This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/VpxDxilNFo6QDK_norEdW_OneKc.roa File: VpxDxilNFo6QDK_norEdW_OneKc.roa (raw, json) Hash identifier: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y= Subject key identifier: 56:9C:43:C6:29:4D:16:8E:90:0C:AF:E7:A2:B1:1D:5B:F3:A7:78:A7 Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Certificate serial: 019B7C129443EFA03A0D0C3CBB984DC4A0A3 Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/VpxDxilNFo6QDK_norEdW_OneKc.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58185 IP address blocks: 5.44.128.0/21 maxlen: 21 5.44.130.0/24 maxlen: 24 185.102.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:94:43:ef:a0:3a:0d:0c:3c:bb:98:4d:c4:a0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=569c43c6294d168e900cafe7a2b11d5bf3a778a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:49:82:e1:c4:16:c7:0a:b0:7d:7f:72:8c: 74:0c:70:a4:8a:e0:c7:cb:85:9d:7c:5c:22:82:34: e3:da:8d:c7:d2:a4:d2:e3:9d:c5:01:6e:fa:0e:86: cf:58:76:33:89:11:be:52:8e:89:15:8d:fc:20:ba: e5:c2:c9:58:c6:34:28:42:c0:d0:65:84:76:b8:e3: eb:89:8e:dc:d2:06:bd:11:a6:99:1c:6a:9b:4a:dc: 1a:7c:83:43:ba:e1:35:64:b2:00:9c:cb:68:f2:79: 97:a1:40:df:c7:e9:1b:02:4a:56:3f:f8:57:73:50: 04:c2:c9:ac:3e:d7:89:fc:f4:e0:79:3b:f4:d7:60: 5d:e4:9b:72:53:e7:2a:79:1a:15:21:f2:f1:5c:3e: 36:c5:a9:28:44:0f:5c:86:51:9b:27:30:23:78:d3: 4d:77:1b:e2:f6:79:30:3a:2d:f5:bb:28:f1:71:68: 29:86:17:7b:b9:a6:b4:27:e1:28:ed:26:b2:db:d8: cd:cc:ec:c5:8a:d5:bf:8e:0c:c4:7b:b8:a7:14:2a: 39:75:2f:54:f9:3c:bd:79:a8:0a:eb:b5:4f:96:e0: 6c:43:bf:81:41:b6:11:59:8e:ef:fa:7d:66:3e:b3: 60:f7:f4:e9:77:d9:c9:b9:ac:ca:d5:57:72:4e:f6: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9C:43:C6:29:4D:16:8E:90:0C:AF:E7:A2:B1:1D:5B:F3:A7:78:A7 X509v3 Authority Key Identifier: keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/VpxDxilNFo6QDK_norEdW_OneKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.128.0/21 185.102.144.0/22 Signature Algorithm: sha256WithRSAEncryption b0:0d:9f:28:91:c6:b7:48:cd:37:ac:55:fc:b0:d9:0f:0d:83: cf:83:72:84:c5:9b:d2:b0:8a:91:79:c5:bd:58:2b:a2:d4:39: dc:d0:7d:4a:bf:ef:f3:5b:f1:d3:94:52:f5:96:22:59:ad:26: a4:9c:47:eb:f3:54:2b:70:be:01:51:bd:fc:5e:54:22:e1:fc: 95:6b:ff:bc:74:ef:76:6f:a9:96:28:e1:09:30:8d:1e:04:ba: 55:85:88:71:bf:a4:77:75:45:4b:46:36:54:13:f6:f2:c3:3f: 40:12:9a:0b:ae:d5:3b:e8:6d:7b:5a:c0:61:d9:eb:40:48:2a: bd:06:63:9a:83:76:e0:2c:76:06:c4:77:7d:5e:4d:f2:e3:fe: 03:e0:bc:8b:b1:59:a0:aa:3c:c5:05:50:ef:81:6d:08:5b:a3: 27:ff:da:9d:89:a0:1e:fc:9d:80:5e:d3:11:73:3a:fa:f6:1c: 91:87:5f:62:b0:f1:c4:81:25:a2:27:b5:4f:8c:a8:d3:57:38: 5c:74:5e:31:a5:07:41:8b:42:20:72:d9:55:5c:97:ce:69:35: 3c:7b:05:df:8d:f8:6f:30:61:c1:30:8d:b9:88:36:3c:d1:14: d0:93:dc:2a:91:d8:e2:f5:99:ca:18:a8:67:04:d8:7c:9e:68: b4:80:4a:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EpRD76A6DQw8u5hNxKCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDk0ZTA2ODcxNjA5Y2MxZjgxNWE1NmRlNWM5ZmFmNmQ1 N2Q1ODQwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjljNDNjNjI5NGQxNjhlOTAwY2FmZTdhMmIxMWQ1YmYzYTc3OGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQpJguHEFscKsH1/cox0DHCkiuDH y4WdfFwigjTj2o3H0qTS453FAW76DobPWHYziRG+Uo6JFY38ILrlwslYxjQoQsDQ ZYR2uOPriY7c0ga9EaaZHGqbStwafINDuuE1ZLIAnMto8nmXoUDfx+kbAkpWP/hX c1AEwsmsPteJ/PTgeTv012Bd5JtyU+cqeRoVIfLxXD42xakoRA9chlGbJzAjeNNN dxvi9nkwOi31uyjxcWgphhd7uaa0J+Eo7Say29jNzOzFitW/jgzEe7inFCo5dS9U +Ty9eagK67VPluBsQ7+BQbYRWY7v+n1mPrNg9/Tpd9nJuazK1VdyTvZAXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFacQ8YpTRaOkAyv56KxHVvzp3inMB8GA1UdIwQY MBaAFEPZTgaHFgnMH4FaVt5cn69tV9WEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQt MmQ2MjZhY2I3ODMzLzEvVnB4RHhpbE5GbzZRREtfbm9yRWRXX09uZUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQtMmQ2MjZhY2I3ODMz LzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBSyAAwQC uWaQMA0GCSqGSIb3DQEBCwUAA4IBAQCwDZ8okca3SM03rFX8sNkPDYPPg3KExZvS sIqRecW9WCui1Dnc0H1Kv+/zW/HTlFL1liJZrSaknEfr81QrcL4BUb38XlQi4fyV a/+8dO92b6mWKOEJMI0eBLpVhYhxv6R3dUVLRjZUE/bywz9AEpoLrtU76G17WsBh 2etASCq9BmOag3bgLHYGxHd9Xk3y4/4D4LyLsVmgqjzFBVDvgW0IW6Mn/9qdiaAe /J2AXtMRczr69hyRh19isPHEgSWiJ7VPjKjTVzhcdF4xpQdBi0IgctlVXJfOaTU8 ewXfjfhvMGHBMI25iDY80RTQk9wqkdji9ZnKGKhnBNh8nmi0gEp6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:26 2026 by rpki-client