This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa File: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (raw, json) Hash identifier: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs= Subject key identifier: BC:99:75:05:78:59:DF:34:4C:6C:EA:2C:E8:B0:E8:07:7F:0A:13:84 Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e Certificate serial: 019B77C733BBA7CBFBC271B9A5B8AFBFBD4F Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 45.137.220.0/24 maxlen: 24 45.137.221.0/24 maxlen: 24 45.137.222.0/24 maxlen: 24 94.156.128.0/24 maxlen: 24 109.94.110.0/24 maxlen: 24 185.141.60.0/24 maxlen: 24 185.148.144.0/24 maxlen: 24 185.148.145.0/24 maxlen: 24 185.148.146.0/24 maxlen: 24 185.148.147.0/24 maxlen: 24 185.205.208.0/24 maxlen: 24 185.205.211.0/24 maxlen: 24 2a07:5740::/32 maxlen: 32 2a07:5741::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:bb:a7:cb:fb:c2:71:b9:a5:b8:af:bf:bd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9975057859df344c6cea2ce8b0e8077f0a1384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:d9:a7:0e:23:46:39:eb:ab:5e:2a:4d:7a: c6:e9:02:ff:d8:13:1e:39:85:ed:b5:b1:ab:e1:ca: 21:36:78:f3:ae:9f:60:d8:d7:96:f1:e5:f6:12:95: 00:44:cb:26:b8:17:a2:53:64:2e:45:e1:0d:52:a6: d2:9f:33:df:f9:aa:6d:c0:ec:c8:1b:89:26:5b:d3: e2:b3:97:ea:94:df:30:01:17:bc:a6:75:b7:a0:08: 7f:40:e4:0f:3d:dd:8b:1f:19:64:ad:7a:fa:f0:34: 7c:5d:56:d6:4e:b8:99:62:a8:a0:3c:88:e8:cf:32: 75:51:a1:ba:d7:1a:99:88:f5:97:60:65:50:3c:29: df:3e:43:26:d0:72:eb:e3:2b:ab:53:f0:63:20:be: e5:54:dc:00:2e:1b:40:ce:0a:9d:12:84:99:a4:2f: 00:67:c2:0b:6a:7e:69:b7:68:24:b4:f0:98:36:be: a2:f9:5e:cb:ab:df:f6:92:1f:09:e5:b0:5a:01:41: c6:4c:2d:e6:ba:58:c7:b4:ae:b6:24:19:99:28:a9: cb:b8:31:a5:13:db:c3:66:59:5c:a5:11:d9:28:c2: 60:1d:92:cb:2e:c7:95:5f:f5:30:63:cd:39:71:ad: db:e0:3c:db:4a:89:e2:94:c9:cd:40:04:0e:cb:a5: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:99:75:05:78:59:DF:34:4C:6C:EA:2C:E8:B0:E8:07:7F:0A:13:84 X509v3 Authority Key Identifier: keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.220.0-45.137.222.255 94.156.128.0/24 109.94.110.0/24 185.141.60.0/24 185.148.144.0/22 185.205.208.0/24 185.205.211.0/24 IPv6: 2a07:5740::/31 Signature Algorithm: sha256WithRSAEncryption 5c:6a:7d:2e:a0:9c:11:e0:87:40:e3:da:02:97:cb:f1:d3:96: 27:18:64:59:9f:cd:93:2d:aa:a3:8b:d7:68:b9:bb:1e:7b:32: a2:91:3b:33:ed:6b:16:0e:c7:1e:10:8c:fc:09:04:30:a8:11: 3b:56:0e:b6:bc:9f:0a:df:73:eb:cb:df:bb:87:77:6d:3f:bb: 86:a7:e3:84:86:ff:f8:e9:95:65:8f:75:9a:19:e6:7b:b3:be: d0:97:05:3f:f6:57:4a:6f:73:51:f9:a7:f4:a5:42:60:14:a1: 7f:7e:dc:11:99:04:c2:af:44:e2:63:82:2b:d2:6b:1b:71:99: 04:f9:f9:fd:c3:fb:a1:28:04:f7:11:86:6b:32:fc:b2:55:90: f0:df:80:4b:2a:ce:33:19:dc:1c:32:32:22:b1:cd:96:9d:8a: e6:48:0d:eb:bf:94:d1:32:cd:c2:09:01:ad:d4:b8:e4:f9:2f: 83:01:a8:05:0f:78:ff:71:73:0f:6c:2b:c6:cf:6b:3c:85:f9: c4:5e:66:6b:e8:ee:3e:58:bd:79:ea:ee:d5:27:13:c7:54:5e: 62:e4:97:ce:22:af:90:cd:ca:1e:09:90:01:d5:90:4b:7f:95: f2:80:01:82:94:97:be:14:5f:38:be:b9:66:7b:06:cc:5b:59: ad:93:dc:fa -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt3xzO7p8v7wnG5pbivv71PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx MWNkNGUwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzk5NzUwNTc4NTlkZjM0NGM2Y2VhMmNlOGIwZTgwNzdmMGExMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12XZpw4jRjnrq14qTXrG6QL/2BMe OYXttbGr4cohNnjzrp9g2NeW8eX2EpUARMsmuBeiU2QuReENUqbSnzPf+aptwOzI G4kmW9Pis5fqlN8wARe8pnW3oAh/QOQPPd2LHxlkrXr68DR8XVbWTriZYqigPIjo zzJ1UaG61xqZiPWXYGVQPCnfPkMm0HLr4yurU/BjIL7lVNwALhtAzgqdEoSZpC8A Z8ILan5pt2gktPCYNr6i+V7Lq9/2kh8J5bBaAUHGTC3muljHtK62JBmZKKnLuDGl E9vDZllcpRHZKMJgHZLLLseVX/UwY805ca3b4DzbSonilMnNQAQOy6Xq0QIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFLyZdQV4Wd80TGzqLOiw6Ad/ChOEMB8GA1UdIwQY MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It NDUyNTYxOTM1MDMxLzEvdkpsMUJYaFozelJNYk9vczZMRG9CMzhLRTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyMAwDBAItidwD BAAtid4DBABenIADBABtXm4DBAC5jTwDBAK5lJADBAC5zdADBAC5zdMwDQQCAAIw BwMFASoHV0AwDQYJKoZIhvcNAQELBQADggEBAFxqfS6gnBHgh0Dj2gKXy/HTlicY ZFmfzZMtqqOL12i5ux57MqKROzPtaxYOxx4QjPwJBDCoETtWDra8nwrfc+vL37uH d20/u4an44SG//jplWWPdZoZ5nuzvtCXBT/2V0pvc1H5p/SlQmAUoX9+3BGZBMKv ROJjgivSaxtxmQT5+f3D+6EoBPcRhmsy/LJVkPDfgEsqzjMZ3BwyMiKxzZadiuZI Deu/lNEyzcIJAa3UuOT5L4MBqAUPeP9xcw9sK8bPazyF+cReZmvo7j5YvXnq7tUn E8dUXmLkl84ir5DNyh4JkAHVkEt/lfKAAYKUl74UXzi+uWZ7BsxbWa2T3Po= -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:51 2026 by rpki-client