This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/Vj-jl645n2kvkyifqeqjUT8mbTk.roa File: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (raw, json) Hash identifier: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ= Subject key identifier: 56:3F:A3:97:AE:39:9F:69:2F:93:28:9F:A9:EA:A3:51:3F:26:6D:39 Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7 Certificate serial: 019B7DCB23C917081AD6EBEA1907C0C76CB3 Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/Vj-jl645n2kvkyifqeqjUT8mbTk.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43202 IP address blocks: 45.128.4.0/22 maxlen: 24 2a12:83c0::/32 maxlen: 32 2a12:83c1::/32 maxlen: 32 2a12:83c2::/32 maxlen: 32 2a12:83c3::/32 maxlen: 32 2a12:83c4::/32 maxlen: 32 2a12:83c5::/32 maxlen: 32 2a12:83c6::/32 maxlen: 32 2a12:83c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:23:c9:17:08:1a:d6:eb:ea:19:07:c0:c7:6c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7 Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=563fa397ae399f692f93289fa9eaa3513f266d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:95:ac:1f:0f:d4:03:19:31:c6:b4:a5:48: 51:1f:b5:94:f9:b2:73:8c:17:dd:3e:fd:6f:17:84: 55:ae:81:68:77:b6:26:ec:8a:d5:4b:cb:63:09:53: 15:a5:83:76:20:13:63:15:03:11:6b:80:09:30:37: da:5c:05:6b:d0:46:e4:0b:7e:03:73:71:e8:9f:33: a6:fd:21:6b:82:76:33:f1:23:02:ce:89:32:72:19: 9c:0e:89:dd:50:cc:db:91:68:e0:0c:12:17:d0:ab: 44:c5:b5:da:64:69:5c:22:c9:ff:31:0b:ac:95:36: 53:db:3c:6c:73:7f:64:74:29:e1:d4:b3:54:ed:33: 34:8e:de:33:69:29:aa:30:bf:b1:cf:34:14:f0:8d: cc:09:a7:5f:04:9f:4e:56:bd:68:08:ec:43:99:65: 6a:c0:5d:c6:3b:0e:d4:4d:99:04:68:44:61:3d:01: 3d:a8:8b:06:14:a0:d6:67:d2:89:9d:37:d7:bc:db: 3b:6e:a7:82:19:94:bf:38:e9:52:c6:51:19:5e:bc: e4:1b:26:01:a7:c6:62:7b:8b:fa:89:60:f8:b5:4b: 8c:32:8f:c2:01:42:37:da:e8:a4:1f:6f:7f:65:e1: 01:43:0e:9e:c6:6f:e3:5c:99:4d:ad:5a:8b:8c:7c: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3F:A3:97:AE:39:9F:69:2F:93:28:9F:A9:EA:A3:51:3F:26:6D:39 X509v3 Authority Key Identifier: keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/Vj-jl645n2kvkyifqeqjUT8mbTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.4.0/22 IPv6: 2a12:83c0::/29 Signature Algorithm: sha256WithRSAEncryption 55:8d:7d:3d:96:f4:9a:f9:72:77:55:c4:8f:7e:be:99:ac:67: 01:9e:43:b2:19:f2:4c:7c:81:1f:3c:59:26:c7:a4:33:25:15: 50:10:20:69:9f:e7:c7:eb:a5:e2:59:b3:42:97:7f:86:93:a6: 84:53:23:88:38:59:1a:fe:b7:38:86:ce:6b:8b:96:90:09:20: ca:67:dc:7c:50:e8:4d:3a:ca:32:2a:ca:02:1d:36:18:c5:cf: 1d:c4:c6:2f:da:67:36:a1:06:f1:58:88:6c:91:9d:69:ae:61: c6:e1:c1:0e:de:3a:44:24:f7:82:86:50:5a:a8:49:68:42:9e: 80:e7:e3:61:c2:a8:7c:f8:5c:20:d0:ca:6a:dd:ea:4b:ed:bd: 56:f2:87:02:c1:37:59:0d:81:b5:79:90:39:22:23:49:23:b2: 91:0f:c8:4b:e9:c3:3c:9c:9f:98:df:00:92:1e:a4:09:29:f5: 6e:b6:19:30:7b:d7:1b:c1:59:e1:56:43:39:84:34:08:f9:69: 53:0f:de:56:d7:1b:00:87:b7:3f:7e:78:8c:95:8f:d1:07:bd: f3:b8:83:07:e0:7e:10:b6:69:90:8d:35:a8:17:3c:19:1c:c2: 48:ce:d4:26:35:e2:11:ef:7a:e3:57:82:83:48:af:f9:df:96: fa:9e:b8:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yyPJFwga1uvqGQfAx2yzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjdiOGQ1YTUwNDAyMDliODk5M2JmMjAzMTc4OWMzYjJi YWI3YzcwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjNmYTM5N2FlMzk5ZjY5MmY5MzI4OWZhOWVhYTM1MTNmMjY2ZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg6VrB8P1AMZMca0pUhRH7WU+bJz jBfdPv1vF4RVroFod7Ym7IrVS8tjCVMVpYN2IBNjFQMRa4AJMDfaXAVr0EbkC34D c3HonzOm/SFrgnYz8SMCzokychmcDondUMzbkWjgDBIX0KtExbXaZGlcIsn/MQus lTZT2zxsc39kdCnh1LNU7TM0jt4zaSmqML+xzzQU8I3MCadfBJ9OVr1oCOxDmWVq wF3GOw7UTZkEaERhPQE9qIsGFKDWZ9KJnTfXvNs7bqeCGZS/OOlSxlEZXrzkGyYB p8Zie4v6iWD4tUuMMo/CAUI32uikH29/ZeEBQw6exm/jXJlNrVqLjHy/qwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFY/o5euOZ9pL5Mon6nqo1E/Jm05MB8GA1UdIwQY MBaAFBEnuNWlBAIJuJk78gMXicOyurfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2Mt M2ViY2FkYWJmMGQ4LzEvVmotamw2NDVuMmt2a3lpZnFlcWpVVDhtYlRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2MtM2ViY2FkYWJmMGQ4 LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYAEMA0E AgACMAcDBQMqEoPAMA0GCSqGSIb3DQEBCwUAA4IBAQBVjX09lvSa+XJ3VcSPfr6Z rGcBnkOyGfJMfIEfPFkmx6QzJRVQECBpn+fH66XiWbNCl3+Gk6aEUyOIOFka/rc4 hs5ri5aQCSDKZ9x8UOhNOsoyKsoCHTYYxc8dxMYv2mc2oQbxWIhskZ1prmHG4cEO 3jpEJPeChlBaqEloQp6A5+Nhwqh8+Fwg0Mpq3epL7b1W8ocCwTdZDYG1eZA5IiNJ I7KRD8hL6cM8nJ+Y3wCSHqQJKfVuthkwe9cbwVnhVkM5hDQI+WlTD95W1xsAh7c/ fniMlY/RB73zuIMH4H4QtmmQjTWoFzwZHMJIztQmNeIR73rjV4KDSK/535b6nrig -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:50 2026 by rpki-client