This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/_VGCfSLVW2xdJN6JGmh9iEsjqVg.roa File: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (raw, json) Hash identifier: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8= Subject key identifier: FD:51:82:7D:22:D5:5B:6C:5D:24:DE:89:1A:68:7D:88:4B:23:A9:58 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C80556CC3BE365A2E9E79F63A7F6FF8 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/_VGCfSLVW2xdJN6JGmh9iEsjqVg.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 45.147.156.0/24 maxlen: 24 45.147.157.0/24 maxlen: 24 45.147.158.0/24 maxlen: 24 77.111.116.0/24 maxlen: 24 77.111.121.0/24 maxlen: 24 92.61.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:6c:c3:be:36:5a:2e:9e:79:f6:3a:7f:6f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd51827d22d55b6c5d24de891a687d884b23a958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:f4:34:4d:aa:a2:07:51:19:9b:cb:06:d0: e6:e8:b0:4b:a2:2f:f2:62:d3:33:9c:0e:3e:08:75: 3b:89:0f:04:40:d3:b8:ed:8e:ff:25:d4:13:79:47: 46:9f:16:b4:c3:4e:aa:52:d6:8c:a5:78:2d:ad:bc: 20:c8:4d:b8:44:89:ba:2e:3e:7a:6c:51:9e:51:a9: 6d:cd:7d:1a:89:e0:bf:28:fb:99:97:cf:2c:f6:7a: df:05:4b:e4:4e:44:41:d1:68:5d:27:6b:93:ac:6d: 75:71:73:c1:64:e8:cd:2a:09:93:b1:4f:3a:e0:87: 76:49:d0:ef:d9:d5:0c:d0:67:44:6d:d3:73:d3:a3: fb:2b:ed:a5:70:4c:72:42:c0:b6:44:cc:ff:de:fc: 65:da:4e:65:fc:89:83:11:7b:e8:a3:78:2e:29:7b: dc:4d:3d:85:8a:5b:b7:df:b4:4f:ed:56:80:1c:ce: 17:0a:3b:8b:54:8f:51:00:4b:6a:b5:c3:0b:ba:72: 19:0d:e2:33:63:83:57:07:04:cf:31:a9:e4:59:b8: f1:2c:02:ca:fc:b2:61:00:0b:b2:43:56:b2:ba:e1: 45:52:d5:3c:67:8c:42:41:44:eb:c9:d4:d1:bc:50: 19:a3:ca:49:78:5f:74:70:fa:c5:7f:c9:42:3b:47: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:51:82:7D:22:D5:5B:6C:5D:24:DE:89:1A:68:7D:88:4B:23:A9:58 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/_VGCfSLVW2xdJN6JGmh9iEsjqVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.156.0-45.147.158.255 77.111.116.0/24 77.111.121.0/24 92.61.102.0/24 Signature Algorithm: sha256WithRSAEncryption 76:32:b6:6b:14:64:e8:ef:42:08:42:82:f4:22:d4:c2:e5:52: 74:10:16:ca:51:06:d6:f8:62:d0:2c:17:1d:fa:ae:f5:65:c2: 49:23:32:59:3f:41:59:ef:7c:1e:34:d2:1c:47:ef:6c:29:59: 25:10:05:0f:9d:f4:18:31:34:c9:5a:30:72:f5:f3:ee:3b:2e: 48:97:a0:b4:e9:4e:e6:c2:63:a4:3e:9b:2b:12:c9:da:61:87: b0:03:37:77:29:e9:94:d9:59:69:56:95:dc:aa:57:87:54:0f: 84:6d:bb:95:ab:81:06:87:b3:97:7b:67:de:e1:3f:bd:4f:e2: ea:01:a4:fe:0c:95:39:1c:d0:41:c9:b7:41:f3:73:0a:c3:a6: c4:be:b2:50:b1:44:5a:14:21:9a:aa:9d:ce:17:c3:63:42:38: 26:18:a0:30:de:f2:8a:30:1f:4e:fd:17:7a:9c:3d:67:53:ea: 61:63:1f:cd:35:16:5e:2d:56:6e:89:2e:d9:92:f7:34:71:cc: 14:58:f3:8a:f4:41:95:f2:3d:9a:c7:22:c1:19:ad:90:ef:13: 24:b1:59:99:f2:bf:ae:4e:e9:ea:e1:85:b6:c1:39:4e:95:f0: 52:88:07:31:ad:ad:ca:1d:b0:5e:44:5b:5e:19:82:83:f4:4d: c1:2c:92:22 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8gFVsw742Wi6eefY6f2/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDUxODI3ZDIyZDU1YjZjNWQyNGRlODkxYTY4N2Q4ODRiMjNhOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJP0NE2qogdRGZvLBtDm6LBLoi/y YtMznA4+CHU7iQ8EQNO47Y7/JdQTeUdGnxa0w06qUtaMpXgtrbwgyE24RIm6Lj56 bFGeUaltzX0aieC/KPuZl88s9nrfBUvkTkRB0WhdJ2uTrG11cXPBZOjNKgmTsU86 4Id2SdDv2dUM0GdEbdNz06P7K+2lcExyQsC2RMz/3vxl2k5l/ImDEXvoo3guKXvc TT2Filu337RP7VaAHM4XCjuLVI9RAEtqtcMLunIZDeIzY4NXBwTPMankWbjxLALK /LJhAAuyQ1ayuuFFUtU8Z4xCQUTrydTRvFAZo8pJeF90cPrFf8lCO0cyXwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFP1Rgn0i1VtsXSTeiRpofYhLI6lYMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvX1ZHQ2ZTTFZXMnhkSk42SkdtaDlpRXNqcVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAItk5wD BAAtk54DBABNb3QDBABNb3kDBABcPWYwDQYJKoZIhvcNAQELBQADggEBAHYytmsU ZOjvQghCgvQi1MLlUnQQFspRBtb4YtAsFx36rvVlwkkjMlk/QVnvfB400hxH72wp WSUQBQ+d9BgxNMlaMHL18+47LkiXoLTpTubCY6Q+mysSydphh7ADN3cp6ZTZWWlW ldyqV4dUD4Rtu5WrgQaHs5d7Z97hP71P4uoBpP4MlTkc0EHJt0HzcwrDpsS+slCx RFoUIZqqnc4Xw2NCOCYYoDDe8oowH079F3qcPWdT6mFjH801Fl4tVm6JLtmS9zRx zBRY84r0QZXyPZrHIsEZrZDvEySxWZnyv65O6erhhbbBOU6V8FKIBzGtrcodsF5E W14ZgoP0TcEskiI= -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:27 2026 by rpki-client