This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/mVZSMnEwaUiuqzT2Cbxb2epJs_M.roa File: mVZSMnEwaUiuqzT2Cbxb2epJs_M.roa (raw, json) Hash identifier: 5EFB79XZ5ehmWzZUsd/dU3RMk+g34oEVWVIFqYihGfw= Subject key identifier: 99:56:52:32:71:30:69:48:AE:AB:34:F6:09:BC:5B:D9:EA:49:B3:F3 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B7DCB4DFD6092A681520CEFC9F12DB805 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/mVZSMnEwaUiuqzT2Cbxb2epJs_M.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.129.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4d:fd:60:92:a6:81:52:0c:ef:c9:f1:2d:b8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9956523271306948aeab34f609bc5bd9ea49b3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:bd:63:64:b8:83:30:65:d7:e8:76:a5:e8: 6b:d1:42:f4:93:f1:6e:60:f2:5e:a1:54:f3:5b:a0: ff:7e:2e:27:59:14:66:1c:c0:e2:d2:a2:c5:48:84: 4d:17:80:60:c2:24:19:63:f2:cf:c7:a1:96:7c:3b: 27:dd:8a:70:ff:1c:c7:f8:e6:af:4a:49:a9:c3:d7: 40:92:57:7e:a6:04:c5:d8:c3:69:a3:5e:2f:d1:83: 3b:1a:ad:46:a6:6e:fc:94:c1:6f:0a:78:63:8e:7b: 3f:55:4f:86:92:54:8b:93:61:21:dc:dd:55:0c:ab: aa:04:1d:15:65:28:60:ed:58:64:5b:4f:be:75:63: b1:b1:9f:f1:c5:70:1f:2c:7c:d1:09:ad:e1:d5:51: 1b:bc:65:f9:5f:70:84:e3:2d:bf:7b:24:39:b3:3d: 1b:a1:c5:73:f6:90:bc:d3:87:90:02:0e:8e:d1:df: 37:9a:de:64:2f:cb:1b:3b:35:84:5a:d0:72:ce:bd: ba:bb:c5:3d:2a:a8:b7:5b:91:e1:42:eb:68:bd:51: 54:1c:c9:00:a0:4a:b8:4f:8c:04:4f:7b:78:4c:14: c5:7e:be:11:ba:d9:38:46:27:57:5c:02:a5:2d:7e: f3:d8:f3:b9:32:57:15:1b:9a:64:8b:3d:99:81:42: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:52:32:71:30:69:48:AE:AB:34:F6:09:BC:5B:D9:EA:49:B3:F3 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/mVZSMnEwaUiuqzT2Cbxb2epJs_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.193.0/24 Signature Algorithm: sha256WithRSAEncryption 50:24:f5:a1:4c:20:ce:be:7b:03:9d:b4:27:37:24:92:e4:f0: 1d:c9:4f:f0:db:19:ad:02:5a:29:59:b7:7e:e9:16:4e:7d:19: b1:73:e5:9c:eb:ed:20:2a:62:e5:77:9c:29:92:e6:28:03:17: 12:2d:c1:05:0e:82:83:c5:ea:46:99:c7:f7:a4:7e:c3:97:49: c8:ce:ef:b8:86:4d:eb:66:9f:90:e7:66:f1:3b:f8:9f:8a:74: 33:85:36:d9:17:96:3e:2f:a6:8f:12:98:88:aa:c4:89:ad:e8: 8d:a5:62:51:bc:06:eb:2e:7c:22:d9:16:bc:37:24:de:3c:dc: aa:be:4f:35:a0:56:33:aa:73:ca:66:e2:b3:ea:5c:f9:67:f9: bf:08:6c:1d:7b:df:01:94:eb:1b:0b:83:93:6f:72:de:74:93: c0:94:ab:ae:c9:ee:cf:64:44:c3:09:49:96:f0:5a:5c:80:9b: 5d:0a:c3:b3:cc:d4:0f:da:c1:fe:b3:c7:df:b4:c9:a0:b6:aa: e5:d6:fb:51:1f:99:77:a0:34:c1:c1:a4:cf:ef:26:b0:43:e8: 42:52:18:cb:7a:46:0c:c9:c9:92:9c:fa:48:12:92:a8:c3:90: 69:07:3b:87:3f:db:40:c4:d8:0d:00:0f:1d:bc:9d:48:97:fa: 3d:b6:0c:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y039YJKmgVIM78nxLbgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTU2NTIzMjcxMzA2OTQ4YWVhYjM0ZjYwOWJjNWJkOWVhNDliM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr69Y2S4gzBl1+h2pehr0UL0k/Fu YPJeoVTzW6D/fi4nWRRmHMDi0qLFSIRNF4BgwiQZY/LPx6GWfDsn3Ypw/xzH+Oav Skmpw9dAkld+pgTF2MNpo14v0YM7Gq1Gpm78lMFvCnhjjns/VU+GklSLk2Eh3N1V DKuqBB0VZShg7VhkW0++dWOxsZ/xxXAfLHzRCa3h1VEbvGX5X3CE4y2/eyQ5sz0b ocVz9pC804eQAg6O0d83mt5kL8sbOzWEWtByzr26u8U9Kqi3W5HhQutovVFUHMkA oEq4T4wET3t4TBTFfr4Rutk4RidXXAKlLX7z2PO5MlcVG5pkiz2ZgUIylQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJlWUjJxMGlIrqs09gm8W9nqSbPzMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvbVZaU01uRXdhVWl1cXpUMkNieGIyZXBKc19NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHBMA0G CSqGSIb3DQEBCwUAA4IBAQBQJPWhTCDOvnsDnbQnNySS5PAdyU/w2xmtAlopWbd+ 6RZOfRmxc+Wc6+0gKmLld5wpkuYoAxcSLcEFDoKDxepGmcf3pH7Dl0nIzu+4hk3r Zp+Q52bxO/ifinQzhTbZF5Y+L6aPEpiIqsSJreiNpWJRvAbrLnwi2Ra8NyTePNyq vk81oFYzqnPKZuKz6lz5Z/m/CGwde98BlOsbC4OTb3LedJPAlKuuye7PZETDCUmW 8FpcgJtdCsOzzNQP2sH+s8fftMmgtqrl1vtRH5l3oDTBwaTP7yawQ+hCUhjLekYM ycmSnPpIEpKow5BpBzuHP9tAxNgNAA8dvJ1Il/o9tgy2 -----END CERTIFICATE-----Generated at Sun Jan 11 20:35:10 2026 by rpki-client