This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VHG5s4FGh11rkSNcf-vQPr1iTvU.roa File: VHG5s4FGh11rkSNcf-vQPr1iTvU.roa (raw, json) Hash identifier: I3IHZErQuvxsiV0IgVuson+oAH7SxU2mk14WqA3KKU0= Subject key identifier: 54:71:B9:B3:81:46:87:5D:6B:91:23:5C:7F:EB:D0:3E:BD:62:4E:F5 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABC8D7945D56BD46C0E2CD7A43BE7 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VHG5s4FGh11rkSNcf-vQPr1iTvU.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47913 IP address blocks: 31.12.92.0/22 maxlen: 24 45.83.116.0/22 maxlen: 24 45.88.148.0/22 maxlen: 24 45.89.100.0/22 maxlen: 24 45.92.124.0/22 maxlen: 24 92.119.40.0/22 maxlen: 24 141.98.132.0/22 maxlen: 24 185.149.20.0/22 maxlen: 24 185.166.160.0/22 maxlen: 24 194.33.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bc:8d:79:45:d5:6b:d4:6c:0e:2c:d7:a4:3b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5471b9b38146875d6b91235c7febd03ebd624ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:ac:45:82:b9:33:42:88:75:e9:89:e1:ed: d1:19:9f:89:d2:8c:92:12:4a:bb:d4:ac:ba:dd:eb: 46:2e:a6:14:1e:d7:cb:be:d4:be:d5:0b:a4:3c:90: b7:b0:b8:0f:6f:39:5b:1f:f8:75:c7:e8:2d:cf:b9: 90:04:d0:c1:d1:c0:9c:b7:5f:70:9e:90:50:3f:ad: 36:da:a5:94:fb:5f:60:20:98:a5:56:11:8c:3a:09: 50:0d:93:55:7a:fb:e4:5c:bd:5d:a2:8a:35:b8:3b: 96:12:82:8a:10:df:63:8d:50:14:0a:78:f6:8a:43: bd:bd:64:fe:2b:59:86:03:8b:06:b5:c1:63:bf:4a: 9e:e5:ba:30:11:8b:e8:60:d4:7f:9f:fa:b7:49:69: 2c:22:ef:b1:11:e7:03:38:b8:7a:68:5a:cd:57:ec: 40:54:09:50:fa:8d:f8:92:11:17:9d:8a:a2:36:c9: b1:59:63:af:68:8f:9b:34:cf:b1:08:fb:dd:af:5b: 7d:f3:05:4e:4b:48:0d:04:90:66:8a:67:eb:2c:11: f4:36:d9:b9:1a:cd:b6:99:4a:92:74:99:3e:cf:c1: 45:6b:f5:94:d8:d9:de:77:02:5b:ec:7e:ca:e9:b8: eb:1b:cd:b1:cd:c1:d7:cf:71:30:a8:f3:1b:2d:66: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:B9:B3:81:46:87:5D:6B:91:23:5C:7F:EB:D0:3E:BD:62:4E:F5 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VHG5s4FGh11rkSNcf-vQPr1iTvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.12.92.0/22 45.83.116.0/22 45.88.148.0/22 45.89.100.0/22 45.92.124.0/22 92.119.40.0/22 141.98.132.0/22 185.149.20.0/22 185.166.160.0/22 194.33.36.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:ff:3b:07:5f:6b:08:3f:fc:aa:69:27:86:4e:ea:b2:20:d1: 3d:3d:90:1e:4e:ad:2c:d0:14:64:23:fd:23:af:6b:3a:07:0a: 75:42:d9:66:b5:c3:0c:d1:6e:f0:d6:06:39:3b:91:e6:6e:9f: 2f:7d:e5:85:4a:5d:01:6e:dc:a9:a5:c6:95:f3:13:64:98:db: 50:ea:34:d7:fe:e6:4a:79:5e:a1:c6:57:8c:3c:21:5c:ea:80: 04:c5:f0:4b:64:d5:da:f1:f5:6e:c2:c1:1d:ce:12:ce:ae:7e: 0a:63:70:7e:6e:d4:b1:74:a7:71:43:f1:86:18:62:ac:c2:54: 1f:66:54:1d:03:42:8a:e4:0d:11:2f:93:75:33:9a:43:76:f4: db:ba:49:8f:4a:d1:4d:f3:a1:2b:48:48:57:c4:10:df:e3:a3: 2e:01:2c:0d:2f:0b:43:8d:4d:e4:8a:ce:30:fb:41:77:ed:42: db:88:6a:e4:cc:01:e9:03:bd:39:06:6c:a0:c5:60:ce:87:c7: 1c:20:43:aa:86:89:b8:80:5f:c7:54:77:b6:be:0d:ad:36:74: 19:5a:e4:f9:52:e1:e0:0f:ac:b8:80:12:15:95:eb:22:24:40: 18:e5:74:4f:85:38:42:28:57:ea:9e:8b:ec:f2:e4:59:64:94: c0:2f:e3:a8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt26ryNeUXVa9RsDizXpDvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDcxYjliMzgxNDY4NzVkNmI5MTIzNWM3ZmViZDAzZWJkNjI0ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOasRYK5M0KIdemJ4e3RGZ+J0oyS Ekq71Ky63etGLqYUHtfLvtS+1QukPJC3sLgPbzlbH/h1x+gtz7mQBNDB0cCct19w npBQP6022qWU+19gIJilVhGMOglQDZNVevvkXL1dooo1uDuWEoKKEN9jjVAUCnj2 ikO9vWT+K1mGA4sGtcFjv0qe5bowEYvoYNR/n/q3SWksIu+xEecDOLh6aFrNV+xA VAlQ+o34khEXnYqiNsmxWWOvaI+bNM+xCPvdr1t98wVOS0gNBJBmimfrLBH0Ntm5 Gs22mUqSdJk+z8FFa/WU2NnedwJb7H7K6bjrG82xzcHXz3EwqPMbLWYiJwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFFRxubOBRodda5EjXH/r0D69Yk71MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvVkhHNXM0RkdoMTFya1NOY2YtdlFQcjFpVHZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCHwxcAwQC LVN0AwQCLViUAwQCLVlkAwQCLVx8AwQCXHcoAwQCjWKEAwQCuZUUAwQCuaagAwQC wiEkMA0GCSqGSIb3DQEBCwUAA4IBAQA+/zsHX2sIP/yqaSeGTuqyINE9PZAeTq0s 0BRkI/0jr2s6Bwp1QtlmtcMM0W7w1gY5O5Hmbp8vfeWFSl0BbtyppcaV8xNkmNtQ 6jTX/uZKeV6hxleMPCFc6oAExfBLZNXa8fVuwsEdzhLOrn4KY3B+btSxdKdxQ/GG GGKswlQfZlQdA0KK5A0RL5N1M5pDdvTbukmPStFN86ErSEhXxBDf46MuASwNLwtD jU3kis4w+0F37ULbiGrkzAHpA705BmygxWDOh8ccIEOqhom4gF/HVHe2vg2tNnQZ WuT5UuHgD6y4gBIVlesiJEAY5XRPhThCKFfqnovs8uRZZJTAL+Oo -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:34 2026 by rpki-client