This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/V4BV10qPY6b-JooJZeWPBE6lJrE.roa File: V4BV10qPY6b-JooJZeWPBE6lJrE.roa (raw, json) Hash identifier: 38wboqA2Afge4PlNQaN9faMSSzNBTQwT1DwZQqM/Oco= Subject key identifier: 57:80:55:D7:4A:8F:63:A6:FE:26:8A:09:65:E5:8F:04:4E:A5:26:B1 Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf Certificate serial: 019B7E38ED82015B83F6D5F51E4012CA02C3 Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/V4BV10qPY6b-JooJZeWPBE6lJrE.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58197 IP address blocks: 45.128.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ed:82:01:5b:83:f6:d5:f5:1e:40:12:ca:02:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=578055d74a8f63a6fe268a0965e58f044ea526b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:ae:ff:a2:70:25:46:27:18:6c:f8:0c:8a: 27:05:5c:70:bd:84:b9:72:02:f2:c3:e2:de:94:5a: 58:2f:1b:50:ce:27:f5:3e:80:45:79:cc:c9:f4:7d: 35:27:93:5c:c3:fd:87:b6:47:03:30:bb:c0:cd:31: 1f:5d:6c:85:a8:4b:7c:a2:4a:6e:9f:65:95:4b:37: ff:ec:2c:57:c1:58:ad:68:57:70:55:23:f9:e5:cb: 5c:1a:f4:d8:52:20:d2:e0:b9:ad:08:b5:55:f2:e6: 5b:72:f2:ea:f7:df:2f:36:1a:fe:be:f2:31:6e:44: b2:f3:28:56:f6:90:21:7c:1b:64:4c:9d:8e:61:c2: c2:fb:bd:7c:66:0b:3a:61:b6:f2:76:cd:56:75:af: 55:07:0b:9e:79:88:86:21:93:8e:6c:09:cd:af:91: e0:81:84:71:49:92:65:04:0f:4c:b8:37:68:b3:9f: fa:b9:ad:01:4a:16:2d:84:96:ac:59:63:f2:20:a9: 3a:cf:d6:aa:25:5d:24:43:07:d4:5b:22:fb:c9:be: ad:3a:c8:6c:10:9e:92:17:be:28:bd:06:86:d9:77: d4:ec:67:07:82:4b:a6:de:36:d2:aa:0f:b2:e2:0a: 49:b2:3c:c7:24:ec:2a:72:2a:8c:ae:ca:f9:9e:89: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:55:D7:4A:8F:63:A6:FE:26:8A:09:65:E5:8F:04:4E:A5:26:B1 X509v3 Authority Key Identifier: keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/V4BV10qPY6b-JooJZeWPBE6lJrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.168.0/22 Signature Algorithm: sha256WithRSAEncryption 18:8a:37:5c:4d:24:41:a9:63:e4:85:b4:65:fd:e3:69:a5:bf: 80:17:2a:74:8b:53:da:85:d8:6d:f2:62:8f:e9:b2:b9:e2:cb: 77:7e:35:47:ce:91:0e:fd:c2:dd:62:73:df:7a:56:98:d4:ae: 89:3b:03:c3:8b:9a:c2:e3:37:d5:10:ab:2e:a8:73:10:d1:b5: 40:5f:16:c1:28:eb:bd:7e:5d:b7:bb:1e:ea:19:e5:93:f4:7b: b3:e2:36:19:08:09:a8:be:a0:16:4c:f6:85:70:28:06:39:86: f1:b0:97:10:21:41:b3:53:62:40:90:38:d6:c7:54:f1:6b:17: d6:0d:09:af:ac:40:f0:e6:c0:20:ca:8b:04:4a:11:bd:55:38: 55:5f:cb:7e:2e:02:ce:43:04:c3:13:6c:e5:8e:85:97:ed:78: e1:04:8b:71:2a:28:eb:8b:d8:30:a5:3a:9f:9f:29:c0:39:4c: f2:06:a0:78:f4:2e:f8:dd:80:10:d0:59:c6:ce:c0:15:dd:84: 9d:d1:a4:25:b5:68:2c:b3:59:4a:1f:6f:55:2b:ac:21:65:36: b1:69:a2:9a:12:04:e3:51:5f:81:7b:3e:9a:3d:d8:b3:b2:00: d8:33:e2:f5:6a:92:f4:ce:0f:0f:ce:2b:44:4b:d0:00:17:90: fc:d3:31:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO2CAVuD9tX1HkASygLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYTFmOTZmOTFjNGEwOWY5NzljNWIxODVjMjZjYjAwYWUw Zjg2YmYwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzgwNTVkNzRhOGY2M2E2ZmUyNjhhMDk2NWU1OGYwNDRlYTUyNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zuu/6JwJUYnGGz4DIonBVxwvYS5 cgLyw+LelFpYLxtQzif1PoBFeczJ9H01J5Ncw/2HtkcDMLvAzTEfXWyFqEt8okpu n2WVSzf/7CxXwVitaFdwVSP55ctcGvTYUiDS4LmtCLVV8uZbcvLq998vNhr+vvIx bkSy8yhW9pAhfBtkTJ2OYcLC+718Zgs6Ybbyds1Wda9VBwueeYiGIZOObAnNr5Hg gYRxSZJlBA9MuDdos5/6ua0BShYthJasWWPyIKk6z9aqJV0kQwfUWyL7yb6tOshs EJ6SF74ovQaG2XfU7GcHgkum3jbSqg+y4gpJsjzHJOwqciqMrsr5nokuwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFeAVddKj2Om/iaKCWXljwROpSaxMB8GA1UdIwQY MBaAFEKh+W+RxKCfl5xbGFwmywCuD4a/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUt MWUwZWQ5ZjM0NGZjLzEvVjRCVjEwcVBZNmItSm9vSlplV1BCRTZsSnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUtMWUwZWQ5ZjM0NGZj LzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYCoMA0G CSqGSIb3DQEBCwUAA4IBAQAYijdcTSRBqWPkhbRl/eNppb+AFyp0i1Pahdht8mKP 6bK54st3fjVHzpEO/cLdYnPfelaY1K6JOwPDi5rC4zfVEKsuqHMQ0bVAXxbBKOu9 fl23ux7qGeWT9Huz4jYZCAmovqAWTPaFcCgGOYbxsJcQIUGzU2JAkDjWx1TxaxfW DQmvrEDw5sAgyosEShG9VThVX8t+LgLOQwTDE2zljoWX7XjhBItxKijri9gwpTqf nynAOUzyBqB49C743YAQ0FnGzsAV3YSd0aQltWgss1lKH29VK6whZTaxaaKaEgTj UV+Bez6aPdizsgDYM+L1apL0zg8PzitES9AAF5D80zHz -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:19 2026 by rpki-client