This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/VF3A5uqK3baTRWsNVPe20tVkhMU.roa File: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (raw, json) Hash identifier: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ= Subject key identifier: 54:5D:C0:E6:EA:8A:DD:B6:93:45:6B:0D:54:F7:B6:D2:D5:64:84:C5 Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Certificate serial: 019B7AC91C6B21A60D0557F324A76DB645A4 Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/VF3A5uqK3baTRWsNVPe20tVkhMU.roa Signing time: Thu 01 Jan 2026 18:19:18 +0000 ROA not before: Thu 01 Jan 2026 18:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 45.85.168.0/22 maxlen: 22 45.85.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1c:6b:21:a6:0d:05:57:f3:24:a7:6d:b6:45:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=545dc0e6ea8addb693456b0d54f7b6d2d56484c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:0e:27:ba:c6:6d:8d:0c:65:f0:73:bf:85: f6:9f:82:85:d5:0d:17:39:5f:85:95:89:08:2e:b8: 4b:51:4d:7c:4e:da:7d:4d:9b:26:cf:82:ab:74:67: e9:f7:fd:af:11:66:85:7e:c2:28:fd:37:00:2b:9a: c6:1f:9e:3d:23:58:55:8b:9a:5d:f3:a1:26:1e:06: 75:33:9c:4c:03:74:e2:d2:bd:d8:64:79:83:bd:b8: 28:76:d9:fe:f7:c2:88:86:80:96:6d:54:c6:a3:4a: 2a:bd:2b:0c:f2:3b:7f:bc:14:30:36:69:d3:f0:4b: de:ed:14:05:f3:56:b0:44:57:13:15:e6:c1:9c:e9: 67:fb:47:4d:91:c5:05:ba:1b:9b:e9:cd:b6:76:17: 05:d0:c0:8d:a6:f9:93:79:34:b7:b1:08:32:0b:8d: d9:d9:aa:99:fb:71:98:1a:b9:cf:ff:75:e5:a8:19: 0b:9b:02:f3:22:46:0f:65:76:cf:d0:46:a2:83:09: 1f:61:62:91:66:26:17:cf:00:41:b0:54:9e:bf:70: 1a:0a:b0:cb:78:89:e6:66:a0:e1:21:ae:86:25:91: 0b:22:95:5a:81:43:87:9f:59:a2:1a:06:fc:16:7b: 93:31:05:50:92:9e:c2:34:d8:04:19:cb:54:eb:d3: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5D:C0:E6:EA:8A:DD:B6:93:45:6B:0D:54:F7:B6:D2:D5:64:84:C5 X509v3 Authority Key Identifier: keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/VF3A5uqK3baTRWsNVPe20tVkhMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.168.0/22 Signature Algorithm: sha256WithRSAEncryption 64:0f:09:94:0a:6c:86:8a:93:51:02:8d:06:80:fe:15:fa:31: 60:00:9e:cf:89:77:c9:1b:5e:9a:3c:4b:bf:5d:9e:c3:97:c4: c1:76:02:b6:eb:ef:8d:69:ba:c4:33:d7:54:01:45:59:ca:2b: 2a:fe:97:d8:4c:0e:e8:95:14:a6:fd:0f:ea:d9:26:5f:61:11: 87:72:ce:5b:e5:70:17:5d:8b:ed:ac:41:21:25:7a:3f:7c:ee: be:8f:51:d6:fa:69:48:ea:fc:39:24:51:97:62:6f:9a:e6:3f: bc:96:c3:0d:61:48:1a:da:53:31:99:68:f3:2e:fe:10:d4:00: ca:54:d1:a8:0f:92:ea:5d:95:32:b3:7a:cc:38:e0:9d:bc:b0: 28:94:e0:aa:ea:d7:5e:fa:01:0e:9a:64:88:d8:04:71:e0:a3: b7:6f:de:bf:22:6d:7f:50:71:81:b3:a1:bc:7c:9f:8d:1a:75: 72:85:74:88:d6:b0:fb:b1:06:0a:05:f8:97:f9:3b:24:9b:44: 5d:f2:62:81:75:43:01:d0:34:1f:49:61:1b:73:79:c3:17:83: 0f:8c:c8:8c:bb:11:92:80:18:e9:cd:25:e8:ed:1b:b8:23:1a: 13:dc:e4:86:6a:09:9e:5b:87:61:90:34:d4:da:38:e8:e8:c6: d1:b5:6a:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRxrIaYNBVfzJKdttkWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMThlMGExOWFlNzkwZmE1MDM5NTE1NTlmNDdkNDFiNDdl N2ZkMGYwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDVkYzBlNmVhOGFkZGI2OTM0NTZiMGQ1NGY3YjZkMmQ1NjQ4NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuswOJ7rGbY0MZfBzv4X2n4KF1Q0X OV+FlYkILrhLUU18Ttp9TZsmz4KrdGfp9/2vEWaFfsIo/TcAK5rGH549I1hVi5pd 86EmHgZ1M5xMA3Ti0r3YZHmDvbgodtn+98KIhoCWbVTGo0oqvSsM8jt/vBQwNmnT 8Eve7RQF81awRFcTFebBnOln+0dNkcUFuhub6c22dhcF0MCNpvmTeTS3sQgyC43Z 2aqZ+3GYGrnP/3XlqBkLmwLzIkYPZXbP0EaigwkfYWKRZiYXzwBBsFSev3AaCrDL eInmZqDhIa6GJZELIpVagUOHn1miGgb8FnuTMQVQkp7CNNgEGctU69OMBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFRdwObqit22k0VrDVT3ttLVZITFMB8GA1UdIwQY MBaAFBsY4KGa55D6UDlRVZ9H1BtH5/0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgt YTEwNTc3NmMzMzQ3LzEvVkYzQTV1cUszYmFUUldzTlZQZTIwdFZraE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgtYTEwNTc3NmMzMzQ3 LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVWoMA0G CSqGSIb3DQEBCwUAA4IBAQBkDwmUCmyGipNRAo0GgP4V+jFgAJ7PiXfJG16aPEu/ XZ7Dl8TBdgK26++NabrEM9dUAUVZyisq/pfYTA7olRSm/Q/q2SZfYRGHcs5b5XAX XYvtrEEhJXo/fO6+j1HW+mlI6vw5JFGXYm+a5j+8lsMNYUga2lMxmWjzLv4Q1ADK VNGoD5LqXZUys3rMOOCdvLAolOCq6tde+gEOmmSI2ARx4KO3b96/Im1/UHGBs6G8 fJ+NGnVyhXSI1rD7sQYKBfiX+Tskm0Rd8mKBdUMB0DQfSWEbc3nDF4MPjMiMuxGS gBjpzSXo7Ru4IxoT3OSGagmeW4dhkDTU2jjo6MbRtWrp -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client