This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/VtZiDTehXWbLuvByNpvV6poX8NU.roa File: VtZiDTehXWbLuvByNpvV6poX8NU.roa (raw, json) Hash identifier: qzmhlPWDE6wNQJNL/swjxQrHyVqxNbrefZdH2uAfmPk= Subject key identifier: 56:D6:62:0D:37:A1:5D:66:CB:BA:F0:72:36:9B:D5:EA:9A:17:F0:D5 Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Certificate serial: 019B7C13200C97625B7939B41D7FAF0349B1 Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/VtZiDTehXWbLuvByNpvV6poX8NU.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.154.18.0/24 maxlen: 24 45.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:20:0c:97:62:5b:79:39:b4:1d:7f:af:03:49:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56d6620d37a15d66cbbaf072369bd5ea9a17f0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:74:21:13:34:7e:3d:41:41:07:3c:7b:fe: 12:5d:eb:e9:67:b0:fa:29:9e:5c:c0:e6:1b:3d:3f: d6:74:12:9d:a2:af:2d:10:8a:be:3a:74:cb:92:3f: 2a:11:72:ed:c7:a2:3d:cb:2f:5e:f9:1b:c3:9b:67: 53:98:5b:4a:b4:fa:71:25:7b:93:95:9a:bb:bf:85: c3:f0:9d:0f:cc:0a:f2:76:9c:4d:75:2d:df:c1:4b: 90:28:42:e1:48:8f:30:2b:b4:a7:ce:d4:2d:20:1e: df:06:ce:cf:c5:c6:46:f8:a1:2b:54:29:2a:5d:4d: 9a:7c:d8:f4:89:cb:6b:bf:16:9a:b2:6c:83:1a:38: f0:51:85:4b:48:a6:1d:48:e8:3a:67:21:82:e0:b3: 50:09:50:09:7a:cd:06:d4:32:44:dd:29:1b:56:f8: 95:05:e6:3a:66:9a:29:e1:ef:90:90:99:2b:5f:97: 50:72:13:3e:7c:31:f8:e9:f5:72:4c:c2:15:8a:c8: 71:b1:41:3f:35:1b:0c:83:f0:98:ad:4e:64:70:ff: 1b:f2:55:ad:29:70:84:b2:ac:ca:31:c2:ef:90:95: f0:df:b8:92:80:bd:6b:c6:45:a6:d7:2b:5b:52:97: 3b:74:42:34:c0:94:54:b8:a7:6c:f1:9a:6d:61:d7: b1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D6:62:0D:37:A1:5D:66:CB:BA:F0:72:36:9B:D5:EA:9A:17:F0:D5 X509v3 Authority Key Identifier: keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/VtZiDTehXWbLuvByNpvV6poX8NU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.18.0/23 Signature Algorithm: sha256WithRSAEncryption 54:f0:dd:6a:e5:0c:3a:8a:e0:45:52:8a:19:d9:4f:ad:f0:4e: 2b:ba:e8:fc:73:c8:50:82:86:40:bf:46:eb:70:9b:41:2a:46: 46:a9:06:64:47:08:d9:ac:75:d6:b5:55:4e:8f:2c:40:e9:58: 3b:75:70:48:b9:14:00:ea:59:96:a5:41:d2:c3:b2:ac:5c:b2: 4b:cb:78:83:58:dd:1d:79:32:df:76:a1:62:e7:23:d6:c0:e5: 67:03:de:65:4d:7d:12:9a:98:18:d0:6c:ff:50:6c:36:0b:86: 3a:3c:8b:ff:ff:30:ca:ea:2e:32:bf:7c:fb:cf:bb:e3:c4:70: d9:7e:b5:03:5d:18:72:9c:28:9c:38:0d:0b:1b:7f:53:2e:7c: e7:5e:de:5b:d3:fd:05:0c:91:4f:1e:fe:68:91:46:cc:5a:b7: 77:a6:52:10:67:65:8e:d2:a0:ca:75:48:2c:d8:ef:88:bf:bd: e0:4d:b9:eb:49:bf:96:9e:b6:72:61:8b:7c:b4:a6:6e:22:4b: 0e:ce:18:6c:5f:be:56:ee:54:0e:97:69:22:a4:05:bd:63:bf: c9:90:27:15:e9:6b:2b:f4:fe:fe:95:8a:24:93:c6:a2:e1:36: 2b:27:3d:f3:1f:0f:25:ae:64:83:be:f9:9e:a9:e0:2b:d9:72: 31:27:0b:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyAMl2JbeTm0HX+vA0mxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri YmYyNWIwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ2NjIwZDM3YTE1ZDY2Y2JiYWYwNzIzNjliZDVlYTlhMTdmMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLx0IRM0fj1BQQc8e/4SXevpZ7D6 KZ5cwOYbPT/WdBKdoq8tEIq+OnTLkj8qEXLtx6I9yy9e+RvDm2dTmFtKtPpxJXuT lZq7v4XD8J0PzArydpxNdS3fwUuQKELhSI8wK7SnztQtIB7fBs7PxcZG+KErVCkq XU2afNj0ictrvxaasmyDGjjwUYVLSKYdSOg6ZyGC4LNQCVAJes0G1DJE3SkbVviV BeY6Zpop4e+QkJkrX5dQchM+fDH46fVyTMIVishxsUE/NRsMg/CYrU5kcP8b8lWt KXCEsqzKMcLvkJXw37iSgL1rxkWm1ytbUpc7dEI0wJRUuKds8ZptYdexXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbWYg03oV1my7rwcjab1eqaF/DVMB8GA1UdIwQY MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt N2U4YzU1MjZkZTdlLzEvVnRaaURUZWhYV2JMdXZCeU5wdlY2cG9YOE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZoSMA0G CSqGSIb3DQEBCwUAA4IBAQBU8N1q5Qw6iuBFUooZ2U+t8E4ruuj8c8hQgoZAv0br cJtBKkZGqQZkRwjZrHXWtVVOjyxA6Vg7dXBIuRQA6lmWpUHSw7KsXLJLy3iDWN0d eTLfdqFi5yPWwOVnA95lTX0SmpgY0Gz/UGw2C4Y6PIv//zDK6i4yv3z7z7vjxHDZ frUDXRhynCicOA0LG39TLnznXt5b0/0FDJFPHv5okUbMWrd3plIQZ2WO0qDKdUgs 2O+Iv73gTbnrSb+WnrZyYYt8tKZuIksOzhhsX75W7lQOl2kipAW9Y7/JkCcV6Wsr 9P7+lYokk8ai4TYrJz3zHw8lrmSDvvmeqeAr2XIxJwtu -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:17 2026 by rpki-client