This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/vlffUXbbe03bAModfKshSSav8vw.roa File: vlffUXbbe03bAModfKshSSav8vw.roa (raw, json) Hash identifier: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w= Subject key identifier: BE:57:DF:51:76:DB:7B:4D:DB:00:CA:1D:7C:AB:21:49:26:AF:F2:FC Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7 Certificate serial: 019B7A5A26E3A5B5E606353D6FA299FC968B Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/vlffUXbbe03bAModfKshSSav8vw.roa Signing time: Thu 01 Jan 2026 16:18:07 +0000 ROA not before: Thu 01 Jan 2026 16:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 45.157.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:26:e3:a5:b5:e6:06:35:3d:6f:a2:99:fc:96:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096e293ba380dcc75f00106443668f51002555b7 Validity Not Before: Jan 1 16:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be57df5176db7b4ddb00ca1d7cab214926aff2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:65:10:23:a2:1e:93:2d:47:30:6b:6a:db:37: 1a:b8:c7:f1:cb:11:45:6b:33:75:46:4e:2c:6a:aa: 83:5f:42:3f:c9:28:96:22:3b:f3:8d:3a:40:04:d7: ce:43:d0:c6:5a:57:d4:02:53:ed:15:8a:97:17:b0: c6:48:cb:da:50:b8:74:69:7c:85:76:84:47:11:9c: cc:2c:d4:02:ef:71:07:62:a8:e4:8c:35:a6:1f:17: 32:c7:cb:86:e6:79:ec:8a:55:41:2d:f3:5e:78:62: fb:21:f9:79:9b:2a:be:2f:4f:4e:e3:e0:ee:b2:c4: e7:c1:5f:e9:85:a5:c3:bb:51:2d:fc:e2:3c:36:7e: d2:dd:18:fd:03:dc:4d:df:11:73:ee:19:fe:6e:d7: d0:17:92:5b:2a:5e:2f:ef:21:b0:7c:7a:96:02:7a: ed:63:78:6d:72:1c:e3:7b:59:a3:ce:da:59:2b:25: 5a:63:33:35:17:e8:22:06:1b:f3:41:92:fd:5e:dc: 7f:4a:79:27:da:51:05:18:b8:1e:08:39:ca:2b:2e: 66:67:8e:82:3f:4a:31:b9:c4:0e:76:41:38:f5:2e: 66:a3:77:95:36:7d:0a:14:03:e4:62:6a:6f:95:ae: 87:4b:18:3b:55:4d:8f:a7:a3:93:9f:0d:13:b2:86: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:57:DF:51:76:DB:7B:4D:DB:00:CA:1D:7C:AB:21:49:26:AF:F2:FC X509v3 Authority Key Identifier: keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/vlffUXbbe03bAModfKshSSav8vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.7.0/24 Signature Algorithm: sha256WithRSAEncryption 76:41:e7:b8:1f:21:24:00:cb:24:49:f2:6f:75:36:73:bf:2e: ff:a8:0e:c4:f0:aa:4e:c2:57:2c:62:3d:6a:30:e1:05:4f:9b: ea:bd:cc:25:82:70:f5:73:3c:b9:09:b1:66:b1:b0:45:d9:a1: 07:ac:f4:c0:55:5b:1d:4e:4d:5d:29:32:e3:bc:c5:26:0b:7f: 56:bf:e0:30:b5:57:b1:98:63:b0:19:ee:53:41:2a:69:b6:4c: 41:0e:a6:b6:e8:68:21:3f:5f:66:db:2d:c5:49:db:e9:f4:eb: f2:58:2d:cf:8a:0e:1f:d8:6c:8a:aa:d8:7f:7a:dc:95:b0:ab: 72:4e:19:01:54:05:a1:bc:49:c6:2f:ee:89:63:6d:96:d7:24: c7:54:8e:81:4d:16:4c:95:3a:aa:91:8f:0c:e6:d8:dc:76:6c: 9a:6a:38:37:3d:7e:95:8d:37:4e:0e:58:74:6e:60:bc:24:3c: 7d:32:5b:79:35:95:01:74:10:27:19:84:66:23:f4:21:dc:78: 5d:87:89:1e:e6:1d:38:f9:25:7c:c8:22:d7:ef:c1:05:0c:12: 43:fa:4a:77:db:a9:b9:d4:68:67:d7:52:b1:81:a6:9c:4d:05: 3d:41:19:2d:49:be:76:f0:af:4d:fd:c5:68:09:7f:96:16:47: a7:31:a5:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WibjpbXmBjU9b6KZ/JaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy NTU1YjcwHhcNMjYwMTAxMTYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTU3ZGY1MTc2ZGI3YjRkZGIwMGNhMWQ3Y2FiMjE0OTI2YWZmMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GUQI6Ieky1HMGtq2zcauMfxyxFF azN1Rk4saqqDX0I/ySiWIjvzjTpABNfOQ9DGWlfUAlPtFYqXF7DGSMvaULh0aXyF doRHEZzMLNQC73EHYqjkjDWmHxcyx8uG5nnsilVBLfNeeGL7Ifl5myq+L09O4+Du ssTnwV/phaXDu1Et/OI8Nn7S3Rj9A9xN3xFz7hn+btfQF5JbKl4v7yGwfHqWAnrt Y3htchzje1mjztpZKyVaYzM1F+giBhvzQZL9Xtx/Snkn2lEFGLgeCDnKKy5mZ46C P0oxucQOdkE49S5mo3eVNn0KFAPkYmpvla6HSxg7VU2Pp6OTnw0TsoYuCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5X31F223tN2wDKHXyrIUkmr/L8MB8GA1UdIwQY MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt ZGYwNWQ0ODlkYTE3LzEvdmxmZlVYYmJlMDNiQU1vZGZLc2hTU2F2OHZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3 LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0HMA0G CSqGSIb3DQEBCwUAA4IBAQB2Qee4HyEkAMskSfJvdTZzvy7/qA7E8KpOwlcsYj1q MOEFT5vqvcwlgnD1czy5CbFmsbBF2aEHrPTAVVsdTk1dKTLjvMUmC39Wv+AwtVex mGOwGe5TQSpptkxBDqa26GghP19m2y3FSdvp9OvyWC3Pig4f2GyKqth/etyVsKty ThkBVAWhvEnGL+6JY22W1yTHVI6BTRZMlTqqkY8M5tjcdmyaajg3PX6VjTdODlh0 bmC8JDx9Mlt5NZUBdBAnGYRmI/Qh3Hhdh4ke5h04+SV8yCLX78EFDBJD+kp326m5 1Ghn11KxgaacTQU9QRktSb528K9N/cVoCX+WFkenMaU+ -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:55 2026 by rpki-client