This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VPaHcYH70CRnOEoPLm1fc8G4L4I.roa File: VPaHcYH70CRnOEoPLm1fc8G4L4I.roa (raw, json) Hash identifier: dC/4c7/+fPbeUU4XQxJHEJGLgC64fC4iWvSuaUuSdqg= Subject key identifier: 54:F6:87:71:81:FB:D0:24:67:38:4A:0F:2E:6D:5F:73:C1:B8:2F:82 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED86BFCB9F95F3987246DFE91CC82 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VPaHcYH70CRnOEoPLm1fc8G4L4I.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206410 IP address blocks: 78.83.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d8:6b:fc:b9:f9:5f:39:87:24:6d:fe:91:cc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54f6877181fbd02467384a0f2e6d5f73c1b82f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:2b:b1:e0:79:5a:ee:7d:72:49:3a:2b:9a: 2d:78:45:dc:be:67:64:2a:60:21:c2:dd:1f:8b:9e: 3c:cf:9b:b1:14:ba:d9:aa:06:d9:e0:f9:e9:34:a8: e7:29:0d:e3:f1:9d:fe:a4:30:05:26:76:6a:34:f1: 6b:a2:e9:2d:fe:c9:97:2b:2d:6d:e0:91:93:aa:30: 93:53:2d:18:bf:bb:27:77:6f:df:7c:fb:a9:eb:d2: 0e:ea:12:02:b6:a3:38:ac:29:33:6f:47:84:32:2f: b1:ff:09:7f:cc:f7:06:25:04:79:c1:69:c0:b3:d9: 6a:b6:ac:8e:be:65:05:57:1e:27:a5:20:52:b2:25: e8:dc:ad:49:7a:b2:d6:c1:8a:02:82:16:4b:0c:e6: 19:aa:ab:fb:1c:93:9c:87:a5:d3:b7:fd:33:d1:e8: 78:3d:7e:37:5e:30:4b:3c:76:94:cb:81:18:61:a4: c0:1a:10:3d:f2:e1:8b:c2:2d:36:86:57:12:f8:8c: a4:8d:ca:f5:1e:41:2f:d5:d4:fb:1a:7b:b7:94:d8: c9:31:1d:a0:75:1c:c4:b8:af:ac:28:e0:c3:8f:18: 35:12:9f:46:2b:a2:00:df:28:3d:bd:0f:be:45:1c: 55:d6:f2:27:1a:58:81:12:51:25:3d:2d:cc:d0:c9: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F6:87:71:81:FB:D0:24:67:38:4A:0F:2E:6D:5F:73:C1:B8:2F:82 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VPaHcYH70CRnOEoPLm1fc8G4L4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.83.164.0/24 Signature Algorithm: sha256WithRSAEncryption 03:92:5b:f3:4c:48:0a:b7:a0:e9:0e:b0:05:a8:ed:a7:6a:60: f1:4c:97:08:a7:eb:1a:e1:14:2f:c3:e8:3e:57:f4:47:e6:ca: ab:ea:2f:44:34:0d:4b:30:7d:88:ed:0b:cd:cf:2e:a8:84:f1: c8:82:f5:07:8a:66:06:83:34:78:69:b0:13:45:b4:79:5a:d1: de:f3:2c:7c:78:41:a3:4b:3a:a1:9c:54:97:2c:ac:81:b8:68: 1b:26:04:69:49:30:98:30:98:d5:9e:ee:78:f3:6b:9b:8d:8d: 0f:0d:b7:3b:e9:b0:1d:94:fe:be:80:e0:60:b1:48:aa:d1:c1: 15:be:da:b9:94:45:c7:4c:d6:77:e5:42:e3:c7:dc:8f:f7:81: 00:79:a6:a4:c9:9c:df:15:b3:52:a1:0d:68:6f:a8:42:97:a6: 9f:99:65:fd:8f:a8:7a:75:64:6d:e6:3a:ee:1f:e7:c1:07:45: 38:82:70:42:77:10:9a:7e:83:11:0c:ef:05:36:db:41:5c:6f: 1f:1b:de:05:12:85:75:dc:80:47:6c:7b:38:be:75:7f:4f:f3: 98:70:14:e9:6a:9d:ff:06:92:8b:b2:27:5d:fd:e0:3d:a2:f0: 44:be:3e:19:42:70:01:c7:68:13:0e:55:8b:79:f2:9b:d6:5d: 40:17:b4:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fthr/Ln5XzmHJG3+kcyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGY2ODc3MTgxZmJkMDI0NjczODRhMGYyZTZkNWY3M2MxYjgyZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGorseB5Wu59ckk6K5oteEXcvmdk KmAhwt0fi548z5uxFLrZqgbZ4PnpNKjnKQ3j8Z3+pDAFJnZqNPFroukt/smXKy1t 4JGTqjCTUy0Yv7snd2/ffPup69IO6hICtqM4rCkzb0eEMi+x/wl/zPcGJQR5wWnA s9lqtqyOvmUFVx4npSBSsiXo3K1JerLWwYoCghZLDOYZqqv7HJOch6XTt/0z0eh4 PX43XjBLPHaUy4EYYaTAGhA98uGLwi02hlcS+Iykjcr1HkEv1dT7Gnu3lNjJMR2g dRzEuK+sKODDjxg1Ep9GK6IA3yg9vQ++RRxV1vInGliBElElPS3M0Mnf1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFT2h3GB+9AkZzhKDy5tX3PBuC+CMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvVlBhSGNZSDcwQ1JuT0VvUExtMWZjOEc0TDRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlOkMA0G CSqGSIb3DQEBCwUAA4IBAQADklvzTEgKt6DpDrAFqO2namDxTJcIp+sa4RQvw+g+ V/RH5sqr6i9ENA1LMH2I7QvNzy6ohPHIgvUHimYGgzR4abATRbR5WtHe8yx8eEGj SzqhnFSXLKyBuGgbJgRpSTCYMJjVnu5482ubjY0PDbc76bAdlP6+gOBgsUiq0cEV vtq5lEXHTNZ35ULjx9yP94EAeaakyZzfFbNSoQ1ob6hCl6afmWX9j6h6dWRt5jru H+fBB0U4gnBCdxCafoMRDO8FNttBXG8fG94FEoV13IBHbHs4vnV/T/OYcBTpap3/ BpKLsidd/eA9ovBEvj4ZQnABx2gTDlWLefKb1l1AF7RO -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:32 2026 by rpki-client