This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/rkVDElT_F-DCm1oPC0mwIVTGhY4.roa File: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (raw, json) Hash identifier: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc= Subject key identifier: AE:45:43:12:54:FF:17:E0:C2:9B:5A:0F:0B:49:B0:21:54:C6:85:8E Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F333CD0034DEF3F11DB0C4438CC55 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/rkVDElT_F-DCm1oPC0mwIVTGhY4.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 45.87.136.0/22 maxlen: 24 193.38.156.0/22 maxlen: 22 2a0d:6940::/29 maxlen: 48 2a0e:fe80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:33:3c:d0:03:4d:ef:3f:11:db:0c:44:38:cc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae45431254ff17e0c29b5a0f0b49b02154c6858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:c6:96:8c:87:eb:81:d2:cd:85:44:24:a3: 67:55:5f:8a:7b:aa:9a:e2:ca:49:59:46:86:cd:fc: a9:07:28:e9:21:f1:72:f3:e7:5d:eb:22:90:bc:df: 98:fe:d7:b4:70:de:f2:11:eb:ac:e9:b6:bc:a0:ea: 53:20:85:ae:a7:35:91:3e:59:01:50:1a:2d:52:9c: f6:83:7d:01:3f:e4:8a:fd:fe:87:8f:79:c6:b7:bc: 87:3d:8e:c6:dc:05:2d:88:2c:21:24:c5:e7:0b:cb: 90:51:45:27:37:a1:48:d3:2f:4c:a2:b0:c0:c0:ec: 8d:76:ed:ad:85:b5:95:9b:45:61:ae:5c:54:12:e9: 3d:61:da:39:9f:98:38:fa:aa:81:bb:ce:d6:af:2b: 9a:09:7c:ff:06:52:d1:11:6d:77:18:d5:57:40:8d: 9c:23:62:70:f8:4c:3d:3f:71:57:4f:4e:91:a5:b3: 70:ae:a6:8e:01:26:97:c7:cc:36:7e:ae:81:bd:1e: 43:bd:95:a6:35:c3:ae:31:33:3f:55:9c:bf:de:3c: 8b:d0:4b:c3:41:1a:74:df:36:2b:b2:26:33:89:23: 7e:f0:5e:63:c6:e3:28:13:d7:23:02:07:0b:ad:d6: 21:60:6f:01:38:dc:da:d4:69:b1:89:2f:c7:0b:e7: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:43:12:54:FF:17:E0:C2:9B:5A:0F:0B:49:B0:21:54:C6:85:8E X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/rkVDElT_F-DCm1oPC0mwIVTGhY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.136.0/22 193.38.156.0/22 IPv6: 2a0d:6940::/29 2a0e:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 3a:bd:6e:00:f4:b8:06:86:3c:e6:74:7e:47:5c:3c:c5:9f:24: a0:78:b3:5b:10:f0:21:9e:3a:91:dc:f4:c7:b8:45:f6:ba:f6: d2:34:d6:ff:5a:fa:0b:30:e9:f9:38:87:08:02:25:f5:80:f7: 9d:19:6b:ca:9e:a5:39:d4:f0:79:18:39:8d:77:12:05:47:c3: f1:b7:00:47:23:33:92:b1:b7:02:b0:9f:7d:52:7b:cd:02:a2: 47:26:ca:e5:91:e4:dc:bf:d7:93:34:c0:c0:86:b3:94:e3:aa: af:57:99:81:b6:4d:87:c9:c7:53:db:bf:67:cd:e5:78:d8:21: b6:18:f3:75:07:7b:16:6a:79:b7:dd:26:b4:40:43:89:8b:f8: 59:95:87:0c:1a:93:8a:fa:9b:cc:a5:c3:6c:62:f4:b5:01:0d: 73:57:1f:b4:aa:7d:f7:a7:6c:3e:f6:22:07:90:d8:13:91:b6: d9:7a:28:d7:46:9c:67:81:3a:bf:79:d6:ae:55:b4:8b:7d:ec: 36:71:e8:20:c4:22:95:79:49:81:27:bd:27:f4:00:d9:76:63: 67:6f:22:41:8a:9f:e6:5b:bb:44:f9:eb:39:e5:03:13:17:a4: 10:fb:29:64:2c:31:b3:e1:61:c4:1b:32:19:42:f4:90:40:16: cd:a7:fd:34 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5fzM80ANN7z8R2wxEOMxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTQ1NDMxMjU0ZmYxN2UwYzI5YjVhMGYwYjQ5YjAyMTU0YzY4NThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8vGloyH64HSzYVEJKNnVV+Ke6qa 4spJWUaGzfypByjpIfFy8+dd6yKQvN+Y/te0cN7yEeus6ba8oOpTIIWupzWRPlkB UBotUpz2g30BP+SK/f6Hj3nGt7yHPY7G3AUtiCwhJMXnC8uQUUUnN6FI0y9MorDA wOyNdu2thbWVm0VhrlxUEuk9Ydo5n5g4+qqBu87WryuaCXz/BlLREW13GNVXQI2c I2Jw+Ew9P3FXT06RpbNwrqaOASaXx8w2fq6BvR5DvZWmNcOuMTM/VZy/3jyL0EvD QRp03zYrsiYziSN+8F5jxuMoE9cjAgcLrdYhYG8BONza1GmxiS/HC+d1AQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK5FQxJU/xfgwptaDwtJsCFUxoWOMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvcmtWREVsVF9GLURDbTFvUEMwbXdJVlRHaFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLVeIAwQC wSacMBQEAgACMA4DBQMqDWlAAwUDKg7+gDANBgkqhkiG9w0BAQsFAAOCAQEAOr1u APS4BoY85nR+R1w8xZ8koHizWxDwIZ46kdz0x7hF9rr20jTW/1r6CzDp+TiHCAIl 9YD3nRlryp6lOdTweRg5jXcSBUfD8bcARyMzkrG3ArCffVJ7zQKiRybK5ZHk3L/X kzTAwIazlOOqr1eZgbZNh8nHU9u/Z83leNghthjzdQd7Fmp5t90mtEBDiYv4WZWH DBqTivqbzKXDbGL0tQENc1cftKp996dsPvYiB5DYE5G22Xoo10acZ4E6v3nWrlW0 i33sNnHoIMQilXlJgSe9J/QA2XZjZ28iQYqf5lu7RPnrOeUDExekEPspZCwxs+Fh xBsyGUL0kEAWzaf9NA== -----END CERTIFICATE-----Generated at Wed Jan 21 20:24:12 2026 by rpki-client