This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/lVcBo5vuxQrLHVx-CazpWVzHmK8.roa File: lVcBo5vuxQrLHVx-CazpWVzHmK8.roa (raw, json) Hash identifier: vG4AHQ6D6vSRnjokMxDtiTnVibG0s89z9DApsJwgQrM= Subject key identifier: 95:57:01:A3:9B:EE:C5:0A:CB:1D:5C:7E:09:AC:E9:59:5C:C7:98:AF Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9 Certificate serial: 019B78A223F4E00A8C58E4CE78A92C5C9059 Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/lVcBo5vuxQrLHVx-CazpWVzHmK8.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208109 IP address blocks: 45.154.172.0/24 maxlen: 24 45.154.173.0/24 maxlen: 24 45.154.174.0/24 maxlen: 24 45.154.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:23:f4:e0:0a:8c:58:e4:ce:78:a9:2c:5c:90:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=955701a39beec50acb1d5c7e09ace9595cc798af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:f0:5c:4d:ee:91:d8:3f:9c:7f:8d:f3:78: 08:8b:f4:d1:19:f3:48:97:fd:f0:f0:ad:a5:31:f9: ec:0e:e4:93:7d:4a:28:14:e8:95:90:48:59:9a:0a: 35:57:20:9d:23:30:8c:74:6a:f3:51:08:85:07:61: 4d:a0:53:f4:02:ff:73:56:c9:5a:e9:cd:45:18:d3: f6:65:10:16:ed:80:92:52:ad:54:e7:6d:40:0e:a2: 02:b3:fb:68:0e:3b:7f:92:89:ef:8c:5b:93:a7:f3: fa:0f:40:65:d1:27:eb:ec:3f:46:42:03:85:a7:c2: a1:be:62:f3:87:ce:34:b7:28:3d:8d:ca:ab:a9:1e: bb:bd:0b:8b:fd:73:34:00:aa:8e:24:d2:07:43:60: c2:bf:08:35:02:33:f6:41:cb:f9:d8:21:a6:6a:ce: 61:8a:84:8d:6d:c7:db:f5:d0:de:ba:7f:ba:0d:3b: ad:87:c8:f1:3e:9d:21:4d:e6:db:f5:00:b0:e7:17: 42:5a:23:83:49:38:f4:af:0b:16:d0:43:06:49:fd: eb:a1:81:be:60:11:a1:e9:51:52:fc:13:7c:d2:90: 9c:60:46:f3:61:9d:23:f4:c2:0d:61:01:e6:51:df: 06:f6:b5:03:a5:af:cd:2a:65:57:8f:56:0c:85:68: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:57:01:A3:9B:EE:C5:0A:CB:1D:5C:7E:09:AC:E9:59:5C:C7:98:AF X509v3 Authority Key Identifier: keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/lVcBo5vuxQrLHVx-CazpWVzHmK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.172.0/22 Signature Algorithm: sha256WithRSAEncryption 09:39:7e:0b:c7:86:fc:61:f2:5d:49:22:c0:63:1c:d3:e6:66: 3c:57:81:9b:7e:bf:63:da:04:7e:0b:a0:06:ff:e8:56:1c:92: fc:8f:47:68:65:73:b4:80:3b:14:fe:a1:19:63:0c:d6:1d:98: d9:1f:76:03:28:77:7e:9f:7a:6f:15:8e:c0:0b:5b:0c:06:8a: b2:30:70:e5:24:bf:95:a6:1f:2e:22:2a:5c:72:4a:60:7a:57: aa:22:ea:c1:5c:9f:95:f6:e5:cd:66:68:bf:63:cc:4d:67:54: 30:5e:74:b0:08:6f:ed:0a:02:63:af:2e:6f:62:1d:17:a0:15: 81:ed:5f:ba:99:b8:59:81:3f:97:78:47:9a:0d:81:42:ba:41: aa:86:b3:70:b4:a9:09:3f:d7:6a:ab:81:d8:27:73:10:b6:69: 36:d2:9a:c9:08:2a:90:33:4c:24:f0:b2:7e:fc:1d:6e:60:46: cf:d1:cb:d5:f0:db:f9:ce:be:1d:ce:01:30:89:d5:31:e7:1e: 87:ad:5d:bc:64:c1:d9:73:55:c4:3a:23:1c:06:a4:43:0d:ae: f1:0c:98:40:85:d8:86:cc:1c:b5:0e:50:73:fd:a7:86:61:8a: 2c:74:9a:46:ab:16:07:67:2f:86:08:31:8a:2c:85:88:a0:fb: 77:13:56:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiP04AqMWOTOeKksXJBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVjZDY1MmFmZDFmMmYzMzdjMjBkOGZmNzI4NmNkMmNm MWJkZjkwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTU3MDFhMzliZWVjNTBhY2IxZDVjN2UwOWFjZTk1OTVjYzc5OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw//wXE3ukdg/nH+N83gIi/TRGfNI l/3w8K2lMfnsDuSTfUooFOiVkEhZmgo1VyCdIzCMdGrzUQiFB2FNoFP0Av9zVsla 6c1FGNP2ZRAW7YCSUq1U521ADqICs/toDjt/konvjFuTp/P6D0Bl0Sfr7D9GQgOF p8KhvmLzh840tyg9jcqrqR67vQuL/XM0AKqOJNIHQ2DCvwg1AjP2Qcv52CGmas5h ioSNbcfb9dDeun+6DTuth8jxPp0hTebb9QCw5xdCWiODSTj0rwsW0EMGSf3roYG+ YBGh6VFS/BN80pCcYEbzYZ0j9MINYQHmUd8G9rUDpa/NKmVXj1YMhWhvUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVXAaOb7sUKyx1cfgms6Vlcx5ivMB8GA1UdIwQY MBaAFH2lzWUq/R8vM3wg2P9yhs0s8b35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEt ODlhYThkMmU4MDA0LzEvbFZjQm81dnV4UXJMSFZ4LUNhenBXVnpIbUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEtODlhYThkMmU4MDA0 LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZqsMA0G CSqGSIb3DQEBCwUAA4IBAQAJOX4Lx4b8YfJdSSLAYxzT5mY8V4Gbfr9j2gR+C6AG /+hWHJL8j0doZXO0gDsU/qEZYwzWHZjZH3YDKHd+n3pvFY7AC1sMBoqyMHDlJL+V ph8uIipcckpgeleqIurBXJ+V9uXNZmi/Y8xNZ1QwXnSwCG/tCgJjry5vYh0XoBWB 7V+6mbhZgT+XeEeaDYFCukGqhrNwtKkJP9dqq4HYJ3MQtmk20prJCCqQM0wk8LJ+ /B1uYEbP0cvV8Nv5zr4dzgEwidUx5x6HrV28ZMHZc1XEOiMcBqRDDa7xDJhAhdiG zBy1DlBz/aeGYYosdJpGqxYHZy+GCDGKLIWIoPt3E1Zw -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:52 2026 by rpki-client