This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/VyqVgBcyFisku0WdmonIiILhSRU.roa File: VyqVgBcyFisku0WdmonIiILhSRU.roa (raw, json) Hash identifier: pdAv+KOFg0nZqvpWHx/sxHWN7FxQtqzwDpKuoUjeYq8= Subject key identifier: 57:2A:95:80:17:32:16:2B:24:BB:45:9D:9A:89:C8:88:82:E1:49:15 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361E360A8F41D1098246432E5ABC55 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/VyqVgBcyFisku0WdmonIiILhSRU.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 2.56.114.0/23 maxlen: 23 45.90.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1e:36:0a:8f:41:d1:09:82:46:43:2e:5a:bc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=572a95801732162b24bb459d9a89c88882e14915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:83:6c:99:e6:71:ad:af:be:89:65:21:21: a8:a9:11:ac:53:bc:20:68:1f:65:09:3d:37:5c:37: d3:05:db:3a:09:19:ca:eb:a9:62:2e:7a:72:14:ce: a8:6b:a3:83:f4:44:5f:38:04:4a:38:70:64:d0:31: a6:49:a3:7e:5f:01:cc:29:32:b3:dd:a7:1b:b8:4d: 74:ca:c4:67:fa:d4:c9:54:0b:d0:b7:a4:67:70:97: 87:42:a4:00:3c:2f:a1:74:14:7b:ca:31:cd:1d:95: b6:b2:02:d5:f1:62:80:68:71:9b:be:f0:4f:4a:f1: 7e:40:61:5a:6a:8e:ee:0a:6a:bf:a5:ce:76:12:36: c8:a1:49:65:85:39:e2:88:2a:ed:d4:c8:9a:5f:eb: c1:35:9e:a9:2a:8d:05:6f:c0:7f:fd:de:68:8b:57: 08:3d:06:3a:c7:75:0f:6e:7b:4f:84:1f:49:84:6f: 37:f0:ed:88:67:d4:e5:d6:6e:c5:84:9c:ba:bd:af: 8a:a1:dd:a2:3e:d1:21:a9:60:9d:68:01:30:81:f0: c2:7b:41:f3:e4:d7:1a:33:d1:3f:39:59:d8:3c:42: 0b:b6:64:c0:99:f6:01:e5:1d:11:49:40:6f:b4:d0: 67:1f:0f:f5:d5:73:0c:f8:37:15:a9:02:9b:3d:e4: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:95:80:17:32:16:2B:24:BB:45:9D:9A:89:C8:88:82:E1:49:15 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/VyqVgBcyFisku0WdmonIiILhSRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.114.0/23 45.90.198.0/23 Signature Algorithm: sha256WithRSAEncryption 06:2f:84:c3:88:a1:50:90:21:80:1a:45:00:c5:6f:4a:4b:1c: 77:cb:a1:0b:f8:cb:0a:62:d6:ca:cd:b5:f9:bd:20:2d:fc:0c: 3b:84:23:c4:d6:3e:10:ae:2c:52:0c:5a:a3:18:66:17:2d:c0: f1:ca:1c:b4:5e:40:72:cb:23:5f:c9:b0:2d:78:30:21:a3:d6: f8:86:b2:f4:13:ea:95:a8:1f:29:76:28:ff:ee:ac:91:a8:e2: 96:31:17:4f:3b:51:88:37:20:0c:8c:d7:0d:e3:cd:b2:81:b0: 99:bd:bb:fc:78:6f:1f:d6:f1:e5:8e:f7:aa:b4:5b:1d:1e:66: 64:89:a3:ed:14:00:64:51:fe:a2:c2:c5:3a:de:9f:3c:82:3d: 95:72:22:8a:ec:e3:ec:ae:ca:71:ae:cd:c8:d1:4e:0e:4f:94: 29:79:c6:d9:c2:6b:27:87:55:99:b5:67:57:6e:bb:11:80:59: 9b:8b:69:3e:8c:33:04:48:e6:45:ba:c2:b8:99:de:fa:13:08: b3:0a:29:f9:02:03:0a:19:22:0b:8b:de:86:a8:9b:2f:11:9c: 8d:f4:bf:33:9b:ea:dd:56:b9:11:ea:98:6f:ab:48:89:7c:a1: 9c:1f:14:10:73:99:57:f5:ca:8a:9a:7a:85:da:1b:d1:4e:85: 10:47:3b:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nh42Co9B0QmCRkMuWrxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzJhOTU4MDE3MzIxNjJiMjRiYjQ1OWQ5YTg5Yzg4ODgyZTE0OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14CDbJnmca2vvollISGoqRGsU7wg aB9lCT03XDfTBds6CRnK66liLnpyFM6oa6OD9ERfOARKOHBk0DGmSaN+XwHMKTKz 3acbuE10ysRn+tTJVAvQt6RncJeHQqQAPC+hdBR7yjHNHZW2sgLV8WKAaHGbvvBP SvF+QGFaao7uCmq/pc52EjbIoUllhTniiCrt1MiaX+vBNZ6pKo0Fb8B//d5oi1cI PQY6x3UPbntPhB9JhG838O2IZ9Tl1m7FhJy6va+Kod2iPtEhqWCdaAEwgfDCe0Hz 5NcaM9E/OVnYPEILtmTAmfYB5R0RSUBvtNBnHw/11XMM+DcVqQKbPeR06QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFcqlYAXMhYrJLtFnZqJyIiC4UkVMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvVnlxVmdCY3lGaXNrdTBXZG1vbklpSUxoU1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBAjhyAwQB LVrGMA0GCSqGSIb3DQEBCwUAA4IBAQAGL4TDiKFQkCGAGkUAxW9KSxx3y6EL+MsK YtbKzbX5vSAt/Aw7hCPE1j4QrixSDFqjGGYXLcDxyhy0XkByyyNfybAteDAho9b4 hrL0E+qVqB8pdij/7qyRqOKWMRdPO1GINyAMjNcN482ygbCZvbv8eG8f1vHljveq tFsdHmZkiaPtFABkUf6iwsU63p88gj2VciKK7OPsrspxrs3I0U4OT5QpecbZwmsn h1WZtWdXbrsRgFmbi2k+jDMESOZFusK4md76EwizCin5AgMKGSILi96GqJsvEZyN 9L8zm+rdVrkR6phvq0iJfKGcHxQQc5lX9cqKmnqF2hvRToUQRztg -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:30 2026 by rpki-client