This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/vi-a-w5edFRb54vKD4DsHUtZXMk.roa File: vi-a-w5edFRb54vKD4DsHUtZXMk.roa (raw, json) Hash identifier: EXJoRyrjvG0UdQGwtX97RCn5KpIrCkSRY8togfXm5Yk= Subject key identifier: BE:2F:9A:FB:0E:5E:74:54:5B:E7:8B:CA:0F:80:EC:1D:4B:59:5C:C9 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F81111AC6FA50DC4DD6B524EF25323A Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/vi-a-w5edFRb54vKD4DsHUtZXMk.roa Signing time: Fri 02 Jan 2026 16:18:43 +0000 ROA not before: Fri 02 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56729 IP address blocks: 45.91.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:11:1a:c6:fa:50:dc:4d:d6:b5:24:ef:25:32:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be2f9afb0e5e74545be78bca0f80ec1d4b595cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:00:09:5c:53:6a:da:59:32:82:5e:4a:d9: b0:a1:ab:4f:4e:cb:6f:ff:1c:54:18:e4:dd:5b:05: 7a:e7:2e:96:b8:8e:a6:ca:b1:61:d7:3b:58:1b:1a: 28:a3:5c:c9:d2:82:bc:a1:7f:05:0f:2e:f4:82:d5: 44:2b:9e:ad:e5:a6:e1:3a:1c:88:3f:20:7f:b6:40: ff:83:89:6e:1d:71:b5:7e:c8:62:a7:9f:f2:14:db: 89:2b:50:f9:6b:2a:01:9c:6f:b0:c1:61:a3:f7:d8: 00:7b:c2:a3:e2:1a:f4:91:fb:8e:69:f4:59:09:18: df:22:86:55:ea:ab:5b:60:ef:58:82:da:52:12:cf: 84:5e:b6:ae:e9:91:84:9a:1a:c3:12:55:8c:58:c1: a8:26:5c:42:65:f3:fe:6e:1a:cb:fe:02:de:65:49: 77:e5:42:2b:2e:aa:76:b1:c3:9c:00:19:33:1f:79: 72:c6:fc:d3:31:82:f3:77:05:61:a2:b2:1c:1d:6e: a1:ce:64:c7:ea:b4:6d:5e:d5:a8:e6:b6:6e:cb:76: 15:4c:d1:99:c4:60:bc:d8:a1:62:35:8c:ae:97:35: 7a:89:70:f2:63:87:6f:fa:bb:21:bd:b5:58:37:9d: 83:47:31:84:21:6b:c4:06:6b:8f:b8:94:85:22:92: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2F:9A:FB:0E:5E:74:54:5B:E7:8B:CA:0F:80:EC:1D:4B:59:5C:C9 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/vi-a-w5edFRb54vKD4DsHUtZXMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.5.0/24 Signature Algorithm: sha256WithRSAEncryption 61:d6:77:f8:c9:9a:e0:71:12:11:6d:63:5c:81:41:03:d9:6b: eb:46:a7:94:30:44:8c:32:5f:25:f8:4d:43:3e:35:7e:99:9d: 61:83:0d:2e:ae:f1:5e:9c:74:5a:ed:c4:f8:9f:28:42:41:5b: 79:10:89:28:38:69:23:6c:8a:b0:fb:38:9f:23:82:59:65:a8: ea:f4:4a:b6:2f:b1:b0:1b:3e:28:0c:57:e5:7f:9c:6a:05:2e: da:24:b9:e8:81:2c:71:3f:ef:65:39:96:4e:47:9c:0b:9d:54: f1:a9:ae:7f:19:0f:90:25:a2:b7:2a:ff:2e:51:2c:e5:d2:0a: cf:15:21:b8:b3:bb:c6:4d:db:fe:02:f4:36:ce:bf:b2:af:94: 4e:d8:7e:d0:05:a9:1a:f9:c8:62:e4:81:aa:8c:09:8e:b0:ff: 7e:30:8c:9d:ed:44:60:2d:be:8e:fd:58:a4:82:d3:98:d2:6a: f9:43:bc:c6:2b:0d:e7:06:68:ce:39:e4:ca:c6:15:38:d0:35: 3a:a6:4d:43:d9:19:85:2c:8d:48:b5:19:0b:c8:be:f7:6b:68: 3b:10:ac:ea:dc:7d:c9:ac:bd:5c:47:b8:95:ca:67:b7:e1:7d: 0e:0a:57:ae:ab:15:b9:9f:9f:88:4c:67:f5:de:1d:62:e4:16: a6:e6:8b:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gREaxvpQ3E3WtSTvJTI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTJmOWFmYjBlNWU3NDU0NWJlNzhiY2EwZjgwZWMxZDRiNTk1Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU0ACVxTatpZMoJeStmwoatPTstv /xxUGOTdWwV65y6WuI6myrFh1ztYGxooo1zJ0oK8oX8FDy70gtVEK56t5abhOhyI PyB/tkD/g4luHXG1fship5/yFNuJK1D5ayoBnG+wwWGj99gAe8Kj4hr0kfuOafRZ CRjfIoZV6qtbYO9YgtpSEs+EXrau6ZGEmhrDElWMWMGoJlxCZfP+bhrL/gLeZUl3 5UIrLqp2scOcABkzH3lyxvzTMYLzdwVhorIcHW6hzmTH6rRtXtWo5rZuy3YVTNGZ xGC82KFiNYyulzV6iXDyY4dv+rshvbVYN52DRzGEIWvEBmuPuJSFIpIbXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL4vmvsOXnRUW+eLyg+A7B1LWVzJMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvdmktYS13NWVkRlJiNTR2S0Q0RHNIVXRaWE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVsFMA0G CSqGSIb3DQEBCwUAA4IBAQBh1nf4yZrgcRIRbWNcgUED2WvrRqeUMESMMl8l+E1D PjV+mZ1hgw0urvFenHRa7cT4nyhCQVt5EIkoOGkjbIqw+zifI4JZZajq9Eq2L7Gw Gz4oDFflf5xqBS7aJLnogSxxP+9lOZZOR5wLnVTxqa5/GQ+QJaK3Kv8uUSzl0grP FSG4s7vGTdv+AvQ2zr+yr5RO2H7QBaka+chi5IGqjAmOsP9+MIyd7URgLb6O/Vik gtOY0mr5Q7zGKw3nBmjOOeTKxhU40DU6pk1D2RmFLI1ItRkLyL73a2g7EKzq3H3J rL1cR7iVyme34X0OCleuqxW5n5+ITGf13h1i5Bam5otm -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:29 2026 by rpki-client