This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa File: VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa (raw, json) Hash identifier: 6jm3n4nB1GAtB2pm4IrAYPs2Z3+kEy2KBDMkRIb5wOw= Subject key identifier: 56:E2:72:FE:1F:72:88:4B:57:75:E4:B7:8C:4A:B6:24:41:96:3A:B4 Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Certificate serial: 019B7AC7F19F6054B6EE4ACD7F4D8A00A0F0 Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11426 IP address blocks: 45.94.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f1:9f:60:54:b6:ee:4a:cd:7f:4d:8a:00:a0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56e272fe1f72884b5775e4b78c4ab62441963ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:82:80:64:7e:c6:96:fe:ad:c8:66:65:c0: d3:1e:d6:68:ba:87:95:bd:0c:7b:c3:c3:87:5c:c9: d5:e6:9a:4a:d9:e6:79:7f:d1:93:8e:52:a0:cd:15: 87:2e:93:a6:c0:c6:6b:1e:7c:5b:cb:a1:2e:9f:21: 41:98:ab:87:11:1d:d9:b5:0a:c9:71:f7:4b:68:1e: bc:22:93:3f:b1:31:7a:ac:e1:e5:bf:a7:f3:bf:70: 3c:ca:9d:74:4c:e4:68:78:30:76:5f:30:4c:fd:c2: fe:4b:b5:0e:0f:74:26:fd:85:f5:a7:83:95:de:b0: 9b:70:8f:c1:83:b4:2b:5f:e3:23:17:7d:a3:00:56: 67:03:fb:5f:96:c5:36:f4:fd:67:fa:f9:2e:12:e7: 3f:d6:7c:6f:76:04:35:8b:3f:61:57:0f:f2:a0:64: cf:d4:61:fa:2b:ee:a2:b4:82:f2:49:b5:d3:f3:39: b0:d7:e9:a7:8f:81:5e:10:d1:7b:2e:19:e3:36:14: 14:01:cd:93:14:36:7b:00:7a:73:4a:c7:08:88:65: 41:02:0b:2b:7d:2b:bc:4a:a9:06:29:b3:1a:8f:93: 96:19:b4:af:66:02:b5:3c:bc:dd:08:07:16:2e:43: 9d:f4:06:17:1f:29:f6:e6:1d:58:92:65:f1:ac:62: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E2:72:FE:1F:72:88:4B:57:75:E4:B7:8C:4A:B6:24:41:96:3A:B4 X509v3 Authority Key Identifier: keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.152.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ec:9b:f1:f2:fa:16:a8:cf:c9:51:df:9c:9d:f6:70:06:be: 34:11:5f:30:67:1f:df:a5:55:3c:86:49:ef:7d:48:6a:73:6e: 09:58:c2:4e:3b:6c:58:7a:c4:ca:f8:c4:bd:8c:02:6a:de:e1: d1:4e:c2:fb:41:b4:0b:dd:00:fc:a9:4f:56:0b:1d:5f:dd:3c: 71:cf:eb:09:ad:1e:b2:6b:48:2d:50:fb:04:db:9f:4d:32:30: d8:84:fa:4e:ac:05:e9:a4:2f:62:61:9d:65:ed:7c:e4:e0:d7: 52:93:d7:a5:f0:93:ed:03:2b:0f:6b:41:4e:5e:6a:a9:22:c0: 1f:5c:b5:91:bc:57:51:cd:7b:1e:90:dc:f4:9f:27:1c:94:f9: e8:09:f7:6c:e3:e5:b3:87:35:fe:d3:18:16:cb:aa:e6:03:7f: 9e:b9:27:a0:5c:4b:cc:3e:44:9f:a2:41:fd:ae:3f:e2:64:2f: d3:cc:11:a7:9a:2b:5b:cc:ec:78:03:72:93:2d:e7:37:df:4a: 43:cb:1b:da:66:3c:17:df:a0:0e:bd:3e:96:cd:35:29:34:43: f0:85:22:8f:6d:19:64:a5:21:86:8a:ba:47:b3:2e:b6:53:32: 57:9f:d3:c3:83:8b:6d:12:0b:5a:b1:6b:56:35:8b:cb:97:aa: bb:6d:a6:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/GfYFS27krNf02KAKDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy MDU0ZGQwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmUyNzJmZTFmNzI4ODRiNTc3NWU0Yjc4YzRhYjYyNDQxOTYzYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtymCgGR+xpb+rchmZcDTHtZouoeV vQx7w8OHXMnV5ppK2eZ5f9GTjlKgzRWHLpOmwMZrHnxby6EunyFBmKuHER3ZtQrJ cfdLaB68IpM/sTF6rOHlv6fzv3A8yp10TORoeDB2XzBM/cL+S7UOD3Qm/YX1p4OV 3rCbcI/Bg7QrX+MjF32jAFZnA/tflsU29P1n+vkuEuc/1nxvdgQ1iz9hVw/yoGTP 1GH6K+6itILySbXT8zmw1+mnj4FeENF7LhnjNhQUAc2TFDZ7AHpzSscIiGVBAgsr fSu8SqkGKbMaj5OWGbSvZgK1PLzdCAcWLkOd9AYXHyn25h1YkmXxrGIrhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbicv4fcohLV3Xkt4xKtiRBljq0MB8GA1UdIwQY MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt ZTQ5NWFhYTBjYWMwLzEvVnVKeV9oOXlpRXRYZGVTM2pFcTJKRUdXT3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV6YMA0G CSqGSIb3DQEBCwUAA4IBAQBo7Jvx8voWqM/JUd+cnfZwBr40EV8wZx/fpVU8hknv fUhqc24JWMJOO2xYesTK+MS9jAJq3uHRTsL7QbQL3QD8qU9WCx1f3Txxz+sJrR6y a0gtUPsE259NMjDYhPpOrAXppC9iYZ1l7Xzk4NdSk9el8JPtAysPa0FOXmqpIsAf XLWRvFdRzXsekNz0nycclPnoCfds4+WzhzX+0xgWy6rmA3+euSegXEvMPkSfokH9 rj/iZC/TzBGnmitbzOx4A3KTLec330pDyxvaZjwX36AOvT6WzTUpNEPwhSKPbRlk pSGGirpHsy62UzJXn9PDg4ttEgtasWtWNYvLl6q7babm -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:00 2026 by rpki-client