This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/vlpxtqpjpQxPD5I7h8_GagReIJQ.roa File: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (raw, json) Hash identifier: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4= Subject key identifier: BE:5A:71:B6:AA:63:A5:0C:4F:0F:92:3B:87:CF:C6:6A:04:5E:20:94 Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Certificate serial: 019B7C12888B56FDC84AB190C2753D79CBF9 Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/vlpxtqpjpQxPD5I7h8_GagReIJQ.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43467 IP address blocks: 45.9.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:88:8b:56:fd:c8:4a:b1:90:c2:75:3d:79:cb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be5a71b6aa63a50c4f0f923b87cfc66a045e2094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:7b:7f:e2:b1:db:82:19:29:3a:9d:a5:ca: ea:87:89:82:fe:6a:72:eb:0c:03:10:26:33:45:fd: 7b:21:30:63:8d:56:f6:19:a2:15:93:1d:a0:48:97: 16:b1:7d:26:5d:48:a0:2b:58:e1:b8:f7:8e:0e:89: 48:64:98:97:d9:5f:48:74:43:e0:35:21:aa:4d:a6: 9f:8b:5b:e4:59:fc:0d:43:66:e2:53:cd:88:b1:fc: 0b:f2:ad:fa:6e:ce:85:19:c1:54:ad:48:84:2d:e0: bc:46:b9:b4:44:7a:f9:7d:6e:2e:8a:07:a5:a4:73: ee:86:fb:ff:cc:9b:bf:16:f0:e7:29:0f:83:01:04: 46:aa:e7:8e:73:7f:af:07:03:1b:60:62:a7:70:74: 8c:c5:67:c9:a1:3c:a5:b4:57:da:f8:73:ef:b3:68: 39:8f:8a:8a:78:68:d3:62:e9:60:a6:73:0c:8c:5a: 9f:3b:95:b8:ce:9f:9f:4e:15:96:9c:38:13:37:fb: d8:59:1d:c2:24:e2:4f:05:d5:ca:7a:27:08:6a:a2: aa:c6:6d:12:30:1b:12:e9:8b:7b:73:f5:20:fb:e1: b7:1a:d9:a6:2a:aa:86:ac:c3:e4:ad:fd:24:24:22: 31:45:69:77:2f:67:00:d9:6f:41:da:d4:eb:84:0a: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5A:71:B6:AA:63:A5:0C:4F:0F:92:3B:87:CF:C6:6A:04:5E:20:94 X509v3 Authority Key Identifier: keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/vlpxtqpjpQxPD5I7h8_GagReIJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.80.0/22 Signature Algorithm: sha256WithRSAEncryption 71:52:a4:b3:1b:c1:5d:ba:53:75:6e:3b:41:73:82:dc:14:3b: 0f:66:e4:58:e3:72:39:f4:b4:bd:a5:b5:90:13:54:d3:e2:51: 9e:e7:76:f9:97:09:11:8e:6a:67:66:c9:a3:6a:a6:56:db:d6: 57:59:21:01:41:49:37:a3:50:af:ba:77:1b:73:e5:c7:55:43: 6e:64:24:df:ce:40:ab:d1:ab:11:8d:1c:9e:48:3f:65:6c:ea: e3:19:00:6a:77:05:31:ff:52:0c:98:d4:70:52:76:80:ce:c2: 67:f7:8c:34:4d:a7:ef:65:3c:4b:14:9e:65:a9:b8:02:18:eb: 04:be:70:db:48:1a:87:f0:a3:dd:7f:3d:cd:d7:88:26:5c:42: 7c:ba:8f:98:4c:7d:f1:62:62:e2:a9:cd:39:db:d4:cf:5e:7e: e9:06:ff:8f:8f:7a:49:aa:c8:d4:00:48:de:76:4a:e5:e0:f1: 85:13:4f:96:41:3b:7d:2a:c4:29:a9:c6:18:5f:58:b8:ca:f3: 10:e1:9d:8d:13:9c:60:2f:45:50:00:41:b2:0d:ec:26:77:6f: 6e:f7:72:bc:ec:34:a3:30:95:96:5c:e9:b0:f5:e3:7f:a4:c3: f7:ca:34:3b:86:53:bc:9c:29:07:a6:e2:6a:b1:8c:fa:25:90: 98:39:96:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoiLVv3ISrGQwnU9ecv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx MDUwZWUwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTVhNzFiNmFhNjNhNTBjNGYwZjkyM2I4N2NmYzY2YTA0NWUyMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfZ7f+Kx24IZKTqdpcrqh4mC/mpy 6wwDECYzRf17ITBjjVb2GaIVkx2gSJcWsX0mXUigK1jhuPeODolIZJiX2V9IdEPg NSGqTaafi1vkWfwNQ2biU82IsfwL8q36bs6FGcFUrUiELeC8Rrm0RHr5fW4uigel pHPuhvv/zJu/FvDnKQ+DAQRGqueOc3+vBwMbYGKncHSMxWfJoTyltFfa+HPvs2g5 j4qKeGjTYulgpnMMjFqfO5W4zp+fThWWnDgTN/vYWR3CJOJPBdXKeicIaqKqxm0S MBsS6Yt7c/Ug++G3GtmmKqqGrMPkrf0kJCIxRWl3L2cA2W9B2tTrhAovQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5acbaqY6UMTw+SO4fPxmoEXiCUMB8GA1UdIwQY MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt M2E1YzcxZjg2ODIxLzEvdmxweHRxcGpwUXhQRDVJN2g4X0dhZ1JlSUpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQlQMA0G CSqGSIb3DQEBCwUAA4IBAQBxUqSzG8FdulN1bjtBc4LcFDsPZuRY43I59LS9pbWQ E1TT4lGe53b5lwkRjmpnZsmjaqZW29ZXWSEBQUk3o1Cvuncbc+XHVUNuZCTfzkCr 0asRjRyeSD9lbOrjGQBqdwUx/1IMmNRwUnaAzsJn94w0TafvZTxLFJ5lqbgCGOsE vnDbSBqH8KPdfz3N14gmXEJ8uo+YTH3xYmLiqc0529TPXn7pBv+Pj3pJqsjUAEje dkrl4PGFE0+WQTt9KsQpqcYYX1i4yvMQ4Z2NE5xgL0VQAEGyDewmd29u93K87DSj MJWWXOmw9eN/pMP3yjQ7hlO8nCkHpuJqsYz6JZCYOZYQ -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:04 2026 by rpki-client