This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/vzgGJObl8hUgt5oyZddtfyl0qw4.roa File: vzgGJObl8hUgt5oyZddtfyl0qw4.roa (raw, json) Hash identifier: b9sRBy3hPjRdERIVvOJWa+GxyVmzErg8jE5v8/sB568= Subject key identifier: BF:38:06:24:E6:E5:F2:15:20:B7:9A:32:65:D7:6D:7F:29:74:AB:0E Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019C23FDA1042140D431E91C72B98F76DC8B Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/vzgGJObl8hUgt5oyZddtfyl0qw4.roa Signing time: Tue 03 Feb 2026 14:52:30 +0000 ROA not before: Tue 03 Feb 2026 14:52:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2830 IP address blocks: 145.46.128.0/20 maxlen: 20 145.46.144.0/20 maxlen: 20 145.46.165.0/24 maxlen: 24 145.46.192.0/19 maxlen: 19 145.46.224.0/20 maxlen: 20 2a10:3000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:fd:a1:04:21:40:d4:31:e9:1c:72:b9:8f:76:dc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Feb 3 14:52:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf380624e6e5f21520b79a3265d76d7f2974ab0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:c8:4c:77:84:63:5c:ee:aa:6e:64:00:6b: 5f:03:8b:a0:f7:4d:7e:48:38:ba:19:26:cd:de:86: 07:57:18:ba:b3:07:34:e3:b3:81:37:0e:67:71:24: 07:bc:93:ff:76:01:cd:52:b1:6d:27:3c:bd:70:f4: 5f:5d:31:80:bb:dd:75:0e:1e:3d:fd:5c:92:81:cf: 29:ed:91:07:6f:d4:20:c7:1f:c2:9f:23:3b:7f:0f: 1f:cf:af:79:b4:e1:6f:d0:8e:0a:20:0f:89:24:11: 68:ff:0b:25:1b:84:55:7e:bc:4e:80:63:8a:15:b3: f1:2f:79:8f:91:02:be:c1:44:77:bd:f4:ab:99:62: b1:94:49:5e:81:7d:0f:2f:75:be:45:1a:ec:e5:f6: 8d:93:23:0a:84:76:db:f7:05:f8:b8:42:7b:ff:e2: 43:7b:36:14:fd:96:8c:56:0a:60:fe:48:97:38:a0: c3:ae:d5:1d:d2:83:e4:6f:d0:dd:70:fe:2b:f3:e9: 33:85:b7:9b:c3:2e:de:80:76:12:d0:d2:13:bc:98: 09:a9:fa:32:be:bd:1a:c0:3b:8a:20:3d:e7:8d:9b: 50:81:52:68:0e:29:47:72:bb:6a:a3:88:e6:84:a6: 8f:6d:2a:05:b0:2d:f9:f3:e4:5c:9c:50:f7:c8:15: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:06:24:E6:E5:F2:15:20:B7:9A:32:65:D7:6D:7F:29:74:AB:0E X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/vzgGJObl8hUgt5oyZddtfyl0qw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.46.128.0/19 145.46.165.0/24 145.46.192.0-145.46.239.255 IPv6: 2a10:3000::/29 Signature Algorithm: sha256WithRSAEncryption ad:c7:4f:58:b5:e5:9c:cb:ed:bd:b7:63:10:fd:75:93:d2:54: 21:02:c5:46:0e:d3:42:14:88:46:80:3b:1a:81:55:4c:f4:8f: 26:9a:3c:be:5d:9a:38:cf:11:20:13:ef:b7:42:e1:b0:20:82: 63:6a:1b:05:29:d6:8d:83:1b:15:a9:af:c6:16:9b:11:8e:9b: 24:11:5d:4d:66:6e:f5:38:a0:2a:ca:65:7a:b4:bf:96:c3:78: 47:2e:dc:06:62:3a:0a:65:ea:79:f5:dd:98:59:59:0b:0b:00: 7b:74:61:86:0f:76:6d:fe:e4:b8:04:ee:b0:4a:a9:f9:1f:e5: d5:39:95:96:67:6a:ce:ec:ab:d6:2a:4d:d8:12:2f:10:a1:7f: 58:f4:7d:ca:7f:49:29:2b:4e:2d:fe:8d:bc:d8:91:ef:be:da: 16:4f:23:c6:0f:9a:d7:e1:43:9e:9b:41:59:2a:94:9d:57:7c: e3:93:c0:ae:05:6e:dd:b5:36:3e:a9:69:18:ca:3e:82:4a:2d: 2e:4d:23:a2:f7:53:6a:3b:3c:bc:05:8f:4d:e7:ea:76:1d:d1: bf:a7:80:b8:e9:5c:45:b7:34:69:be:46:26:62:cc:15:ec:ed: 29:13:3c:e6:be:7c:e6:0d:3f:a3:5c:57:8d:fb:82:a8:d8:3d: 85:52:af:50 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZwj/aEEIUDUMekccrmPdtyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjYwMjAzMTQ1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjM4MDYyNGU2ZTVmMjE1MjBiNzlhMzI2NWQ3NmQ3ZjI5NzRhYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWfITHeEY1zuqm5kAGtfA4ug901+ SDi6GSbN3oYHVxi6swc047OBNw5ncSQHvJP/dgHNUrFtJzy9cPRfXTGAu911Dh49 /VySgc8p7ZEHb9Qgxx/CnyM7fw8fz695tOFv0I4KIA+JJBFo/wslG4RVfrxOgGOK FbPxL3mPkQK+wUR3vfSrmWKxlElegX0PL3W+RRrs5faNkyMKhHbb9wX4uEJ7/+JD ezYU/ZaMVgpg/kiXOKDDrtUd0oPkb9DdcP4r8+kzhbebwy7egHYS0NITvJgJqfoy vr0awDuKID3njZtQgVJoDilHcrtqo4jmhKaPbSoFsC358+RcnFD3yBUBRQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFL84BiTm5fIVILeaMmXXbX8pdKsOMB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvdnpnR0pPYmw4aFVndDVveVpkZHRmeWwwcXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQFkS6AAwQA kS6lMAwDBAaRLsADBASRLuAwDQQCAAIwBwMFAyoQMAAwDQYJKoZIhvcNAQELBQAD ggEBAK3HT1i15ZzL7b23YxD9dZPSVCECxUYO00IUiEaAOxqBVUz0jyaaPL5dmjjP ESAT77dC4bAggmNqGwUp1o2DGxWpr8YWmxGOmyQRXU1mbvU4oCrKZXq0v5bDeEcu 3AZiOgpl6nn13ZhZWQsLAHt0YYYPdm3+5LgE7rBKqfkf5dU5lZZnas7sq9YqTdgS LxChf1j0fcp/SSkrTi3+jbzYke++2hZPI8YPmtfhQ56bQVkqlJ1XfOOTwK4Fbt21 Nj6paRjKPoJKLS5NI6L3U2o7PLwFj03n6nYd0b+ngLjpXEW3NGm+RiZizBXs7SkT POa+fOYNP6NcV437gqjYPYVSr1A= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:35 2026 by rpki-client