This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VzIsfu-IWz-GW1xZzEJBp9Krgj0.roa File: VzIsfu-IWz-GW1xZzEJBp9Krgj0.roa (raw, json) Hash identifier: YMV95O8fEjXQDO9xMbxZNTWWXV8RXFggvpBo/nJQOQU= Subject key identifier: 57:32:2C:7E:EF:88:5B:3F:86:5B:5C:59:CC:42:41:A7:D2:AB:82:3D Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805468530B95AE46375335EB638E8F Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VzIsfu-IWz-GW1xZzEJBp9Krgj0.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44803 IP address blocks: 45.148.28.0/22 maxlen: 22 93.92.112.0/24 maxlen: 24 217.78.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:54:68:53:0b:95:ae:46:37:53:35:eb:63:8e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57322c7eef885b3f865b5c59cc4241a7d2ab823d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:fd:2c:3a:8a:fd:c1:08:8d:e1:c3:03:45: 03:3d:55:44:c7:24:eb:41:0e:ca:d8:50:4f:23:38: 3d:e3:9f:8d:e0:5d:f5:3c:e5:14:cf:39:4f:14:10: 58:35:39:6c:08:67:04:a8:1a:06:8b:0f:43:02:c0: 1e:fe:e5:ec:de:82:0e:72:c2:1b:14:76:e8:a8:d6: 1a:59:6f:7e:97:19:4b:81:b5:8d:11:4c:3c:9e:4a: 2e:bc:32:8c:59:77:a6:11:98:70:f3:48:35:cf:95: 47:cc:dc:24:31:8a:f6:78:40:05:8b:87:21:8e:b7: 87:ac:89:08:1b:ab:37:06:15:d6:eb:02:3e:7f:ee: d7:32:23:9f:bd:a3:56:61:1a:58:a2:d8:4b:e1:3f: 58:ff:55:a4:1c:94:15:f8:30:49:98:73:e4:38:94: 0d:94:c4:e8:64:0b:1f:c2:f8:31:4d:df:0e:90:b8: 96:fa:71:7e:dd:d5:77:66:b4:36:b5:3f:51:f5:bd: 7b:95:d0:fe:67:03:a2:99:ac:4a:c8:30:b7:6b:5a: 93:7d:1c:e4:a3:28:b0:8a:39:fd:fa:e8:13:e8:e9: bd:2d:98:35:1d:0c:6b:6c:ed:51:68:06:22:9a:1c: 83:92:3e:61:13:76:fd:bc:6f:27:4a:40:1d:3b:5d: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:32:2C:7E:EF:88:5B:3F:86:5B:5C:59:CC:42:41:A7:D2:AB:82:3D X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VzIsfu-IWz-GW1xZzEJBp9Krgj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.28.0/22 93.92.112.0/24 217.78.237.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b9:f8:52:92:95:a4:62:2e:fd:d4:84:d5:32:16:f2:e9:0f: c0:df:73:8f:e0:1d:bf:c1:bc:d6:93:13:fe:1b:41:55:a3:7e: 57:e7:ba:58:c1:45:ea:05:a3:5e:9f:45:b8:10:bf:06:eb:e1: a7:3f:eb:d4:63:c0:2f:80:b2:da:40:1c:9c:08:d5:57:74:9b: 6a:b0:f1:fe:b6:a5:5d:78:fe:03:fc:0e:68:af:51:6d:40:6c: c9:21:83:10:09:36:3e:dd:c5:7a:a1:74:86:36:3e:0f:04:78: 58:1f:63:b0:65:11:2c:ff:5a:5e:5f:62:40:ad:73:b2:ed:2f: b6:40:27:44:70:4c:b2:b2:35:97:40:90:1b:80:57:ae:76:42: d5:2b:ff:a9:f4:86:f9:0e:29:77:19:f0:28:ba:65:a9:11:bd: 11:b4:5c:0a:2e:c3:ba:c0:38:3c:fa:c8:d5:2f:62:56:63:a4: ec:9c:5c:66:2c:dd:1e:5d:ee:93:d1:3f:1c:52:06:ed:28:cf: 02:49:0e:ef:bb:d8:f4:71:ff:65:c5:8d:bf:34:fe:0c:d2:18: 37:5a:cb:72:17:89:e1:e8:53:bc:cd:7f:71:1b:2c:15:e2:ba: f0:b3:09:58:dc:6e:30:07:05:f1:a1:c9:98:fe:89:6b:09:11: 81:6f:ec:ff -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gFRoUwuVrkY3UzXrY46PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzMyMmM3ZWVmODg1YjNmODY1YjVjNTljYzQyNDFhN2QyYWI4MjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdL9LDqK/cEIjeHDA0UDPVVExyTr QQ7K2FBPIzg945+N4F31POUUzzlPFBBYNTlsCGcEqBoGiw9DAsAe/uXs3oIOcsIb FHboqNYaWW9+lxlLgbWNEUw8nkouvDKMWXemEZhw80g1z5VHzNwkMYr2eEAFi4ch jreHrIkIG6s3BhXW6wI+f+7XMiOfvaNWYRpYothL4T9Y/1WkHJQV+DBJmHPkOJQN lMToZAsfwvgxTd8OkLiW+nF+3dV3ZrQ2tT9R9b17ldD+ZwOimaxKyDC3a1qTfRzk oyiwijn9+ugT6Om9LZg1HQxrbO1RaAYimhyDkj5hE3b9vG8nSkAdO11ztQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFcyLH7viFs/hltcWcxCQafSq4I9MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvVnpJc2Z1LUlXei1HVzF4WnpFSkJwOUtyZ2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZQcAwQA XVxwAwQA2U7tMA0GCSqGSIb3DQEBCwUAA4IBAQAUufhSkpWkYi791ITVMhby6Q/A 33OP4B2/wbzWkxP+G0FVo35X57pYwUXqBaNen0W4EL8G6+GnP+vUY8AvgLLaQByc CNVXdJtqsPH+tqVdeP4D/A5or1FtQGzJIYMQCTY+3cV6oXSGNj4PBHhYH2OwZREs /1peX2JArXOy7S+2QCdEcEyysjWXQJAbgFeudkLVK/+p9Ib5Dil3GfAoumWpEb0R tFwKLsO6wDg8+sjVL2JWY6TsnFxmLN0eXe6T0T8cUgbtKM8CSQ7vu9j0cf9lxY2/ NP4M0hg3WstyF4nh6FO8zX9xGywV4rrwswlY3G4wBwXxocmY/olrCRGBb+z/ -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client