This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/VuEhHAq2HoPe8RVU69XPTei-cE8.roa File: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (raw, json) Hash identifier: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI= Subject key identifier: 56:E1:21:1C:0A:B6:1E:83:DE:F1:15:54:EB:D5:CF:4D:E8:BE:70:4F Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019B7BA31BCB3A651E31D802AC1462498408 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/VuEhHAq2HoPe8RVU69XPTei-cE8.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211972 IP address blocks: 2a10:9902:730::/48 maxlen: 48 2a10:9902:731::/48 maxlen: 48 2a10:9902:732::/48 maxlen: 48 2a10:9902:733::/48 maxlen: 48 2a10:9902:73f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1b:cb:3a:65:1e:31:d8:02:ac:14:62:49:84:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56e1211c0ab61e83def11554ebd5cf4de8be704f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:6d:14:03:2b:4f:04:15:6d:0d:ea:0a:b8: 29:18:09:5e:4f:f7:c5:71:b4:4f:42:41:45:66:8f: 91:09:55:8d:c7:ef:09:e4:43:2d:01:17:58:5c:f9: bd:38:2d:a2:61:43:50:c2:9b:82:cb:6e:88:22:23: e7:28:00:97:5c:8d:fd:e6:bf:eb:45:81:85:aa:d9: 69:8c:df:61:e3:d3:81:47:39:10:25:e7:df:6b:f2: f1:1b:7c:a7:e0:3b:82:96:f1:00:97:b2:6c:aa:dd: cd:65:c0:a7:be:37:1a:7c:19:e6:d3:69:3b:1b:39: 7c:8f:f3:ee:3c:ff:b1:cf:a6:dc:a4:79:c5:24:3d: ea:75:05:30:99:65:27:e5:56:2d:9d:d1:98:59:f4: 7d:81:2c:63:a7:ad:93:f6:b9:c9:e7:78:70:17:2e: be:18:8c:92:22:51:1d:cc:32:b2:c9:b4:09:00:62: f9:3a:1b:6d:71:46:e2:32:54:79:03:ca:5b:66:77: c0:b9:49:eb:de:56:36:cb:79:16:31:99:a7:3b:b6: b3:12:95:0b:ce:98:51:fd:2f:fd:db:58:09:c4:ef: 99:1d:dc:8b:a6:f4:fc:8f:a9:fd:dd:ec:12:4e:33: 67:34:e3:da:ec:b9:55:3e:10:0c:14:2e:67:e7:a1: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E1:21:1C:0A:B6:1E:83:DE:F1:15:54:EB:D5:CF:4D:E8:BE:70:4F X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/VuEhHAq2HoPe8RVU69XPTei-cE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:9902:730::/46 2a10:9902:73f::/48 Signature Algorithm: sha256WithRSAEncryption 23:ee:0e:12:07:dc:2f:b6:f0:d3:6c:33:15:c3:14:b4:77:b3: 69:47:12:a4:ca:81:9d:2e:bf:c3:8e:6b:82:59:cc:0b:f7:04: 21:7f:c8:4a:d7:26:3b:10:4c:de:be:66:c7:7b:0f:8e:bd:7d: 06:34:fb:60:d4:fe:1a:24:be:c1:73:84:3e:6f:06:51:51:75: 83:73:9a:94:33:94:3e:2c:56:ca:44:82:d9:14:a4:7f:45:8e: fe:2d:6e:3c:a8:7c:33:2d:4c:e5:fe:75:16:18:3e:f0:0e:60: d6:53:9f:59:2f:a3:3c:ad:43:fa:48:76:59:26:45:77:77:2a: ba:e4:11:75:f9:30:1e:db:5b:66:79:c1:71:61:06:f8:31:1c: 70:62:76:06:f1:0f:cd:ce:b5:f4:68:89:9f:1f:c9:9c:34:76: 32:28:8b:88:5c:1b:2e:69:c4:b9:b6:22:5f:a2:7b:7a:ed:57: ff:98:21:c6:2e:40:6b:5f:24:79:88:e2:fe:ec:6c:c1:c4:90: a7:58:16:3f:ed:1d:e4:25:c2:ab:8c:56:c9:72:e6:9e:85:7a: 97:7d:e1:6f:a7:9e:19:3c:63:75:9f:c5:a0:f2:8c:c8:48:ba: ec:bf:71:fd:d1:a7:d1:2c:e1:32:8b:ca:94:0a:38:c4:a2:20: 38:4d:26:13 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7oxvLOmUeMdgCrBRiSYQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmUxMjExYzBhYjYxZTgzZGVmMTE1NTRlYmQ1Y2Y0ZGU4YmU3MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopFtFAMrTwQVbQ3qCrgpGAleT/fF cbRPQkFFZo+RCVWNx+8J5EMtARdYXPm9OC2iYUNQwpuCy26IIiPnKACXXI395r/r RYGFqtlpjN9h49OBRzkQJeffa/LxG3yn4DuClvEAl7Jsqt3NZcCnvjcafBnm02k7 Gzl8j/PuPP+xz6bcpHnFJD3qdQUwmWUn5VYtndGYWfR9gSxjp62T9rnJ53hwFy6+ GIySIlEdzDKyybQJAGL5OhttcUbiMlR5A8pbZnfAuUnr3lY2y3kWMZmnO7azEpUL zphR/S/921gJxO+ZHdyLpvT8j6n93ewSTjNnNOPa7LlVPhAMFC5n56FvdQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFbhIRwKth6D3vEVVOvVz03ovnBPMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvVnVFaEhBcTJIb1BlOFJWVTY5WFBUZWktY0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKhCZAgcw AwcAKhCZAgc/MA0GCSqGSIb3DQEBCwUAA4IBAQAj7g4SB9wvtvDTbDMVwxS0d7Np RxKkyoGdLr/DjmuCWcwL9wQhf8hK1yY7EEzevmbHew+OvX0GNPtg1P4aJL7Bc4Q+ bwZRUXWDc5qUM5Q+LFbKRILZFKR/RY7+LW48qHwzLUzl/nUWGD7wDmDWU59ZL6M8 rUP6SHZZJkV3dyq65BF1+TAe21tmecFxYQb4MRxwYnYG8Q/NzrX0aImfH8mcNHYy KIuIXBsuacS5tiJfont67Vf/mCHGLkBrXyR5iOL+7GzBxJCnWBY/7R3kJcKrjFbJ cuaehXqXfeFvp54ZPGN1n8Wg8ozISLrsv3H90afRLOEyi8qUCjjEoiA4TSYT -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:55 2026 by rpki-client