This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1VPL1Gh9CKH5MXuxaQOU8LGAFL0.roa File: 1VPL1Gh9CKH5MXuxaQOU8LGAFL0.roa (raw, json) Hash identifier: HP5glxQr/vk70zh2M29QXCnkvIkl0q37vMsXErt4q1w= Subject key identifier: D5:53:CB:D4:68:7D:08:A1:F9:31:7B:B1:69:03:94:F0:B1:80:14:BD Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C5A806F5188AC2D57653F205DC3F Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1VPL1Gh9CKH5MXuxaQOU8LGAFL0.roa Signing time: Fri 02 Jan 2026 16:20:35 +0000 ROA not before: Fri 02 Jan 2026 16:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202425 IP address blocks: 45.140.222.0/24 maxlen: 24 185.242.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c5:a8:06:f5:18:8a:c2:d5:76:53:f2:05:dc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d553cbd4687d08a1f9317bb1690394f0b18014bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:0b:26:e6:f0:d6:f4:72:0f:45:35:b4:70: 67:12:20:b2:85:81:84:b7:78:99:6f:f8:66:cf:75: 6d:1d:56:8f:1e:c3:44:73:13:b1:0f:1f:62:f1:07: 9c:ab:ea:03:d2:7e:88:bf:00:48:65:b9:03:83:32: d4:df:f8:1a:62:25:be:70:1b:2a:ba:7c:fb:2e:49: cd:d8:bd:00:e4:27:c6:dc:e8:3d:c3:a0:0a:27:f7: 3c:04:25:ad:ab:54:f3:35:10:74:79:c9:70:89:51: 56:79:84:14:73:2e:25:07:ce:ce:f1:10:f5:9c:be: 50:ad:a8:59:38:36:78:7b:86:ad:8e:76:ec:24:13: ac:69:23:1a:bb:33:17:15:a6:65:43:22:51:dd:75: 45:0d:31:e3:cc:b9:b4:d6:14:65:77:e5:c6:8a:2c: bc:b2:8e:14:30:d3:d3:87:89:8c:b8:96:0a:69:eb: 49:51:0b:a2:01:0c:0f:8e:9c:9b:7f:f5:b3:77:4f: f6:2d:ac:66:e6:9d:2a:00:d2:36:01:81:2c:ba:f6: 9e:3a:51:25:4a:db:e6:a6:fb:8e:72:0b:71:24:e1: 33:51:2f:99:6e:f0:3b:e3:ea:11:cb:68:e4:63:da: 4b:5b:d0:48:67:5a:f8:90:16:ff:24:55:e5:98:5b: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:CB:D4:68:7D:08:A1:F9:31:7B:B1:69:03:94:F0:B1:80:14:BD X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1VPL1Gh9CKH5MXuxaQOU8LGAFL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.222.0/24 185.242.226.0/24 Signature Algorithm: sha256WithRSAEncryption ba:87:df:cb:37:93:47:c6:c9:88:80:24:b7:44:c5:46:70:e3: ab:2a:21:dd:34:38:8d:cd:26:e9:f7:80:02:99:cc:e4:28:cd: fb:19:02:d6:0e:e6:6a:69:61:38:d5:09:73:fd:e6:65:4b:1d: 5f:02:29:49:2b:82:f1:00:a1:70:45:39:e5:63:3e:c6:a4:df: 6a:8e:0f:5b:68:e1:61:22:fe:cc:f4:c9:c9:cf:9b:61:02:99: e0:37:4a:a2:ee:6b:91:45:70:98:c9:d8:21:dd:49:f5:e0:e5: e8:28:94:24:34:c7:d4:35:ea:ff:40:7e:51:62:d2:86:40:35: c1:89:19:e4:e1:c1:4d:10:fe:5d:91:c0:9b:3d:ef:62:88:57: 09:e2:27:9f:f5:b7:1c:21:08:c7:ac:65:73:af:dc:00:fe:fc: 6f:d6:b6:6b:f2:2d:d7:f1:4f:5d:7a:2a:c3:a0:bb:df:cd:64: b1:ef:29:de:89:89:c1:80:d4:13:5d:fa:bf:15:fe:a8:81:97: 79:f8:dc:18:6a:92:3c:6a:34:c2:84:4a:23:34:20:83:e5:81: 67:2e:44:df:e3:0a:98:4f:32:c7:97:29:da:58:56:49:95:10: c5:d4:c9:0e:31:4f:f7:78:a9:6b:73:df:aa:94:74:4e:96:cf: 67:ad:2b:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gsWoBvUYisLVdlPyBdw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTUzY2JkNDY4N2QwOGExZjkzMTdiYjE2OTAzOTRmMGIxODAxNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsokLJubw1vRyD0U1tHBnEiCyhYGE t3iZb/hmz3VtHVaPHsNEcxOxDx9i8Qecq+oD0n6IvwBIZbkDgzLU3/gaYiW+cBsq unz7LknN2L0A5CfG3Og9w6AKJ/c8BCWtq1TzNRB0eclwiVFWeYQUcy4lB87O8RD1 nL5QrahZODZ4e4atjnbsJBOsaSMauzMXFaZlQyJR3XVFDTHjzLm01hRld+XGiiy8 so4UMNPTh4mMuJYKaetJUQuiAQwPjpybf/Wzd0/2Laxm5p0qANI2AYEsuvaeOlEl StvmpvuOcgtxJOEzUS+ZbvA74+oRy2jkY9pLW9BIZ1r4kBb/JFXlmFty0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNVTy9RofQih+TF7sWkDlPCxgBS9MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvMVZQTDFHaDlDS0g1TVh1eGFRT1U4TEdBRkwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYzeAwQA ufLiMA0GCSqGSIb3DQEBCwUAA4IBAQC6h9/LN5NHxsmIgCS3RMVGcOOrKiHdNDiN zSbp94ACmczkKM37GQLWDuZqaWE41Qlz/eZlSx1fAilJK4LxAKFwRTnlYz7GpN9q jg9baOFhIv7M9MnJz5thApngN0qi7muRRXCYydgh3Un14OXoKJQkNMfUNer/QH5R YtKGQDXBiRnk4cFNEP5dkcCbPe9iiFcJ4ief9bccIQjHrGVzr9wA/vxv1rZr8i3X 8U9deirDoLvfzWSx7yneiYnBgNQTXfq/Ff6ogZd5+NwYapI8ajTChEojNCCD5YFn LkTf4wqYTzLHlynaWFZJlRDF1MkOMU/3eKlrc9+qlHROls9nrStO -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:52 2026 by rpki-client