This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/V68VgvWFXK8SNckccpiLmpleGX4.roa File: V68VgvWFXK8SNckccpiLmpleGX4.roa (raw, json) Hash identifier: yrkbL90m9V1JdVtjSlyfTTPXiIJR9Gk9nvsichDj+6I= Subject key identifier: 57:AF:15:82:F5:85:5C:AF:12:35:C9:1C:72:98:8B:9A:99:5E:19:7E Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8452C07B495C1A0D1C67864AE62698 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/V68VgvWFXK8SNckccpiLmpleGX4.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211750 IP address blocks: 45.128.157.0/24 maxlen: 24 45.128.158.0/24 maxlen: 24 185.228.81.0/24 maxlen: 24 185.228.82.0/24 maxlen: 24 195.88.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:52:c0:7b:49:5c:1a:0d:1c:67:86:4a:e6:26:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57af1582f5855caf1235c91c72988b9a995e197e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:b3:b9:be:10:ae:1b:33:2c:de:1d:b7:5d: b4:3f:20:38:05:5f:2f:75:0a:75:b0:44:12:e7:45: a7:23:cc:25:c2:11:d0:18:dc:4c:7a:45:21:87:2f: 25:85:09:8f:b1:50:fa:eb:b7:06:fd:e1:44:d9:39: 55:06:f6:a4:9c:5c:ee:83:b3:fb:80:91:30:1a:ee: b4:c5:d2:ad:18:51:80:60:69:03:ef:9e:73:2f:ee: 21:38:79:20:f6:11:d9:4c:00:ee:ce:81:69:a8:5a: 64:9c:ff:1d:59:5b:d6:1f:f4:3b:c5:bc:15:f2:12: e7:c6:96:ec:98:52:6e:2e:f5:d7:56:2d:00:fe:b8: 1e:63:21:6e:82:e4:74:88:54:25:a0:0e:07:bc:3d: 99:08:c7:ff:27:be:22:e0:24:66:3f:6c:84:60:b5: 4e:9e:34:96:60:d1:c1:73:15:56:32:76:20:8c:f3: e4:01:1f:58:43:2c:d7:a5:23:35:51:8b:8e:29:b1: fe:41:1f:fa:5a:dc:b4:cd:91:cf:83:5c:59:36:0d: 35:71:fd:90:56:e2:4d:2f:b0:00:d7:38:60:88:50: 5e:16:e6:e9:5b:54:fa:78:7b:62:1a:12:17:67:ab: da:fc:d6:27:4a:9c:69:d7:08:0c:e2:2b:96:52:dd: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AF:15:82:F5:85:5C:AF:12:35:C9:1C:72:98:8B:9A:99:5E:19:7E X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/V68VgvWFXK8SNckccpiLmpleGX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.157.0-45.128.158.255 185.228.81.0-185.228.82.255 195.88.190.0/24 Signature Algorithm: sha256WithRSAEncryption a7:df:fe:9f:99:f6:89:2f:fb:d9:90:4d:a9:4c:39:f8:66:26: bc:f3:5e:b2:79:da:b5:84:d2:9d:71:cd:1f:fe:e3:6d:34:32: 86:b8:0c:bd:b8:10:b2:c9:b7:17:d4:eb:3f:2b:8f:16:24:f0: 52:8f:1f:f9:00:c3:6e:af:60:91:f1:f9:50:55:f1:12:af:05: f4:b3:9e:60:c3:f4:1e:7c:ea:b8:b1:8c:a6:fd:49:ab:a7:99: b6:10:1b:10:ce:99:45:a8:fa:20:15:b5:40:e2:cc:9d:0d:d1: c1:8b:d1:7b:d3:07:71:4e:89:0c:d4:97:05:04:38:93:69:56: f3:95:e3:dd:dd:4a:a9:57:6e:b7:02:02:1c:a2:cd:25:15:30: 53:9b:aa:db:19:e4:5d:20:b0:db:21:f6:5e:5e:b5:0a:a7:e6: 57:ab:a9:5b:a2:dd:c4:07:bb:57:83:f8:1f:e3:92:be:d9:1a: 42:74:66:a4:c7:e3:e9:42:1e:97:f8:df:af:b9:0f:83:72:80: aa:25:f0:5f:78:6c:21:bb:49:51:51:f1:f6:58:d5:b2:e6:68: ee:4f:3b:79:15:b0:ba:52:e0:f5:9f:5a:4b:1d:f3:47:78:26: 3b:81:ef:52:60:35:98:9b:61:dd:47:c1:73:0b:12:5c:94:24: 7a:b9:8f:de -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/hFLAe0lcGg0cZ4ZK5iaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2FmMTU4MmY1ODU1Y2FmMTIzNWM5MWM3Mjk4OGI5YTk5NWUxOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGKzub4QrhszLN4dt120PyA4BV8v dQp1sEQS50WnI8wlwhHQGNxMekUhhy8lhQmPsVD667cG/eFE2TlVBvaknFzug7P7 gJEwGu60xdKtGFGAYGkD755zL+4hOHkg9hHZTADuzoFpqFpknP8dWVvWH/Q7xbwV 8hLnxpbsmFJuLvXXVi0A/rgeYyFuguR0iFQloA4HvD2ZCMf/J74i4CRmP2yEYLVO njSWYNHBcxVWMnYgjPPkAR9YQyzXpSM1UYuOKbH+QR/6Wty0zZHPg1xZNg01cf2Q VuJNL7AA1zhgiFBeFubpW1T6eHtiGhIXZ6va/NYnSpxp1wgM4iuWUt02dwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFevFYL1hVyvEjXJHHKYi5qZXhl+MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvVjY4Vmd2V0ZYSzhTTmNrY2NwaUxtcGxlR1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAtgJ0D BAAtgJ4wDAMEALnkUQMEALnkUgMEAMNYvjANBgkqhkiG9w0BAQsFAAOCAQEAp9/+ n5n2iS/72ZBNqUw5+GYmvPNesnnatYTSnXHNH/7jbTQyhrgMvbgQssm3F9TrPyuP FiTwUo8f+QDDbq9gkfH5UFXxEq8F9LOeYMP0HnzquLGMpv1Jq6eZthAbEM6ZRaj6 IBW1QOLMnQ3RwYvRe9MHcU6JDNSXBQQ4k2lW85Xj3d1KqVdutwICHKLNJRUwU5uq 2xnkXSCw2yH2Xl61CqfmV6upW6LdxAe7V4P4H+OSvtkaQnRmpMfj6UIel/jfr7kP g3KAqiXwX3hsIbtJUVHx9ljVsuZo7k87eRWwulLg9Z9aSx3zR3gmO4HvUmA1mJth 3UfBcwsSXJQkermP3g== -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:57 2026 by rpki-client