This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VMBgM_7S_jPIL-xaq9A-tUVVPaY.roa File: VMBgM_7S_jPIL-xaq9A-tUVVPaY.roa (raw, json) Hash identifier: 3FO3n1b7T5nqQLNy4mu7e8olLoiHQ4FsLxez8Q5l0zo= Subject key identifier: 54:C0:60:33:FE:D2:FE:33:C8:2F:EC:5A:AB:D0:3E:B5:45:55:3D:A6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C292BCF30E1857739303C473DB2EE30D8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VMBgM_7S_jPIL-xaq9A-tUVVPaY.roa Signing time: Wed 04 Feb 2026 15:01:02 +0000 ROA not before: Wed 04 Feb 2026 15:01:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56755 IP address blocks: 45.148.118.0/23 maxlen: 24 94.177.122.0/24 maxlen: 24 139.28.98.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 194.50.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:2b:cf:30:e1:85:77:39:30:3c:47:3d:b2:ee:30:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Feb 4 15:01:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54c06033fed2fe33c82fec5aabd03eb545553da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:90:4a:1d:40:6b:f3:27:9b:c3:59:a3:3b: 7e:a8:b5:11:b2:c3:d3:2a:0e:c9:72:43:19:0d:c4: 1b:ae:58:b3:a4:ab:7f:d2:9b:af:f7:84:60:d1:85: 57:2b:83:d9:35:63:2d:00:52:69:cf:6a:06:63:a1: 96:20:2a:a5:3a:ad:ec:65:8d:75:95:83:cd:ec:e5: 44:2e:35:b5:f8:9c:cf:0b:1a:02:17:64:33:5c:0f: f1:50:b2:d8:61:a3:59:39:7a:ab:83:56:02:2f:7a: 3b:8f:dd:f9:7f:8b:16:ac:11:96:c5:5f:c5:43:18: 16:03:cd:6f:2c:55:ef:10:ad:27:08:3d:90:d0:6f: 69:1c:8a:05:58:c6:99:79:e5:6c:3a:0f:7a:82:7c: 48:c5:e1:3d:ef:9e:94:8c:9c:75:a8:ec:09:2f:73: ee:ef:70:83:73:43:5a:74:3d:26:37:7d:fe:3e:d6: e8:1b:9b:6b:88:e3:cd:97:e1:12:59:c3:14:dd:53: f9:5b:15:2f:f9:33:e8:26:4d:f8:db:ad:bc:95:26: cf:5a:f0:92:39:bc:98:29:96:9e:07:0c:84:c2:05: 09:dd:3c:da:70:6c:4e:cb:be:1c:47:c7:2e:67:9a: 45:49:6a:23:e6:0e:3d:8d:5d:ae:d2:b1:99:07:ce: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:60:33:FE:D2:FE:33:C8:2F:EC:5A:AB:D0:3E:B5:45:55:3D:A6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VMBgM_7S_jPIL-xaq9A-tUVVPaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.118.0/23 94.177.122.0/24 139.28.98.0/23 194.50.94.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:05:67:e3:86:f2:1a:92:50:c4:61:fb:f7:61:a9:ed:db:49: 4e:74:03:75:8d:01:cf:f1:14:17:3d:fa:f3:ea:36:20:72:ed: af:e3:c6:a4:35:73:31:ca:6e:fc:8e:a9:af:fc:bf:ed:7b:15: 11:8a:f1:9c:26:c5:53:5b:fc:59:21:b9:f6:f8:da:08:77:15: 3c:05:b8:ec:ae:35:7c:85:bb:2f:ec:e4:cc:3d:0b:e9:65:65: 5e:36:4b:7d:1f:52:2c:e4:07:7d:a3:3e:78:3c:96:c7:7a:96: 7a:41:3d:d6:22:1b:e8:3d:70:24:07:52:6a:ce:bd:f5:ba:0c: 4b:da:b2:69:31:95:80:d3:72:da:d6:fa:78:cc:d9:e6:f7:88: 35:e5:28:75:2c:ef:82:28:26:2d:f6:f4:ff:cd:e1:23:f6:ce: ef:f9:75:19:2c:53:d1:65:12:e8:45:63:7d:b8:53:ac:71:38: 7a:bc:07:92:94:7e:1e:67:a4:75:6e:24:35:a2:31:f2:9f:95: c5:07:dc:e5:93:8a:58:71:bf:b5:c2:41:93:35:54:a3:99:e8: 3f:43:68:3e:1c:5f:a2:67:e2:6f:67:2b:3c:cb:c1:de:a3:1a: 07:be:6d:4f:3d:c1:96:b2:1b:fc:f9:39:4b:c9:6e:63:42:c6: a5:38:9f:ac -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwpK88w4YV3OTA8Rz2y7jDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMjA0MTUwMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGMwNjAzM2ZlZDJmZTMzYzgyZmVjNWFhYmQwM2ViNTQ1NTUzZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2GQSh1Aa/Mnm8NZozt+qLURssPT Kg7JckMZDcQbrlizpKt/0puv94Rg0YVXK4PZNWMtAFJpz2oGY6GWICqlOq3sZY11 lYPN7OVELjW1+JzPCxoCF2QzXA/xULLYYaNZOXqrg1YCL3o7j935f4sWrBGWxV/F QxgWA81vLFXvEK0nCD2Q0G9pHIoFWMaZeeVsOg96gnxIxeE9756UjJx1qOwJL3Pu 73CDc0NadD0mN33+PtboG5triOPNl+ESWcMU3VP5WxUv+TPoJk342628lSbPWvCS ObyYKZaeBwyEwgUJ3TzacGxOy74cR8cuZ5pFSWoj5g49jV2u0rGZB87nBwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFTAYDP+0v4zyC/sWqvQPrVFVT2mMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVk1CZ01fN1NfalBJTC14YXE5QS10VVZWUGFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLZR2AwQA XrF6AwQBixxiAwQAwjJeMA0GCSqGSIb3DQEBCwUAA4IBAQCbBWfjhvIaklDEYfv3 Yant20lOdAN1jQHP8RQXPfrz6jYgcu2v48akNXMxym78jqmv/L/texURivGcJsVT W/xZIbn2+NoIdxU8BbjsrjV8hbsv7OTMPQvpZWVeNkt9H1Is5Ad9oz54PJbHepZ6 QT3WIhvoPXAkB1Jqzr31ugxL2rJpMZWA03La1vp4zNnm94g15Sh1LO+CKCYt9vT/ zeEj9s7v+XUZLFPRZRLoRWN9uFOscTh6vAeSlH4eZ6R1biQ1ojHyn5XFB9zlk4pY cb+1wkGTNVSjmeg/Q2g+HF+iZ+JvZys8y8HeoxoHvm1PPcGWshv8+TlLyW5jQsal OJ+s -----END CERTIFICATE-----Generated at Thu Feb 5 01:07:31 2026 by rpki-client