This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/zahqiNXuee3DPbW8Fb6Ml_-RDaw.roa File: zahqiNXuee3DPbW8Fb6Ml_-RDaw.roa (raw, json) Hash identifier: ORhfsYL2KXu+13H3lG8CeoaGQhHHQ9KlWSYICdYGKU8= Subject key identifier: CD:A8:6A:88:D5:EE:79:ED:C3:3D:B5:BC:15:BE:8C:97:FF:91:0D:AC Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Certificate serial: 019BEA51D5A2F51B8C13454A06586A129E78 Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/zahqiNXuee3DPbW8Fb6Ml_-RDaw.roa Signing time: Fri 23 Jan 2026 10:06:30 +0000 ROA not before: Fri 23 Jan 2026 10:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.81.116.0/24 maxlen: 24 45.81.117.0/24 maxlen: 24 45.81.118.0/24 maxlen: 24 45.85.240.0/24 maxlen: 24 45.85.241.0/24 maxlen: 24 45.85.243.0/24 maxlen: 24 45.145.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:51:d5:a2:f5:1b:8c:13:45:4a:06:58:6a:12:9e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Validity Not Before: Jan 23 10:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda86a88d5ee79edc33db5bc15be8c97ff910dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:35:bf:0e:46:f3:1c:11:15:d1:06:2e:ff: d9:8c:ad:35:9b:8a:cb:73:d2:9e:88:b3:cb:fc:4e: bb:ad:46:3d:09:82:c0:6f:08:0e:c5:23:f7:3c:d1: 9e:59:d7:7e:8a:4e:67:6f:4b:c6:cf:2e:30:18:8e: cb:9e:3e:48:70:d8:10:a3:17:a5:06:25:2a:f5:39: 91:a2:2d:be:a3:67:3e:4c:f8:ab:4a:fe:e4:da:ae: 9e:d3:34:24:a2:78:a0:61:63:28:9d:64:82:60:0d: 7a:49:92:4c:7d:03:ef:23:9a:52:27:dd:69:dc:44: 09:71:b4:c8:0b:70:3f:57:88:c0:64:63:ff:f6:e7: bb:6f:ca:b5:31:0f:53:35:f0:16:92:f9:70:17:e9: 9c:ee:8f:18:6b:dc:6f:6a:6b:54:46:19:10:b5:a7: b4:ec:c6:26:de:5f:6a:2a:3c:55:b2:ba:b1:4f:da: 76:57:9e:ae:b3:4e:51:e2:93:f4:ae:38:bf:3d:b4: 39:2e:73:0d:a1:6f:ad:8f:19:4b:31:3a:11:46:f4: 67:e1:10:3f:2f:d1:e3:9d:e7:de:5a:35:99:1c:20: fa:8f:d6:ed:6d:9c:b5:ef:b7:a3:cd:4d:59:1b:83: 1c:96:09:8e:2d:2b:98:92:2f:da:44:e8:48:17:ba: 93:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:6A:88:D5:EE:79:ED:C3:3D:B5:BC:15:BE:8C:97:FF:91:0D:AC X509v3 Authority Key Identifier: keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/zahqiNXuee3DPbW8Fb6Ml_-RDaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.116.0-45.81.118.255 45.85.240.0/23 45.85.243.0/24 45.145.216.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:26:a9:0e:13:c8:0a:45:f4:bb:ab:35:62:53:45:57:b9:02: 00:b9:76:56:f3:38:62:8b:26:2e:3a:00:66:70:de:b5:f8:c8: 0a:22:06:15:66:e5:3b:50:e2:cd:17:25:07:e0:b0:60:13:76: 5b:49:1f:16:71:82:da:dd:a9:7e:f9:cb:10:72:c8:dd:bd:8c: 53:63:da:f8:5e:71:b9:51:ab:ef:b2:d5:e1:aa:12:2e:6a:84: ae:f9:a4:34:8b:d4:59:00:e9:d8:df:56:15:32:0c:ae:61:92: eb:34:e5:bc:ad:d0:df:a8:62:48:0f:fd:96:99:e0:30:d1:ee: 4a:16:75:72:02:d3:4d:cc:2a:6a:15:a7:47:a7:8e:2f:6b:90: 73:a8:db:57:24:e0:ea:d3:15:6e:16:b9:31:0b:fe:21:cc:72: 32:8b:ab:92:69:1c:f3:f6:df:ff:31:86:bb:7c:bf:7a:43:56: d2:50:10:f4:8b:01:86:e8:a8:26:6a:f9:a4:f2:41:7d:02:5a: e6:d3:dd:32:3d:1a:10:93:1a:7d:ac:9c:e0:2e:2f:f1:9a:f0: ef:05:89:12:97:da:4c:30:75:28:aa:d8:c1:1b:2e:ec:43:10: 52:c7:02:b0:93:32:f0:ac:6b:96:5d:57:b4:4d:8c:0f:31:2e: a3:08:0c:2f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZvqUdWi9RuME0VKBlhqEp54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy MDU0ZGQwHhcNMjYwMTIzMTAwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGE4NmE4OGQ1ZWU3OWVkYzMzZGI1YmMxNWJlOGM5N2ZmOTEwZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhA1vw5G8xwRFdEGLv/ZjK01m4rL c9KeiLPL/E67rUY9CYLAbwgOxSP3PNGeWdd+ik5nb0vGzy4wGI7Lnj5IcNgQoxel BiUq9TmRoi2+o2c+TPirSv7k2q6e0zQkonigYWMonWSCYA16SZJMfQPvI5pSJ91p 3EQJcbTIC3A/V4jAZGP/9ue7b8q1MQ9TNfAWkvlwF+mc7o8Ya9xvamtURhkQtae0 7MYm3l9qKjxVsrqxT9p2V56us05R4pP0rji/PbQ5LnMNoW+tjxlLMToRRvRn4RA/ L9HjnefeWjWZHCD6j9btbZy177ejzU1ZG4MclgmOLSuYki/aROhIF7qTZQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFM2oaojV7nntwz21vBW+jJf/kQ2sMB8GA1UdIwQY MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt ZTQ5NWFhYTBjYWMwLzEvemFocWlOWHVlZTNEUGJXOEZiNk1sXy1SRGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAItUXQD BAAtUXYDBAEtVfADBAAtVfMDBAAtkdgwDQYJKoZIhvcNAQELBQADggEBAI0mqQ4T yApF9LurNWJTRVe5AgC5dlbzOGKLJi46AGZw3rX4yAoiBhVm5TtQ4s0XJQfgsGAT dltJHxZxgtrdqX75yxByyN29jFNj2vhecblRq++y1eGqEi5qhK75pDSL1FkA6djf VhUyDK5hkus05byt0N+oYkgP/ZaZ4DDR7koWdXIC003MKmoVp0enji9rkHOo21ck 4OrTFW4WuTEL/iHMcjKLq5JpHPP23/8xhrt8v3pDVtJQEPSLAYboqCZq+aTyQX0C WubT3TI9GhCTGn2snOAuL/Ga8O8FiRKX2kwwdSiq2MEbLuxDEFLHArCTMvCsa5Zd V7RNjA8xLqMIDC8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:46 2026 by rpki-client