This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vph74CxUjlC8UKjNp0Q92cP-u5A.roa File: Vph74CxUjlC8UKjNp0Q92cP-u5A.roa (raw, json) Hash identifier: FVkFGXyzd+t5iAbhkIi9EHn5lNov7o7697MywaZA0yk= Subject key identifier: 56:98:7B:E0:2C:54:8E:50:BC:50:A8:CD:A7:44:3D:D9:C3:FE:BB:90 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E0D88562C5A2477B6DC844A56BE58 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vph74CxUjlC8UKjNp0Q92cP-u5A.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216300 IP address blocks: 45.87.121.0/24 maxlen: 24 185.254.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0d:88:56:2c:5a:24:77:b6:dc:84:4a:56:be:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56987be02c548e50bc50a8cda7443dd9c3febb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:c4:27:1a:7d:f5:af:72:be:4a:5e:d7:49: ea:4c:fe:a5:59:7c:ac:58:28:89:03:c6:ab:f9:06: 8c:53:4d:38:b8:59:f6:8f:28:cd:f4:1b:83:a7:b8: 83:f4:18:55:32:6c:02:66:b7:74:62:3a:06:b5:0f: 25:88:26:8b:40:7f:b0:17:c7:2d:03:e5:f9:be:ab: 45:82:d0:48:cb:96:9e:68:b5:da:05:f4:db:d0:e0: ad:31:49:3e:d5:4a:84:c0:e4:60:e6:e8:b3:46:ee: 8f:80:9d:73:af:25:47:3e:a2:22:3d:af:04:9c:f0: 25:1b:f9:90:1b:23:e2:3f:0b:33:ab:33:7e:4e:41: ca:be:4c:12:f8:4e:98:8e:92:4d:14:77:72:82:fa: d3:57:26:73:3b:98:67:06:c4:29:9d:6c:1f:26:b9: e8:31:05:6e:32:63:de:ed:7c:bc:54:c5:39:e8:93: fa:01:a5:6a:49:3e:38:dc:85:b4:af:95:00:96:96: ae:17:a6:de:df:cd:86:d9:9f:d2:1f:ca:bf:14:73: a1:06:a4:65:fd:02:59:56:37:94:98:bc:af:b6:25: e7:e3:ac:fb:58:04:2c:8c:44:95:8f:9e:c1:57:dd: 9d:95:d3:d2:68:c7:c1:da:fc:4d:88:3b:42:aa:4d: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:98:7B:E0:2C:54:8E:50:BC:50:A8:CD:A7:44:3D:D9:C3:FE:BB:90 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vph74CxUjlC8UKjNp0Q92cP-u5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.121.0/24 185.254.67.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a7:35:70:d2:0f:e7:83:d4:ec:e9:ad:87:69:17:47:c8:68: e7:41:e4:2f:80:50:85:c2:56:6b:46:16:59:2c:70:2f:bc:14: 77:0a:a5:9a:67:3c:73:a8:60:a2:72:2c:69:5c:70:39:f0:dd: fa:f7:3e:2c:ce:0b:23:d4:36:e0:06:c7:a3:e7:ab:5f:45:19: bb:b1:0b:49:1b:28:82:75:54:57:9a:b8:ca:d0:fc:41:d6:e9: 68:d3:8b:30:e4:32:6e:11:5a:ba:d3:3c:85:e2:49:67:48:8e: 58:4c:ce:8b:54:1e:8f:05:a5:f7:7d:16:b5:87:ae:dd:c0:7a: e7:8a:35:a6:54:d7:fa:db:98:4b:ad:93:d4:1c:34:a9:51:b1: 5b:3e:f5:cc:26:9d:04:71:d3:15:f1:3d:8d:9d:fa:f4:b6:fe: 5f:f6:e3:12:8b:9f:bd:b4:17:e2:48:50:48:41:94:09:e9:47: b2:9a:00:d6:92:46:82:17:ca:ee:b1:70:8d:42:37:e9:0e:9d: d0:a2:c1:21:c6:c6:0a:80:23:ce:83:bf:38:30:19:d0:fd:e2: 1d:a6:4d:cc:d0:45:22:2c:a7:54:af:8a:4b:7f:9a:7f:38:ea: b3:ba:eb:f7:cf:32:99:e2:1c:63:29:6a:b4:45:be:d7:b9:99: c2:65:9f:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fg2IVixaJHe23IRKVr5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njk4N2JlMDJjNTQ4ZTUwYmM1MGE4Y2RhNzQ0M2RkOWMzZmViYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDnEJxp99a9yvkpe10nqTP6lWXys WCiJA8ar+QaMU004uFn2jyjN9BuDp7iD9BhVMmwCZrd0YjoGtQ8liCaLQH+wF8ct A+X5vqtFgtBIy5aeaLXaBfTb0OCtMUk+1UqEwORg5uizRu6PgJ1zryVHPqIiPa8E nPAlG/mQGyPiPwszqzN+TkHKvkwS+E6YjpJNFHdygvrTVyZzO5hnBsQpnWwfJrno MQVuMmPe7Xy8VMU56JP6AaVqST443IW0r5UAlpauF6be382G2Z/SH8q/FHOhBqRl /QJZVjeUmLyvtiXn46z7WAQsjESVj57BV92dldPSaMfB2vxNiDtCqk34sQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFaYe+AsVI5QvFCozadEPdnD/ruQMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVnBoNzRDeFVqbEM4VUtqTnAwUTkyY1AtdTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVd5AwQA uf5DMA0GCSqGSIb3DQEBCwUAA4IBAQA+pzVw0g/ng9Ts6a2HaRdHyGjnQeQvgFCF wlZrRhZZLHAvvBR3CqWaZzxzqGCicixpXHA58N369z4szgsj1DbgBsej56tfRRm7 sQtJGyiCdVRXmrjK0PxB1ulo04sw5DJuEVq60zyF4klnSI5YTM6LVB6PBaX3fRa1 h67dwHrnijWmVNf625hLrZPUHDSpUbFbPvXMJp0EcdMV8T2Nnfr0tv5f9uMSi5+9 tBfiSFBIQZQJ6UeymgDWkkaCF8rusXCNQjfpDp3QosEhxsYKgCPOg784MBnQ/eId pk3M0EUiLKdUr4pLf5p/OOqzuuv3zzKZ4hxjKWq0Rb7XuZnCZZ9Y -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:08 2026 by rpki-client