This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VzLc5JD9ChXBh-_FdKOlBfBUgEQ.roa File: VzLc5JD9ChXBh-_FdKOlBfBUgEQ.roa (raw, json) Hash identifier: tQ+9eb6xLTs178MVdNw4EB7kXbF9U7GKmywCjvLqVgo= Subject key identifier: 57:32:DC:E4:90:FD:0A:15:C1:87:EF:C5:74:A3:A5:05:F0:54:80:44 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C139E62F613F441A08E4778AB84DDD2 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VzLc5JD9ChXBh-_FdKOlBfBUgEQ.roa Signing time: Fri 02 Jan 2026 00:20:19 +0000 ROA not before: Fri 02 Jan 2026 00:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215026 IP address blocks: 45.131.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:9e:62:f6:13:f4:41:a0:8e:47:78:ab:84:dd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5732dce490fd0a15c187efc574a3a505f0548044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:7b:8d:e9:71:17:2d:1f:ec:38:a6:5a:d3: eb:14:74:73:26:1c:a5:ab:e6:4f:ab:a4:37:bc:fe: 6c:6a:f4:fd:3e:ff:9a:b1:e3:5c:64:5c:28:6a:a4: b1:d8:b5:94:65:47:04:af:06:12:f3:29:37:13:db: fd:48:99:69:ff:c6:9d:ff:e0:14:9c:5d:1a:f3:cc: d7:2b:67:b0:54:b8:e9:0b:13:cf:5a:c7:80:5d:9e: dc:00:bf:26:19:25:f2:18:6d:5d:3d:94:7f:33:cb: ae:e7:1e:37:13:29:d0:2c:4f:9e:88:65:e3:13:5d: 2c:2f:2b:8f:24:52:76:f4:01:bb:20:b7:fe:29:fa: cc:de:80:93:b4:4b:ae:c1:0a:9a:56:06:c1:32:ac: 1d:ad:87:c9:34:fb:8a:b6:43:49:3d:d9:76:83:33: 4a:e1:3a:4a:ac:a1:ce:de:5c:ab:14:d5:8d:03:17: f6:49:50:04:75:d5:7b:48:69:8a:af:d7:4a:8f:d6: 63:35:0d:d9:70:1e:6d:dd:b8:61:ed:90:f6:1d:88: 86:a3:d1:cf:a2:33:b0:75:6f:b4:4f:2a:80:79:dc: c1:7e:30:06:ed:6d:85:7d:a4:40:34:bf:c4:58:99: 85:c9:a6:09:af:15:87:94:69:f1:bb:45:3b:f4:25: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:32:DC:E4:90:FD:0A:15:C1:87:EF:C5:74:A3:A5:05:F0:54:80:44 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VzLc5JD9ChXBh-_FdKOlBfBUgEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.135.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:3d:5b:6c:c9:aa:5c:f8:86:9f:e6:f6:84:fe:c9:7c:cf:27: dc:58:a2:37:98:b1:c0:64:bb:e4:aa:4d:57:7b:dd:3c:70:7c: 49:f9:0a:f6:23:63:cd:4f:f9:0c:ac:77:c8:f9:4f:03:64:f0: 9a:d2:dd:30:e3:00:93:bc:d1:e5:c0:31:49:2d:ca:d9:be:80: 2e:9c:5c:d3:41:0d:7f:8d:3d:61:f7:d8:61:3a:13:40:01:9a: ab:5b:fb:10:c3:ab:93:a4:7c:fe:1a:5c:7e:7d:bb:07:ce:0c: bb:e6:9c:64:7a:52:0a:8d:be:03:bc:65:96:e9:07:13:29:0c: 75:b1:0c:eb:64:26:2d:be:fa:2d:d6:7c:a2:e7:57:6b:bf:38: c2:d3:d9:55:88:a3:44:17:d6:07:dc:5e:ad:c0:e5:f6:d1:ee: 38:34:2b:14:3e:60:34:e6:e8:04:46:a4:14:60:82:92:ef:10: 68:76:9f:31:94:ce:52:d1:0b:b3:c8:7a:22:20:21:1f:c5:2e: 20:fb:0a:3b:cd:0b:a5:62:d1:e7:9e:64:ed:25:1c:d3:3c:80: 15:42:27:c8:b9:c3:b0:5e:ed:3f:24:43:12:11:df:10:80:31: aa:39:2a:ff:83:dd:85:3a:45:16:85:52:a7:3d:1d:e2:e7:0a: 54:c1:c1:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E55i9hP0QaCOR3irhN3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzMyZGNlNDkwZmQwYTE1YzE4N2VmYzU3NGEzYTUwNWYwNTQ4MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaB7jelxFy0f7DimWtPrFHRzJhyl q+ZPq6Q3vP5savT9Pv+aseNcZFwoaqSx2LWUZUcErwYS8yk3E9v9SJlp/8ad/+AU nF0a88zXK2ewVLjpCxPPWseAXZ7cAL8mGSXyGG1dPZR/M8uu5x43EynQLE+eiGXj E10sLyuPJFJ29AG7ILf+KfrM3oCTtEuuwQqaVgbBMqwdrYfJNPuKtkNJPdl2gzNK 4TpKrKHO3lyrFNWNAxf2SVAEddV7SGmKr9dKj9ZjNQ3ZcB5t3bhh7ZD2HYiGo9HP ojOwdW+0TyqAedzBfjAG7W2FfaRANL/EWJmFyaYJrxWHlGnxu0U79CWLJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcy3OSQ/QoVwYfvxXSjpQXwVIBEMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVnpMYzVKRDlDaFhCaC1fRmRLT2xCZkJVZ0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYOHMA0G CSqGSIb3DQEBCwUAA4IBAQBcPVtsyapc+Iaf5vaE/sl8zyfcWKI3mLHAZLvkqk1X e908cHxJ+Qr2I2PNT/kMrHfI+U8DZPCa0t0w4wCTvNHlwDFJLcrZvoAunFzTQQ1/ jT1h99hhOhNAAZqrW/sQw6uTpHz+Glx+fbsHzgy75pxkelIKjb4DvGWW6QcTKQx1 sQzrZCYtvvot1nyi51drvzjC09lViKNEF9YH3F6twOX20e44NCsUPmA05ugERqQU YIKS7xBodp8xlM5S0QuzyHoiICEfxS4g+wo7zQulYtHnnmTtJRzTPIAVQifIucOw Xu0/JEMSEd8QgDGqOSr/g92FOkUWhVKnPR3i5wpUwcGD -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:19 2026 by rpki-client