This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/VG_cPEe7kTG03PcAiKPKPDDX2Aw.roa File: VG_cPEe7kTG03PcAiKPKPDDX2Aw.roa (raw, json) Hash identifier: NnQzM+622E7wmxItwJFMLMXDDYpziIokkpr04kWQKgQ= Subject key identifier: 54:6F:DC:3C:47:BB:91:31:B4:DC:F7:00:88:A3:CA:3C:30:D7:D8:0C Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Certificate serial: 019B7C7F43B9D6D9F9C06812F0EB0D89E6A6 Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/VG_cPEe7kTG03PcAiKPKPDDX2Aw.roa Signing time: Fri 02 Jan 2026 02:17:53 +0000 ROA not before: Fri 02 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208897 IP address blocks: 45.15.132.0/22 maxlen: 22 45.15.132.0/24 maxlen: 24 45.15.133.0/24 maxlen: 24 45.15.134.0/24 maxlen: 24 45.15.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:43:b9:d6:d9:f9:c0:68:12:f0:eb:0d:89:e6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Validity Not Before: Jan 2 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=546fdc3c47bb9131b4dcf70088a3ca3c30d7d80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:dc:d6:55:98:58:98:55:a3:1f:99:0c:67: 4a:44:a2:9f:5f:2a:53:98:7e:39:da:28:73:04:12: ab:d4:d2:4a:7e:7c:de:62:ae:1b:19:f3:9b:da:ab: 2b:d6:37:ec:39:a2:15:ce:26:7d:34:14:18:75:a0: 7a:ca:ec:02:7e:55:01:83:65:a2:4e:8c:42:34:d7: 26:53:86:aa:4f:e6:92:98:2e:36:0d:75:fc:94:5b: 56:19:c8:e7:51:62:4c:98:75:c0:6d:55:bd:6e:79: 1a:05:ab:24:c0:13:36:cb:5b:bc:90:60:64:2f:b1: 03:eb:da:68:27:31:a4:7e:44:70:72:f4:6e:0a:62: 7e:c0:2c:f0:4c:f0:c1:0a:b0:a4:55:e2:71:7f:91: 8f:c1:42:9c:16:7f:65:98:fd:5c:05:b4:90:22:94: 93:8b:86:84:3d:89:fd:88:bb:27:f7:17:c7:ea:2b: 78:f5:03:d2:bb:cd:a8:0a:34:22:63:f0:b7:9d:9a: a9:0d:23:dc:b7:c1:a3:07:da:39:91:e1:56:b2:74: e9:f4:2a:fd:2d:3e:7a:fe:57:f4:22:ca:37:6e:40: a2:d2:ad:01:29:1b:da:d1:64:c4:b2:a6:76:74:8b: 99:46:90:79:45:59:6c:3e:83:4f:12:35:69:a2:af: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6F:DC:3C:47:BB:91:31:B4:DC:F7:00:88:A3:CA:3C:30:D7:D8:0C X509v3 Authority Key Identifier: keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/VG_cPEe7kTG03PcAiKPKPDDX2Aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.132.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:b9:d6:2c:ec:b4:75:7d:c1:ac:64:fd:24:d0:8c:9b:73:2d: 11:0f:74:53:59:39:a9:1c:9a:85:0c:90:ee:8e:20:81:9f:50: 28:1f:40:a1:7a:37:fe:cb:5d:7e:bc:cf:2b:20:43:b1:58:b3: c2:fe:3b:41:48:c7:54:60:d0:b1:e7:d9:ef:8f:82:ba:42:c9: 6d:71:48:67:45:6a:d2:85:d3:eb:95:53:a9:ff:f5:00:c4:92: 4f:1e:8e:6e:bd:97:1d:1e:85:11:0f:1e:c3:12:96:9a:c2:9b: ba:87:05:f7:a5:3b:67:9f:79:44:c6:c4:66:26:ca:e5:2f:77: 0b:b9:60:50:71:f7:d5:48:f0:8d:96:c1:2a:10:3c:36:2e:88: d7:e1:b5:f9:42:9e:d2:28:65:0d:f6:c1:90:d1:0d:34:7c:c2: 9e:49:df:18:f5:ce:07:c6:9c:8c:14:ec:12:69:ca:76:fa:49: 10:fd:06:d3:2e:59:2b:15:f5:5d:2f:7e:ff:1f:19:f8:b8:a0: 3d:87:47:1c:70:87:cc:c7:f2:9a:41:29:e9:cc:e2:c5:c6:4f: cb:d3:84:70:3a:c1:15:15:21:77:a0:d5:b7:89:82:ff:0a:a9: 26:d3:21:cd:46:12:6d:68:03:0f:30:50:4e:eb:08:af:c7:2c: f7:e6:77:44 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8f0O51tn5wGgS8OsNieamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTAzODkzZmMzMWU5ZDk0ZDI2NWFiYTkwY2M3ZGQ1N2Jj MjM3NjcwHhcNMjYwMTAyMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDZmZGMzYzQ3YmI5MTMxYjRkY2Y3MDA4OGEzY2EzYzMwZDdkODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzHc1lWYWJhVox+ZDGdKRKKfXypT mH452ihzBBKr1NJKfnzeYq4bGfOb2qsr1jfsOaIVziZ9NBQYdaB6yuwCflUBg2Wi ToxCNNcmU4aqT+aSmC42DXX8lFtWGcjnUWJMmHXAbVW9bnkaBaskwBM2y1u8kGBk L7ED69poJzGkfkRwcvRuCmJ+wCzwTPDBCrCkVeJxf5GPwUKcFn9lmP1cBbSQIpST i4aEPYn9iLsn9xfH6it49QPSu82oCjQiY/C3nZqpDSPct8GjB9o5keFWsnTp9Cr9 LT56/lf0Iso3bkCi0q0BKRva0WTEsqZ2dIuZRpB5RVlsPoNPEjVpoq8NHQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFRv3DxHu5ExtNz3AIijyjww19gMMB8GA1UdIwQY MBaAFPkQOJP8MenZTSZaupDMfdV7wjdnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQTRrX3d4NmRsTkpscTZrTXg5MVh2Q04yYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RjOTk1LTlhOTEtNGVjMS1hZWRl LWY2ZTBmN2QxNzQ0MC8xL1ZHX2NQRWU3a1RHMDNQY0FpS1BLUEREWDJBdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvY2RjOTk1LTlhOTEtNGVjMS1hZWRlLWY2ZTBmN2QxNzQ0 MC8xLzEtUkE0a193eDZkbE5KbHE2a014OTFYdkNOMmMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItD4Qw DQYJKoZIhvcNAQELBQADggEBAHq51izstHV9waxk/STQjJtzLREPdFNZOakcmoUM kO6OIIGfUCgfQKF6N/7LXX68zysgQ7FYs8L+O0FIx1Rg0LHn2e+PgrpCyW1xSGdF atKF0+uVU6n/9QDEkk8ejm69lx0ehREPHsMSlprCm7qHBfelO2efeUTGxGYmyuUv dwu5YFBx99VI8I2WwSoQPDYuiNfhtflCntIoZQ32wZDRDTR8wp5J3xj1zgfGnIwU 7BJpynb6SRD9BtMuWSsV9V0vfv8fGfi4oD2HRxxwh8zH8ppBKenM4sXGT8vThHA6 wRUVIXeg1beJgv8KqSbTIc1GEm1oAw8wUE7rCK/HLPfmd0Q= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:26 2026 by rpki-client