This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/VHgUN5juRzMz3CUHZPoEHnzr2z0.roa File: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (raw, json) Hash identifier: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ= Subject key identifier: 54:78:14:37:98:EE:47:33:33:DC:25:07:64:FA:04:1E:7C:EB:DB:3D Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 019B7835181CA63AD246EAC2D775CC9B8D1B Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/VHgUN5juRzMz3CUHZPoEHnzr2z0.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59580 IP address blocks: 147.78.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:18:1c:a6:3a:d2:46:ea:c2:d7:75:cc:9b:8d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5478143798ee473333dc250764fa041e7cebdb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:9d:64:11:ac:19:a2:39:5d:63:2e:09:ea: c2:1d:38:00:92:2e:68:4e:3f:be:e1:de:f0:74:b6: fd:4a:44:44:88:82:28:dd:70:ac:61:d4:ae:89:a4: d5:19:ca:67:9d:12:21:34:8a:ae:b9:ce:19:56:2c: 5b:3b:9c:ef:6e:78:d7:31:9d:a1:78:8a:30:bf:57: 2d:08:a4:61:c1:1d:55:7e:4c:d5:ad:01:de:60:f6: b2:0c:18:05:a0:ba:94:96:3d:be:2e:73:f2:e4:79: a6:9d:f2:3a:47:ee:93:6e:30:39:e6:01:17:1e:db: 49:ca:ea:7b:d0:e4:54:58:65:73:5b:31:f6:6c:97: d7:99:e1:ed:2e:25:3f:f4:ea:2f:d4:bd:e9:9d:a0: ec:56:e1:c8:a4:f1:d4:59:64:53:85:52:e3:3b:e9: 8f:90:1a:6a:a6:dc:8a:1c:24:46:02:ed:8d:cd:35: 4d:ad:1f:04:2b:1f:1d:71:a4:dd:94:17:29:7c:21: 77:32:2e:8c:bc:90:d0:3e:5b:5d:83:09:bf:68:9a: 92:05:ee:af:8f:76:29:45:1d:e7:28:d7:36:a8:51: 18:72:88:f5:a9:b4:96:a8:6d:01:1b:06:1b:cc:5d: 6a:ba:c5:42:82:1e:e1:b5:70:2c:e8:f7:43:ca:d7: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:78:14:37:98:EE:47:33:33:DC:25:07:64:FA:04:1E:7C:EB:DB:3D X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/VHgUN5juRzMz3CUHZPoEHnzr2z0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.46.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:43:d9:46:7a:29:c5:8c:94:31:63:3d:ce:10:4b:84:67:57: 00:b7:fc:07:ee:e9:16:71:f4:74:2e:27:6a:ca:fb:25:56:5b: c5:51:d0:5a:57:61:9f:b0:e6:4a:96:7f:12:46:d7:3c:ea:2e: b3:6c:a1:d9:79:0c:dd:88:c1:58:5a:08:cd:16:e2:ae:53:c3: 11:a9:4b:81:0c:90:2c:23:45:35:23:23:ed:42:d3:88:b0:b4: b9:90:69:c9:e6:0d:61:21:1a:4a:de:cb:70:cb:f4:f3:ad:63: 17:8c:0f:1b:c7:77:e8:bc:cb:25:ec:25:34:0d:e4:fa:64:72: fd:39:39:56:06:c8:66:df:da:6e:05:18:02:23:85:9d:05:5f: cb:c7:7e:28:76:be:75:87:3d:92:06:43:0f:51:10:00:b1:23: 9b:83:fc:7b:f9:d5:e0:e0:20:c0:4e:55:13:b9:ce:fa:8a:c0: f6:6f:ea:08:53:5a:9b:0c:7d:19:1f:8d:6d:71:58:60:e9:5d: 97:f1:5e:8d:07:82:43:07:86:1b:8f:3e:49:70:80:f1:e7:ea: 44:81:a3:57:e5:8e:98:47:30:8f:e1:8b:64:03:bf:0f:a0:89: 0f:c6:29:fe:53:fe:bb:c6:3f:53:b3:ff:25:79:e9:47:95:c8: ab:35:aa:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRgcpjrSRurC13XMm40bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDc4MTQzNzk4ZWU0NzMzMzNkYzI1MDc2NGZhMDQxZTdjZWJkYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmWdZBGsGaI5XWMuCerCHTgAki5o Tj++4d7wdLb9SkREiIIo3XCsYdSuiaTVGcpnnRIhNIquuc4ZVixbO5zvbnjXMZ2h eIowv1ctCKRhwR1VfkzVrQHeYPayDBgFoLqUlj2+LnPy5HmmnfI6R+6TbjA55gEX HttJyup70ORUWGVzWzH2bJfXmeHtLiU/9Oov1L3pnaDsVuHIpPHUWWRThVLjO+mP kBpqptyKHCRGAu2NzTVNrR8EKx8dcaTdlBcpfCF3Mi6MvJDQPltdgwm/aJqSBe6v j3YpRR3nKNc2qFEYcoj1qbSWqG0BGwYbzF1qusVCgh7htXAs6PdDytfBtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFR4FDeY7kczM9wlB2T6BB5869s9MB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvVkhnVU41anVSek16M0NVSFpQb0VIbnpyMnowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk04uMA0G CSqGSIb3DQEBCwUAA4IBAQBOQ9lGeinFjJQxYz3OEEuEZ1cAt/wH7ukWcfR0Lidq yvslVlvFUdBaV2GfsOZKln8SRtc86i6zbKHZeQzdiMFYWgjNFuKuU8MRqUuBDJAs I0U1IyPtQtOIsLS5kGnJ5g1hIRpK3stwy/TzrWMXjA8bx3fovMsl7CU0DeT6ZHL9 OTlWBshm39puBRgCI4WdBV/Lx34odr51hz2SBkMPURAAsSObg/x7+dXg4CDATlUT uc76isD2b+oIU1qbDH0ZH41tcVhg6V2X8V6NB4JDB4Ybjz5JcIDx5+pEgaNX5Y6Y RzCP4YtkA78PoIkPxin+U/67xj9Ts/8leelHlcirNaoD -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:42 2026 by rpki-client