This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/VF42FFFSDFUPQMsneswm2EH8Ez0.roa File: VF42FFFSDFUPQMsneswm2EH8Ez0.roa (raw, json) Hash identifier: C9X9/mSo4i8MENtT8NUV24GkE0YJ8XgMU5LZdXbGwEM= Subject key identifier: 54:5E:36:14:51:52:0C:55:0F:40:CB:27:7A:CC:26:D8:41:FC:13:3D Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B179A0A608DF79C0FB404BB1D44BB6209 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/VF42FFFSDFUPQMsneswm2EH8Ez0.roa Signing time: Sat 13 Dec 2025 12:05:29 +0000 ROA not before: Sat 13 Dec 2025 12:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.129.240.0/23 maxlen: 24 45.129.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:9a:0a:60:8d:f7:9c:0f:b4:04:bb:1d:44:bb:62:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Dec 13 12:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=545e361451520c550f40cb277acc26d841fc133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:a7:5e:d4:eb:c3:ed:de:da:7f:74:b9:ea: 09:89:e5:c0:e3:1f:84:99:b5:6f:ef:e1:04:e0:92: ab:53:33:00:28:75:07:6f:da:b7:ca:d7:11:0e:20: b1:7e:b1:62:00:6c:96:6a:d6:d9:0e:55:9b:57:0a: 09:2d:69:59:90:81:8b:d4:28:12:20:39:a6:ca:b2: f9:9c:a5:41:61:93:fe:22:56:58:b4:74:66:8e:f3: ef:6b:a9:9e:cb:fb:9a:6d:db:1f:7d:74:2e:73:bb: fe:e5:3a:3b:9e:ff:46:71:95:5c:c4:20:52:c2:22: f0:95:9f:da:fd:54:af:58:24:80:59:b9:ec:34:52: 62:12:80:ea:62:16:f3:4f:ce:09:dd:48:33:dc:f9: 31:30:bc:a2:4a:a5:b5:de:92:05:dd:b1:08:b9:30: 40:46:04:19:e9:c5:0c:df:4c:00:48:35:aa:ec:1d: 0f:c4:72:59:67:d6:ff:b9:b3:84:6b:74:aa:0e:ce: 2c:57:8c:39:eb:7f:d4:21:00:01:03:67:ef:7b:7d: 31:dc:1b:97:a8:d0:66:57:e0:9f:cf:e7:57:01:09: 12:7f:6a:29:e0:c0:61:68:1a:4a:bd:24:67:cb:c3: f3:b6:06:80:7c:ce:47:c1:2a:65:30:ab:0d:0e:da: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5E:36:14:51:52:0C:55:0F:40:CB:27:7A:CC:26:D8:41:FC:13:3D X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/VF42FFFSDFUPQMsneswm2EH8Ez0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.240.0-45.129.242.255 Signature Algorithm: sha256WithRSAEncryption 32:ae:51:b7:8f:62:94:4e:88:17:7a:f9:f6:f8:68:f5:35:be: c9:ec:62:f3:44:6a:9c:7a:9f:8c:06:e6:30:84:32:7c:a7:2b: 95:c9:7b:3f:61:a5:0b:6d:5c:0e:24:37:d8:6d:ae:46:5e:f2: 77:7a:d9:94:bf:fb:b7:33:68:88:ef:c4:cc:b1:ad:07:3f:45: 48:b5:ea:27:5d:5d:87:87:be:60:d1:f8:21:10:08:24:e4:03: 8e:4d:41:a6:69:01:fa:8f:a5:b3:4f:20:08:9a:87:cc:46:a0: aa:36:0c:dd:a6:aa:6e:16:42:26:c7:8c:4f:25:e9:b2:4a:d5: 64:69:fb:69:3f:57:de:ff:44:e4:b9:19:e2:6f:4f:ae:6f:8b: 9b:44:9a:44:3e:fd:c8:6d:6f:85:24:c0:e5:e8:8d:cd:1f:59: 45:74:cf:f4:3e:f2:8c:70:7e:21:fb:f6:1a:2b:22:c4:2b:5b: 7d:15:a0:e5:aa:3c:b5:61:4e:bc:3a:b5:4f:49:79:d4:5e:f0: 45:fa:1d:ff:e1:b0:77:e6:a0:51:bd:4b:eb:0b:ec:18:40:8f: 75:af:db:19:74:d0:84:99:44:a1:f8:33:47:33:b9:24:a6:e8: 31:83:7a:9e:14:a4:db:5c:68:26:c0:0a:d5:69:c1:f0:22:35: cd:9b:41:2a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsXmgpgjfecD7QEux1Eu2IJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUxMjEzMTIwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDVlMzYxNDUxNTIwYzU1MGY0MGNiMjc3YWNjMjZkODQxZmMxMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23SnXtTrw+3e2n90ueoJieXA4x+E mbVv7+EE4JKrUzMAKHUHb9q3ytcRDiCxfrFiAGyWatbZDlWbVwoJLWlZkIGL1CgS IDmmyrL5nKVBYZP+IlZYtHRmjvPva6mey/uabdsffXQuc7v+5To7nv9GcZVcxCBS wiLwlZ/a/VSvWCSAWbnsNFJiEoDqYhbzT84J3Ugz3PkxMLyiSqW13pIF3bEIuTBA RgQZ6cUM30wASDWq7B0PxHJZZ9b/ubOEa3SqDs4sV4w563/UIQABA2fve30x3BuX qNBmV+Cfz+dXAQkSf2op4MBhaBpKvSRny8PztgaAfM5HwSplMKsNDtqA9QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFReNhRRUgxVD0DLJ3rMJthB/BM9MB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvVkY0MkZGRlNERlVQUU1zbmVzd20yRUg4RXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtgfAD BAAtgfIwDQYJKoZIhvcNAQELBQADggEBADKuUbePYpROiBd6+fb4aPU1vsnsYvNE apx6n4wG5jCEMnynK5XJez9hpQttXA4kN9htrkZe8nd62ZS/+7czaIjvxMyxrQc/ RUi16iddXYeHvmDR+CEQCCTkA45NQaZpAfqPpbNPIAiah8xGoKo2DN2mqm4WQibH jE8l6bJK1WRp+2k/V97/ROS5GeJvT65vi5tEmkQ+/chtb4UkwOXojc0fWUV0z/Q+ 8oxwfiH79horIsQrW30VoOWqPLVhTrw6tU9JedRe8EX6Hf/hsHfmoFG9S+sL7BhA j3Wv2xl00ISZRKH4M0czuSSm6DGDep4UpNtcaCbACtVpwfAiNc2bQSo= -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:05 2025 by rpki-client