This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/VgL36YzjuUmby5Rqnxhdy5ZXUmI.roa File: VgL36YzjuUmby5Rqnxhdy5ZXUmI.roa (raw, json) Hash identifier: N2wjkHViAzy8sVFwdBfW/Di47+eur/Hn5UR1A1vtI2w= Subject key identifier: 56:02:F7:E9:8C:E3:B9:49:9B:CB:94:6A:9F:18:5D:CB:96:57:52:62 Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f Certificate serial: 019B76EB3B0C83976CCCEDF62331FB93353C Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/VgL36YzjuUmby5Rqnxhdy5ZXUmI.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207937 IP address blocks: 45.66.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:0c:83:97:6c:cc:ed:f6:23:31:fb:93:35:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5602f7e98ce3b9499bcb946a9f185dcb96575262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:31:73:58:29:39:78:d2:74:2d:15:9b:e2: 82:88:a1:63:84:85:10:1a:1f:5a:a7:52:8c:1c:89: 47:7b:61:4a:89:6a:b1:20:7d:8a:d4:c7:14:8c:16: 94:1e:7b:84:29:af:10:3f:d7:e0:a9:ec:e1:41:3f: 9c:e2:89:8c:1e:03:e8:b6:27:92:b9:72:57:e3:ff: a4:1b:44:5b:36:91:ad:1a:c0:41:be:e2:16:97:85: 4a:6d:10:cf:cd:ec:6a:d1:45:be:91:fa:63:33:1a: c7:4c:75:29:81:4c:28:1f:1d:56:a3:f7:14:f0:74: c8:bf:9a:94:6f:07:ba:d0:08:68:ae:db:91:26:d2: 73:47:3f:72:66:9b:fd:7e:39:e0:46:78:8d:5b:ff: 16:07:91:0d:14:12:af:08:e3:1d:ff:9c:e1:71:1d: 38:96:38:7a:c4:c3:94:d8:7b:7d:2f:51:13:6b:aa: a6:d0:26:d0:fa:4d:df:f0:a5:1c:6b:80:d8:a1:e0: 6c:ba:f4:5b:6a:75:4a:14:e6:bf:7d:9b:22:de:3c: 52:4f:33:f6:0e:c5:79:0a:14:c0:a5:fe:8f:df:c0: dd:78:e4:cd:77:18:77:60:47:27:b2:ba:e0:ed:94: 50:bc:f7:5d:a0:68:ce:0f:fe:41:38:61:ea:73:c7: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:F7:E9:8C:E3:B9:49:9B:CB:94:6A:9F:18:5D:CB:96:57:52:62 X509v3 Authority Key Identifier: keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/VgL36YzjuUmby5Rqnxhdy5ZXUmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.16.0/22 Signature Algorithm: sha256WithRSAEncryption 09:66:27:7a:78:c5:85:d5:89:b1:46:89:b2:2b:67:d4:72:04: cb:ca:d5:5e:e4:df:3c:10:22:14:df:55:cf:00:3f:6a:79:f6: e9:2b:72:d9:84:4a:7a:c0:b3:0d:27:85:83:36:02:bd:49:53: 84:7a:e8:a2:b9:05:26:b1:56:a4:08:ad:24:21:78:9d:d3:a2: d4:d2:4b:37:f0:d0:08:1a:18:21:41:ce:bf:72:2b:a6:8c:44: 36:0c:b3:4c:df:77:6f:08:6e:b5:61:b9:7a:51:44:d2:c5:e4: 68:12:25:22:b1:63:ea:00:87:c1:97:75:ff:a8:d0:7d:75:1b: c1:46:b4:87:28:a2:59:bb:89:7b:ff:ea:c4:ee:97:57:6b:aa: b9:28:40:d8:e7:20:7f:97:83:65:fe:20:d1:72:08:8c:c2:d3: 4a:9c:6e:54:53:cd:de:e6:82:65:28:29:64:fb:4f:05:b0:31: e2:9d:3b:fd:8c:4c:0f:ff:5a:ef:c9:b1:55:52:e7:6d:4d:36: ce:a5:46:97:98:27:89:bf:88:f2:d6:f1:7a:c3:62:cf:b7:d4: 1b:d1:ee:df:d5:09:24:61:46:a0:7f:96:97:df:50:95:c1:d6: 9f:49:d6:37:4b:d7:52:b6:bf:4b:71:ed:b0:21:51:b0:78:f4: 65:14:ea:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zsMg5dszO32IzH7kzU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTBkYjEwMjcwMzA4MmM3Y2E1NTRhYmI1YjIyNzYwMDE4 ZDU2M2YwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjAyZjdlOThjZTNiOTQ5OWJjYjk0NmE5ZjE4NWRjYjk2NTc1MjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLQxc1gpOXjSdC0Vm+KCiKFjhIUQ Gh9ap1KMHIlHe2FKiWqxIH2K1McUjBaUHnuEKa8QP9fgqezhQT+c4omMHgPotieS uXJX4/+kG0RbNpGtGsBBvuIWl4VKbRDPzexq0UW+kfpjMxrHTHUpgUwoHx1Wo/cU 8HTIv5qUbwe60AhortuRJtJzRz9yZpv9fjngRniNW/8WB5ENFBKvCOMd/5zhcR04 ljh6xMOU2Ht9L1ETa6qm0CbQ+k3f8KUca4DYoeBsuvRbanVKFOa/fZsi3jxSTzP2 DsV5ChTApf6P38DdeOTNdxh3YEcnsrrg7ZRQvPddoGjOD/5BOGHqc8f27wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYC9+mM47lJm8uUap8YXcuWV1JiMB8GA1UdIwQY MBaAFGSg2xAnAwgsfKVUq7WyJ2ABjVY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEt ZjE3OWRiNWYwNGI2LzEvVmdMMzZZemp1VW1ieTVScW54aGR5NVpYVW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEtZjE3OWRiNWYwNGI2 LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUIQMA0G CSqGSIb3DQEBCwUAA4IBAQAJZid6eMWF1YmxRomyK2fUcgTLytVe5N88ECIU31XP AD9qefbpK3LZhEp6wLMNJ4WDNgK9SVOEeuiiuQUmsVakCK0kIXid06LU0ks38NAI GhghQc6/ciumjEQ2DLNM33dvCG61Ybl6UUTSxeRoEiUisWPqAIfBl3X/qNB9dRvB RrSHKKJZu4l7/+rE7pdXa6q5KEDY5yB/l4Nl/iDRcgiMwtNKnG5UU83e5oJlKClk +08FsDHinTv9jEwP/1rvybFVUudtTTbOpUaXmCeJv4jy1vF6w2LPt9Qb0e7f1Qkk YUagf5aX31CVwdafSdY3S9dStr9Lce2wIVGwePRlFOoN -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:52 2026 by rpki-client