This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa File: 5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa (raw, json) Hash identifier: kGU2pG7tI4JFvO4VXkUaTdEhyoNcFmBCA+lGdKRbj0g= Subject key identifier: E5:C3:5B:F1:62:F0:3A:4C:99:CF:1A:AF:66:95:55:FE:D5:F1:8D:96 Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Certificate serial: 019B797E4A956B6F79155F7B33986DEBE66C Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa Signing time: Thu 01 Jan 2026 12:17:58 +0000 ROA not before: Thu 01 Jan 2026 12:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208899 IP address blocks: 45.15.228.0/24 maxlen: 24 45.15.229.0/24 maxlen: 24 45.15.230.0/24 maxlen: 24 45.15.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4a:95:6b:6f:79:15:5f:7b:33:98:6d:eb:e6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c35bf162f03a4c99cf1aaf669555fed5f18d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:d9:bf:6a:74:bf:9e:66:4f:96:7e:27:65: 77:41:69:3d:27:36:d2:33:b7:ac:10:51:5d:4c:e4: 50:8c:c3:42:4e:40:ef:a8:37:86:79:e5:3f:61:ac: 6f:12:9c:03:a2:9a:33:7b:27:4f:c1:89:67:d2:fa: 9f:9f:9a:49:bb:64:ea:02:92:12:d5:5a:7a:73:c2: 5e:e3:18:b7:9b:15:63:2a:a7:d4:79:7c:45:bf:6f: 40:75:92:1e:48:33:5f:56:27:e9:0c:8c:49:88:b6: 86:b9:bc:c4:48:db:74:a4:bb:74:30:1f:30:72:d1: dc:b8:54:5f:4b:fa:a6:f0:1c:8b:c9:dd:3d:e6:07: d2:b1:70:be:20:ef:b1:b8:0c:a4:bb:56:94:ff:07: 8c:02:a0:0b:df:c2:2c:7e:97:6e:01:9c:ea:16:72: ab:e3:b2:b7:9c:63:e9:b8:75:95:67:ec:4f:2a:95: 60:a3:c7:cd:2b:85:16:64:e4:e2:f2:3d:3a:0c:af: 94:12:f0:32:c3:a0:c3:70:ab:de:09:52:24:00:9c: b1:b7:63:c7:36:fb:cf:91:72:63:87:c4:37:3c:80: 61:58:48:28:c5:49:de:10:d2:b9:61:43:fd:ac:68: 12:ca:d6:46:4d:ce:71:74:ac:6b:83:ce:cc:fb:79: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:5B:F1:62:F0:3A:4C:99:CF:1A:AF:66:95:55:FE:D5:F1:8D:96 X509v3 Authority Key Identifier: keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.228.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:25:eb:ac:0f:5c:2c:24:3a:97:89:0a:84:5d:3d:38:15:e9: a7:ce:e9:77:f1:5a:95:b3:42:88:9a:5e:a2:53:95:e6:44:be: 61:0e:bd:c9:b8:b6:a4:84:4f:28:44:2d:44:90:bc:ca:d1:3d: a4:ac:61:ea:76:ee:9a:6c:3d:be:43:83:3a:9a:47:c9:3e:db: 26:a6:2b:8d:64:90:d1:a2:23:e1:7d:69:b4:f6:40:f8:10:fe: b6:50:1b:6a:26:5a:2e:d6:0a:3c:f6:9b:89:40:a9:31:07:7b: 02:75:25:73:a7:00:4d:ce:2d:d6:16:be:25:27:41:f8:c0:3a: 50:8d:f9:1e:a7:af:48:74:f2:55:dc:0c:d3:08:d9:a6:72:bf: ab:74:c3:dd:58:c7:4f:1d:51:4f:e5:a7:31:26:3d:83:44:fa: a5:b7:9b:92:34:a3:bb:ee:7d:0f:af:c6:de:ac:30:66:8d:54: 84:33:9e:84:19:cf:b4:26:e7:a0:ad:48:36:49:f0:f2:06:1c: 96:4b:40:19:aa:90:36:1d:df:82:c6:57:62:27:ab:0d:e1:f5: 0f:fb:ed:be:2b:16:1b:0b:46:5a:40:8a:69:40:07:ff:0e:77: 78:28:2d:2c:fb:f1:58:53:62:2f:d6:bd:78:c6:9f:c5:29:f2: a9:76:ee:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkqVa295FV97M5ht6+ZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm MjQ0ZDMwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWMzNWJmMTYyZjAzYTRjOTljZjFhYWY2Njk1NTVmZWQ1ZjE4ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmHZv2p0v55mT5Z+J2V3QWk9JzbS M7esEFFdTORQjMNCTkDvqDeGeeU/YaxvEpwDopozeydPwYln0vqfn5pJu2TqApIS 1Vp6c8Je4xi3mxVjKqfUeXxFv29AdZIeSDNfVifpDIxJiLaGubzESNt0pLt0MB8w ctHcuFRfS/qm8ByLyd095gfSsXC+IO+xuAyku1aU/weMAqAL38IsfpduAZzqFnKr 47K3nGPpuHWVZ+xPKpVgo8fNK4UWZOTi8j06DK+UEvAyw6DDcKveCVIkAJyxt2PH NvvPkXJjh8Q3PIBhWEgoxUneENK5YUP9rGgSytZGTc5xdKxrg87M+3lD6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXDW/Fi8DpMmc8ar2aVVf7V8Y2WMB8GA1UdIwQY MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt OGMzYjNmMzBkMjE1LzEvNWNOYjhXTHdPa3laenhxdlpwVlZfdFh4alpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1 LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ/kMA0G CSqGSIb3DQEBCwUAA4IBAQB+JeusD1wsJDqXiQqEXT04Femnzul38VqVs0KIml6i U5XmRL5hDr3JuLakhE8oRC1EkLzK0T2krGHqdu6abD2+Q4M6mkfJPtsmpiuNZJDR oiPhfWm09kD4EP62UBtqJlou1go89puJQKkxB3sCdSVzpwBNzi3WFr4lJ0H4wDpQ jfkep69IdPJV3AzTCNmmcr+rdMPdWMdPHVFP5acxJj2DRPqlt5uSNKO77n0Pr8be rDBmjVSEM56EGc+0JuegrUg2SfDyBhyWS0AZqpA2Hd+CxldiJ6sN4fUP++2+KxYb C0ZaQIppQAf/Dnd4KC0s+/FYU2Iv1r14xp/FKfKpdu7p -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:12 2026 by rpki-client