This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/vLirgPar5c0l-_w2MTo6mnE8j2o.roa File: vLirgPar5c0l-_w2MTo6mnE8j2o.roa (raw, json) Hash identifier: aEBCV68tz4z6OeR59pAV8N/3RKw1Sou9vg9NQB/F55k= Subject key identifier: BC:B8:AB:80:F6:AB:E5:CD:25:FB:FC:36:31:3A:3A:9A:71:3C:8F:6A Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8 Certificate serial: 019B7AC7C5776D2B94E4102E5A9535121C91 Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/vLirgPar5c0l-_w2MTo6mnE8j2o.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208526 IP address blocks: 45.131.124.0/24 maxlen: 24 45.131.125.0/24 maxlen: 24 45.131.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c5:77:6d:2b:94:e4:10:2e:5a:95:35:12:1c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8 Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcb8ab80f6abe5cd25fbfc36313a3a9a713c8f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:53:ba:cd:5a:f0:50:fb:3d:97:c2:b9:b1: 6e:8a:ed:0e:e9:df:86:aa:a3:69:eb:39:30:fe:d2: a8:ab:12:cc:2b:ad:bc:c9:8e:53:8f:f4:95:b8:bd: 0e:0d:fa:9d:7d:df:ef:18:03:be:25:e6:de:b8:8a: cd:7d:d8:87:03:1b:29:3a:81:70:fa:ad:51:0c:23: cf:97:6b:41:44:37:00:df:6a:86:23:ae:7b:18:7a: 2a:ab:8f:47:98:8c:de:a8:24:59:d6:86:5d:a0:58: 7d:49:8d:df:20:47:82:db:47:60:aa:c8:ae:f4:ff: c8:98:f9:e7:31:ca:4c:68:21:ea:4c:ad:ce:1a:2b: 21:dd:2c:15:42:76:b9:84:d4:cf:74:db:57:0e:1c: da:32:62:44:a3:7e:fa:1b:ab:70:07:04:06:68:53: f6:05:42:5f:3e:4c:72:52:b1:9d:f4:fb:40:2f:1b: cb:be:5a:11:b2:37:8e:61:92:7a:9d:c4:0b:92:52: 30:05:d0:ba:ad:b6:ca:f1:ea:88:88:c2:32:07:7c: ad:1c:3b:5d:8a:94:62:16:51:c4:4b:63:14:ca:60: 86:9d:e0:1e:68:d4:a3:55:60:4d:c3:42:e8:ab:85: 39:eb:96:5c:1a:f4:30:12:a1:68:f4:be:fd:9e:b4: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:AB:80:F6:AB:E5:CD:25:FB:FC:36:31:3A:3A:9A:71:3C:8F:6A X509v3 Authority Key Identifier: keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/vLirgPar5c0l-_w2MTo6mnE8j2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.124.0/22 Signature Algorithm: sha256WithRSAEncryption d7:2d:74:b7:74:4b:25:18:bb:5d:97:d2:61:8f:c7:c4:e1:2d: fd:b5:f3:50:ea:64:2e:65:9e:5c:54:af:a5:f0:db:bd:18:62: 0f:35:ab:37:72:d3:60:41:d6:e9:10:45:73:6d:cc:1d:8c:96: 78:0a:3d:26:05:e1:61:f5:4a:0b:93:fe:c6:22:a3:5c:c8:6f: b3:3a:48:a3:2f:97:69:5e:1f:1c:8c:55:e3:2c:d8:4a:65:3c: c0:a0:1e:ec:57:7c:26:c3:1c:fd:61:bd:56:c9:20:9b:db:4b: a6:76:cb:d8:2a:a0:0f:49:f5:ed:01:84:d9:cd:f4:69:f9:f9: c3:62:af:07:8b:07:54:ca:27:61:ce:59:e0:64:36:1b:af:64: 57:cb:9b:f9:02:66:0b:b3:ab:04:12:0e:97:5e:33:f5:42:a5: f6:d5:67:45:e0:78:58:c8:02:a4:9f:17:0b:95:56:ab:18:ec: b3:e6:2a:bf:ae:81:3c:8d:e3:f4:5b:70:ff:7e:5f:fd:1c:22: 55:2c:90:43:9f:26:74:c7:a7:e2:23:39:37:ef:01:b8:7f:d1: 1e:b2:b3:1b:d9:ad:c8:db:55:48:ab:03:ff:08:93:c8:1a:d1: 7f:32:58:ab:4d:1b:ba:b4:6a:0e:34:1e:da:cf:84:2f:83:ae: 4c:33:04:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8V3bSuU5BAuWpU1EhyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjYwOGZmYWRmNjAwMDgxZWU5MjIyOThlNGIyYWU5NmFm ZjQ4ZTgwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2I4YWI4MGY2YWJlNWNkMjVmYmZjMzYzMTNhM2E5YTcxM2M4ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr5Tus1a8FD7PZfCubFuiu0O6d+G qqNp6zkw/tKoqxLMK628yY5Tj/SVuL0ODfqdfd/vGAO+JebeuIrNfdiHAxspOoFw +q1RDCPPl2tBRDcA32qGI657GHoqq49HmIzeqCRZ1oZdoFh9SY3fIEeC20dgqsiu 9P/ImPnnMcpMaCHqTK3OGish3SwVQna5hNTPdNtXDhzaMmJEo376G6twBwQGaFP2 BUJfPkxyUrGd9PtALxvLvloRsjeOYZJ6ncQLklIwBdC6rbbK8eqIiMIyB3ytHDtd ipRiFlHES2MUymCGneAeaNSjVWBNw0Loq4U565ZcGvQwEqFo9L79nrTwAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLy4q4D2q+XNJfv8NjE6OppxPI9qMB8GA1UdIwQY MBaAFJz2CP+t9gAIHukiKY5LKulq/0joMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMt ODkxZWI1NDhiODkxLzEvdkxpcmdQYXI1YzBsLV93Mk1UbzZtbkU4ajJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMtODkxZWI1NDhiODkx LzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYN8MA0G CSqGSIb3DQEBCwUAA4IBAQDXLXS3dEslGLtdl9Jhj8fE4S39tfNQ6mQuZZ5cVK+l 8Nu9GGIPNas3ctNgQdbpEEVzbcwdjJZ4Cj0mBeFh9UoLk/7GIqNcyG+zOkijL5dp Xh8cjFXjLNhKZTzAoB7sV3wmwxz9Yb1WySCb20umdsvYKqAPSfXtAYTZzfRp+fnD Yq8HiwdUyidhzlngZDYbr2RXy5v5AmYLs6sEEg6XXjP1QqX21WdF4HhYyAKknxcL lVarGOyz5iq/roE8jeP0W3D/fl/9HCJVLJBDnyZ0x6fiIzk37wG4f9EesrMb2a3I 21VIqwP/CJPIGtF/MlirTRu6tGoONB7az4Qvg65MMwTG -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:33 2026 by rpki-client