This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/_vHBWd8UR51aS4OOpf8Vs49lK1w.roa File: _vHBWd8UR51aS4OOpf8Vs49lK1w.roa (raw, json) Hash identifier: eDkzLR7fSEK8J6Dl04uTvK6gFwxYRepxRhbDEW8FzQM= Subject key identifier: FE:F1:C1:59:DF:14:47:9D:5A:4B:83:8E:A5:FF:15:B3:8F:65:2B:5C Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Certificate serial: 019B77C66979BA5B91609B6ECDB9B49FCCFA Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/_vHBWd8UR51aS4OOpf8Vs49lK1w.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 45.156.131.0/24 maxlen: 24 109.105.208.0/24 maxlen: 24 109.105.209.0/24 maxlen: 24 109.105.210.0/24 maxlen: 24 185.180.141.0/24 maxlen: 24 185.226.196.0/24 maxlen: 24 185.226.197.0/24 maxlen: 24 2a10:3c0:3::/48 maxlen: 48 2a10:3c0:4::/48 maxlen: 48 2a10:3c0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:79:ba:5b:91:60:9b:6e:cd:b9:b4:9f:cc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef1c159df14479d5a4b838ea5ff15b38f652b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:c4:5c:c9:03:cc:dd:c0:01:5a:f0:c7:20: 6b:84:2e:0d:ce:c8:29:1f:c8:3e:5e:a0:b2:46:8e: 43:b5:84:cd:6e:03:95:7e:64:18:b0:bc:c9:3a:25: 88:ce:2a:f8:61:4f:c2:e7:8b:cf:9c:60:89:32:34: 4d:42:ae:32:0b:78:1b:ac:7f:5f:34:21:27:61:ac: 3b:ee:00:83:98:f9:ec:7e:83:6d:6f:f2:5d:8d:38: 90:7c:24:01:ab:1e:c0:b2:8d:d4:f3:fe:cc:32:60: 33:7a:ff:ae:03:86:07:e4:96:79:c8:56:1f:de:06: 04:c4:f9:c3:0c:18:ac:3c:dd:a4:c0:fc:cd:ae:75: e9:1a:f2:f6:d3:d5:f0:fd:58:eb:b8:14:6f:64:d6: 2b:fc:69:e2:39:bf:8f:7f:8a:df:63:e2:2e:e3:97: 6c:f1:1f:59:0d:ab:3d:00:6d:fa:4c:29:e9:f7:ca: cc:ae:db:f9:e3:a6:63:4c:c0:22:c7:09:3a:b3:d6: 6d:72:b0:0c:98:a1:a3:9a:7f:ea:69:80:a1:37:85: 2f:47:85:e8:13:14:16:b9:57:8c:80:cc:2a:25:9b: 49:3d:97:ba:b0:da:77:fc:76:1b:81:40:5b:c1:b3: e5:eb:86:e1:8d:fc:49:a4:de:8d:ea:6b:39:d6:83: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:C1:59:DF:14:47:9D:5A:4B:83:8E:A5:FF:15:B3:8F:65:2B:5C X509v3 Authority Key Identifier: keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/_vHBWd8UR51aS4OOpf8Vs49lK1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.131.0/24 109.105.208.0-109.105.210.255 185.180.141.0/24 185.226.196.0/23 IPv6: 2a10:3c0:3::-2a10:3c0:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:8a:8b:62:2e:fb:af:69:7b:61:ef:fa:bb:fe:0d:99:09:8d: 71:a9:6c:5a:ed:cf:9f:a1:92:43:b5:5a:21:cc:b8:20:65:6e: 67:09:25:16:0c:0a:67:b7:43:ce:ec:b3:59:ae:a8:76:73:94: 5f:d5:76:56:55:c1:2a:86:fc:c0:a1:af:84:ba:8e:3d:17:66: 55:9d:9b:4c:b7:a7:b2:fb:ea:d6:17:02:7f:dc:8d:ae:1d:ee: 15:16:45:02:ed:2b:3d:ac:e6:a3:e8:5a:f4:33:16:7b:32:95: 50:af:88:88:51:f2:84:26:44:a0:c5:fd:55:e4:8d:85:77:b6: 2f:6b:32:dd:c4:be:e7:90:82:26:c0:a7:95:59:1f:38:95:7a: 7c:1e:e3:00:68:53:5f:37:80:76:43:3e:b8:03:6b:e5:d4:77: a9:67:50:c6:c1:39:b2:c9:13:48:90:5a:a0:4b:bf:16:be:f1: 8c:eb:b7:ea:71:5b:1e:91:61:29:42:45:40:f6:c4:a3:73:c5: f8:aa:3e:fc:93:05:94:cf:1e:c3:52:11:fc:39:f8:5f:38:00: 4f:f1:34:0a:83:8e:6f:3b:aa:33:69:0b:ff:64:d1:7b:35:da: 67:15:dc:ad:9f:71:23:ff:1b:bd:a6:3a:88:a5:c5:83:60:d7: 46:02:e8:0a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt3xml5uluRYJtuzbm0n8z6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2 YWYxN2EwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWYxYzE1OWRmMTQ0NzlkNWE0YjgzOGVhNWZmMTViMzhmNjUyYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqTEXMkDzN3AAVrwxyBrhC4Nzsgp H8g+XqCyRo5DtYTNbgOVfmQYsLzJOiWIzir4YU/C54vPnGCJMjRNQq4yC3gbrH9f NCEnYaw77gCDmPnsfoNtb/JdjTiQfCQBqx7Aso3U8/7MMmAzev+uA4YH5JZ5yFYf 3gYExPnDDBisPN2kwPzNrnXpGvL209Xw/VjruBRvZNYr/GniOb+Pf4rfY+Iu45ds 8R9ZDas9AG36TCnp98rMrtv546ZjTMAixwk6s9ZtcrAMmKGjmn/qaYChN4UvR4Xo ExQWuVeMgMwqJZtJPZe6sNp3/HYbgUBbwbPl64bhjfxJpN6N6ms51oMYowIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFP7xwVnfFEedWkuDjqX/FbOPZStcMB8GA1UdIwQY MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt N2JmODI3N2Q4YTJmLzEvX3ZIQldkOFVSNTFhUzRPT3BmOFZzNDlsSzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYtN2JmODI3N2Q4YTJm LzEvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAmBAIAATAgAwQALZyDMAwD BARtadADBABtadIDBAC5tI0DBAG54sQwGgQCAAIwFDASAwcAKhADwAADAwcBKhAD wAAEMA0GCSqGSIb3DQEBCwUAA4IBAQB1iotiLvuvaXth7/q7/g2ZCY1xqWxa7c+f oZJDtVohzLggZW5nCSUWDApnt0PO7LNZrqh2c5Rf1XZWVcEqhvzAoa+Euo49F2ZV nZtMt6ey++rWFwJ/3I2uHe4VFkUC7Ss9rOaj6Fr0MxZ7MpVQr4iIUfKEJkSgxf1V 5I2Fd7YvazLdxL7nkIImwKeVWR84lXp8HuMAaFNfN4B2Qz64A2vl1HepZ1DGwTmy yRNIkFqgS78WvvGM67fqcVsekWEpQkVA9sSjc8X4qj78kwWUzx7DUhH8OfhfOABP 8TQKg45vO6ozaQv/ZNF7NdpnFdytn3Ej/xu9pjqIpcWDYNdGAugK -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:08 2026 by rpki-client