This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/veq3VGflC7EKcyTSV4PLJ0gF_AI.roa File: veq3VGflC7EKcyTSV4PLJ0gF_AI.roa (raw, json) Hash identifier: OTH3lPgKfCmDiloxLfi5qPSyfmhULCNeRQ8YV01zMtE= Subject key identifier: BD:EA:B7:54:67:E5:0B:B1:0A:73:24:D2:57:83:CB:27:48:05:FC:02 Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20 Certificate serial: 019B7DC9ABB42D9118CC859C58E1BAF0707C Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/veq3VGflC7EKcyTSV4PLJ0gF_AI.roa Signing time: Fri 02 Jan 2026 08:18:47 +0000 ROA not before: Fri 02 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134981 IP address blocks: 2a0c:4a01:c10::/44 maxlen: 44 2a0c:4a01:c20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ab:b4:2d:91:18:cc:85:9c:58:e1:ba:f0:70:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20 Validity Not Before: Jan 2 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdeab75467e50bb10a7324d25783cb274805fc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:0d:46:ab:62:f1:b0:9a:07:97:74:8b:aa: 89:f7:f2:11:c4:54:4e:ed:71:34:a6:de:4f:65:79: 50:16:85:48:ba:be:4f:69:86:29:b1:f5:e1:f2:de: bf:93:48:46:94:c1:29:07:8c:64:47:d4:13:79:15: 94:12:7a:21:87:e2:41:ff:82:05:8d:a8:ff:82:e4: 39:68:40:4b:8c:34:80:a3:fc:93:60:af:c7:9c:c6: 07:f1:35:07:d4:e4:bb:97:bc:3a:ab:de:1a:0e:a4: 2d:d3:02:b0:c1:43:64:18:ca:37:bd:af:e5:e5:55: ce:5b:23:69:5d:3b:5a:99:e5:61:8b:39:ab:53:0d: b8:90:67:47:e0:65:bc:0a:00:f9:8c:55:83:df:2d: 9a:1f:6a:a0:86:42:e6:a3:bf:c5:d7:e6:0f:46:00: a6:8b:e6:4f:76:fb:56:44:07:b8:3b:b3:21:20:09: 16:f4:22:be:20:77:5c:a6:84:04:20:a4:5d:4c:17: 3b:f0:1a:f6:46:ba:3b:da:89:e8:5a:16:94:f6:de: e7:45:2e:89:73:7d:14:69:dd:83:10:9b:74:5c:83: 3b:74:ae:66:8c:f2:9f:e8:6d:95:fc:83:21:77:89: a8:39:73:21:c8:a5:30:54:fe:73:be:a2:17:9d:3e: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EA:B7:54:67:E5:0B:B1:0A:73:24:D2:57:83:CB:27:48:05:FC:02 X509v3 Authority Key Identifier: keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/veq3VGflC7EKcyTSV4PLJ0gF_AI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:4a01:c10::-2a0c:4a01:c2f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4e:19:ad:6a:00:a8:ed:40:04:7e:32:62:29:4b:57:7c:a8:ab: c7:b0:12:5c:61:d3:c6:da:9e:31:af:8f:c0:38:5d:32:c4:da: 14:79:09:42:b2:52:f6:e2:e9:b6:31:fe:d7:52:52:e2:f7:79: 1a:e1:f2:18:25:17:4d:c5:af:57:43:7f:dc:c5:57:63:2f:c1: 9d:66:c4:be:74:22:54:25:ee:d6:a9:fe:2d:5b:ba:f6:e9:1b: a0:c6:26:a5:2a:44:3b:6d:70:e4:66:97:3a:df:b2:9a:35:6a: 5b:43:05:03:4a:5b:b4:28:58:a9:3b:ef:f2:bf:31:78:61:a2: 98:10:6a:4d:98:44:85:28:9f:3c:7b:e1:e3:2e:fa:ab:0f:de: 29:03:7f:59:46:4a:e8:99:df:c4:5d:05:aa:ce:e4:01:77:5a: e6:79:7a:c1:17:d3:1c:90:a6:4f:94:90:d6:f7:28:97:72:0a: b3:eb:ac:60:b0:6c:46:09:b6:18:cd:18:79:35:27:c6:b7:63: 83:b5:d3:96:4b:88:a4:b9:c5:58:38:dc:ee:84:0d:46:19:99: a7:f4:05:4b:cd:a8:71:06:21:57:50:5a:61:a1:a1:54:3a:c4: 5e:81:26:5a:ff:4b:bb:7c:0f:5e:21:94:10:8f:a4:9f:ca:47: a6:d1:52:cc -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yau0LZEYzIWcWOG68HB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2 NGVjMjAwHhcNMjYwMTAyMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGVhYjc1NDY3ZTUwYmIxMGE3MzI0ZDI1NzgzY2IyNzQ4MDVmYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulwNRqti8bCaB5d0i6qJ9/IRxFRO 7XE0pt5PZXlQFoVIur5PaYYpsfXh8t6/k0hGlMEpB4xkR9QTeRWUEnohh+JB/4IF jaj/guQ5aEBLjDSAo/yTYK/HnMYH8TUH1OS7l7w6q94aDqQt0wKwwUNkGMo3va/l 5VXOWyNpXTtameVhizmrUw24kGdH4GW8CgD5jFWD3y2aH2qghkLmo7/F1+YPRgCm i+ZPdvtWRAe4O7MhIAkW9CK+IHdcpoQEIKRdTBc78Br2Rro72onoWhaU9t7nRS6J c30Uad2DEJt0XIM7dK5mjPKf6G2V/IMhd4moOXMhyKUwVP5zvqIXnT7uuQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFL3qt1Rn5QuxCnMk0leDyydIBfwCMB8GA1UdIwQY MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt ZjJhMmE1ZDUwNDVlLzEvdmVxM1ZHZmxDN0VLY3lUU1Y0UExKMGdGX0FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDEoB DBADBwQqDEoBDCAwDQYJKoZIhvcNAQELBQADggEBAE4ZrWoAqO1ABH4yYilLV3yo q8ewElxh08banjGvj8A4XTLE2hR5CUKyUvbi6bYx/tdSUuL3eRrh8hglF03Fr1dD f9zFV2MvwZ1mxL50IlQl7tap/i1buvbpG6DGJqUqRDttcORmlzrfspo1altDBQNK W7QoWKk77/K/MXhhopgQak2YRIUonzx74eMu+qsP3ikDf1lGSuiZ38RdBarO5AF3 WuZ5esEX0xyQpk+UkNb3KJdyCrPrrGCwbEYJthjNGHk1J8a3Y4O105ZLiKS5xVg4 3O6EDUYZmaf0BUvNqHEGIVdQWmGhoVQ6xF6BJlr/S7t8D14hlBCPpJ/KR6bRUsw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:12 2026 by rpki-client