This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/VFU37iQljI79t35JlR-w1IteaQw.roa
File: VFU37iQljI79t35JlR-w1IteaQw.roa (raw, json)
Hash identifier: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=
Subject key identifier: 54:55:37:EE:24:25:8C:8E:FD:B7:7E:49:95:1F:B0:D4:8B:5E:69:0C
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 019B77C739A5419CC0FAC753C3EAFB573CFE
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/VFU37iQljI79t35JlR-w1IteaQw.roa
Signing time: Thu 01 Jan 2026 04:18:23 +0000
ROA not before: Thu 01 Jan 2026 04:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 45.94.237.0/24 maxlen: 24
45.133.56.0/22 maxlen: 22
185.180.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:39:a5:41:9c:c0:fa:c7:53:c3:ea:fb:57:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Jan 1 04:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=545537ee24258c8efdb77e49951fb0d48b5e690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:65:51:c1:38:c1:55:08:2c:44:9e:55:21:
ab:17:90:f4:2a:2e:bf:97:c2:0f:48:5b:db:4c:5d:
16:fa:39:61:b4:d3:08:13:aa:8c:bc:dd:64:45:44:
c1:5b:43:f3:89:f4:5e:47:7b:06:de:10:32:74:ce:
4e:1b:d9:3e:02:e6:e7:c9:be:57:b1:01:90:10:aa:
0c:ed:de:60:9b:ff:9d:20:44:67:5f:4e:f7:83:e8:
63:91:c8:0e:e3:94:46:98:12:4c:9e:cb:b6:0a:7c:
3f:a0:1a:1e:0b:74:58:67:7e:c3:2a:1d:da:7e:2f:
40:3e:4b:d4:5c:6c:13:6e:1d:6b:ab:99:57:96:38:
b2:a0:67:c7:df:14:dc:c7:aa:ec:1b:31:cf:a0:21:
b1:37:12:a5:3d:f5:54:c7:62:9c:4d:4d:6f:d5:2f:
c0:b9:ad:f2:97:0f:32:61:92:3f:24:c8:e1:29:3e:
c0:84:26:0e:92:3a:d4:38:ff:93:e7:b5:88:5a:1f:
ac:a1:56:59:5d:5f:83:fb:2f:75:a5:89:6d:2a:a4:
0f:76:59:96:3d:b7:60:a5:80:86:61:db:45:0e:32:
7e:4a:39:82:4a:2f:1b:45:8c:45:38:6c:c4:d1:1d:
b3:da:8b:58:d5:cf:c9:1f:0b:0b:73:33:31:6b:21:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:37:EE:24:25:8C:8E:FD:B7:7E:49:95:1F:B0:D4:8B:5E:69:0C
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/VFU37iQljI79t35JlR-w1IteaQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.237.0/24
45.133.56.0/22
185.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:61:91:3b:01:bf:ee:1a:22:cf:be:8b:8e:f4:35:af:1b:fe:
fa:1c:cf:db:64:e3:f0:6c:a5:bd:cc:3e:88:ff:91:09:c8:c7:
49:63:fa:5c:b7:67:45:f2:68:88:4d:59:6a:f8:f6:6b:72:ed:
e6:5d:51:8c:af:32:c0:3c:65:5d:e9:d0:4e:10:51:84:ed:8c:
d7:d3:0c:0a:18:a4:10:22:4b:68:3b:33:92:42:26:78:45:41:
ee:92:d0:01:20:2d:4c:da:8c:bc:89:92:d2:04:54:f0:f4:08:
4e:68:b1:b0:e2:54:ff:c7:0e:2b:28:ed:d1:37:4d:c2:a1:e9:
62:31:96:ef:4f:9b:07:9b:b1:e0:2d:33:5a:da:57:f8:bd:b5:
b2:ab:e3:7b:7f:e5:bf:32:9e:24:68:bd:94:b9:fa:80:80:fb:
ef:76:3c:5b:06:dd:ee:06:3f:08:60:30:6f:8b:80:f6:86:68:
c5:e3:bc:ae:1f:ef:a3:20:94:0b:cc:c4:37:80:1d:fa:49:7c:
a3:61:6e:36:2c:42:21:69:15:61:13:86:57:d0:21:15:7a:27:
a4:43:e0:c4:9a:bf:e1:68:0b:65:b7:eb:82:8d:ef:43:68:ba:
b4:1f:43:cf:a8:52:7c:fb:2a:e3:66:51:fa:cd:f0:49:97:62:
f5:b5:9f:91
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt3xzmlQZzA+sdTw+r7Vzz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh
NmY3NTkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDU1MzdlZTI0MjU4YzhlZmRiNzdlNDk5NTFmYjBkNDhiNWU2OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X5lUcE4wVUILESeVSGrF5D0Ki6/
l8IPSFvbTF0W+jlhtNMIE6qMvN1kRUTBW0PzifReR3sG3hAydM5OG9k+Aubnyb5X
sQGQEKoM7d5gm/+dIERnX073g+hjkcgO45RGmBJMnsu2Cnw/oBoeC3RYZ37DKh3a
fi9APkvUXGwTbh1rq5lXljiyoGfH3xTcx6rsGzHPoCGxNxKlPfVUx2KcTU1v1S/A
ua3ylw8yYZI/JMjhKT7AhCYOkjrUOP+T57WIWh+soVZZXV+D+y91pYltKqQPdlmW
PbdgpYCGYdtFDjJ+SjmCSi8bRYxFOGzE0R2z2otY1c/JHwsLczMxayHWzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFRVN+4kJYyO/bd+SZUfsNSLXmkMMB8GA1UdIwQY
MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt
Y2VjODkzMWNlNjMxLzEvVkZVMzdpUWxqSTc5dDM1SmxSLXcxSXRlYVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx
LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV7tAwQC
LYU4AwQAubSTMA0GCSqGSIb3DQEBCwUAA4IBAQBNYZE7Ab/uGiLPvouO9DWvG/76
HM/bZOPwbKW9zD6I/5EJyMdJY/pct2dF8miITVlq+PZrcu3mXVGMrzLAPGVd6dBO
EFGE7YzX0wwKGKQQIktoOzOSQiZ4RUHuktABIC1M2oy8iZLSBFTw9AhOaLGw4lT/
xw4rKO3RN03CoeliMZbvT5sHm7HgLTNa2lf4vbWyq+N7f+W/Mp4kaL2UufqAgPvv
djxbBt3uBj8IYDBvi4D2hmjF47yuH++jIJQLzMQ3gB36SXyjYW42LEIhaRVhE4ZX
0CEVeiekQ+DEmr/haAtlt+uCje9DaLq0H0PPqFJ8+yrjZlH6zfBJl2L1tZ+R
-----END CERTIFICATE-----
Generated at Mon Jan 19 17:10:32 2026 by rpki-client