This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/VvuULWo9vnBO8IgJn77OurAnWAA.roa File: VvuULWo9vnBO8IgJn77OurAnWAA.roa (raw, json) Hash identifier: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I= Subject key identifier: 56:FB:94:2D:6A:3D:BE:70:4E:F0:88:09:9F:BE:CE:BA:B0:27:58:00 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37E470DDA91B04DD4270A31E055A0 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/VvuULWo9vnBO8IgJn77OurAnWAA.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216300 IP address blocks: 2a12:b3c0::/48 maxlen: 48 2a12:b3c0:2::/48 maxlen: 48 2a12:b3c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7e:47:0d:da:91:b0:4d:d4:27:0a:31:e0:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56fb942d6a3dbe704ef088099fbecebab0275800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:8c:7a:f3:71:4b:b7:ae:00:5c:31:af:95: 0e:d2:ce:6f:46:78:80:81:c2:3c:78:88:af:00:ee: 83:8c:14:df:3a:b2:5c:13:4e:e6:0a:bb:59:66:e9: 1c:e1:7a:ff:b3:f3:9a:a5:0a:6a:9d:44:ce:1c:79: b7:b4:36:85:be:79:16:a1:89:43:4a:6f:2c:68:17: 06:0c:32:5e:6a:9f:87:bd:ae:78:62:f5:89:e5:a2: d1:18:c7:c3:75:a4:1b:35:54:8d:a5:91:57:dc:7b: 51:a2:db:af:48:49:4c:6f:eb:b0:77:4a:19:66:51: da:69:e0:41:81:b1:a3:71:48:39:c4:01:f2:93:07: 09:1c:67:fb:92:f9:5e:09:91:69:22:08:4c:d8:a9: 55:41:c0:42:32:fe:63:93:cd:94:14:ce:6c:c1:59: 67:87:12:ef:66:a4:19:19:50:94:1a:76:52:e7:2d: 8c:14:b8:90:e9:f3:88:ea:1f:8e:f7:94:a0:f7:5d: 97:10:62:84:c6:7a:fb:dd:6d:cf:27:9e:b0:15:9f: d5:47:31:25:88:e7:e1:a4:45:eb:b9:7b:1e:1d:89: 06:80:05:a4:95:03:dc:6d:cb:33:1b:b7:a7:a0:28: e6:af:40:0d:c5:9c:3f:a1:da:58:bd:80:64:0a:56: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FB:94:2D:6A:3D:BE:70:4E:F0:88:09:9F:BE:CE:BA:B0:27:58:00 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/VvuULWo9vnBO8IgJn77OurAnWAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:b3c0::/48 2a12:b3c0:2::/47 Signature Algorithm: sha256WithRSAEncryption 9e:ad:3d:13:e8:27:06:d8:80:1d:a4:1f:3a:8e:18:f3:88:f9: 86:0c:8f:a9:c3:d6:75:29:80:74:5b:2c:d8:53:34:7b:bf:33: 0d:b1:72:a7:a1:09:3e:fd:2e:e6:57:49:2c:07:22:9f:11:4f: 88:89:d0:e1:b4:5e:ae:4a:27:42:61:78:a9:1c:b6:aa:8c:7a: d6:82:97:c1:c5:65:a2:f5:14:4a:e5:5f:67:0a:1a:5e:f0:e8: ab:a0:a2:81:0b:b5:23:a1:83:54:b2:e1:17:2f:67:f3:cf:fc: b7:32:66:87:fc:60:8b:23:7d:ca:f9:f4:86:a9:67:26:25:c7: 7f:c5:26:52:8d:a0:0c:55:37:a5:26:56:0e:91:59:2f:a6:e5: b2:cd:dc:e2:6e:0d:c9:13:06:e0:32:0f:29:40:1b:2f:df:7c: 14:a4:9e:ab:65:10:09:9f:12:c6:bc:16:f6:8f:ee:f8:89:dc: bc:5a:3c:30:9c:5d:ae:39:42:6c:37:e8:a0:20:5c:9a:94:d8: dc:a8:7b:7d:85:8f:0d:57:bf:60:66:33:19:9e:5c:0e:a7:a5: ac:7e:7d:59:e6:e3:76:f5:3b:4a:11:68:c2:1a:86:bc:63:45: 63:2f:38:0e:6f:8a:8b:ca:09:6a:04:ef:30:31:ac:f9:1d:1f: 88:4f:77:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4o35HDdqRsE3UJwox4FWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmZiOTQyZDZhM2RiZTcwNGVmMDg4MDk5ZmJlY2ViYWIwMjc1ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK+MevNxS7euAFwxr5UO0s5vRniA gcI8eIivAO6DjBTfOrJcE07mCrtZZukc4Xr/s/OapQpqnUTOHHm3tDaFvnkWoYlD Sm8saBcGDDJeap+Hva54YvWJ5aLRGMfDdaQbNVSNpZFX3HtRotuvSElMb+uwd0oZ ZlHaaeBBgbGjcUg5xAHykwcJHGf7kvleCZFpIghM2KlVQcBCMv5jk82UFM5swVln hxLvZqQZGVCUGnZS5y2MFLiQ6fOI6h+O95Sg912XEGKExnr73W3PJ56wFZ/VRzEl iOfhpEXruXseHYkGgAWklQPcbcszG7enoCjmr0ANxZw/odpYvYBkClbiPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFb7lC1qPb5wTvCICZ++zrqwJ1gAMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvVnZ1VUxXbzl2bkJPOElnSm43N091ckFuV0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhKzwAAA AwcBKhKzwAACMA0GCSqGSIb3DQEBCwUAA4IBAQCerT0T6CcG2IAdpB86jhjziPmG DI+pw9Z1KYB0WyzYUzR7vzMNsXKnoQk+/S7mV0ksByKfEU+IidDhtF6uSidCYXip HLaqjHrWgpfBxWWi9RRK5V9nChpe8OiroKKBC7UjoYNUsuEXL2fzz/y3MmaH/GCL I33K+fSGqWcmJcd/xSZSjaAMVTelJlYOkVkvpuWyzdzibg3JEwbgMg8pQBsv33wU pJ6rZRAJnxLGvBb2j+74idy8WjwwnF2uOUJsN+igIFyalNjcqHt9hY8NV79gZjMZ nlwOp6Wsfn1Z5uN29TtKEWjCGoa8Y0VjLzgOb4qLyglqBO8wMaz5HR+IT3fF -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:42 2026 by rpki-client