:78:27:df:0d:d3:77:6e:cf: 5a:f3:4f:93:e7:fc:0e:a8:46:eb:ce:ac:2b:fd:d8:a2:d9:2f: 21:a8:11:73:2f:0f:50:2b:50:57:bc:c0:e0:94:9c:94:9d:24: 6a:fe:33:95:ef:ea:f5:77:98:33:0c:aa:7a:fd:84:22:36:e8: 69:f7:d3:b5:2c:13:9b:5c:79:7e:bc:5c:02:2b:f9:73:7e:8f: 07:a0:a7:00:30:da:7c:35:aa:14:c0:6d:18:25:34:2e:98:00: 45:6a:77:a5:ff:7a:7d:99:14:4d:16:1d:c4:65:a3:98:0f:30: 08:c9:a8:43:b4:56:ae:fb:fe:42:11:f3:13:8c:5d:2e:7d:87: b6:ba:5b:3e:c2:c6:2e:c3:6d:54:7c:9f:b0:d4:05:69:6f:0b: 71:18:90:ab:84:67:96:a6:fa:7d:2c:97:d7:52:9e:d5:25:06: 2e:f3:36:66:a8:a6:0e:03:66:52:cd:05:f2:eb:36:65:ab:6c: 36:06:14:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gRAQYXd8ar9U4TUfq86tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGRmOGY0YWYyYjYyMzhhNDY1Y2EwNmU1NmRiYjg0MWRmYzdlMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ4h6moGmzOH1QkrbnQJfEb+PeAR VN4cj3DoRslHiS+NOfsj/mKdDosGGaw57ns1RA4VI19ayop/oN9RwuPdb2UFyVcn Jxa4L+GfwADy9Aq85SAOtiXoodtvb20vu61w53RTURmYHZHJzzSB6k2D4KqL9uy1 KchzlcxMG3xMJOKwQ4n0AMuTwLFbgKdfei50FZVe64kAlc0AooSng+OSosmTu+lG 5hTLZPb9GdwntGKm0IiWKUV6tYvkPsbtL3yePs/5/AJ+SXtDr/mzckiQVN0c4bU7 9j9glIC1ChtQi2LXkPdons+eRQkOujHsXmK99aeX/yf72agUb8lsajU02QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3fj0rytiOKRlygblbbuEHfx+L+MB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvdmQtUFN2SzJJNHBHWEtCdVZ0dTRRZF9INHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVbxMA0G CSqGSIb3DQEBCwUAA4IBAQBf9jDwHgOHg2zRSRQG7QlFWroVjFLLL7eT9nosl3dq fMi9ndIDvzr7Dww1tvqPqcyum8UeihsynnqWpbW7QogKeCffDdN3bs9a80+T5/wO qEbrzqwr/dii2S8hqBFzLw9QK1BXvMDglJyUnSRq/jOV7+r1d5gzDKp6/YQiNuhp 99O1LBObXHl+vFwCK/lzfo8HoKcAMNp8NaoUwG0YJTQumABFanel/3p9mRRNFh3E ZaOYDzAIyahDtFau+/5CEfMTjF0ufYe2uls+wsYuw21UfJ+w1AVpbwtxGJCrhGeW pvp9LJfXUp7VJQYu8zZmqKYOA2ZSzQXy6zZlq2w2BhSs -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:04 2026 by rpki-client