This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/VpPJ4ZzReaEohaymqptLaOAjr1o.roa File: VpPJ4ZzReaEohaymqptLaOAjr1o.roa (raw, json) Hash identifier: lqwSOhzaFJrXfe0L7Qw99FbYMDPv5g1eewbWIKteNLY= Subject key identifier: 56:93:C9:E1:9C:D1:79:A1:28:85:AC:A6:AA:9B:4B:68:E0:23:AF:5A Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78 Certificate serial: 019B7BA469E8DBF7857901AC592CF2FBE904 Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/VpPJ4ZzReaEohaymqptLaOAjr1o.roa Signing time: Thu 01 Jan 2026 22:18:51 +0000 ROA not before: Thu 01 Jan 2026 22:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57793 IP address blocks: 45.83.168.0/22 maxlen: 24 91.227.26.0/24 maxlen: 24 95.131.81.0/24 maxlen: 24 95.131.82.0/23 maxlen: 23 95.131.84.0/22 maxlen: 22 134.0.16.0/21 maxlen: 21 185.27.32.0/22 maxlen: 22 185.42.196.0/22 maxlen: 22 185.53.92.0/22 maxlen: 22 185.75.120.0/22 maxlen: 22 185.164.44.0/22 maxlen: 22 188.114.112.0/21 maxlen: 21 2a02:ef8::/32 maxlen: 32 2a05:5240::/29 maxlen: 29 2a05:5241::/32 maxlen: 32 2a05:5242::/32 maxlen: 32 2a05:5243::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:69:e8:db:f7:85:79:01:ac:59:2c:f2:fb:e9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78 Validity Not Before: Jan 1 22:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5693c9e19cd179a12885aca6aa9b4b68e023af5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:ef:82:94:08:3e:f4:87:ce:dc:6f:3c:87: 3f:b7:ff:21:d9:a9:bf:cd:75:55:ef:d7:8f:a9:1c: 80:5e:36:ac:b0:cf:ac:c2:8a:ef:67:ac:37:96:6b: 8d:e2:b6:d3:1c:5a:37:79:4c:27:0b:10:90:84:8a: 36:70:c0:c0:8b:ec:ff:ed:90:c9:34:1d:49:3e:0a: 0c:74:66:0a:96:2f:16:d6:e8:2d:2c:f5:70:67:da: 4c:22:b5:d0:72:4e:74:6c:29:3f:bc:af:9f:9e:1e: 28:1c:8d:b9:e9:0f:95:a5:d0:16:d9:19:2a:5a:3b: 7a:b5:e0:40:5e:ae:bb:1c:68:4e:e7:c4:63:16:51: 18:e5:a8:5b:57:a5:f4:33:d6:47:06:e6:7e:19:00: 32:f4:57:b1:c1:6a:b2:eb:73:f0:8a:cb:f2:7f:06: b5:86:e0:4a:be:b7:ff:d3:61:f8:a4:d2:2a:dc:d9: c7:42:34:61:36:62:31:e5:f1:90:50:a3:71:c5:26: 7a:c5:fd:ac:0d:cb:ce:6f:ad:a0:8c:c7:92:d5:ba: 33:b0:19:f2:6d:2a:a8:2f:8d:a8:02:cc:f4:3c:cb: 3b:40:fd:43:b3:12:71:02:e6:da:8f:a1:82:95:9d: 9a:31:1b:91:37:a2:dd:c5:9d:73:e8:d9:f3:bf:0b: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:93:C9:E1:9C:D1:79:A1:28:85:AC:A6:AA:9B:4B:68:E0:23:AF:5A X509v3 Authority Key Identifier: keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/VpPJ4ZzReaEohaymqptLaOAjr1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.168.0/22 91.227.26.0/24 95.131.81.0-95.131.87.255 134.0.16.0/21 185.27.32.0/22 185.42.196.0/22 185.53.92.0/22 185.75.120.0/22 185.164.44.0/22 188.114.112.0/21 IPv6: 2a02:ef8::/32 2a05:5240::/29 Signature Algorithm: sha256WithRSAEncryption c2:22:d9:f2:e1:2f:62:a7:4f:48:58:40:c8:f7:fb:ac:3b:3a: 04:f9:c7:4e:ed:2e:6d:5c:2c:89:5d:fe:02:08:c4:e8:c4:d3: 3e:4b:16:98:9c:51:53:cc:61:63:e7:be:2e:51:47:d0:ce:39: 0b:6d:ce:ca:19:8e:56:54:37:7d:d0:31:09:79:bd:10:fd:5c: 67:cb:ec:e0:83:bb:0a:18:f3:09:ee:1a:36:07:f6:9a:c1:22: ea:8e:3c:31:9a:38:0b:73:f3:de:0f:89:5d:d5:ab:8c:5e:99: c9:44:a8:83:41:aa:59:cb:47:24:84:d5:97:66:ab:1d:f5:87: 72:49:cc:f5:f5:39:e0:85:7b:8d:ad:f1:20:7c:2c:25:fd:7d: ee:51:17:76:45:5c:37:ee:46:09:02:76:78:de:ef:ab:be:61: 8d:02:6e:8c:2e:af:ae:dc:25:b0:53:c8:cc:a5:31:d3:5d:28: 95:be:94:8e:c2:bd:01:b2:4e:b8:13:9d:2e:7a:e3:1f:53:9a: 1a:fa:f8:76:35:c7:f0:ad:3f:80:3e:4f:e5:f1:ca:48:0c:cd: 12:fd:36:d1:23:f2:1a:f6:71:73:ea:69:9c:a6:4a:0a:ac:d0: 47:89:f7:61:42:d7:41:a6:b5:0d:8d:e9:5e:06:3e:10:bf:ca: 60:17:7b:9c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt7pGno2/eFeQGsWSzy++kEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MWMyODFmNTc2YjQzYTFjYWI5NTNjOTIwNDFjZTk1OTky NzBjNzgwHhcNMjYwMTAxMjIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjkzYzllMTljZDE3OWExMjg4NWFjYTZhYTliNGI2OGUwMjNhZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCLvgpQIPvSHztxvPIc/t/8h2am/ zXVV79ePqRyAXjassM+sworvZ6w3lmuN4rbTHFo3eUwnCxCQhIo2cMDAi+z/7ZDJ NB1JPgoMdGYKli8W1ugtLPVwZ9pMIrXQck50bCk/vK+fnh4oHI256Q+VpdAW2Rkq Wjt6teBAXq67HGhO58RjFlEY5ahbV6X0M9ZHBuZ+GQAy9FexwWqy63Pwisvyfwa1 huBKvrf/02H4pNIq3NnHQjRhNmIx5fGQUKNxxSZ6xf2sDcvOb62gjMeS1bozsBny bSqoL42oAsz0PMs7QP1DsxJxAubaj6GClZ2aMRuRN6LdxZ1z6NnzvwuB0wIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFFaTyeGc0XmhKIWspqqbS2jgI69aMB8GA1UdIwQY MBaAFIUcKB9Xa0OhyrlTySBBzpWZJwx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJ3b0gxZHJRNkhLdVZQSklFSE9sWmtuREhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80YTY4YTctZGMzMS00MGZhLWExMTAt OTFkNTYyMDBiYWY0LzEvVnBQSjRaelJlYUVvaGF5bXFwdExhT0FqcjFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80YTY4YTctZGMzMS00MGZhLWExMTAtOTFkNTYyMDBiYWY0 LzEvaFJ3b0gxZHJRNkhLdVZQSklFSE9sWmtuREhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBKBAIAATBEAwQCLVOoAwQA W+MaMAwDBABfg1EDBANfg1ADBAOGABADBAK5GyADBAK5KsQDBAK5NVwDBAK5S3gD BAK5pCwDBAO8cnAwFAQCAAIwDgMFACoCDvgDBQMqBVJAMA0GCSqGSIb3DQEBCwUA A4IBAQDCItny4S9ip09IWEDI9/usOzoE+cdO7S5tXCyJXf4CCMToxNM+SxaYnFFT zGFj574uUUfQzjkLbc7KGY5WVDd90DEJeb0Q/Vxny+zgg7sKGPMJ7ho2B/aawSLq jjwxmjgLc/PeD4ld1auMXpnJRKiDQapZy0ckhNWXZqsd9YdyScz19TnghXuNrfEg fCwl/X3uURd2RVw37kYJAnZ43u+rvmGNAm6MLq+u3CWwU8jMpTHTXSiVvpSOwr0B sk64E50ueuMfU5oa+vh2NcfwrT+APk/l8cpIDM0S/TbRI/Ia9nFz6mmcpkoKrNBH ifdhQtdBprUNjeleBj4Qv8pgF3uc -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:30 2026 by rpki-client