This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa File: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (raw, json) Hash identifier: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA= Subject key identifier: BD:C1:DD:BE:AE:23:D0:C6:43:32:9C:18:FD:28:75:FE:58:69:7A:61 Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Certificate serial: 019B797DE631EA65E111F885B472ADCED04A Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 145.69.64.0/22 maxlen: 22 145.69.68.0/22 maxlen: 22 145.69.72.0/22 maxlen: 22 145.69.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e6:31:ea:65:e1:11:f8:85:b4:72:ad:ce:d0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdc1ddbeae23d0c643329c18fd2875fe58697a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:3c:f6:2c:f2:36:be:0d:73:3e:5d:8d:11: 47:d8:82:6f:2c:cf:8c:65:57:84:5c:38:17:ea:27: 77:6b:e7:90:e4:c6:72:12:4f:63:fe:e3:a1:00:75: e7:be:5b:e1:8c:9a:bf:1b:dd:12:1d:f1:51:4c:48: fc:ea:78:81:b8:4e:ad:64:d8:fb:cb:9b:a8:09:d4: 1e:a2:5f:08:b2:d9:2d:0b:39:b2:3c:59:2e:ad:a0: 4c:34:c5:3a:b4:57:85:25:ef:9b:ff:5e:80:33:cc: 9e:c3:6c:90:e3:e6:d5:fd:b7:7e:d5:a4:e1:57:66: 0f:91:66:67:f0:83:0d:22:de:71:82:d6:40:91:85: c0:99:b6:36:44:e6:af:35:1e:6f:ec:2f:2c:f4:d9: 13:5d:be:a4:97:00:d2:f5:de:e5:0b:40:4e:e6:e9: 69:b3:f7:fe:d1:1a:d5:41:36:b6:7e:11:58:ae:14: d7:fe:6f:fc:2d:a1:8e:41:bd:a2:c7:e8:93:c2:a6: d7:2d:59:67:e6:ed:21:59:37:23:0b:19:d3:13:bd: 1b:6b:1d:c7:fb:de:70:3a:24:5d:f7:db:4a:14:24: 81:8a:dd:ee:32:22:c8:0b:2a:a2:60:bc:03:d7:18: 39:f1:4d:ad:a6:42:4d:9a:ae:a0:81:a7:f6:8a:47: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C1:DD:BE:AE:23:D0:C6:43:32:9C:18:FD:28:75:FE:58:69:7A:61 X509v3 Authority Key Identifier: keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.69.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:52:f9:63:93:86:3f:9d:af:a6:5c:59:9a:f5:f2:85:b6:ea: 49:bd:f5:84:da:1f:f0:8c:fa:12:cc:b9:50:87:7e:33:16:d1: 13:98:83:52:a1:eb:c1:fb:e2:f2:21:da:be:64:dc:2d:f6:3f: b2:4c:f2:ad:16:65:cb:4e:0c:99:8d:9a:d7:77:03:09:4f:fa: 65:aa:64:4e:e0:b6:15:48:56:43:d8:54:ec:5c:0a:c9:ef:06: 8a:f9:7f:19:74:de:11:58:a0:83:23:ca:09:96:79:82:0c:a7: 05:31:a2:90:16:0f:9f:ed:b5:3a:ec:ba:f4:8c:a0:fb:eb:f0: ab:95:ff:eb:73:06:0a:ef:3a:a0:d3:c2:ee:9e:dc:b9:f4:42: cd:a0:12:32:94:29:bb:cf:49:c6:ab:23:7a:64:a9:54:3c:56: de:a7:be:97:3e:45:ce:67:e8:05:9d:f6:0b:73:fa:f5:8c:ed: ca:b1:06:c8:14:1a:d6:6f:d6:85:f3:dd:41:13:d3:40:1e:52: ec:a1:ce:b7:91:6d:cd:9f:32:4a:86:e5:c7:dd:a8:b4:55:02: 77:a5:82:02:30:80:9b:0c:87:95:c2:16:72:7f:98:66:75:e1: 67:0e:70:0c:05:c5:6d:ef:fe:d3:bb:9b:3a:8a:e9:90:bd:d6: 7f:f6:e0:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feYx6mXhEfiFtHKtztBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl MTEzOTYwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGMxZGRiZWFlMjNkMGM2NDMzMjljMThmZDI4NzVmZTU4Njk3YTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG489izyNr4Ncz5djRFH2IJvLM+M ZVeEXDgX6id3a+eQ5MZyEk9j/uOhAHXnvlvhjJq/G90SHfFRTEj86niBuE6tZNj7 y5uoCdQeol8IstktCzmyPFkuraBMNMU6tFeFJe+b/16AM8yew2yQ4+bV/bd+1aTh V2YPkWZn8IMNIt5xgtZAkYXAmbY2ROavNR5v7C8s9NkTXb6klwDS9d7lC0BO5ulp s/f+0RrVQTa2fhFYrhTX/m/8LaGOQb2ix+iTwqbXLVln5u0hWTcjCxnTE70bax3H +95wOiRd99tKFCSBit3uMiLICyqiYLwD1xg58U2tpkJNmq6ggaf2ikdq6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3B3b6uI9DGQzKcGP0odf5YaXphMB8GA1UdIwQY MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt N2JmZjI5NmM2YjAyLzEvdmNIZHZxNGowTVpETXB3WV9TaDFfbGhwZW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmItN2JmZjI5NmM2YjAy LzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkUVAMA0G CSqGSIb3DQEBCwUAA4IBAQAtUvljk4Y/na+mXFma9fKFtupJvfWE2h/wjPoSzLlQ h34zFtETmINSoevB++LyIdq+ZNwt9j+yTPKtFmXLTgyZjZrXdwMJT/plqmRO4LYV SFZD2FTsXArJ7waK+X8ZdN4RWKCDI8oJlnmCDKcFMaKQFg+f7bU67Lr0jKD76/Cr lf/rcwYK7zqg08Lunty59ELNoBIylCm7z0nGqyN6ZKlUPFbep76XPkXOZ+gFnfYL c/r1jO3KsQbIFBrWb9aF891BE9NAHlLsoc63kW3NnzJKhuXH3ai0VQJ3pYICMICb DIeVwhZyf5hmdeFnDnAMBcVt7/7Tu5s6iumQvdZ/9uC9 -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client