This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VXsf9HUlNDYRr0eyYLFTdRKr1Eg.roa File: VXsf9HUlNDYRr0eyYLFTdRKr1Eg.roa (raw, json) Hash identifier: ZQB4tuf5dlQEkyWs5f4+3gs1fsp9Zm6c0JaQAv6hDRM= Subject key identifier: 55:7B:1F:F4:75:25:34:36:11:AF:47:B2:60:B1:53:75:12:AB:D4:48 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5FC8617E3751B14D56169BCF6C73 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VXsf9HUlNDYRr0eyYLFTdRKr1Eg.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 45.123.41.0/24 maxlen: 24 45.123.42.0/23 maxlen: 24 45.141.200.0/23 maxlen: 24 45.141.202.0/24 maxlen: 24 45.141.203.0/24 maxlen: 24 89.47.89.0/24 maxlen: 24 91.190.100.0/24 maxlen: 24 92.114.107.0/24 maxlen: 24 185.9.55.0/24 maxlen: 24 185.35.136.0/23 maxlen: 24 185.35.138.0/24 maxlen: 24 185.35.139.0/24 maxlen: 24 188.212.133.0/24 maxlen: 24 188.241.214.0/24 maxlen: 24 2a0b:64c0::/32 maxlen: 48 2a10:6c02::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5f:c8:61:7e:37:51:b1:4d:56:16:9b:cf:6c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=557b1ff47525343611af47b260b1537512abd448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:ac:3b:38:5b:33:fe:f6:49:94:69:4b:f5: 71:27:33:50:da:00:89:3f:4d:da:5e:ff:6a:48:13: 25:07:4c:04:6e:e3:6b:e2:6a:57:97:f9:dc:ab:13: 90:fb:cf:37:b2:7e:21:9b:69:ed:b0:93:8b:ba:54: c3:12:ae:b8:ba:51:40:49:58:09:b0:bc:5a:26:5a: 22:ff:cc:61:9e:d1:4a:10:57:a0:29:d7:6c:e4:1f: fd:e3:ea:7c:99:f5:19:04:48:00:1f:dd:51:0a:2a: 20:e2:e0:f1:65:8d:01:31:e7:9d:27:84:84:3b:ea: 62:94:0b:e9:7d:95:73:fd:44:74:5e:30:83:1e:e3: ff:4a:b5:a8:01:54:2d:0c:54:4d:f0:e7:1e:03:2b: 16:70:3f:eb:a7:40:86:e8:8d:99:fa:29:0b:80:6f: 27:0f:bd:f0:92:65:c1:fe:3b:89:c6:b1:50:2c:23: 74:89:fd:b0:f4:6a:3e:f8:97:3f:98:45:77:9f:bd: 26:a2:74:7b:54:23:1e:43:c4:da:82:b5:93:fc:78: 2e:df:46:64:33:fa:70:cc:b3:41:40:39:57:63:a8: b3:dd:f5:96:47:63:07:7b:f5:97:b7:c1:6c:08:ba: 0b:61:76:c7:81:47:77:28:f0:e4:d0:0f:f4:99:e6: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:1F:F4:75:25:34:36:11:AF:47:B2:60:B1:53:75:12:AB:D4:48 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VXsf9HUlNDYRr0eyYLFTdRKr1Eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.41.0-45.123.43.255 45.141.200.0/22 89.47.89.0/24 91.190.100.0/24 92.114.107.0/24 185.9.55.0/24 185.35.136.0/22 188.212.133.0/24 188.241.214.0/24 IPv6: 2a0b:64c0::/32 2a10:6c02::/32 Signature Algorithm: sha256WithRSAEncryption 51:4e:5a:65:26:24:d1:53:99:d4:06:75:17:3d:1c:7b:97:90: 43:10:5b:65:b0:da:a6:bf:86:21:59:05:c5:82:ae:bc:62:f1: 9b:5a:6f:aa:b1:16:93:20:90:e1:87:4c:52:10:79:9c:54:df: e2:67:40:96:38:6c:ed:60:9f:7f:ef:80:7f:22:b2:49:0a:f5: ad:f9:9c:c2:41:9e:c6:f5:2d:4c:67:be:8c:b3:ea:74:6c:cf: 8a:99:96:31:4c:34:84:12:49:14:fa:77:0d:18:50:87:d9:45: da:f5:f2:ee:07:a7:9f:42:5c:7a:ad:7b:2e:e2:56:96:52:1e: c3:6c:f8:b4:f5:e8:5c:c5:6c:b2:e1:67:5a:4b:70:20:33:35: 8a:aa:94:76:50:97:80:a8:aa:2a:03:35:6a:60:02:2a:64:61: 3b:78:06:a0:7a:1e:48:08:e7:6c:db:fc:9b:65:e7:8b:79:e0: e1:d0:38:5a:27:a5:21:fb:db:14:5c:cd:b4:d4:8c:00:f5:42: d3:0f:ba:4c:2b:33:f2:e9:67:8f:7f:e4:bb:27:eb:dc:49:8c: f2:49:ad:28:67:ff:80:64:97:3e:bc:54:41:a8:e9:b2:e3:ff: 1c:5b:10:b0:00:45:98:6d:16:88:35:93:47:1f:c3:cb:3e:8a: a7:95:e6:67 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt9XV/IYX43UbFNVhabz2xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTdiMWZmNDc1MjUzNDM2MTFhZjQ3YjI2MGIxNTM3NTEyYWJkNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/SsOzhbM/72SZRpS/VxJzNQ2gCJ P03aXv9qSBMlB0wEbuNr4mpXl/ncqxOQ+883sn4hm2ntsJOLulTDEq64ulFASVgJ sLxaJloi/8xhntFKEFegKdds5B/94+p8mfUZBEgAH91RCiog4uDxZY0BMeedJ4SE O+pilAvpfZVz/UR0XjCDHuP/SrWoAVQtDFRN8OceAysWcD/rp0CG6I2Z+ikLgG8n D73wkmXB/juJxrFQLCN0if2w9Go++Jc/mEV3n70monR7VCMeQ8TagrWT/Hgu30Zk M/pwzLNBQDlXY6iz3fWWR2MHe/WXt8FsCLoLYXbHgUd3KPDk0A/0meYSsQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFFV7H/R1JTQ2Ea9HsmCxU3USq9RIMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvVlhzZjlIVWxORFlScjBleVlMRlRkUktyMUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+MAwDBAAteykD BAIteygDBAItjcgDBABZL1kDBABbvmQDBABccmsDBAC5CTcDBAK5I4gDBAC81IUD BAC88dYwFAQCAAIwDgMFACoLZMADBQAqEGwCMA0GCSqGSIb3DQEBCwUAA4IBAQBR TlplJiTRU5nUBnUXPRx7l5BDEFtlsNqmv4YhWQXFgq68YvGbWm+qsRaTIJDhh0xS EHmcVN/iZ0CWOGztYJ9/74B/IrJJCvWt+ZzCQZ7G9S1MZ76Ms+p0bM+KmZYxTDSE EkkU+ncNGFCH2UXa9fLuB6efQlx6rXsu4laWUh7DbPi09ehcxWyy4WdaS3AgMzWK qpR2UJeAqKoqAzVqYAIqZGE7eAageh5ICOds2/ybZeeLeeDh0DhaJ6Uh+9sUXM20 1IwA9ULTD7pMKzPy6WePf+S7J+vcSYzySa0oZ/+AZJc+vFRBqOmy4/8cWxCwAEWY bRaINZNHH8PLPoqnleZn -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:41 2026 by rpki-client