This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vj81oHqBw2pAc-BDNlLiwVKERLE.roa File: vj81oHqBw2pAc-BDNlLiwVKERLE.roa (raw, json) Hash identifier: P8A97Qm90xtFbJjDnSZwo5VP7wTH/pcEPPL3aOTXt/4= Subject key identifier: BE:3F:35:A0:7A:81:C3:6A:40:73:E0:43:36:52:E2:C1:52:84:44:B1 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AA9F7F24CF15C120CEE99F6731760 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vj81oHqBw2pAc-BDNlLiwVKERLE.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8796 IP address blocks: 45.10.68.0/24 maxlen: 24 91.216.169.0/24 maxlen: 24 91.216.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a9:f7:f2:4c:f1:5c:12:0c:ee:99:f6:73:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be3f35a07a81c36a4073e0433652e2c1528444b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:91:98:98:8c:ef:b3:6a:51:fd:ee:30:60: 4b:82:4f:5d:9d:b5:c4:10:e2:30:4f:d4:28:7e:89: df:8b:24:ab:2e:ff:f8:0f:30:14:37:78:28:41:1f: 6a:5e:6f:d9:49:84:2b:77:23:0d:aa:64:9f:8d:cd: 0d:7f:80:a6:8e:44:e1:a3:1f:a8:67:c3:d6:10:b6: 63:55:16:46:5d:77:92:1c:21:04:79:2d:7f:45:52: 83:89:9c:9d:16:19:be:55:fb:5d:69:10:5a:4a:72: e4:9d:91:8b:00:90:b6:8e:5e:f0:38:fb:1a:78:b6: 19:b3:e2:cc:78:13:35:de:9d:a7:ff:cb:2f:3a:c9: cc:cf:7a:4d:b3:8f:67:16:91:35:cf:26:86:ed:c7: 67:6b:d1:de:6e:a2:7e:1c:e6:30:01:c7:54:53:d2: d9:be:4a:0e:ed:2b:4e:a4:a7:74:96:78:97:5b:e6: 0e:10:ad:60:24:b9:c3:84:16:d9:97:c5:f9:95:fe: 90:3b:e2:09:a8:6a:8a:b7:2c:cc:58:d8:93:c8:f4: 09:61:b1:85:a8:43:c3:e2:4a:b5:3b:1f:74:68:96: 23:41:ec:36:d6:b4:a2:b1:9d:a8:f5:13:25:d8:f3: 39:e1:a6:fa:e4:af:54:b4:28:2e:8a:25:ff:47:24: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:35:A0:7A:81:C3:6A:40:73:E0:43:36:52:E2:C1:52:84:44:B1 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/vj81oHqBw2pAc-BDNlLiwVKERLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.68.0/24 91.216.169.0/24 91.216.190.0/24 Signature Algorithm: sha256WithRSAEncryption b7:81:8b:40:9e:2f:62:95:7d:dd:de:32:9c:ec:a2:1b:3c:da: 82:82:bd:8f:54:77:aa:c5:96:79:07:ef:81:85:73:91:54:67: 7e:66:54:3a:7b:bc:3b:ec:ba:f9:72:3e:cb:f3:1a:02:f1:35: 39:0c:30:8c:1d:57:f7:e8:03:dc:32:a3:a5:49:20:22:b6:73: 3e:61:0d:16:f0:4e:b9:7f:5e:81:41:1d:5a:86:e6:18:a4:28: 84:73:2b:18:a4:c4:c5:97:be:3b:b6:29:e4:44:17:34:b6:72: 5f:65:0c:89:5d:59:e2:8d:fa:a3:0b:46:1a:d7:e4:94:87:26: b8:48:5e:a8:32:0b:93:5a:1a:d5:73:59:08:0d:6a:b2:7b:b9: 25:cc:0d:11:33:87:de:52:98:cc:f3:27:96:72:52:ff:ae:0e: 5a:1c:5a:0f:76:46:dd:0b:60:7f:7f:02:79:72:2b:ec:79:81: 8b:c7:ed:22:1b:62:9a:5a:7f:e1:42:5c:fa:ea:23:46:d9:1a: 6b:f0:2b:06:a5:fa:f9:11:72:a9:1b:4e:0b:3f:48:f1:90:4d: 60:2e:73:83:1c:43:3e:55:ef:af:65:eb:a9:c9:c8:06:ea:e6: 37:a2:7a:f2:5e:f4:45:83:c2:c5:14:d0:d1:6a:81:d3:a2:68: 9e:20:49:6d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wqn38kzxXBIM7pn2cxdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTNmMzVhMDdhODFjMzZhNDA3M2UwNDMzNjUyZTJjMTUyODQ0NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgeRmJiM77NqUf3uMGBLgk9dnbXE EOIwT9QofonfiySrLv/4DzAUN3goQR9qXm/ZSYQrdyMNqmSfjc0Nf4CmjkThox+o Z8PWELZjVRZGXXeSHCEEeS1/RVKDiZydFhm+VftdaRBaSnLknZGLAJC2jl7wOPsa eLYZs+LMeBM13p2n/8svOsnMz3pNs49nFpE1zyaG7cdna9HebqJ+HOYwAcdUU9LZ vkoO7StOpKd0lniXW+YOEK1gJLnDhBbZl8X5lf6QO+IJqGqKtyzMWNiTyPQJYbGF qEPD4kq1Ox90aJYjQew21rSisZ2o9RMl2PM54ab65K9UtCguiiX/RyQBRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL4/NaB6gcNqQHPgQzZS4sFShESxMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvdmo4MW9IcUJ3MnBBYy1CRE5sTGl3VktFUkxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQpEAwQA W9ipAwQAW9i+MA0GCSqGSIb3DQEBCwUAA4IBAQC3gYtAni9ilX3d3jKc7KIbPNqC gr2PVHeqxZZ5B++BhXORVGd+ZlQ6e7w77Lr5cj7L8xoC8TU5DDCMHVf36APcMqOl SSAitnM+YQ0W8E65f16BQR1ahuYYpCiEcysYpMTFl747tinkRBc0tnJfZQyJXVni jfqjC0Ya1+SUhya4SF6oMguTWhrVc1kIDWqye7klzA0RM4feUpjM8yeWclL/rg5a HFoPdkbdC2B/fwJ5civseYGLx+0iG2KaWn/hQlz66iNG2Rpr8CsGpfr5EXKpG04L P0jxkE1gLnODHEM+Ve+vZeupycgG6uY3onryXvRFg8LFFNDRaoHTomieIElt -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:29 2026 by rpki-client