This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa File: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (raw, json) Hash identifier: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ= Subject key identifier: 55:4A:E5:9B:F8:4F:A4:D3:F5:7E:CA:2A:D5:9F:C9:D7:F7:53:3C:3A Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Certificate serial: 019B7CEE2FF94943E790AEEDAA47A1FDE4BF Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49808 IP address blocks: 45.150.96.0/22 maxlen: 22 92.119.92.0/22 maxlen: 24 185.11.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2f:f9:49:43:e7:90:ae:ed:aa:47:a1:fd:e4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=554ae59bf84fa4d3f57eca2ad59fc9d7f7533c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:95:a2:31:60:77:ac:2b:d4:df:53:6f:6d:02: cf:2f:25:34:25:a4:37:b4:6a:bc:30:08:64:b5:5d: 04:9b:e5:ab:8f:99:7a:69:6a:42:26:c5:41:fb:0b: 29:51:9b:5e:f4:93:8e:63:5d:43:56:0a:79:4d:ae: cf:e0:9d:c6:59:43:c3:c7:08:30:3f:3c:37:33:f4: a7:9a:b9:69:55:7d:46:e3:37:a2:60:27:43:eb:2e: 97:05:1a:b5:6b:b4:dc:ce:23:bd:d3:c3:c4:e4:98: 35:5b:cf:5f:d8:08:09:f4:83:4d:e2:31:c9:04:1e: 61:c4:da:5a:14:0a:8c:f7:1a:ef:30:fd:51:4f:f6: bf:9e:e7:33:38:f2:77:53:10:d7:16:f6:ab:7d:32: 53:64:b8:c2:e6:12:5c:37:c1:46:3f:bd:c1:37:54: e8:14:f7:a3:3b:a3:ef:80:4a:ca:4c:11:17:6f:28: 9d:2e:80:20:eb:d3:fe:30:1c:21:ba:54:20:59:d0: f4:42:70:51:24:8e:50:2e:0f:d9:ca:60:ae:6f:6e: a6:90:c6:b6:6e:e6:ba:ee:6a:0c:1a:34:d7:e0:c0: df:7f:ef:0b:b7:5e:ae:b9:a2:43:6e:19:af:dd:c7: 86:1c:65:5e:ef:a8:7b:65:bc:15:76:47:fc:2c:2b: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4A:E5:9B:F8:4F:A4:D3:F5:7E:CA:2A:D5:9F:C9:D7:F7:53:3C:3A X509v3 Authority Key Identifier: keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.96.0/22 92.119.92.0/22 185.11.84.0/22 Signature Algorithm: sha256WithRSAEncryption 53:33:fd:e3:23:f1:c1:77:38:71:a4:99:be:4b:7e:71:50:51: c3:4d:c7:a7:4a:9f:8c:9d:c4:3e:1c:5d:f6:d5:ae:93:b9:22: 48:19:76:36:7d:10:fe:93:a5:9f:99:0c:0e:fb:b7:78:d7:b2: 16:3c:63:f7:6f:bc:24:61:ce:7e:32:75:c6:5e:c2:ab:7e:92: 9a:cf:de:3b:c1:a9:78:2e:2e:8f:88:2b:fa:ee:06:61:77:42: f6:f7:85:9a:26:1c:82:6e:54:e6:84:5f:53:62:08:dd:3a:2c: 21:0b:56:d1:53:d2:0b:a2:73:54:dd:55:b8:e0:b9:9e:46:71: 34:b4:63:1e:33:d9:a1:46:59:96:62:64:68:b5:d0:21:1e:b5: 7f:1a:51:f5:0c:31:ff:dc:e8:28:ec:3c:3e:c9:c4:97:b1:b2: 5e:7d:fe:14:f5:22:bd:33:92:e0:ca:3a:6d:c0:f6:b9:99:31: d6:1e:24:14:a9:0e:8e:a8:b0:ff:b4:d5:0f:6d:ca:6b:a1:e6: ea:51:ed:fc:3f:4e:34:af:b8:70:52:79:ab:f4:24:c4:dd:48: af:46:1d:1e:86:f7:e5:7a:72:bb:9f:d8:9d:c5:d3:df:96:fc: 49:f0:2a:f1:d3:39:26:ad:68:23:7e:3d:a4:a8:94:f7:d1:42: a9:2d:f5:eb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87i/5SUPnkK7tqkeh/eS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz NTBjNWYwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTRhZTU5YmY4NGZhNGQzZjU3ZWNhMmFkNTlmYzlkN2Y3NTMzYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZWiMWB3rCvU31NvbQLPLyU0JaQ3 tGq8MAhktV0Em+Wrj5l6aWpCJsVB+wspUZte9JOOY11DVgp5Ta7P4J3GWUPDxwgw Pzw3M/SnmrlpVX1G4zeiYCdD6y6XBRq1a7TcziO908PE5Jg1W89f2AgJ9INN4jHJ BB5hxNpaFAqM9xrvMP1RT/a/nuczOPJ3UxDXFvarfTJTZLjC5hJcN8FGP73BN1To FPejO6PvgErKTBEXbyidLoAg69P+MBwhulQgWdD0QnBRJI5QLg/ZymCub26mkMa2 bua67moMGjTX4MDff+8Lt16uuaJDbhmv3ceGHGVe76h7ZbwVdkf8LCuWNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFVK5Zv4T6TT9X7KKtWfydf3Uzw6MB8GA1UdIwQY MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt ZTE1OWNkNmYzNjU0LzEvVlVybG1faFBwTlAxZnNvcTFaX0oxX2RUUERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0 LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZZgAwQC XHdcAwQCuQtUMA0GCSqGSIb3DQEBCwUAA4IBAQBTM/3jI/HBdzhxpJm+S35xUFHD TcenSp+MncQ+HF321a6TuSJIGXY2fRD+k6WfmQwO+7d417IWPGP3b7wkYc5+MnXG XsKrfpKaz947wal4Li6PiCv67gZhd0L294WaJhyCblTmhF9TYgjdOiwhC1bRU9IL onNU3VW44LmeRnE0tGMeM9mhRlmWYmRotdAhHrV/GlH1DDH/3Ogo7Dw+ycSXsbJe ff4U9SK9M5LgyjptwPa5mTHWHiQUqQ6OqLD/tNUPbcproebqUe38P040r7hwUnmr 9CTE3UivRh0ehvflenK7n9idxdPflvxJ8Crx0zkmrWgjfj2kqJT30UKpLfXr -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:49 2026 by rpki-client