This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/aV6_5NcVm_s_aITq8cO34-jcjdE.roa File: aV6_5NcVm_s_aITq8cO34-jcjdE.roa (raw, json) Hash identifier: wyuL5qGlVbtKqVgWA06NjGvCVBW+hNLdZho7A6q9rj8= Subject key identifier: 69:5E:BF:E4:D7:15:9B:FB:3F:68:84:EA:F1:C3:B7:E3:E8:DC:8D:D1 Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Certificate serial: 019B7AC7F24E3B37D06EC57082F4BCDBA885 Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/aV6_5NcVm_s_aITq8cO34-jcjdE.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 45.145.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f2:4e:3b:37:d0:6e:c5:70:82:f4:bc:db:a8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=695ebfe4d7159bfb3f6884eaf1c3b7e3e8dc8dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:f9:4b:49:77:c4:10:37:fa:61:a4:7c:eb: aa:99:2c:79:f1:d3:11:7d:a8:09:56:31:7f:5f:f7: 92:d6:31:75:82:22:cb:cd:4c:2a:60:0d:f7:5f:30: 5d:94:e1:fa:91:12:7c:0a:b2:ff:47:12:45:77:ad: 64:7f:96:e4:33:2a:4f:40:fc:14:70:28:f6:ed:6f: df:54:c6:28:d5:b2:52:64:a4:50:a2:d4:41:3d:ef: 48:62:6a:3c:04:1a:41:85:db:df:a8:b2:32:e1:fb: 4e:4a:b3:1d:65:ac:85:61:2d:d8:fc:d9:92:18:66: 94:f1:23:dc:86:19:6f:e0:87:63:62:c7:2f:4d:38: c0:00:db:c2:e7:6c:dc:fe:fd:d6:ab:0d:ab:92:08: 68:d8:e4:bf:1d:b7:e2:68:12:bf:00:6c:5a:70:2b: 39:7f:d4:40:13:67:35:ee:d2:4e:e7:16:29:af:04: f3:00:21:c1:fc:9b:80:73:b9:0d:84:65:ea:d9:65: 1a:1f:e1:70:c5:47:78:70:4b:c5:c6:10:08:f1:13: 92:e1:bb:c1:59:d0:b0:dc:ef:45:38:51:7f:d0:bc: c3:c0:c4:9f:c1:b3:8e:e6:ff:d6:31:ec:71:3e:ca: a1:7a:72:5f:19:6e:2e:8a:1c:b8:5b:ea:4d:3d:b1: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5E:BF:E4:D7:15:9B:FB:3F:68:84:EA:F1:C3:B7:E3:E8:DC:8D:D1 X509v3 Authority Key Identifier: keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/aV6_5NcVm_s_aITq8cO34-jcjdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.217.0/24 Signature Algorithm: sha256WithRSAEncryption 21:0a:fc:0e:03:d1:09:23:b2:14:e5:ce:68:15:78:82:ca:9f: 97:51:f4:34:7b:d3:1b:00:8a:71:a8:82:4f:27:c2:cd:7a:26: 96:22:7d:8b:ee:1e:a9:7e:d0:8d:e7:4c:d2:d6:a9:3b:c3:2c: 49:81:3f:50:44:3a:00:61:ed:e8:77:7a:0a:20:61:f3:6a:43: 75:cc:a6:cd:db:93:fb:b3:da:86:76:93:9c:d6:f3:a8:7b:26: 25:86:d3:65:73:4e:5a:7a:ef:b0:0c:f0:15:58:7d:f1:7a:9b: ab:b5:ef:54:19:e0:3a:e0:9c:97:86:49:94:ca:d4:fb:44:fe: c4:10:46:11:ba:8f:1f:e0:6c:d9:4a:fa:2a:4c:1b:60:74:84: 06:70:89:10:d0:32:6c:a4:38:70:52:33:62:70:a6:17:62:9b: 62:c2:5d:51:c9:75:d3:e2:5b:66:69:4d:f4:4b:4d:32:16:51: 93:64:7f:f2:09:c3:12:a7:1d:db:04:a2:67:ad:b4:db:f1:39: 9f:48:5b:a1:7f:f3:00:20:e1:d1:d8:79:6f:5f:95:6a:01:c6: 22:5e:a9:04:56:7c:78:89:65:90:3c:4f:0a:04:82:fd:5b:a8: 9a:5c:41:2a:7f:68:b4:2b:c8:b0:6c:21:e5:bf:68:43:28:75: b3:6a:c2:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/JOOzfQbsVwgvS826iFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy MDU0ZGQwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTVlYmZlNGQ3MTU5YmZiM2Y2ODg0ZWFmMWMzYjdlM2U4ZGM4ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H75S0l3xBA3+mGkfOuqmSx58dMR fagJVjF/X/eS1jF1giLLzUwqYA33XzBdlOH6kRJ8CrL/RxJFd61kf5bkMypPQPwU cCj27W/fVMYo1bJSZKRQotRBPe9IYmo8BBpBhdvfqLIy4ftOSrMdZayFYS3Y/NmS GGaU8SPchhlv4IdjYscvTTjAANvC52zc/v3Wqw2rkgho2OS/HbfiaBK/AGxacCs5 f9RAE2c17tJO5xYprwTzACHB/JuAc7kNhGXq2WUaH+FwxUd4cEvFxhAI8ROS4bvB WdCw3O9FOFF/0LzDwMSfwbOO5v/WMexxPsqhenJfGW4uihy4W+pNPbFuUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGlev+TXFZv7P2iE6vHDt+Po3I3RMB8GA1UdIwQY MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt ZTQ5NWFhYTBjYWMwLzEvYVY2XzVOY1ZtX3NfYUlUcThjTzM0LWpjamRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZHZMA0G CSqGSIb3DQEBCwUAA4IBAQAhCvwOA9EJI7IU5c5oFXiCyp+XUfQ0e9MbAIpxqIJP J8LNeiaWIn2L7h6pftCN50zS1qk7wyxJgT9QRDoAYe3od3oKIGHzakN1zKbN25P7 s9qGdpOc1vOoeyYlhtNlc05aeu+wDPAVWH3xepurte9UGeA64JyXhkmUytT7RP7E EEYRuo8f4GzZSvoqTBtgdIQGcIkQ0DJspDhwUjNicKYXYptiwl1RyXXT4ltmaU30 S00yFlGTZH/yCcMSpx3bBKJnrbTb8TmfSFuhf/MAIOHR2HlvX5VqAcYiXqkEVnx4 iWWQPE8KBIL9W6iaXEEqf2i0K8iwbCHlv2hDKHWzasJp -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:33 2026 by rpki-client