This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VSIoTId0of4SltqHdwwdq5wlRZE.roa File: VSIoTId0of4SltqHdwwdq5wlRZE.roa (raw, json) Hash identifier: Nkai5IyjrI916L7YYR1IfCSe5EjVPJ0SSZctqBcapt0= Subject key identifier: 55:22:28:4C:87:74:A1:FE:12:96:DA:87:77:0C:1D:AB:9C:25:45:91 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E995C75704489CDDFC1D53ACE700E Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VSIoTId0of4SltqHdwwdq5wlRZE.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4842 IP address blocks: 45.9.11.0/24 maxlen: 24 2a0e:aa06::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:99:5c:75:70:44:89:cd:df:c1:d5:3a:ce:70:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5522284c8774a1fe1296da87770c1dab9c254591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:74:4d:74:97:3f:4a:95:07:a8:33:ca:f1: 8a:28:2b:45:b2:72:a6:f9:c7:fb:7b:85:47:f5:fb: 9e:75:2d:61:d7:ea:e0:c0:57:01:d2:eb:dd:a8:2b: 8d:bc:a4:cf:8e:90:ee:c6:32:34:6e:c7:c0:af:5f: c1:47:71:4b:a8:08:81:b1:97:b9:3c:74:50:56:7a: a6:8c:14:ca:9c:11:2e:be:24:9c:a6:f5:89:e5:8e: 7e:36:63:6a:36:dd:39:e4:d4:1e:12:7a:0e:59:ae: 36:27:2c:5f:db:a9:ed:4c:0c:ee:5e:39:4d:50:ad: 13:69:af:9a:54:de:f7:5f:0c:8b:27:f0:af:4a:37: 35:79:9e:4c:8a:55:9c:ba:46:ed:f6:46:2f:b4:b6: ed:84:88:4a:68:dc:a2:55:2f:25:c4:18:8c:78:45: 5a:4f:39:3d:21:24:d1:2b:1d:cd:c8:2d:52:67:20: 31:12:c7:0f:7d:4e:2c:92:92:4a:63:6d:1f:95:11: 1c:f3:5b:7f:10:b5:42:9e:6f:94:f5:78:cf:16:6d: 55:9f:91:7e:0f:10:73:cc:ed:4f:b9:b6:1d:11:b0: 79:2c:7c:bd:56:a2:78:49:43:12:2b:3f:ca:41:15: 57:f9:05:c9:0e:52:18:cc:5e:b3:73:ce:33:08:32: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:22:28:4C:87:74:A1:FE:12:96:DA:87:77:0C:1D:AB:9C:25:45:91 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VSIoTId0of4SltqHdwwdq5wlRZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.11.0/24 IPv6: 2a0e:aa06::/40 Signature Algorithm: sha256WithRSAEncryption 47:35:a4:77:19:3a:6e:39:7f:8b:38:c2:3b:86:d8:4e:e5:f6: c6:34:a7:15:e5:fc:c0:97:67:94:ac:a4:28:d3:55:c7:bb:f4: 36:11:04:e1:ab:fa:77:dd:b3:a7:55:ef:ce:13:4a:2f:eb:4d: 99:19:76:44:f7:b3:5f:82:7e:12:86:12:1d:e3:55:8a:49:e6: 63:37:d7:3e:1b:e7:18:72:35:e9:9c:9a:37:cc:6f:f4:7e:df: 98:28:6b:f3:7c:d3:d7:1a:eb:99:94:10:fe:bf:a1:5b:6f:f8: 06:54:93:7c:58:8c:88:fb:08:3f:c3:0b:d9:dc:bd:f4:fb:72: 39:a9:4f:3b:55:c7:bd:57:54:93:3a:b7:20:39:a7:2e:a6:6c: 65:13:a7:68:ca:ff:48:36:13:4a:03:44:84:95:e8:d9:27:77: ec:7f:8f:55:36:bc:65:57:24:9f:4d:b8:e0:f8:6b:72:94:16: 6b:40:b2:c7:60:c1:9f:7d:64:70:98:19:39:91:9d:d2:72:af: cb:2d:cb:ec:b4:94:4a:48:a4:da:75:4d:d0:93:f3:62:fa:51: 81:12:fb:ea:74:c8:cb:a6:06:e4:99:df:fd:b4:02:78:54:29: 38:39:e9:1b:c2:81:a8:1c:c6:49:7c:4f:25:db:8b:9f:c9:25: ff:55:45:43 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fplcdXBEic3fwdU6znAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTIyMjg0Yzg3NzRhMWZlMTI5NmRhODc3NzBjMWRhYjljMjU0NTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwF0TXSXP0qVB6gzyvGKKCtFsnKm +cf7e4VH9fuedS1h1+rgwFcB0uvdqCuNvKTPjpDuxjI0bsfAr1/BR3FLqAiBsZe5 PHRQVnqmjBTKnBEuviScpvWJ5Y5+NmNqNt055NQeEnoOWa42Jyxf26ntTAzuXjlN UK0Taa+aVN73XwyLJ/CvSjc1eZ5MilWcukbt9kYvtLbthIhKaNyiVS8lxBiMeEVa Tzk9ISTRKx3NyC1SZyAxEscPfU4skpJKY20flREc81t/ELVCnm+U9XjPFm1Vn5F+ DxBzzO1PubYdEbB5LHy9VqJ4SUMSKz/KQRVX+QXJDlIYzF6zc84zCDLB+wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFUiKEyHdKH+Epbah3cMHaucJUWRMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvVlNJb1RJZDBvZjRTbHRxSGR3d2RxNXdsUlpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALQkLMA4E AgACMAgDBgAqDqoGADANBgkqhkiG9w0BAQsFAAOCAQEARzWkdxk6bjl/izjCO4bY TuX2xjSnFeX8wJdnlKykKNNVx7v0NhEE4av6d92zp1XvzhNKL+tNmRl2RPezX4J+ EoYSHeNViknmYzfXPhvnGHI16ZyaN8xv9H7fmChr83zT1xrrmZQQ/r+hW2/4BlST fFiMiPsIP8ML2dy99PtyOalPO1XHvVdUkzq3IDmnLqZsZROnaMr/SDYTSgNEhJXo 2Sd37H+PVTa8ZVckn0244PhrcpQWa0Cyx2DBn31kcJgZOZGd0nKvyy3L7LSUSkik 2nVN0JPzYvpRgRL76nTIy6YG5Jnf/bQCeFQpODnpG8KBqBzGSXxPJduLn8kl/1VF Qw== -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:04 2026 by rpki-client