This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa File: VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa (raw, json) Hash identifier: Lj+UoxvlbBzpt+4S58JMbON1coh0nlAf0RSoB4fN3M4= Subject key identifier: 55:C7:EA:5A:0E:C5:6D:0A:9B:F9:48:DA:D6:E3:31:1C:C6:11:C0:89 Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b Certificate serial: 019B7AC90207160A0AA2CB88FB393B7A81A1 Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa Signing time: Thu 01 Jan 2026 18:19:12 +0000 ROA not before: Thu 01 Jan 2026 18:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57763 IP address blocks: 45.90.24.0/22 maxlen: 22 2a06:3cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:02:07:16:0a:0a:a2:cb:88:fb:39:3b:7a:81:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4191e5826270f49eae999d489e85deccc847738b Validity Not Before: Jan 1 18:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c7ea5a0ec56d0a9bf948dad6e3311cc611c089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:83:21:55:86:dc:a4:85:82:7d:43:db:e1: 16:aa:a8:59:6d:2e:2d:be:4c:6c:40:59:7a:79:61: 64:fd:73:1c:1d:cd:4d:c1:47:94:a3:15:bd:ee:9a: db:ed:44:cd:93:10:bb:55:84:84:cf:46:55:57:29: 71:33:c3:d0:a1:e9:4d:e1:92:0e:e4:98:70:d7:f1: e2:6a:cc:eb:58:f1:cf:ca:dc:43:cd:cb:f1:6d:ef: 42:08:e6:78:d9:4c:9e:6a:46:48:8d:c0:0b:fd:fb: 18:a0:32:5b:4f:5e:5b:f4:65:4e:d6:8c:52:96:c9: 72:9c:11:f0:ce:e8:02:f0:0d:de:73:d9:0b:f1:c6: 3b:7f:16:89:48:e6:cf:34:71:a3:00:67:97:c2:04: 3b:dd:0e:78:6b:36:96:4b:7e:8d:6a:ac:b5:24:36: 5e:ea:b0:5a:29:75:26:80:7c:cb:6e:d0:34:43:cf: f9:6e:08:ba:b4:e7:50:41:bd:30:27:96:0c:fd:5f: c6:94:b3:a2:3c:a9:36:58:0d:78:41:cd:c3:53:50: 69:8c:4a:c9:2e:b9:48:72:c8:2e:01:5e:de:61:d2: d2:bc:f0:05:7a:1d:48:98:e5:c5:be:80:02:f6:f9: ee:2a:54:1c:34:46:69:e7:eb:20:c2:0b:b4:d4:84: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:EA:5A:0E:C5:6D:0A:9B:F9:48:DA:D6:E3:31:1C:C6:11:C0:89 X509v3 Authority Key Identifier: keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.24.0/22 IPv6: 2a06:3cc0::/29 Signature Algorithm: sha256WithRSAEncryption 18:6d:36:03:6e:c7:d2:29:0c:c9:b2:36:d3:6d:e4:fe:d9:f7: 54:ec:64:92:c4:f3:f8:6f:20:2f:9b:1e:12:d9:3f:8c:5c:b8: 80:ba:ba:86:b6:9f:37:49:55:24:86:6f:86:a2:b4:65:2a:24: c3:7c:cf:cf:da:44:5c:f9:9f:1b:c5:71:24:85:d0:58:97:c9: d9:3d:eb:05:b4:46:be:d8:a6:cb:ec:a5:9f:2b:1e:b3:08:d6: 80:e0:7b:42:a1:57:77:fd:4b:ac:c9:57:9a:3d:f4:dc:e9:96: 77:e5:45:d7:d5:c0:d9:09:08:3d:2d:17:d9:97:4c:da:02:3c: b9:a1:4f:a3:7f:b7:3c:33:d1:07:f2:9e:68:b6:17:58:61:76: 1c:a7:39:cf:9f:b1:b6:5b:3f:ec:dd:18:3f:c8:37:cb:34:f8: 49:f5:3d:e5:e1:c4:e3:b0:2d:81:18:9f:d5:d1:3f:d3:3a:eb: 85:4a:54:c8:29:dc:ba:15:46:d8:e5:93:66:eb:f1:f8:62:a4: 56:3e:dc:10:05:6b:aa:5a:7d:95:46:63:81:48:71:fc:ed:77: ac:b7:21:cc:df:f3:ac:14:b6:33:1f:a2:9b:b4:12:e2:96:b7: 09:f6:46:20:30:d0:c1:12:e4:0c:ef:af:d6:95:12:4d:92:17: 71:87:37:ba -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yQIHFgoKosuI+zk7eoGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTFlNTgyNjI3MGY0OWVhZTk5OWQ0ODllODVkZWNjYzg0 NzczOGIwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWM3ZWE1YTBlYzU2ZDBhOWJmOTQ4ZGFkNmUzMzExY2M2MTFjMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2DIVWG3KSFgn1D2+EWqqhZbS4t vkxsQFl6eWFk/XMcHc1NwUeUoxW97prb7UTNkxC7VYSEz0ZVVylxM8PQoelN4ZIO 5Jhw1/HiaszrWPHPytxDzcvxbe9CCOZ42UyeakZIjcAL/fsYoDJbT15b9GVO1oxS lslynBHwzugC8A3ec9kL8cY7fxaJSObPNHGjAGeXwgQ73Q54azaWS36Naqy1JDZe 6rBaKXUmgHzLbtA0Q8/5bgi6tOdQQb0wJ5YM/V/GlLOiPKk2WA14Qc3DU1BpjErJ LrlIcsguAV7eYdLSvPAFeh1ImOXFvoAC9vnuKlQcNEZp5+sgwgu01IQZJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFXH6loOxW0Km/lI2tbjMRzGEcCJMB8GA1UdIwQY MBaAFEGR5YJicPSerpmdSJ6F3szIR3OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYt N2RmZGFjZmE2NTExLzEvVmNmcVdnN0ZiUXFiLVVqYTF1TXhITVlSd0lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYtN2RmZGFjZmE2NTEx LzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVoYMA0E AgACMAcDBQMqBjzAMA0GCSqGSIb3DQEBCwUAA4IBAQAYbTYDbsfSKQzJsjbTbeT+ 2fdU7GSSxPP4byAvmx4S2T+MXLiAurqGtp83SVUkhm+GorRlKiTDfM/P2kRc+Z8b xXEkhdBYl8nZPesFtEa+2KbL7KWfKx6zCNaA4HtCoVd3/UusyVeaPfTc6ZZ35UXX 1cDZCQg9LRfZl0zaAjy5oU+jf7c8M9EH8p5othdYYXYcpznPn7G2Wz/s3Rg/yDfL NPhJ9T3l4cTjsC2BGJ/V0T/TOuuFSlTIKdy6FUbY5ZNm6/H4YqRWPtwQBWuqWn2V RmOBSHH87XestyHM3/OsFLYzH6KbtBLilrcJ9kYgMNDBEuQM76/WlRJNkhdxhze6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:30 2026 by rpki-client