This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/RVIXwLiPYVV46x_SokJjK4dp3OI.roa File: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (raw, json) Hash identifier: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI= Subject key identifier: 45:52:17:C0:B8:8F:61:55:78:EB:1F:D2:A2:42:63:2B:87:69:DC:E2 Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019B77C6DCCF8B2950DAB3ACA82D46458A45 Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/RVIXwLiPYVV46x_SokJjK4dp3OI.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20001 IP address blocks: 45.148.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:cf:8b:29:50:da:b3:ac:a8:2d:46:45:8a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=455217c0b88f615578eb1fd2a242632b8769dce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:e9:22:a6:64:35:98:19:a1:43:a2:44:d3: 91:bb:d0:06:68:93:09:9b:0d:46:e0:f6:72:a5:cc: 72:44:45:e6:ef:0b:5f:4e:5d:90:f1:10:17:14:cc: a9:49:59:f8:41:b4:42:ed:a0:0f:a5:36:e7:f8:32: 33:31:f3:11:e4:84:4d:2d:ac:08:cc:fa:a4:78:c0: 78:2a:a4:98:c7:be:62:19:ff:f0:7e:9c:da:23:e3: cf:35:cf:77:a5:a3:90:c1:cf:6f:30:a7:90:53:21: a4:2a:7e:00:d9:5a:eb:d0:f9:cc:0c:14:bc:29:69: 29:c9:fb:4d:d6:fc:be:49:e6:07:c8:89:49:95:7e: 49:bd:2a:a9:37:21:d6:6a:8e:7d:dc:95:28:f5:6e: 1b:74:9b:8b:83:74:cb:14:9f:36:66:ec:ea:2f:64: 19:64:fd:62:22:40:70:fe:c7:8b:3c:a2:bb:aa:b7: 47:56:57:03:85:22:f9:ce:7d:19:70:69:c1:a8:b9: f4:67:ee:8a:f1:e6:10:db:12:eb:cd:5a:0c:8f:6a: b1:86:c3:99:5e:fa:13:06:82:59:b3:be:59:7f:ef: 28:91:2c:11:28:d9:ae:58:6f:b1:8e:a8:ea:fd:04: 5a:21:30:59:6a:4e:8f:6f:8b:97:4a:55:47:41:17: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:52:17:C0:B8:8F:61:55:78:EB:1F:D2:A2:42:63:2B:87:69:DC:E2 X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/RVIXwLiPYVV46x_SokJjK4dp3OI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.135.0/24 Signature Algorithm: sha256WithRSAEncryption 19:32:f7:48:96:1d:af:38:0c:05:20:91:97:79:23:64:97:d0: 77:fe:11:c5:de:3b:a6:8b:be:16:6b:f9:da:67:4c:ef:90:66: 34:98:41:fe:17:65:5b:8e:80:c7:0c:05:6a:ae:29:b1:04:47: 02:05:be:17:3a:73:c7:73:c9:18:6b:c6:73:67:d2:4d:68:58: 66:fc:14:4c:f8:df:2e:58:fa:55:56:30:be:aa:bb:53:e5:ee: a3:58:9a:0d:82:e7:86:3b:02:a7:9e:cf:48:bc:65:49:88:ef: 97:15:7c:37:75:b4:4f:0e:e8:98:bb:5b:be:6c:84:17:b7:bc: 4a:76:8d:bf:43:1e:3e:80:03:4d:e4:24:2c:36:8b:a5:97:47: dd:fd:29:ec:13:17:06:fc:80:94:93:35:25:12:53:01:2c:ad: df:47:db:80:c0:d6:03:16:58:c9:bc:f3:77:50:c2:cd:e9:4e: be:e3:45:ea:81:51:1d:e4:8f:fd:0c:96:55:dc:64:7c:22:8b: 2e:e2:18:cc:ed:28:a8:b7:87:ff:42:d0:73:7c:ce:f7:24:a5: 09:18:6d:84:ae:6a:e5:73:50:d2:8c:7f:95:cf:53:86:fb:97: 6b:0c:4e:bd:ca:a3:fe:9e:68:6b:fa:4d:eb:91:15:82:0a:9f: 07:8f:c2:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtzPiylQ2rOsqC1GRYpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTUyMTdjMGI4OGY2MTU1NzhlYjFmZDJhMjQyNjMyYjg3NjlkY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3PpIqZkNZgZoUOiRNORu9AGaJMJ mw1G4PZypcxyREXm7wtfTl2Q8RAXFMypSVn4QbRC7aAPpTbn+DIzMfMR5IRNLawI zPqkeMB4KqSYx75iGf/wfpzaI+PPNc93paOQwc9vMKeQUyGkKn4A2Vrr0PnMDBS8 KWkpyftN1vy+SeYHyIlJlX5JvSqpNyHWao593JUo9W4bdJuLg3TLFJ82ZuzqL2QZ ZP1iIkBw/seLPKK7qrdHVlcDhSL5zn0ZcGnBqLn0Z+6K8eYQ2xLrzVoMj2qxhsOZ XvoTBoJZs75Zf+8okSwRKNmuWG+xjqjq/QRaITBZak6Pb4uXSlVHQRdhmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVSF8C4j2FVeOsf0qJCYyuHadziMB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEvUlZJWHdMaVBZVlY0NnhfU29rSmpLNGRwM09JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSHMA0G CSqGSIb3DQEBCwUAA4IBAQAZMvdIlh2vOAwFIJGXeSNkl9B3/hHF3jumi74Wa/na Z0zvkGY0mEH+F2VbjoDHDAVqrimxBEcCBb4XOnPHc8kYa8ZzZ9JNaFhm/BRM+N8u WPpVVjC+qrtT5e6jWJoNgueGOwKnns9IvGVJiO+XFXw3dbRPDuiYu1u+bIQXt7xK do2/Qx4+gANN5CQsNoull0fd/SnsExcG/ICUkzUlElMBLK3fR9uAwNYDFljJvPN3 UMLN6U6+40XqgVEd5I/9DJZV3GR8Iosu4hjM7Siot4f/QtBzfM73JKUJGG2Ermrl c1DSjH+Vz1OG+5drDE69yqP+nmhr+k3rkRWCCp8Hj8J8 -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:55 2026 by rpki-client