This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa File: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (raw, json) Hash identifier: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY= Subject key identifier: BE:A5:7E:60:C6:DE:18:6E:59:3B:3D:CD:46:01:40:DA:31:BC:A2:BD Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B76EB463630CC5CABCE154770BC3D7B0D Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210162 IP address blocks: 45.143.28.0/24 maxlen: 24 45.143.29.0/24 maxlen: 24 45.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:46:36:30:cc:5c:ab:ce:15:47:70:bc:3d:7b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bea57e60c6de186e593b3dcd460140da31bca2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:fe:1b:34:ce:7c:3b:60:ef:93:f7:77:0a: c0:b1:8b:d0:a4:af:1f:e5:74:c0:a0:d1:26:3e:92: 33:6d:90:79:22:d5:a7:c6:d3:e7:0a:f6:ba:1c:9c: 8e:93:b5:30:af:07:d3:01:39:92:45:da:0f:02:dd: 1f:35:cd:01:c9:0d:64:db:2a:e6:13:bd:51:de:18: 55:39:ef:11:65:4c:26:c9:97:c9:5f:d4:87:a2:d0: a6:84:71:1a:0a:8f:e5:40:25:85:95:48:45:44:bc: 13:6e:55:6d:f4:60:a4:f2:3c:e2:55:eb:86:bf:53: f6:ad:7d:14:c2:88:f5:f7:a7:ac:06:10:7e:83:65: 06:1d:c9:e3:ab:ec:de:79:a2:fe:fd:8a:2c:ec:ca: ff:53:90:29:ba:a6:42:ea:32:42:e1:ec:0e:2b:91: e9:17:b2:89:ba:61:ea:16:b0:f2:77:8b:0f:8a:c2: ec:f5:4a:13:96:42:b6:e9:39:8c:a5:1b:96:b8:95: c9:a2:cc:ab:fd:2a:18:75:eb:01:64:d0:e8:8e:f1: cf:f6:8b:d6:76:14:bf:af:d7:8f:fb:23:34:e7:b5: 82:03:d7:ae:a1:6d:47:de:a2:fa:5d:99:07:3e:5a: 0f:d9:29:42:0a:14:af:93:f3:73:05:b1:65:25:cd: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A5:7E:60:C6:DE:18:6E:59:3B:3D:CD:46:01:40:DA:31:BC:A2:BD X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.28.0/23 45.143.31.0/24 Signature Algorithm: sha256WithRSAEncryption c2:b0:13:4d:6a:c2:21:03:42:f9:43:9c:b3:13:3d:73:34:5f: 15:95:b8:4f:99:77:f8:5c:ae:7f:42:59:58:fc:58:a5:a2:7a: 71:29:44:e6:29:12:cd:e6:0e:5e:17:5e:83:fd:72:17:d4:d3: 06:41:0d:3e:d3:b6:9e:ce:ad:bc:9b:8a:e3:c9:03:7b:99:ef: 4c:f3:2a:76:fe:2b:a5:ca:95:cc:ee:49:d4:6d:0e:4e:b2:6a: 0e:40:4a:d8:44:ba:dd:3b:a0:b3:10:9b:76:21:76:eb:5d:45: 6d:f9:3a:d2:07:d4:60:51:de:ef:90:6c:7c:7c:29:4f:2b:d4: ee:65:f3:59:51:67:89:6a:ed:65:13:e7:53:ab:c3:c3:5a:aa: 35:0a:ac:e4:e3:ea:69:6c:ed:a4:2d:d7:cd:b5:3f:f3:1d:d5: 23:d3:fb:e0:e0:b5:06:f8:67:a4:79:6e:94:a5:8b:3b:82:c2: b6:c2:cb:65:9a:2d:bf:13:c8:57:fc:4b:bf:a3:8c:94:63:85: b4:41:b0:ce:42:77:e6:72:da:52:5e:b3:04:ef:08:2d:26:c0: 5c:ef:26:3e:09:1a:83:98:07:09:f9:df:f6:dd:ba:2c:83:59: ef:15:60:75:dd:9f:41:9e:de:5b:32:87:e0:01:94:c2:60:37: 6f:23:52:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt260Y2MMxcq84VR3C8PXsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWE1N2U2MGM2ZGUxODZlNTkzYjNkY2Q0NjAxNDBkYTMxYmNhMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3b+GzTOfDtg75P3dwrAsYvQpK8f 5XTAoNEmPpIzbZB5ItWnxtPnCva6HJyOk7UwrwfTATmSRdoPAt0fNc0ByQ1k2yrm E71R3hhVOe8RZUwmyZfJX9SHotCmhHEaCo/lQCWFlUhFRLwTblVt9GCk8jziVeuG v1P2rX0Uwoj196esBhB+g2UGHcnjq+zeeaL+/Yos7Mr/U5ApuqZC6jJC4ewOK5Hp F7KJumHqFrDyd4sPisLs9UoTlkK26TmMpRuWuJXJosyr/SoYdesBZNDojvHP9ovW dhS/r9eP+yM057WCA9euoW1H3qL6XZkHPloP2SlCChSvk/NzBbFlJc0dyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL6lfmDG3hhuWTs9zUYBQNoxvKK9MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvdnFWLVlNYmVHRzVaT3ozTlJnRkEyakc4b3IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY8cAwQA LY8fMA0GCSqGSIb3DQEBCwUAA4IBAQDCsBNNasIhA0L5Q5yzEz1zNF8VlbhPmXf4 XK5/QllY/FilonpxKUTmKRLN5g5eF16D/XIX1NMGQQ0+07aezq28m4rjyQN7me9M 8yp2/iulypXM7knUbQ5OsmoOQErYRLrdO6CzEJt2IXbrXUVt+TrSB9RgUd7vkGx8 fClPK9TuZfNZUWeJau1lE+dTq8PDWqo1Cqzk4+ppbO2kLdfNtT/zHdUj0/vg4LUG +GekeW6UpYs7gsK2wstlmi2/E8hX/Eu/o4yUY4W0QbDOQnfmctpSXrME7wgtJsBc 7yY+CRqDmAcJ+d/23bosg1nvFWB13Z9Bnt5bMofgAZTCYDdvI1JE -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:48 2026 by rpki-client