This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/vy_B141YrrWxhcrnlEIljoTLECk.roa File: vy_B141YrrWxhcrnlEIljoTLECk.roa (raw, json) Hash identifier: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0= Subject key identifier: BF:2F:C1:D7:8D:58:AE:B5:B1:85:CA:E7:94:42:25:8E:84:CB:10:29 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F8242925A174D7F3CAD08FADAB66C76 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/vy_B141YrrWxhcrnlEIljoTLECk.roa Signing time: Fri 02 Jan 2026 16:20:01 +0000 ROA not before: Fri 02 Jan 2026 16:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1828 IP address blocks: 45.15.192.0/22 maxlen: 22 45.15.192.0/24 maxlen: 24 45.15.193.0/24 maxlen: 24 45.15.194.0/24 maxlen: 24 45.15.195.0/24 maxlen: 24 45.133.80.0/22 maxlen: 22 45.133.80.0/24 maxlen: 24 45.133.81.0/24 maxlen: 24 45.133.82.0/24 maxlen: 24 95.172.66.0/23 maxlen: 23 95.172.68.0/22 maxlen: 22 185.92.120.0/24 maxlen: 24 185.92.121.0/24 maxlen: 24 185.92.122.0/24 maxlen: 24 185.92.123.0/24 maxlen: 24 185.175.12.0/24 maxlen: 24 185.175.13.0/24 maxlen: 24 2a02:b50:8000::/34 maxlen: 34 2a05:f240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:42:92:5a:17:4d:7f:3c:ad:08:fa:da:b6:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf2fc1d78d58aeb5b185cae79442258e84cb1029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:3e:2f:41:5d:2c:e3:15:71:36:a4:23:32: 2e:d8:8e:d0:89:02:d5:3f:67:ed:53:c1:b4:ed:7c: 15:f9:de:80:08:f3:a0:69:33:3b:a7:88:a4:75:c4: c4:46:9c:ac:7d:86:67:9c:01:94:e2:d8:e1:81:e3: c4:d4:43:06:35:d8:a3:84:f7:ce:aa:55:24:66:54: 1b:33:8b:ea:4c:2d:54:0e:c1:d7:8f:78:ac:b0:7f: cb:13:62:9f:f3:d2:1a:a1:4f:78:7b:c3:f3:7a:de: 5b:0f:64:85:4e:c7:7b:42:b1:e8:ae:98:7f:47:d0: 0b:f1:25:25:1e:5c:f4:4c:cb:22:7f:65:e3:32:f5: 3b:9f:93:8d:8e:08:a4:bc:26:95:62:d5:f7:37:b2: e7:05:5b:4c:17:23:64:41:5d:3b:e4:62:59:fd:44: 34:5b:ca:d6:38:a7:d7:5c:db:04:04:73:3b:a5:6e: ac:3b:9f:53:9b:d9:b2:00:12:18:a3:c8:8f:4d:8e: 53:97:a0:3b:ce:f6:6e:80:f6:29:96:87:d9:69:d7: 04:9e:75:e9:d7:69:3b:87:70:c6:67:a6:b8:3e:de: 08:21:95:7a:77:d6:18:26:d3:78:47:7e:3c:49:00: 44:cf:d2:79:86:53:88:04:26:4a:c6:24:c4:75:c9: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2F:C1:D7:8D:58:AE:B5:B1:85:CA:E7:94:42:25:8E:84:CB:10:29 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/vy_B141YrrWxhcrnlEIljoTLECk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.192.0/22 45.133.80.0/22 95.172.66.0-95.172.71.255 185.92.120.0/22 185.175.12.0/23 IPv6: 2a02:b50:8000::/34 2a05:f240::/29 Signature Algorithm: sha256WithRSAEncryption 56:57:85:3f:df:a5:a3:5e:1a:e3:41:1d:9b:3e:d8:01:81:38: 2c:0e:91:e5:b4:37:cb:09:fb:06:0d:85:53:87:80:54:27:95: a8:dc:03:8c:4c:4f:cc:75:a2:ee:c1:54:46:ca:2d:90:47:5b: 9f:43:7e:46:0d:aa:8e:2a:46:1d:7a:ff:76:93:db:3b:94:c6: 85:9b:6a:cb:06:09:73:10:17:dd:c2:2f:34:13:21:10:66:fe: 38:a5:44:fe:2b:2b:c9:33:54:8d:66:12:f0:f8:a9:7d:69:22: b0:e3:6c:69:ad:77:06:0a:e3:e8:5e:19:07:f1:6b:e5:16:f4: 1e:c3:e3:06:b0:f7:b9:f2:bd:56:c4:39:ea:e6:83:40:f5:d2: b6:36:d9:7a:0f:38:26:d5:87:64:7e:76:f2:dd:b6:85:43:2e: d3:6e:17:1c:d9:36:31:fd:05:7f:9c:c3:51:9e:72:f3:68:91: fe:d4:55:68:b3:ae:bd:3d:a1:d3:a5:ab:2a:dc:d1:df:76:63: 10:72:d1:dc:84:34:12:1d:9c:8c:be:6c:13:63:7d:7b:f2:5b: 99:c3:ab:6a:c2:c8:8c:ce:ee:41:31:ef:30:ed:0f:28:dd:df: 4d:44:87:a9:9a:d5:f3:cb:75:d9:3d:eb:af:d5:9e:59:67:c9: 40:10:8e:07 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt/gkKSWhdNfzytCPratmx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjJmYzFkNzhkNThhZWI1YjE4NWNhZTc5NDQyMjU4ZTg0Y2IxMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQM+L0FdLOMVcTakIzIu2I7QiQLV P2ftU8G07XwV+d6ACPOgaTM7p4ikdcTERpysfYZnnAGU4tjhgePE1EMGNdijhPfO qlUkZlQbM4vqTC1UDsHXj3issH/LE2Kf89IaoU94e8Pzet5bD2SFTsd7QrHorph/ R9AL8SUlHlz0TMsif2XjMvU7n5ONjgikvCaVYtX3N7LnBVtMFyNkQV075GJZ/UQ0 W8rWOKfXXNsEBHM7pW6sO59Tm9myABIYo8iPTY5Tl6A7zvZugPYplofZadcEnnXp 12k7h3DGZ6a4Pt4IIZV6d9YYJtN4R348SQBEz9J5hlOIBCZKxiTEdcl/XwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFL8vwdeNWK61sYXK55RCJY6EyxApMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvdnlfQjE0MVlycld4aGNybmxFSWxqb1RMRUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAsBAIAATAmAwQCLQ/AAwQC LYVQMAwDBAFfrEIDBANfrEADBAK5XHgDBAG5rwwwFQQCAAIwDwMGBioCC1CAAwUD KgXyQDANBgkqhkiG9w0BAQsFAAOCAQEAVleFP9+lo14a40Edmz7YAYE4LA6R5bQ3 ywn7Bg2FU4eAVCeVqNwDjExPzHWi7sFURsotkEdbn0N+Rg2qjipGHXr/dpPbO5TG hZtqywYJcxAX3cIvNBMhEGb+OKVE/isryTNUjWYS8PipfWkisONsaa13Bgrj6F4Z B/Fr5Rb0HsPjBrD3ufK9VsQ56uaDQPXStjbZeg84JtWHZH528t22hUMu024XHNk2 Mf0Ff5zDUZ5y82iR/tRVaLOuvT2h06WrKtzR33ZjEHLR3IQ0Eh2cjL5sE2N9e/Jb mcOrasLIjM7uQTHvMO0PKN3fTUSHqZrV88t12T3rr9WeWWfJQBCOBw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:29 2026 by rpki-client